Synopsis # This chapter describes building a two-node OpenBSD firewall or gateway cluster with carp(4) virtual IPs, pfsync(4) state replication, and optional service failover using relayd(8) . It provides canonical configurations for inside and outside virtual IPs (VIPs), a dedicated state-sync network, and safe failover behavior. Use this pattern whenever an outage of a single gateway or firewall would impact production traffic. Packet filtering is configured in pf.conf(5) and managed at run...
