Actions
Feature #16598
open
Prevent master takeover if critical services are not running + forced failover on service failure
Status:
Incomplete
Priority:
Normal
Assignee:
-
Category:
CARP
Target version:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Release Notes:
Default
Description
In CARP-based HA setups, pfSense currently makes the master/backup decision primarily based on CARP state and interface availability.
However, this can lead to false master situations where the node becomes MASTER even though critical services are not running or are unhealthy.
This is especially problematic in production environments where pfSense acts as a firewall and service provider (e.g. OpenVPN server, DNS, DHCP, HAProxy, IPS/IDS).
I'm attaching a rudimentary script to show you what I think.
Files
Updated by
Actions