Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-05-15 Thread Dan Kenigsberg
On Thu, May 15, 2014 at 02:18:39PM +0200, Matt . wrote: > Hi, > > I don't do top-postings, just a reply to all. > > It works now on all hosts! > > I was testing with a Run Once with no macspoof option and changed the CARP > IP on the pfsense box to alias, and back to carp... where with alias I w

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-05-15 Thread Matt .
Hi, I don't do top-postings, just a reply to all. It works now on all hosts! I was testing with a Run Once with no macspoof option and changed the CARP IP on the pfsense box to alias, and back to carp... where with alias I was able to ping with carp not... and this was good because of the disabl

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-05-15 Thread Dan Kenigsberg
On Thu, May 15, 2014 at 12:45:46PM +0200, Matt . wrote: > OK, we are on the same line there. > > The issue is that it doesn't work on this host, others do. It is very hard for me to follow your condition, and top-posting does not help. Does the macspoof hook work fine on other host? And only her

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-05-15 Thread Itamar Heim
On 05/15/2014 06:45 AM, Matt . wrote: OK, we are on the same line there. The issue is that it doesn't work on this host, others do. I have a 3.3 cluster and 3.4... both are enabled using the command... or can't you have 2 versions ? multiple versions shouldn't be an issue. I'll let danken and

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-05-15 Thread Matt .
OK, we are on the same line there. The issue is that it doesn't work on this host, others do. I have a 3.3 cluster and 3.4... both are enabled using the command... or can't you have 2 versions ? 2014-05-15 12:43 GMT+02:00 Itamar Heim : > On 05/15/2014 06:42 AM, Matt . wrote: > >> OK, now I'm c

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-05-15 Thread Itamar Heim
On 05/15/2014 06:42 AM, Matt . wrote: OK, now I'm confused. For MacSpoofing we per default don't have the "macspoof" feature in the engine am I right ? To get that... you need to set: engine-config -s EnableMACAntiSpoofingFilterRules=false --cver=3.X But no hook needs to be installed for this

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-05-15 Thread Matt .
OK, now I'm confused. For MacSpoofing we per default don't have the "macspoof" feature in the engine am I right ? To get that... you need to set: engine-config -s EnableMACAntiSpoofingFilterRules=false --cver=3.X But no hook needs to be installed for this ? I don't have ping at the momment with

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-05-15 Thread Itamar Heim
On 05/15/2014 04:26 AM, Matt . wrote: Itamar, On some testhost I'm updating now to 3.4(.x) I also need to install the hook it seems... it's not there by default. Any idea why you thought it should be ? there is no need for the hook for port mirroring. you can define a vnic profile with port

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-05-15 Thread Matt .
Itamar, On some testhost I'm updating now to 3.4(.x) I also need to install the hook it seems... it's not there by default. Any idea why you thought it should be ? Cheers, Matt 2014-05-12 14:55 GMT+02:00 Matt . : > Hi, > > I really needed to enable the hook... Will investigate on new hosts!

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-05-12 Thread Matt .
Hi, I really needed to enable the hook... Will investigate on new hosts! 2014-05-11 22:37 GMT+02:00 Itamar Heim : > On 04/17/2014 04:08 AM, Matt . wrote: > >> Hi Guys, >> >> I'm not able to write a howto yet as we need to check how this is >> running on high traffic and we are going soon. Than,

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-05-11 Thread Itamar Heim
On 04/17/2014 04:08 AM, Matt . wrote: Hi Guys, I'm not able to write a howto yet as we need to check how this is running on high traffic and we are going soon. Than, we need to test some other functions before I can actually write something down. Because this is not all documented well indeed I

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-04-17 Thread Matt .
Hi Guys, I'm not able to write a howto yet as we need to check how this is running on high traffic and we are going soon. Than, we need to test some other functions before I can actually write something down. Because this is not all documented well indeed I'm in testmode and doing some @ life sys

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-04-17 Thread Dan Kenigsberg
On Thu, Apr 17, 2014 at 01:11:13AM +0200, Matt . wrote: > OK, also this is finetuned, but it would be nice to have some more info > about the hooks in these cases... it's interesting as oVirt has the right > settings to start with but we need to know what we need to set when we have > a setup like

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-04-17 Thread Sven Kieske
Am 17.04.2014 01:11, schrieb Matt .: > OK, also this is finetuned, but it would be nice to have some more info > about the hooks in these cases... it's interesting as oVirt has the right > settings to start with but we need to know what we need to set when we have > a setup like this for an examp

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-04-16 Thread Matt .
OK, also this is finetuned, but it would be nice to have some more info about the hooks in these cases... it's interesting as oVirt has the right settings to start with but we need to know what we need to set when we have a setup like this for an example. 2014-04-17 0:35 GMT+02:00 Matt . : > Tra

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-04-16 Thread Matt .
Traffic issues are solved, but the advertising in not that well. I see on ESXi (vSphere) that you need to enable "Promiscuous Mode", but how on oVirt ? http://www.blissfulidiot.com/2013/11/using-carp-with-vmware-esxi.html Do I need the vdsm-hook-promisc for it ? as I need to make real settings o

Re: [ovirt-users] Connection hickups with Pfsense and Carp

2014-04-16 Thread Matt .
This is resolved. It seems that skews that pfsense sets on a backup/failover cluster node are much higher than they were set manually. Pfsense synced them again and it's solved. 2014-04-15 8:52 GMT+02:00 Matt . : > Hi Guys, > > I'm facing some issues with Pfsense and a Carp setup where connecti

[ovirt-users] Connection hickups with Pfsense and Carp

2014-04-14 Thread Matt .
Hi Guys, I'm facing some issues with Pfsense and a Carp setup where connections are not dropped but the connection is not stable. I have set macspoof on the vm that runs Pfsense, this because it needs it for Carp. My TCPdump actually give good results, a single P so that looks also well. I have