* FreeBSD/CARP: bind outgoing packets to virtual IP
@ 2020-09-28 11:33 Muenz, Michael
0 siblings, 0 replies; only message in thread
From: Muenz, Michael @ 2020-09-28 11:33 UTC (permalink / raw)
To: WireGuard mailing list
for HA solutions within Linux it seems WireGuard has the ability to use
fwmark to treat packet right with iptables.
When it comes to FreeBSD we don't have any chance to rewrite packets in
Let's say you have unit1 with master IP 184.108.40.206 and unit2 with master IP
220.127.116.11 and a floating IP 18.104.22.168 which is only owned by the active
unit. Without the option to bind the service to a fixed IP, packets
leaving the firewall will be sourced from the highest interface IP which
would break when the floating IP is moving from unit 1 to 2.
I know most of the user base are Linux users but I more and more get
requests also from bigger companys about HA-setups via OPNsense.
Do you have any plans about a similar feature for your FreeBSD users? :)
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2020-09-28 11:32 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-09-28 11:33 FreeBSD/CARP: bind outgoing packets to virtual IP Muenz, Michael
Development discussion of WireGuard
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://inbox.vuxu.org/wireguard
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V1 wireguard wireguard/ http://inbox.vuxu.org/wireguard \
Example config snippet for mirrors.
Newsgroup available over NNTP:
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git