Re: pfsync & carp on linux

Yiannis Kontekakis wrote:
> Hello,
>
> I am interested in implementing a load balancing and fail over firewall(
> _with connection tracking support_ ).
>
>     Currently the only non commercial solution that I know to be
> working, is pfsync and carp in BSD unices. If I am not wrong this
> combination allows load balancing and fail over between x firewalls
> connected to the same subnet, where the rules added to one firewall are
> propagated to the rest in the same  subnet (pfsync) and the fail over
> mechanism is implemented by carp. Also as far as I have understood this
> configuration allows connection tracking information to be shared
> between the participating firewalls in the above fail over
> implementation. ( If I got it right "connection tracking" means the
> characteristics - sequence numbers, etc... - that specify a socket ).
>      As I am accustomed in using Linux(and netfilter), do you know if
> there is an alternative in the BSD(psfync & carp) configuration? I tried
> to "google" this search but only got posts before 2005.
>
> Any help would be appreciated. ( I would like to hear about a non
> commercial/open source solution. )
>
> Regards
>
> Yiannis 

Hi,

You should take a look at http://www.keepalived.org/ and VRRP.

However, VRRP is patented, and there's some effort going on to port CARP
to Linux. (http://www.ucarp.org/project/ucarp).

http://tips.linux.com/tips/05/05/10/1436254.shtml?tid=100

Cheers,

--
Harald Nesland