WireGuard Archive on lore.kernel.org
 help / color / Atom feed
* FreeBSD/CARP: bind outgoing packets to virtual IP
@ 2020-09-28 11:33 Muenz, Michael
  0 siblings, 0 replies; only message in thread
From: Muenz, Michael @ 2020-09-28 11:33 UTC (permalink / raw)
  To: WireGuard mailing list

Hi,

for HA solutions within Linux it seems WireGuard has the ability to use 
fwmark to treat packet right with iptables.

When it comes to FreeBSD we don't have any chance to rewrite packets in 
HA setups.

Let's say you have unit1 with master IP 1.1.1.5 and unit2 with master IP 
1.1.1.9 and a floating IP 1.1.1.7 which is only owned by the active 
unit. Without the option to bind the service to a fixed IP, packets 
leaving the firewall will be sourced from the highest interface IP which 
would break when the floating IP is moving from unit 1 to 2.

I know most of the user base are Linux users but I more and more get 
requests also from bigger companys about HA-setups via OPNsense.

Do you have any plans about a similar feature for your FreeBSD users? :)


Best,

Michael



^ permalink raw reply	[flat|nested] only message in thread

only message in thread, back to index

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-09-28 11:33 FreeBSD/CARP: bind outgoing packets to virtual IP Muenz, Michael

WireGuard Archive on lore.kernel.org

Archives are clonable:
	git clone --mirror https://lore.kernel.org/wireguard/0 wireguard/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 wireguard wireguard/ https://lore.kernel.org/wireguard \
		wireguard@lists.zx2c4.com
	public-inbox-index wireguard

Example config snippet for mirrors

Newsgroup available over NNTP:
	nntp://nntp.lore.kernel.org/com.zx2c4.lists.wireguard


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git