Feature #2834
closedcarp+pfsync: add ability to prefer one node as master
0%
Description
This request is done because we have the situation of a lot (3x /27) ip-addresses with most of them guarded by carp. As we have three blocks available on two (geographicly separated) datacenters we want to split the masters across those two dc's to have some kind of loadbalancing.
Without pfsync this can be easily achieved by just configuring the skew a bit higher on the side that we want to keep standby.
While using pfsync though, currently we can only add a carp address to the pfsync master and then that address will be synced to the pfsync-slave and that machine will be slave for that carp address. That is done by pfsync by increasing the chosen Skew with 100 when it goes through the sync.
If we want to configure the pfsync slave machine master for some of the carp addresses we need to disable the virtual addresses sync and then set the skew manually on both pfsense machines. While this is a working solution it would be very nice to have an option in the carp config (I would suggest a checkbox near the base/skew setting) which tells the pfsync config whether he should be master or slave. Alternatively a checkbox could be made that says "ignore/override pfsync" so that you can just set a lower skew on the box prefer to be master.
Files