Production use of carp?

Per von Zweigbergk pvz at itassistans.se
Fri Jun 3 00:57:03 UTC 2011


3 jun 2011 kl. 00.10 skrev Patrick Lamaiziere:

> You may want to implement your own control because if the two hosts
> cannot communicate, you will have two masters. This can happen if the
> links on the both hosts are up, but none packet are forwarded (ie the
> switch connecting the two boxes is broken in some way).

As a general thought that might be interesting when you're building your HA solution:

One less-documented feature of VMware ESXi is that it checks whether it's isolated from the network by pinging the gateway on the management network.

This is how ESXi trys to avoid having a split-brain condition - by making sure that it only considers itself to be the master if it can reach the gateway, but cannot reach any other servers. You might implement gating in a similar way to avoid a split-brain condition in your HA solution.


More information about the freebsd-net mailing list