ipfw3: new feature 'ipfwsync'
authorBill Yuan <bycn82@dragonflybsd.org>
Fri, 26 Feb 2016 22:48:37 +0000 (22:48 +0000)
committerBill Yuan <bycn82@dragonflybsd.org>
Fri, 26 Feb 2016 22:48:37 +0000 (22:48 +0000)
commite2124e7dbcbdb7c52dc235682e17c7c61befd3ee
tree19ec3f878a7e36b389cfc5311b858a30be7db02b
parent706c0b7a17a778318bdef4ef3a93c26c41a43ce0
ipfw3: new feature 'ipfwsync'

ipfwsync is a new feature to synchronize firewall states between machines
which is running ipfw3 firewall for high availability. ipfw3 can be configured
in centre or edge mode. the centre will automatically sync the states from
centre to the edge.

e.g.
ipfw3 sync edge 5000
ipfw3 sync start edge

ipfw3 sync centre 192.168.1.1:5000,192.168.1.2:5000
ipfw3 sync start centre

ipfw3 sync show config
ipfw3 sync show status
ipfw3 sync test centre 123
13 files changed:
sbin/ipfw3/Makefile
sbin/ipfw3/ipfw3.c
sbin/ipfw3/ipfw3sync.c [new file with mode: 0644]
sbin/ipfw3/ipfw3sync.h [copied from sys/net/ipfw3/ip_fw.h with 70% similarity]
sys/conf/files
sys/net/ipfw3/Makefile
sys/net/ipfw3/ip_fw.h
sys/net/ipfw3/ip_fw3.c
sys/net/ipfw3/ip_fw3.h
sys/net/ipfw3/ip_fw3_sync.c [new file with mode: 0644]
sys/net/ipfw3/ip_fw3_sync.h [new file with mode: 0644]
sys/net/ipfw3_basic/ip_fw3_basic.c
sys/net/ipfw3_basic/ip_fw3_basic.h