Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [carp]

an open protocol that allows multiple hosts to share a virtual IP address (VIP). The CARP protocol was originally designed and implemented by the OpenBSD developers. There are several other free implementations of it, including UCARP on Linux.

The Common Address Redundancy Protocol allows multiple hosts on the same network segment to share a set of IP addresses. CARP is a secure, free alternative to the Virtual Router Redundancy Protocol (VRRP) and the Hot Standby Router Protocol (HSRP).

A group of hosts sharing one or more CARP VIPs is referred to as a "redundancy group." Within the group, one host is designated the "master" and the rest as "backups." The master host is the one that currently "holds" the shared IP; it responds to any traffic or ARP requests directed towards it. Each host may belong to more than one redundancy group at a time.

Kernel driver based implementations of CARP are available on FreeBSD, NetBSD and OpenBSD. UCARP is a portable userland implementation available for Linux.

Sources: OpenBSD Project, Wikipedia

30 questions
1
vote
1 answer

Where did load balancing using FreeBSD CARP go?

In some old manuals I see net.inet.carp.arpbalance sysctl, that turns on load balancing between CARP'ed interfaces. Recent manuals (FreeBSD 10+) say nothing about it. Where did that feature go and what was the reason for it?
arrowd
  • 319
  • 1
  • 8
1
vote
2 answers

WAN Static IP with Carp but different GW

I have the following problem, and I cannot find the solution, even after googling and reading the pfsense documentation. my ISP gave me the following information: Gateway: 1.2.3.254/32 Public IP: 5.4.3.2/32 If I use these information in my pfsense…
Alessandro Perucchi
  • 61
  • 1
  • 8
1
vote
1 answer

pfSense CARP seems to cause NIC issues

Within 12 hours of turning on HA we can't reach the webGUI, ping the pfSense machine, or have the pfSense machine ping anything. Prior to doing HA everything was working fine. After having this issue before, we did a fresh install/config and are…
Nicholas Yount
  • 11
  • 3
1
vote
0 answers

pfSense 2.2: HAProxy for HTTP + CARP + MultiWAN with VIPs issue (Outbound NAT?)

I have two pfSense firewalls with CARP setup, 2 WANs and HAProxy that points to HTTP servers in my LAN. Scheme: **pfSense server #1** ISP#1 - Public IP1.1 - pfSense#1 with HAProxy - HTTP ISP#2 - Public IP1.2 - **ISP#2 Local IP1** - pfSense#1 with…
b0rman
  • 11
  • 2
0
votes
1 answer

pfsense with only carp addresses

I currently have two pfsense boxes with a standard carp setup as per the docs, it works great. Two part question here: how does anything even work? My experience when accidentally having two ips on the same network has not been pleasant. So how…
Kurt
  • 211
  • 2
  • 9
0
votes
2 answers

carp single wan address

I try to put in place 2 freebsd routers with carp interfaces. since I have only one wan address, lets say : 1.2.3.4 I'd like to use private range ips to do carp jobs : 10.0.0.1(router1) alias (1.2.3.4) 10.0.0.2 (router2) alias (1.2.3.4) my ISP…
goddard
  • 1
  • 1
0
votes
1 answer

Set an network interface in FreeBSD as DHCP-enabled, but totally silent until explicitly enabled

I'm setting up a FreeBSD carp router/firewall backup, my provider is giving out IP by DHCP, it's static and tied to MAC address of my NIC, so when carp switches state I'm trying to switch off the interface on one machine and switch it on on another.…
Eugene Petrov
  • 101
  • 5
0
votes
2 answers

Is it possible to configure carp using /etc/network/interfaces?

Lots of tutorials out there show to set-up carp using ifconfig: https://www.netbsd.org/docs/guide/en/chap-carp.html I'm wondering if it's possible to do the same using /etc/network/interfaces? For instance, how can I duplicate this: # ifconfig carp0…
moomima
  • 497
  • 2
  • 5
  • 8
0
votes
0 answers

site-to-site OpenVPN tunnel with PFSense + CARP enabled causes regular drops

I have two datacenters, and in each datacenter I have two pfSense 2.1.5 servers running in CARP failover mode. I've established a OpenVPN, shared-key tunnel between the two datacenters, pointing at the remote CARP public IP address. Each site is…
John P
  • 1,659
  • 6
  • 37
  • 56
0
votes
2 answers

CARP Virtual IP does not ping in virtualized environment

We have three physical machines with SmartOS on them in a LAN. Two of them, 10.40.0.30 and 10.40.0.240 are hypervisors with two pfSense-based virtualized gateways on them. These gateways have 10.40.0.1 and 10.40.0.2 addresses, respectively. There is…
Alex
  • 7,789
  • 4
  • 36
  • 51
0
votes
2 answers

pfSense CARP - WAN failure on firewall

I have recently configured 2 firewalls (on 2 DELL PowerEdge R210II with ESXI 5.1) with pfSense. We have several LANs and 2 WANs. Everything is running fine but I have a strange behavior: I can access the internet from all LANs but not from the…
eldblz
  • 375
  • 2
  • 11
  • 21
0
votes
1 answer

openbsd carp with multiple external vip's

Is there any way to setup multiple carp vip's without creating a separate hostname.if file for each address? Our colo has provided us with a /25 external network. Three addresses from this range are required for the colo gateway and my redundant…
user111499
  • 3
  • 1
0
votes
0 answers

CARP getting confused with 2 interconnected switches and bonding

I'm having a pretty straight forward 10G switch setup: +-----+----+ +-----+----+ | |port2 ISL port2| | | switch A +--------------------------+ switch B | | | | …
xsign
  • 1
  • 1
0
votes
1 answer

OpenLDAP running on OpenBSD + CARP setup

I'm setting up OpenLDAP on a router/firewall that's running OpenBSD + CARP + pfsync. Curious enough, I'm wondering what's my best approach to making sure the setup stays redundant between the two boxes in the event one goes down. Do I simply set up…
imaginative
  • 1,941
  • 9
  • 32
  • 48
0
votes
1 answer

CARP + IPV6 failover

I am using a vSwitch from Hetzner with an IPv6 network, I have configured CARP and works as expected, but the problem that I have noticed is that either because my IPv6 configuration or the vSwitch, is taking over a minute or more to start sending…
nbari
  • 548
  • 1
  • 8
  • 25
1
2