pfsync is a
computer protocol used to synchronise
firewall states between machines running
Packet Filter (PF) for
high availability
High availability (HA) is a characteristic of a system that aims to ensure an agreed level of operational performance, usually uptime, for a higher than normal period.
There is now more dependence on these systems as a result of modernization ...
. It is used along with
CARP
The term carp (: carp) is a generic common name for numerous species of freshwater fish from the family (biology), family Cyprinidae, a very large clade of ray-finned fish mostly native to Eurasia. While carp are prized game fish, quarries and a ...
to make sure a backup firewall has the same information as the main firewall. When the main machine in the firewall cluster dies, the backup machine is able to accept current connections without loss.
See also
*
OpenBSD
OpenBSD is a security-focused operating system, security-focused, free software, Unix-like operating system based on the Berkeley Software Distribution (BSD). Theo de Raadt created OpenBSD in 1995 by fork (software development), forking NetBSD ...
*
PF (firewall)
PF (Packet Filter, also written pf) is a BSD licensed stateful packet filter, a central piece of software for firewalling. It is comparable to netfilter (iptables), ipfw, and ipfilter.
PF was developed for OpenBSD, but has been ported to ...
*
CARP
The term carp (: carp) is a generic common name for numerous species of freshwater fish from the family (biology), family Cyprinidae, a very large clade of ray-finned fish mostly native to Eurasia. While carp are prized game fish, quarries and a ...
*
Linux-HA
*
Linux Virtual Server
Linux Virtual Server (LVS) is load balancing software for Linux kernel–based operating systems.
LVS is a free and open-source project started by Wensong Zhang in May 1998, subject to the requirements of the GNU General Public License (GPL ...
References
External links
PF: Firewall Redundancy with CARP and pfsync ''(OpenBSD PF FAQ)''pfsync(4) man-page in OpenBSD, FreeBSD and NetBSD
sys/net/if_pfsync.h in OpenBSDsys/net/if_pfsync.c in OpenBSD
Internet protocols
High-availability cluster computing
BSD software
OpenBSD
FreeBSD
NetBSD
Firewall software
{{network-software-stub