CARP bug?

Klavs Klavsen kl at vsen.dk
Tue Jul 12 15:39:43 GMT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi guys,

(sorry for resending - but I didn't get it back, and can't see it in the
archives - so I figured something went wrong).

I'm testing CARP in a vmware setup, and I have found a small problem.

I need CARP to "protect" 3 addresses on the same interface (3 diff.
https sites) which are rdr'ed to backend local IPs.

I tried putting an alias on my carp0 interface, but then it just stopped
answering at all.

I then figured, I needed a carp interface for each address, but when I
do that, it doesn't automatically up the second interface.. when I
reboot, it looks like this:

carp0: flags=41<UP,RUNNING> mtu 1500
        inet 192.168.11.208 netmask 0xffff0000
        carp: MASTER vhid 1 advbase 1 advskew 100
carp1: flags=41<UP,RUNNING> mtu 1500
        inet 10.0.0.1 netmask 0xffffff00
        carp: MASTER vhid 2 advbase 1 advskew 100
carp2: flags=41<UP,RUNNING> mtu 1500
        inet 172.16.1.8 netmask 0xffffff00
        carp: MASTER vhid 3 advbase 1 advskew 100
carp3: flags=0<> mtu 1500
        inet 192.168.11.210 netmask 0xffff0000
        carp: INIT vhid 4 advbase 1 advskew 100

I also tried setting carp0 and carp3 (which are on the same real
interface) to a netmask of 255.255.255.255 - but it made no difference).

It works, if I then manually up carp3, but I'm ofcourse not happy that I
need to do that.

Also - why is aliases allowed, if it just makes the interface not
respond at all?

Thank you for an otherwise great piece of software :)

- --
Regards,
Klavs Klavsen, GSEC - kl at vsen.dk - http://www.vsen.dk
PGP: 7E063C62/2873 188C 968E 600D D8F8  B8DA 3D3A 0B79 7E06 3C62

"Those who do not understand Unix are condemned to reinvent it, poorly."
  --Henry Spencer

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFC02M7PToLeX4GPGIRAraWAKCuAXbdqytqy81m4AnVd2kthcoO4wCff0aR
/6ET5Xj5ZneaS+6a2xOOk5M=
=t6rm
-----END PGP SIGNATURE-----


More information about the freebsd-pf mailing list