From mboxrd@z Thu Jan 1 00:00:00 1970 From: Grant Taylor Date: Thu, 19 Jul 2007 21:15:01 +0000 Subject: Re: [LARTC] gateway failover with linux Message-Id: <469FD455.9050903@riverviewtech.net> List-Id: References: <20070719170251.GA24923@toroid.org> In-Reply-To: <20070719170251.GA24923@toroid.org> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org On 07/19/07 12:02, Abhijit Menon-Sen wrote: > I'm wondering if there's a good way to configure a Linux firewall box > to failover to a single backup server, while preserving connection > state. I'm a bit confused, are you wanting a single Linux firewall / router to have redundant internet connections, or to route traffic to redundant systems behind it and intelligently handle the failure of one or more of said redundant systems? I'm also not sure how conntrackd (comparable to OpenBSD's pfsync) is coming in to play here. Or is there more than one Linux firewall / router that you are wanting to synchronize? Or are you wanting the connection tracking between the multiple systems behind the Linux firewall / router? I think that all of these are possible to various degrees, though each uses a different method to achieve it. > This question has been asked before, but the latest reference I can > find is from 2004, at which time Linux had no equivalent of OpenBSD's > pfsync, though Harald was said to be working on one. *nod* Conntrackd is the tool that you want to use to synchronize connection tracking connection meta data between two systems, or the closest thing that Linux presently has (that I'm aware of). > Did anything come of those efforts? Or is there now another > alternative? Yes, conntrackd. > Any examples or advice would be appreciated. Will you please clarify what you are really wanting to do per above and I'll be more than happy to try to point you in the right direction. Grant. . . . _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc