Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    CARP / Virtual IP / Backup Skew

    Scheduled Pinned Locked Moved pfBlockerNG
    3 Posts 2 Posters 668 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      talaverde
      last edited by

      Re: pfBlockerNG-devel feedback

      I've been enjoying pfBlockerNG Devel much more than the previous version. Enough so, I can't see myself going back. However, it's been quite tedious whenever I have to reboot my master node in my CARP fail-over cluster. The pfB DNSBL Virtual IP resets itself, whether it's on the master node or backup node. Unfortunately, this sets the 'skew' number to 0 on both, so neither node knows which is the primary and secondary. If you could just leave that setting out of being reset, all would be good.

      As it is now, if I reboot my master node, the pfB DNSBL Virtual IP maintains master status on the backup node. I have to manually change that in some way or another. It's not difficult to go into the virtual IP, change the skew to 100 on the backup. Then, it instantly knows it's the backup. Nevertheless, it's a step which should not be necessary. The whole purpose of the CARP configuration is that it should be automatic/seamless.

      You'll probably say, don't use the CARP setting. Okay, fine. But if you are looking for feedback.... :).

      Thanks for the hard work.

      S 1 Reply Last reply Reply Quote 1
      • S
        silentnomad @talaverde
        last edited by

        @talaverde
        At the risk of a "me too" post, I've just upgraded to pfBlockerNG-devel and noticed the issue of the VIP status not reverting to MASTER when the primary router returns to master status, and then I spotted the same base and skew values on both the primary and backup routers. I recognise that this is a beta feature on a development application!

        1 Reply Last reply Reply Quote 0
        • T
          talaverde
          last edited by

          Yea, it's been auto-changing back to often. I've finally given up on the 'CARP' feature and just switched it back to the old 'IP alias'. Not sure what features I'll lose but it can't be worse than a misconfigured virtual IP.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.