Re: CARP/VRRP on monowall

Chris Buechler <[email protected]>
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]> 
On Thu, Dec 30, 2010 at 4:20 AM, Tonix (Antonio Nati)
<[email protected]> wrote:
> Is there any short/middle plan about adding carp/vrrp to monowall?
>

Not sure on any plans. ipfilter doesn't support any type of firewall
state synchronization so it couldn't have stateful failover. CARP or
VRRP could allow you to fail over, but all your connections would be
dropped. That's a very serious problem in some networks, though not
even noticed in others. Losing all states is generally unacceptable in
the types of environments that require HA firewalls, which may be why
it hasn't gotten attention to date.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.