Ixolate utilizes the Common Address Redundancy Protocol or CARP for hardware failover. Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active.
Utilizing this powerful feature of Ixolate creates a fully redundant firewall with automatic and seamless fail-over. While switching to the backup network connections will stay active with minimal interruption for the users.
Workflow
Although its not required to synchronize the configuration from the master machine to the backup, a lot of people would like to keep both systems (partially) the same.
To prevent issues spreading over both machines at the same time, we choose to only update on command (see the status page).
Our workflow looks like this:
blockdiag {
update1 [label=“MasternUpdate 1”]; update2 [label=“MasternUpdate 2”]; updaten [label=“MasternUpdate N”]; sync [label=“SynchronizenBackup”]; update1 -> update2 ; update2 -> updaten [label=“..”]; updaten -> sync;
}
First commit all changes to the master, then update the backup while knowing the master is still properly configured.
Automatic replication
Although we advise to make sure to keep the backup machine intact during maintenance, some people prefer to keep the backup in sync on periodic intervals. For this reason we added a cron action which you can schedule yourself in System › Settings › Cron on the primary node.
To use this feature, add a new cron job containing the HA update and reconfigure backup command and a proper schedule, once a day outside office hours is usually a safe option.
Settings
Automatic failover
Although not really a setting on the high availability setup page, it’s a crucial part of high available setups. Using CARP type virtual addresses, the secondary firewall will take over without user intervention and minimal interruption when the primary becomes unavailable.
Virtual IPs of the type CARP (Firewall vip) are required for this feature.
Disable preempt
By default this option is deselected, which is the advised scenario for most common HA setups. The preempt option make sure that multiple carp interfaces will act as a group (all backup or master) at the same time, assuming no technical issues exist between both.
Disconnect dialup interfaces
When this device is configured as CARP backup it will disconnect all PPP type interfaces and try to reconnect them when becoming master again.
Synchronize all states via
The firewall state table can replicated to all failover configured firewalls. This means the existing connections will be maintained in case of a failure, which is important to prevent network disruptions.
To enable the feature, select an interface for state table communication. Best choose a dedicated interface for this type of communication to prevent manipulation of states causing security issues or intermittent state loss in traffic congestion scenarios.
Configuration synchronization
Ixolate includes configuration synchronization capabilities. Configuration changes made on the primary system are synchronized on demand to the secondary firewall.
A backup node should never contain settings for Configuration synchronization in System › High Availability › Settings. If this is the case an administrator can accidentally synchronize the backup with the master, causing all kinds of configuration errors.
Configure HA CARP
For detailed setup guide see: Carp
Status
The status page connects to the backup host configured earlier and show all services running on the backup server. With this page you can update the backup machine and restart services if needed.