> >Hi Friends! Hi Bro, >I'm looking for firewall solution for active/active, the clients use >the firewalls randomly. Interesting. How does client choose firewall? Where the randomization occurs? >The conntrackd help me to replicate the state of the connection. >What help to "load balance" the firewalls? You can use keepalived [1] to have two virtual gateway IP addresses on the network - GW1 and GW2. Assign half of the clients staticly to GW1, another half to GW2. If one of the boxes fails, keepalived brings up missing GWX address on another box. This way you are provided with redundancy and load balancing. [1] http://www.keepalived.org/ -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
