From 38412b8b7aea580978c10f5005b8c25932af0a9d Mon Sep 17 00:00:00 2001 From: Rob Thomas Date: Mon, 11 Nov 2019 05:45:23 +1000 Subject: vrrp: add instructions when using conntrack-sync --- docs/services/conntrack.rst | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/docs/services/conntrack.rst b/docs/services/conntrack.rst index 27db622d..fc2d46ac 100644 --- a/docs/services/conntrack.rst +++ b/docs/services/conntrack.rst @@ -103,18 +103,26 @@ Now configure conntrack-sync service on ``router1`` **and** ``router2`` set service conntrack-sync accept-protocol 'tcp,udp,icmp' set service conntrack-sync event-listen-queue-size '8' - set service conntrack-sync failover-mechanism cluster group 'GROUP' # Or VRRP + set service conntrack-sync failover-mechanism cluster group 'GROUP' set service conntrack-sync interface 'eth0' set service conntrack-sync mcast-group '225.0.0.50' set service conntrack-sync sync-queue-size '8' +If you are using VRRP, you need to define a VRRP sync-group, and use ``vrrp sync-group`` instead of ``cluster group``. + +.. code-block:: sh + + set high-availablilty vrrp group internal virtual-address ... etc ... + set high-availability vrrp sync-group syncgrp member 'internal' + set service conntrack-sync failover-mechanism vrrp sync-group 'syncgrp' + + On the active router, you should have informations in the internal-cache of conntrack-sync. The same current active connections number should be shown in the external-cache of the standby router On active router run: - .. code-block:: sh $ show conntrack-sync statistics -- cgit v1.2.3