CARP Bug or New Feature

tomli

Hi All,

I have 2 pfsense servers, each server has 4 physical ports (WAN, LAN, OPT1 and OPT2). I create 3 CARP IPs in each interface (expect wan). When I click save button in System --> High Availability Sync page (no change any configuration), I find Active Server CARP IPs status will change from Master to BACKUP. In the log, I find the below message:-

May 25 01:59:16 pfSense1 kernel: carp: demoted by 240 to 240 (pfsync bulk start)
...
After 1min 30 secs

May 25 02:00:21 pfSense1 kernel: carp: demoted by -240 to 0 (pfsync bulk fail)
The CARP IPs status will resume normal.

In the old version, I also see the above log message
May 25 02:50:57 pfSense kernel: carp: demoted by 0 to 0 (pfsync bulk start)
The CARP IPs status will not change.

Is it a bug or a new feature? please advise.

stephenw10

It's not a new feature. Sounds like more like something is misconfigured.

Why are you re-saving the HA sync settings though? Are you changing something there?

Steve

tomli

Yes, I changed the Remote System Password. And click save button.

Thanks,

tomli

More information for your reference.

advskew is 0 and carp is in BACKUP status. It is very strange !!!

stephenw10

Mmm, that shouldn't be possible.

Try running a packet capture on that interface and check the time between the CARP packets. The Sec would have to be sending in less than 1s intervals to demote the Pri.

Or maybe something else using those VHIDs?

Steve