Subject: Re: pf status
To: Pavel Cahyna <firstname.lastname@example.org>
From: David Hopper <email@example.com>
Date: 08/02/2005 18:24:22
I just helped Jason Dixon configure his CARP demo for OSCON. I'm
sold. I'd love to see this in NetBSD.
Yanking the master firewall's uplink had no interruption in a ping,
and he'll apparently demonstrate playing an mp3 over NFS-- pull the
cable, no hiccup, seamless failover. Very nice.
On Jul 30, 2005, at 6:45 AM, Pavel Cahyna wrote:
> On Sat, Jul 30, 2005 at 01:20:10PM +0200, Marcin Jessa wrote:
>> These links may be of help:
> Unfortunately even here, a detailed description of CARP is missing.
> the page at least explains why an integration of pfsync and CARP is
> desirable: pfsync prevents CARP from taking ownership of the common
> address until the bulk update [of pf states] has completed.
> Bye Pavel