Hi Graham,
That is correct - but since I would like to run a transparent proxy (yes -
I *could* redirect "off the box") I would prefer to keep it on the boxes.
They are going to be beefy boxes to say the least, so might as well use
them while we can :)
I spoke to the guys and they are happy
Hello Pieter,
The failover requirement that you describe looks remarkably like one of
the configurations commonly used by Astaro firewall devices.
If you were to conceptually remove the squid function from the failover,
ie in the simplest case onto another device on the private LAN, then an
active-