ipfw3: new feature 'ipfwsync'

Operating Systems / DragonFlyBSD - Bill Yuan [dragonflybsd.org] - 26 February 2016 16:48 UTC

ipfwsync is a new feature to synchronize firewall states between machines which is running ipfw3 firewall for high availability. ipfw3 can be configured in centre or edge mode. the centre will automatically sync the states from centre to the edge.

e.g. ipfw3 sync edge 5000 ipfw3 sync start edge

ipfw3 sync centre 192.168.1.1:5000,192.168.1.2:5000 ipfw3 sync start centre

ipfw3 sync show config ipfw3 sync show status ipfw3 sync test centre 123

e2124e7 ipfw3: new feature 'ipfwsync'
sbin/ipfw3/Makefile | 1 +
sbin/ipfw3/ipfw3.c | 49 +++-
sbin/ipfw3/ipfw3sync.c | 299 +++++++++++++++++++++
sbin/ipfw3/ipfw3sync.h | 51 ++++
sys/conf/files | 1 +
sys/net/ipfw3/Makefile | 1 +
sys/net/ipfw3/ip_fw.h | 2 +-
sys/net/ipfw3/ip_fw3.c | 24 +-
sys/net/ipfw3/ip_fw3.h | 18 +-
sys/net/ipfw3/ip_fw3_sync.c | 499 ++++++++++++++++++++++++++++++++++++
sys/net/ipfw3/ip_fw3_sync.h | 130 ++++++++++
sys/net/ipfw3_basic/ip_fw3_basic.c | 44 +++-
sys/net/ipfw3_basic/ip_fw3_basic.h | 3 +-
13 files changed, 1114 insertions(+), 8 deletions(-)

Upstream: gitweb.dragonflybsd.org

  • Share