VRRP Load Sharing

[TirsoJRP]

pfsense does inbound server load balancing

[WebFooL]

Any feedback from Untangle them self?

I as a reseller would hate to loose clients that want to scale boxes and licenses as long as they can do these features.

Simple fix would be to allow multiple VRRP ID's per interface.

[WebFooL]

Sigh..

I am so stock on this and about to loose this client.
All he want is to have VRRP enabled on multiple IPS and have UT1 be master for one or more and UT2 Master for another couple of IPs.
IE Multiple VRRP ID's per Interface.

We are currently hunting fore more IP networks so that we can add two new WAN interfaces to the setup and achieve some load sharing.

Any Tips/Pointers/Hacks that someone can give?
(Beside SSH and adding VRRP config directly)

[WebFooL]

So tempted to poke around in the keepalived.conf
This is currently from the unit that has the low priority but we would like to push some traffic over.

! Auto Generated
! DO NOT EDIT. Changes will be overwritten.

global_defs {
}

vrrp_sync_group VRRPGROUP {
        group {
                VI_1
                VI_2
        }
}

vrrp_instance VI_1 {
        state MASTER
        interface eth0
        lvs_sync_daemon_interface eth0
        virtual_router_id 2
        priority 50
        advert_int 1
        virtual_ipaddress {
                X.X.X.47/24
                X.X.X.127/24
                X.X.X.16/24
        }
}

vrrp_instance VI_2 {
        state MASTER
        interface eth1
        lvs_sync_daemon_interface eth1
        virtual_router_id 1
        priority 50
        advert_int 1
        virtual_ipaddress {
                192.168.1.1/24
        }
}

Adding a Another Group

vrrp_sync_group VRRPGROUP {
        group {
                VI_1
                VI_2
                VI_3
        }
}

and a IP

vrrp_instance VI_3 {
        state MASTER
        interface eth0
        lvs_sync_daemon_interface eth0
        virtual_router_id 2
        priority 100
        advert_int 1
        virtual_ipaddress {
                X.X.X.57/24
        }
}

Sometime i miss the old "Override" settings :-)

[WebFooL]

OK running now with 2 WAN interfaces to that we can do 2 VRRP Clusters where UT1 is master for WAN1 and UT2 is master for WAN2.
Now to the strange thing. WAN2 On UT2 Addresses are registed but the unit will not use it :-(
Can Ping it locally or remote.

Main IP:5 packets transmitted, 5 received, 0% packet loss, time 4051ms
rtt min/avg/max/mdev = 0.071/0.094/0.150/0.030 ms
2016-09-18 9:00:35 pm - Test Completed


VRRP IP That has value 255 on this Host and not configured on the other:
Destination Host Unreachable


--- 185.42.72.242 ping statistics ---
5 packets transmitted, 0 received, +5 errors, 100% packet loss, time 4074ms
pipe 4
2016-09-18 9:01:48 pm - Test Completed


Sign Sign lets hope tomorrow goes better.. (Or is there a limit to just have one WAN with VRRP?)