Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

BPFire with eBPF LoxiLB loadbalancer and Firewall in high availability in home Internet access lab #29

Closed
vincentmli opened this issue Jul 1, 2024 · 2 comments
Closed

BPFire with eBPF LoxiLB loadbalancer and Firewall in high availability in home Internet access lab #29

vincentmli opened this issue Jul 1, 2024 · 2 comments

Comments

@vincentmli
Copy link
Owner

vincentmli commented Jul 1, 2024 •
edited
Loading 

       *********
    ***         ***                                                              
  **               **                                                            
 *     Internet      *
 *                   *
 *   Digital ocean   *
  **   server      **
    ***         ***
       *********
          |
          |                        --------------------------------+
          |                                     first floor        |
     +----+---------+   +--- wifi client       strong wifi         |
     | ISP comcast  |   |                                          |
     | router       +---+--- wifi client                           |
     | 10.0.0.1     |   +--- wifi client                           |
     +----+---------+                                              |
          |                        --------------------------------+
      +-------------+                                              |
      | mini switch |                          basement floor      |
      +-------+-----+                        weak first floor wifi |
              |                                                    |
              |                                                    |
     +--------+---------------------------+                        |
     |          loxilb vip:               |                        |
     |          10.0.0.68                 |                        |
+----+-red0----------+            +-------+------------+           |
|     10.0.0.232     |            |  10.0.0.110        |           |
|                    |            |                    |           |
|                    |            |                    |           |
|                    | keepalived |                    |           |
|  bpfire-2 on       |   HA       | bpfire-3 on        |           |
|   mini PC          |            | Dell R220          |           |
|                    |            |                    |           |
|   172.16.1.2       |            |  172.16.1.3        |           |
+-----green0---------+            +-----green0- -------+           |
           |        gateway ip            |                        |
           |        172.16.1.1            |                        |
           +------------+-----------------+                        |
                        |                                          |
                   +----+---------+                                |
                   | mini switch  |                                |
                   +--+-------+---+                                |
                      |       |                                    |
                      |       |                       +-------+    |
        +-------------+       |       +---------------+ iphone|    |
        |                     |       |               +-------+    |
+----+-eth0------+    +-------+-------+----+  strong wifi          |
| 172.16.1.9     |    |old legacy          |          +-------+    |
|                |    |netgear wifi router |          |       |    |
| backend        |    |as wifi access point+----------+ iMAC  |    |
|                |    +--------------------+          |       |    |
+----------------+                                    +-------+    |
                                                             ------+
@vincentmli
Copy link
Owner Author

loxilb-io/loxilb#718 described the issue detail

@vincentmli vincentmli changed the title BPFire LoxiLB enabled stops backend server outgoing Internet access BPFire with eBPF LoxiLB loadbalancer and Firewall in high availability in home lab Jul 7, 2024
@vincentmli vincentmli changed the title BPFire with eBPF LoxiLB loadbalancer and Firewall in high availability in home lab BPFire with eBPF LoxiLB loadbalancer and Firewall in high availability in home Internet access lab Jul 7, 2024
@vincentmli
Copy link
Owner Author

it looks the DNS server in dhcpd in HA deployment should not point to the shared gateway 172.16.1.1, it result in 172.16.1.9:12345 -> 172.16.1.1:53 to 10.0.0.110:12345 -> 172.16.1.1:53 when bpfire-3 is active, or 10.0.0.232:12345 -> 172.16.1.1:53 when bpfire-2 is active. so should use either public/dedicated DNS server from users organization in BPFire HA

vincentmli pushed a commit that referenced this issue Dec 14, 2024
@mtremer
bwm-ng: Update to version 0.6.3
15818f9 
- Update from version 0.6.1-f54b3fa to 0.6.3
- Update of rootfile not required
- Changelog
    0.6.3
	* remove outdated copyright and email
	* Merge pull request #25 from fweimer/patch-1 AC_QEF_C_NORETURN: Include
	  <stdlib.h> for exit
	* Merge pull request #27 from ofalk/master Fix potential write to unallocated
	  memory.
	* Merge pull request #28 from vgropp/#2-fix-csv-bits feat: #2 output bits in csv
	* Merge pull request #29 from vgropp/#2-fix-csv-bits fix(doc): #2 output bits
	  in csv
	* Merge pull request #32 from vgropp/new-netstat-#5 feat: add support for
	  newer (2016+) linux netstat #5
    0.6.2
	* Merge pull request #22 from vgropp/issue-#13 to fix windows build
	* Merge pull request #20 from dreibh/master CSV file output: fix for timestamp
	  inaccuracy and Y-2038 problem
	* Merge pull request #21 from vgropp/travisci add travisci
	* Merge pull request #17 from Himura2la/master Add the started time in "sum" mode
	* Merge pull request #18 from Himura2la/fix-dynamic Fix DYNAMIC and ANSIOUT in
	  config
	* Merge pull request #10 from SoapGentoo/fixes Use `static inline` instead of
	  `inline`
	* Merge pull request #9 from adventureloop/master Always fflush the pipe
	* Merge pull request #7 from samueloph/fsf_address_clean Update FSF address
	* Merge pull request #6 from samueloph/master Fix typos
	* fix nan and inf values on fast refresh (fixes debian bug #532331

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@vincentmli