> Hi list, > > I have a theoretical question regarding a CARP cluster and many CARP > interfaces > > Assume we have a firewall comprising of two notes, each with 4 or more > interfaces and only one uplink to the internet. The Cluster is in > master/backup mode > > How does CARP behaves when on the master node two "unimportantly" > interfaces fail and on the backup node only the uplink interface > fails? Does CARP failover > to the backup node and as consequence the whole network will be > disconnected from the internet? > > In my mind one solution to avoid this situation is to rate the CARP > interfaces. > For example a more important interface gets a higher rate than a less > important > interface. > > Probably the ifstated deamon and the demotion counter are the topics > to get around with this. > > Does anybody have experiences demotion couter and ifstated? > > Thanks in advance. >
Well, looks interesting, but I didn't try it. It maybe too complicated, when redundancy need to be as simply as possible. Instead of this, you can just add another node(s), this is the safest solution, I think. -- Kamil Monticolo