Software:Pfsync: Difference between revisions
From HandWiki
imported>MedAI simplify |
change |
||
| Line 1: | Line 1: | ||
{{infobox software}} | {{infobox software}} | ||
'''pfsync''' is a computer protocol<ref>{{cite web |url=http://bxr.su/o/etc/protocols |title=/etc/protocols |publisher=[[ | '''pfsync''' is a computer protocol<ref>{{cite web |url=http://bxr.su/o/etc/protocols |title=/etc/protocols |publisher=[[Software:OpenBSD|OpenBSD]] |website=BSD Cross Reference |quote="pfsync 240"}}</ref><ref>{{cite web |url=http://bxr.su/o/sys/net/if_pfsync.h |title=/sys/net/if_pfsync.h |publisher=[[Software:OpenBSD|OpenBSD]] |website=BSD Cross Reference}}</ref> used to synchronise firewall states between machines running [[Software:PF (firewall)|Packet Filter (PF)]] for [[High availability|high availability]]. It is used along with [[Common Address Redundancy Protocol|CARP]] to make sure a backup firewall has the same information as the main firewall. When the main machine in the firewall cluster dies, the backup machine is able to accept current connections without loss.<ref name=onlamp-35-1>{{cite web | ||
|url= http://www.onlamp.com/lpt/a/4767 | |url= http://www.onlamp.com/lpt/a/4767 | ||
|title= OpenBSD PF Developer Interview | |title= OpenBSD PF Developer Interview | ||
| Line 20: | Line 17: | ||
|access-date=2019-03-20 | |access-date=2019-03-20 | ||
|archive-date= 2004-06-19 | |archive-date= 2004-06-19 | ||
}}</ref> | }}</ref><ref>{{Cite web |title=State Synchronization (pfsync) Overview {{!}} pfSense Documentation |url=https://docs.netgate.com/pfsense/en/latest/highavailability/pfsync.html |access-date=2026-02-16 |website=docs.netgate.com}}</ref> | ||
== See also == | == See also == | ||
* [[ | * [[Software:OpenBSD|OpenBSD]] | ||
* [[Software:PF (firewall)|PF (firewall)]] | * [[Software:PF (firewall)|PF (firewall)]] | ||
* [[Common Address Redundancy Protocol|CARP]] | * [[Common Address Redundancy Protocol|CARP]] | ||
Latest revision as of 04:58, 11 April 2026
pfsync is a computer protocol[1][2] used to synchronise firewall states between machines running Packet Filter (PF) for high availability. It is used along with CARP to make sure a backup firewall has the same information as the main firewall. When the main machine in the firewall cluster dies, the backup machine is able to accept current connections without loss.[3][4][5]
See also
References
- ↑ "/etc/protocols". OpenBSD. http://bxr.su/o/etc/protocols. ""pfsync 240""
- ↑ "/sys/net/if_pfsync.h". OpenBSD. http://bxr.su/o/sys/net/if_pfsync.h.
- ↑ Federico Biancuzzi (2004-04-15). "OpenBSD PF Developer Interview". O'Reilly Media. http://www.onlamp.com/lpt/a/4767.
- ↑ Federico Biancuzzi (2004-05-06). "OpenBSD PF Developer Interview, Part 2". O'Reilly Media. http://www.onlamp.com/lpt/a/4839.
- ↑ "State Synchronization (pfsync) Overview | pfSense Documentation". https://docs.netgate.com/pfsense/en/latest/highavailability/pfsync.html.
External links
- PF: Firewall Redundancy with CARP and pfsync (OpenBSD PF FAQ)
pfsync(4)man-page in OpenBSD, FreeBSD and NetBSDsys/net/if_pfsync.hin OpenBSDsys/net/if_pfsync.cin OpenBSD
