conntrackd allows you to deploy an symmetric Active-Active setup based on a static approach. For example, assume that you have two virtual IPs, vIP1 and vIP2, and two firewall replicas, FW1 and FW2. You can give the virtual vIP1 to the firewall FW1 and the vIP2 to the FW2.

Apr 9 2024, 3:58 PM · VyOS 1.5 Circinus, vyatta-vrrp, vyatta-conntrack-sync

Jan 19 2024

Viacheslav changed the status of T5745: conntrack-sync: Multiprimary setups for HA/VRRP from Open to Needs reporter action.

Jan 19 2024, 10:43 PM · VyOS 1.5 Circinus, vyatta-vrrp, vyatta-conntrack-sync

Viacheslav added a comment to T5745: conntrack-sync: Multiprimary setups for HA/VRRP.

@I-n-d-y Try to get it working without VyOS CLI.
Provide the required contrack config. As I'm not sure that it will work correctly at all.

Jan 19 2024, 10:23 PM · VyOS 1.5 Circinus, vyatta-vrrp, vyatta-conntrack-sync

Jan 9 2024

dmbaturin triaged T5425: enable VRF for conntrack-sync as Normal priority.

Jan 9 2024, 6:05 PM · VyOS Rolling

dmbaturin added a parent task for T5425: enable VRF for conntrack-sync: T5116: Better VRF support.

Jan 9 2024, 6:04 PM · VyOS Rolling

Nov 16 2023

I-n-d-y added a comment to T5745: conntrack-sync: Multiprimary setups for HA/VRRP.

I have a similar setup where I have two VyOS VMs used as VPN routers with some firewalling enabled. Since I use OSPF for dynamic routing I am not able to synchronize the sessions between both routers so in case one VPN router fails the other one can't take over flawlessly. Having conntrack-sync configuration separated from VRRP would be a great benefit.

Nov 16 2023, 8:19 AM · VyOS 1.5 Circinus, vyatta-vrrp, vyatta-conntrack-sync

syncer assigned T5745: conntrack-sync: Multiprimary setups for HA/VRRP to Viacheslav.

Nov 16 2023, 1:20 AM · VyOS 1.5 Circinus, vyatta-vrrp, vyatta-conntrack-sync

Nov 15 2023

Viacheslav added a project to T5745: conntrack-sync: Multiprimary setups for HA/VRRP: VyOS 1.5 Circinus.

Nov 15 2023, 8:10 PM · VyOS 1.5 Circinus, vyatta-vrrp, vyatta-conntrack-sync

qdrddr created T5745: conntrack-sync: Multiprimary setups for HA/VRRP.

Nov 15 2023, 7:30 PM · VyOS 1.5 Circinus, vyatta-vrrp, vyatta-conntrack-sync

qdrddr added a comment to T5425: enable VRF for conntrack-sync.

Created a related feature request but for VRRP here
https://vyos.dev/T5745

Nov 15 2023, 6:14 PM · VyOS Rolling

I-n-d-y added a comment to T5425: enable VRF for conntrack-sync.

I had entered the command as you have suggested and I think it's working somehow.

Nov 15 2023, 4:44 PM · VyOS Rolling

Nov 10 2023

Viacheslav added a comment to T5425: enable VRF for conntrack-sync.

Yes I mean sudo ip vrf exec FOO /usr/sbin/conntrackd -C /run/conntrackd/conntrackd.conf

Nov 10 2023, 8:21 AM · VyOS Rolling

I-n-d-y added a comment to T5425: enable VRF for conntrack-sync.

It has been a while since I had setup the HA VRF. I attached the interfaces on both routers to use this VRF but then conntrack-sync wasn't woking anymore. Do you mean if I had also tried to manually start the service and configure it to use this VRF?

Nov 10 2023, 6:46 AM · VyOS Rolling