* FreeBSD/CARP: bind outgoing packets to virtual IP
@ 2020-09-28 11:33 Muenz, Michael
2020-12-21 13:07 ` Muenz, Michael
0 siblings, 1 reply; 2+ messages in thread
From: Muenz, Michael @ 2020-09-28 11:33 UTC (permalink / raw)
To: WireGuard mailing list
Hi,
for HA solutions within Linux it seems WireGuard has the ability to use
fwmark to treat packet right with iptables.
When it comes to FreeBSD we don't have any chance to rewrite packets in
HA setups.
Let's say you have unit1 with master IP 1.1.1.5 and unit2 with master IP
1.1.1.9 and a floating IP 1.1.1.7 which is only owned by the active
unit. Without the option to bind the service to a fixed IP, packets
leaving the firewall will be sourced from the highest interface IP which
would break when the floating IP is moving from unit 1 to 2.
I know most of the user base are Linux users but I more and more get
requests also from bigger companys about HA-setups via OPNsense.
Do you have any plans about a similar feature for your FreeBSD users? :)
Best,
Michael
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: FreeBSD/CARP: bind outgoing packets to virtual IP
2020-09-28 11:33 FreeBSD/CARP: bind outgoing packets to virtual IP Muenz, Michael
@ 2020-12-21 13:07 ` Muenz, Michael
0 siblings, 0 replies; 2+ messages in thread
From: Muenz, Michael @ 2020-12-21 13:07 UTC (permalink / raw)
To: wireguard
Hi,
Any news on my old request?
There are more and more users in OPNsense asking for HA features with
WireGuard.
Best,
Michael
Am 28.09.2020 um 13:33 schrieb Muenz, Michael:
> Hi,
>
> for HA solutions within Linux it seems WireGuard has the ability to
> use fwmark to treat packet right with iptables.
>
> When it comes to FreeBSD we don't have any chance to rewrite packets
> in HA setups.
>
> Let's say you have unit1 with master IP 1.1.1.5 and unit2 with master
> IP 1.1.1.9 and a floating IP 1.1.1.7 which is only owned by the active
> unit. Without the option to bind the service to a fixed IP, packets
> leaving the firewall will be sourced from the highest interface IP
> which would break when the floating IP is moving from unit 1 to 2.
>
> I know most of the user base are Linux users but I more and more get
> requests also from bigger companys about HA-setups via OPNsense.
>
> Do you have any plans about a similar feature for your FreeBSD users? :)
>
>
> Best,
>
> Michael
>
>
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2020-12-21 13:05 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-09-28 11:33 FreeBSD/CARP: bind outgoing packets to virtual IP Muenz, Michael
2020-12-21 13:07 ` Muenz, Michael
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).