Re: openbgpd "depend on"

2021-06-15 Thread openbsd
Hello Stuart, I see not that I have not been entirely clear on my setup. Traditionally I used carp on both upstream interfaces (to have a common nexthop address in BGP routing) and also on my downstream interfaces (to have a floating default gateway for my hosts). As it stands now I cannot use a

Re: openbgpd "depend on"

2021-06-11 Thread Stuart Henderson
On 2021-06-11, open...@kene.nu wrote: > Hello Stuart, > > I do set the carp address as nexthop. This works in a "traditional" L2 > environment as expected. However, to make a long story short, in a vxlan > environment L2 redundancy protocols like carp that rely on gARP do not work > as expected.

Re: openbgpd "depend on"

2021-06-11 Thread openbsd
Hello Stuart, I do set the carp address as nexthop. This works in a "traditional" L2 environment as expected. However, to make a long story short, in a vxlan environment L2 redundancy protocols like carp that rely on gARP do not work as expected. So I need to have the backup firewall tell the

Re: openbgpd "depend on"

2021-06-10 Thread Stuart Henderson
On 2021-06-10, open...@kene.nu wrote: > Looks like the syntax is not valid and I cannot find any reference in the > man pages either. Maybe am missing the intent of your reply. Is it intended > as pseudo code that would pose as my intent or is it actually already > possible to achieve this? It's

Re: openbgpd "depend on"

2021-06-10 Thread openbsd
Looks like the syntax is not valid and I cannot find any reference in the man pages either. Maybe am missing the intent of your reply. Is it intended as pseudo code that would pose as my intent or is it actually already possible to achieve this? # bgpd -vn /etc/bgpd.conf:47: syntax error # awk

Re: openbgpd "depend on"

2021-06-10 Thread openbsd
This looks precisely what I am looking for. Will try it out. Thank you! On Wed, Jun 9, 2021 at 10:42 AM Claudio Jeker wrote: > On Wed, Jun 09, 2021 at 09:57:32AM +0200, open...@kene.nu wrote: > > Hello, > > > > Just a question and maybe a suggestion. I am implementing a few DCs that > > use

Re: openbgpd "depend on"

2021-06-09 Thread Claudio Jeker
On Wed, Jun 09, 2021 at 09:57:32AM +0200, open...@kene.nu wrote: > Hello, > > Just a question and maybe a suggestion. I am implementing a few DCs that > use vxlan symmetric routing and hence, layer2 redundancy protocols like > CARP (and VRRP/HSRP) do not work as intended due to evpn layer2 being

openbgpd "depend on"

2021-06-09 Thread openbsd
Hello, Just a question and maybe a suggestion. I am implementing a few DCs that use vxlan symmetric routing and hence, layer2 redundancy protocols like CARP (and VRRP/HSRP) do not work as intended due to evpn layer2 being the technology of choice to announce ARP entries. This led me to try out