Features request:Config sync,HA services,Firewall state sync

RouterOS General
1

Hi!

  1. Sync sections of config between 2 or more routers.
    I have 15 routers with same config in ip firewall section.
    Some one like this:
    /system sync add section=ip-firewall auth=Secret destination=4.4.4.4

  2. HighAvailability services.
    You have VRRP for HA. Now we need checkbox services to use it.
    Now for up/down DHCP-Relay i need to use script.
    foreach i in=[/ip dhcp-relay find disabled=yes] do={
    ip dhcp-relay set numbers=$i disabled=no
    }
    You can do it for DHCP-Server/DHCP-Client/DHCP-Router/DNS/HotSpot/ and other

  3. Firewall state sync
    If you use VRRP and one router goes down - all connections will be reconnect…

  4. VRRP Groups.
    Group VRRP interfaces and if one fail - all other take state of one.

  5. /User export with hashed password, public ssh key and other.
    It’s good way to batch setup and/or simple restore.

  6. Tool to crypt .rsc files
    For i can send to user crypted .rsc file for inital config of router.

  7. USB Drivers for Iphone.
    I want to use it for WAN redundancy.


    Sorry for my bad English :slight_smile:

2

+1

HA has been a long time coming

3

+1 for true HA with config/state sync

We’re currently moving all our venues to redundant pairs of CCRs. As part of that I have been working on a way to emulate this kind of functionality through use of scripts, but this would be great to be able to support natively.

In addition to config & firewall state sync, I would like to see DHCP binding, hotspot user state, etc. sync to create a true HA environment.

4

Who knows they are doing behind the curtain? I surmise that the current implementation is the limiting factor against your feature request. Assuming your requests are implemented, it would require quite a bit of re-architecting from the developer’s standpoint. Why? Because conntrackd (which, I believe is what MikroTik has based their implementation on) wasn’t designed for clustering, much less basic state-transfer.

It might be of use to note that the features you are requesting are, for the most part, already available in an open-source package. Namely, CARP. It’s got a fairly mature code-base, too. The catch? For firewall state transfer and the like, the ancillary functions of pfsync would be required, which requires PF, which is a BSD-only thing. =( It could probably be ported…

5

Config sync would already be a great start. connstate sync would just be a nice to have.

6

+1 for progress on HA.

7

It would be really nice +

8

+1 for pfsync

9

+1 HA Sync

10

+1 for HA