UPnP & NAT-PMP in High Availability Setup

[spunky_surveyor]

I have a pair of netgate appliances working rather well with a number of LAN subnets and WAN addresses. However I am having some issues with UPnP. Based on Reading the docs I specified the CARP WAN address as an override, but other than that everything is enabled and at its out of box defaults. Is there anything different that needs to be done to get UPnP in a HA setup?
Thanks!

[im.thatoneguy]

@spunky_surveyor It appears that even if you specify

listening_ip=eth0/24

in

/var/etc/miniupnpd.conf

it won't bind to the CARP VIP.

As a result UPnP will work with some applications that don't mind the fact that the router IP advertises itself. But NAT-PMP and many others will fail because the VIP isn't getting picked up by the miniupnp daemon. This appears to be fixed in miniupnp upstream and is an old bug in PFSense due to an ancient historical lack of multicast support in CARP VIPs.

A workaround for NAT-PMP is to create a NAT Port Forward for:

CARP IP : UDP 5351 to Router IP : UPD 5351