HA on FreeBSD

[yassine ayachi]

Hi all ,

In order to improve my firewall architecture, I installed on my two
firewalls that are on linux the platforme HAProxy-Heartbeat-BRBD, now I want
to improve it further by installing the same thing on freebsd,

I installed haproxy and hearbeat without problem, but there is no DRBD
support on freeBSD,

I googled and found geom with ggated/ggatec with freevrrpd for virtual ip
support, I tried to setup this but it does not work, here is a summary of
what I'm doing :

Slave IP : 10.42.6.156
Mester IP : 10.42.6.158

1-slave# ggated -v

2-master# ggatec create 10.42.6.156 /dev/da0s1d
master#
(This command is suposed to return the device node name. something like
‘ggate0′, but nothing in my case.)

3-output on the slave machine looks like this :
slave# bginfo: Connection from: 10.42.6.158.
debug: Receiving version packet.
debug: Version packet received.
debug: Receiving initial packet.
debug: Initial packet received.
debug: Connection created [10.42.6.158, /dev/da0s1d].
debug: New connection created (token=2554515407).
debug: exports[/dev/da0s1d]: IP mismatch.
warning: Unauthorized connection from: 10.42.6.158.
debug: Connection removed [10.42.6.158 /dev/da0s1d].
warning: Cannot send initial packet: Bad file descriptor.

Thanks in advance you for any help you give me :)
_______________________________________________
freebsd...@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hacke...@freebsd.org"

[Ruben de Groot]

On Thu, Dec 24, 2009 at 10:01:12AM +0000, yassine ayachi typed:

> Hi all ,
>
> In order to improve my firewall architecture, I installed on my two
> firewalls that are on linux the platforme HAProxy-Heartbeat-BRBD, now I want
> to improve it further by installing the same thing on freebsd,
>
> I installed haproxy and hearbeat without problem, but there is no DRBD
> support on freeBSD,

There will be, hopefully Real Soon Now.
http://www.freebsdnews.net/2009/10/23/new-freebsd-project-hast/

> I googled and found geom with ggated/ggatec with freevrrpd for virtual ip
> support, I tried to setup this but it does not work, here is a summary of
> what I'm doing :
>
> Slave IP : 10.42.6.156
> Mester IP : 10.42.6.158
>
> 1-slave# ggated -v
>
> 2-master# ggatec create 10.42.6.156 /dev/da0s1d
> master#
> (This command is suposed to return the device node name. something like

> ???ggate0???, but nothing in my case.)

>
> 3-output on the slave machine looks like this :
> slave# bginfo: Connection from: 10.42.6.158.
> debug: Receiving version packet.
> debug: Version packet received.
> debug: Receiving initial packet.
> debug: Initial packet received.
> debug: Connection created [10.42.6.158, /dev/da0s1d].
> debug: New connection created (token=2554515407).
> debug: exports[/dev/da0s1d]: IP mismatch.

^^^^^^^^^^^^

There's your problem. Check the IP addresses in your gg.exports
file.

Ruben

[Vinicius Abrahao]

> On Thu, Dec 24, 2009 at 10:01:12AM +0000, yassine ayachi typed:
>> Hi all ,
>>
>> In order to improve my firewall architecture, I installed on my two
>> firewalls that are on linux the platforme HAProxy-Heartbeat-BRBD, now I want
>> to improve it further by installing the same thing on freebsd,

Hi,

Specialy about firewall HA you could use this combination: carp + pf + pfsync

This topic had a lot of information at google, but I dont know what is The One.

Someone can profetise about this?

Best [hollydays] regards,
Vinnix