pfsync is a
computer protocol used to synchronise
firewall states between machines running
Packet Filter (PF) for
high availability
High availability (HA) is a characteristic of a system which aims to ensure an agreed level of operational performance, usually uptime, for a higher than normal period.
Modernization has resulted in an increased reliance on these systems. F ...
. It is used along with
CARP
Carp are various species of oily freshwater fish from the family Cyprinidae, a very large group of fish native to Europe and Asia. While carp is consumed in many parts of the world, they are generally considered an invasive species in parts of ...
to make sure a backup firewall has the same information as the main firewall. When the main machine in the firewall cluster dies, the backup machine is able to accept current connections without loss.
See also
*
OpenBSD
OpenBSD is a security-focused, free and open-source, Unix-like operating system based on the Berkeley Software Distribution (BSD). Theo de Raadt created OpenBSD in 1995 by forking NetBSD 1.0. According to the website, the OpenBSD project e ...
*
PF (firewall)
*
CARP
Carp are various species of oily freshwater fish from the family Cyprinidae, a very large group of fish native to Europe and Asia. While carp is consumed in many parts of the world, they are generally considered an invasive species in parts of ...
*
Linux-HA
The Linux-HA (High-Availability Linux) project provides a high-availability ( clustering) solution for Linux, FreeBSD, OpenBSD, Solaris and Mac OS X which promotes reliability, availability, and serviceability (RAS).Alan Robertson ''The Evolu ...
*
Linux Virtual Server
Linux Virtual Server (LVS) is load balancing software for Linux kernel–based operating systems.
LVS is a free and open-source project started by Wensong Zhang in May 1998, subject to the requirements of the GNU General Public License (GPL ...
References
External links
PF: Firewall Redundancy with CARP and pfsync ''(OpenBSD PF FAQ)''pfsync(4)
man-page in OpenBSD, FreeBSD and NetBSD
sys/net/if_pfsync.h
in OpenBSDsys/net/if_pfsync.c
in OpenBSD
Internet protocols
High-availability cluster computing
BSD software
OpenBSD
FreeBSD
NetBSD
Firewall software
{{network-software-stub