Hi list,
Please Cc: me in your reply, I'm not subscribed.
I'm setting up a redundant router using OpenBSD and carp(4),
as you surely have already deduced :).
The configuration is pretty simple:
+-----+
bnx0| |bnx1
+------| A |------+
| .251| |.251 |
| . +-----+ . |
| . . |
192.168.0.0/24| carp0 carp1 |10.0.0.0/24
-------+ .254 .254 +--------
| carp0 carp1 |
| . . |
| . +-----+ . |
| .252| |.252 |
+------| B |------+
bnx0| |bnx1
+-----+
A# ifconfig em0 inet 192.168.0.251 0xffffff00
A# ifconfig carp0 inet 192.168.0.254 0xffffff00 vhid 1 advskew 0
A# ifconfig em1 inet 10.0.0.251 0xffffff00
A# ifconfig carp1 inet 10.0.0.254 0xffffff00 vhid 2 advskew 0
A# sysctl net.inet.carp.preempt=1
B# ifconfig em0 inet 192.168.0.252 0xffffff00
B# ifconfig carp0 inet 192.168.0.254 0xffffff00 vhid 1 advskew 100
B# ifconfig em1 inet 10.0.0.252 0xffffff00
B# ifconfig carp1 inet 10.0.0.254 0xffffff00 vhid 2 advskew 100
B# sysctl net.inet.carp.preempt=1
- We are using stock OpenBSD 4.0 for our test.
- pf(4) is disabled.
- The network adapters are:
Broadcom BCM5708
- The firewalls themselves are Dell PowerEdge 1950(!).
This works quite well but sometimes we're experiencing some delay
when we plug out or in one of the master's cable, seemlingly
when we are running ifconfig(8) very oftern to check the carp(4)
interface's state.
Without running ifconfig(8) too often, the convergence time is a
few seconds but we managed to increase the delay up to 2 minutes
with this trick.
Does anyone have any idea about what's the problem here ?
Thank you.
Best regards,
--
Jeremie Le Hen
< jeremie at le-hen dot org >< ttz at chchile dot org >
