|
|
|||||||
| Other BSD and UNIX/UNIX-like Any other flavour of BSD or UNIX that does not have a section of its own. |
 |
|
|
Thread Tools | Display Modes |
16th June 2008
|
||||
|
||||
iptables fw redundancy
Anyone have a good how to on this using two linux machines with iptables?
|
|
17th June 2008
|
||||
|
||||
|
You could hack something together using heartbeat (for failover), freevrrp (for sharing common IPs), and drbd (to replicate a block device between the two hosts). But (AFAIK) you won't be able to save/failover state between the two. You'll either have to use non-stateful rules, or put up with the possibility of dropping any existing connections during the fail-over.
|
|
17th June 2008
|
||||
|
||||
|
Thanks phoenix, your post saves me. I was looking forward to building something similar. I'll post any updates I have here.
__________________
"Any intelligent fool can make things bigger, more complex, and more violent. It takes a touch of genius -- and a lot of courage -- to move in the opposite direction."
|
|
17th June 2008
|
||||
|
||||
|
Thanks buddy. Looks like OpenBSD/CARP is the ideal setup for fw redundancy.
|
|
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| first match vs last match ruleset design (pf vs iptables) | zelut | FreeBSD Security | 5 | 12th July 2009 08:13 AM |
| pfsync+carp+wifi firewall redundancy inquiry | revzalot | OpenBSD Security | 1 | 18th May 2009 03:06 PM |
| spoofing with iptables | dk_netsvil | General software and network | 6 | 29th October 2008 07:22 PM |
Linear Mode
