Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | pfsync & carp on linux |
|---|---|
| Date: | Wed, 01 Nov 2006 00:21:17 +0200 |
|
Hello, I am interested in implementing a load balancing and fail over firewall( with connection tracking support ).  Currently the only non commercial solution that I know to be working, is pfsync and carp in BSD unices. If I am not wrong this combination allows load balancing and fail over between x firewalls connected to the same subnet, where the rules added to one firewall are propagated to the rest in the same subnet (pfsync) and the fail over mechanism is implemented by carp. Also as far as I have understood this configuration allows connection tracking information to be shared between the participating firewalls in the above fail over implementation. ( If I got it right "connection tracking" means the characteristics - sequence numbers, etc... - that specify a socket ).  As I am accustomed in using Linux(and netfilter), do you know if there is an alternative in the BSD(psfync & carp) configuration? I tried to "google" this search but only got posts before 2005. Any help would be appreciated. ( I would like to hear about a non commercial/open source solution. ) Regards Yiannis |
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: Can phase 2 proxy-id be modified on SonicWall VPN's?, joekim13 |
|---|---|
| Previous by Thread: | Re: Can phase 2 proxy-id be modified on SonicWall VPN's?, joekim13 |
| Indexes: | [Date] [Thread] [Top] [All Lists] |