Subject: Re: CARP
To: Rui Paulo <rpaulo@NetBSD.org>
From: Timo Schoeler <timo.schoeler@macfinity.net>
List: tech-net
Date: 06/23/2005 19:43:31
thus Rui Paulo spake:
> On 2005.06.23 17:44:33 +0000, Timo Schoeler wrote:
> 
>>thus Marcin Jessa spake:
>>
>>>Hi guys.
>>>
>>>In http://mail-index.netbsd.org/tech-net/2003/11/14/0001.html i found
>>>there was a CARP patch for NetBSD CURRENT. Is CARP implementation is
>>>still being worked on ?
>>
>>hi,
>>
>>i'm about to dig into this the next few days and saw this:
>>
>>/usr/pkgsrc/net/ucarp
> 
> 
> FYI: ucarp will only work perfectly when we have pfsync(4). Else,
> when one firewall fails you'll loose the state tables, which is
> not great for redundancy.
> 
> 		-- Rui Paulo

yip, that's true.

on the other hand, if you're _not_ planning to use it as firewall rather
than kind of HA solution (for web, mail services, etc.) then this is not
a big backdraw. depends...

timo