Community discussions

 
2dfx
just joined
Topic Author
Posts: 22
Joined: Tue Mar 05, 2013 6:30 pm

Features request:Config sync,HA services,Firewall state sync

Sat Oct 11, 2014 12:46 am

Hi!

1. Sync sections of config between 2 or more routers.
I have 15 routers with same config in ip firewall section.
Some one like this:
/system sync add section=ip-firewall auth=Secret destination=4.4.4.4

2. HighAvailability services.
You have VRRP for HA. Now we need checkbox services to use it.
Now for up/down DHCP-Relay i need to use script.
foreach i in=[/ip dhcp-relay find disabled=yes] do={
ip dhcp-relay set numbers=$i disabled=no
}
You can do it for DHCP-Server/DHCP-Client/DHCP-Router/DNS/HotSpot/ and other

3. Firewall state sync
If you use VRRP and one router goes down - all connections will be reconnect...

4. VRRP Groups.
Group VRRP interfaces and if one fail - all other take state of one.

5. /User export with hashed password, public ssh key and other.
It's good way to batch setup and/or simple restore.

6. Tool to crypt .rsc files
For i can send to user crypted .rsc file for inital config of router.

7. USB Drivers for Iphone.
I want to use it for WAN redundancy.


Sorry for my bad English :)
 
andreacoppini
Trainer
Trainer
Posts: 486
Joined: Wed Apr 13, 2005 11:51 pm
Location: Malta, Europe

Re: Features request:Config sync,HA services,Firewall state

Mon Nov 17, 2014 10:17 pm

+1

HA has been a long time coming
- No strings attached -

<< Please give good Karma if this post helped you. Press the + button above the Location entry
 
klibby
just joined
Posts: 9
Joined: Fri Nov 04, 2011 5:25 pm

Re: Features request:Config sync,HA services,Firewall state

Tue Dec 23, 2014 12:43 am

+1 for true HA with config/state sync

We're currently moving all our venues to redundant pairs of CCRs. As part of that I have been working on a way to emulate this kind of functionality through use of scripts, but this would be great to be able to support natively.

In addition to config & firewall state sync, I would like to see DHCP binding, hotspot user state, etc. sync to create a true HA environment.
 
brotherdust
Member Candidate
Member Candidate
Posts: 108
Joined: Tue Jun 05, 2007 1:31 am

Re: Features request:Config sync,HA services,Firewall state

Sun Jan 04, 2015 7:35 am

Who knows they are doing behind the curtain? I surmise that the current implementation is the limiting factor against your feature request. Assuming your requests are implemented, it would require quite a bit of re-architecting from the developer's standpoint. Why? Because conntrackd (which, I believe is what MikroTik has based their implementation on) wasn't designed for clustering, much less basic state-transfer.

It might be of use to note that the features you are requesting are, for the most part, already available in an open-source package. Namely, CARP. It's got a fairly mature code-base, too. The catch? For firewall state transfer and the like, the ancillary functions of pfsync would be required, which requires PF, which is a BSD-only thing. =( It could probably be ported...
 
andreacoppini
Trainer
Trainer
Posts: 486
Joined: Wed Apr 13, 2005 11:51 pm
Location: Malta, Europe

Re: Features request:Config sync,HA services,Firewall state

Sun Jan 04, 2015 1:10 pm

Config sync would already be a great start. connstate sync would just be a nice to have.
- No strings attached -

<< Please give good Karma if this post helped you. Press the + button above the Location entry
 
randomseed
newbie
Posts: 31
Joined: Mon Dec 15, 2008 12:52 am

Re: Features request:Config sync,HA services,Firewall state

Wed Jan 07, 2015 3:00 pm

+1 for progress on HA.
 
tweetyspn
just joined
Posts: 14
Joined: Wed Jul 13, 2011 10:48 pm

Re: Features request:Config sync,HA services,Firewall state

Sun Jan 11, 2015 4:26 pm

It would be really nice +
 
magnavox
Member
Member
Posts: 339
Joined: Thu Jun 14, 2007 1:03 pm

Re: Features request:Config sync,HA services,Firewall state

Fri Nov 20, 2015 10:02 am

Who knows they are doing behind the curtain? I surmise that the current implementation is the limiting factor against your feature request. Assuming your requests are implemented, it would require quite a bit of re-architecting from the developer's standpoint. Why? Because conntrackd (which, I believe is what MikroTik has based their implementation on) wasn't designed for clustering, much less basic state-transfer.

It might be of use to note that the features you are requesting are, for the most part, already available in an open-source package. Namely, CARP. It's got a fairly mature code-base, too. The catch? For firewall state transfer and the like, the ancillary functions of pfsync would be required, which requires PF, which is a BSD-only thing. =( It could probably be ported...
+1 for pfsync
Best Regards...
 
Botter
just joined
Posts: 5
Joined: Sun Feb 20, 2011 5:47 pm

Re: Features request:Config sync,HA services,Firewall state sync

Fri Oct 19, 2018 6:54 pm

+1 HA Sync
 
mixig
Member Candidate
Member Candidate
Posts: 264
Joined: Thu Oct 27, 2011 2:19 pm

Re: Features request:Config sync,HA services,Firewall state sync

Tue Jan 08, 2019 4:09 pm

+1 for HA

Who is online

Users browsing this forum: dignome and 101 guests