Hi,
for HA solutions within Linux it seems WireGuard has the ability to use
fwmark to treat packet right with iptables.
When it comes to FreeBSD we don't have any chance to rewrite packets in
HA setups.
Let's say you have unit1 with master IP 1.1.1.5 and unit2 with master IP
1.1.1.9 and a floating IP 1.1.1.7 which is only owned by the active
unit. Without the option to bind the service to a fixed IP, packets
leaving the firewall will be sourced from the highest interface IP which
would break when the floating IP is moving from unit 1 to 2.
I know most of the user base are Linux users but I more and more get
requests also from bigger companys about HA-setups via OPNsense.
Do you have any plans about a similar feature for your FreeBSD users? :)
Best,
Michael
