PF - Carp and vhid limitations
Matthew Seaman
m.seaman at infracaninophile.co.uk
Wed Dec 5 23:05:35 PST 2007
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Michael K. Smith - Adhost wrote:
> I'm interested in using PF to front a web farm where there will be
> lots of static IP addresses for SSL affinity. As such, I expect to
> have many more than 255 CARP interfaces. But, as I understand it,
> I'm limited to 255 vhid's and I have to have a discreet vhid per CARP
> interface.
>
> Is there a way to configure my CARP interfaces such that I can get
> around this limitation? Right now, I configure everything as:
carp interfaces are synthetic NICs. You can use more than one IP per
carp interface just by adding them as aliases:
ifconfig_carp0="vhid 100 pass XXXXXXXXXXXXX 12.34.56.78/24"
ifconfig_carp0_alias0="inet 12.34.56.79/32"
ifconfig_carp0_alias1="inet 12.34.56.80/32"
You should only need as many carp interfaces as there are fail-over
pairs of physical servers in your configuration.
Cheers,
Matthew
- --
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
Kent, CT11 9PW
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFHV58p8Mjk52CukIwRCGG0AJ9QYNiqFmZh68bO9CNPkwRrNgNnFgCfaejM
2FDwtxY6JcmhToOujViuacY=
=GpU/
-----END PGP SIGNATURE-----
More information about the freebsd-questions
mailing list