Page 1 of 1

Features request:Config sync,HA services,Firewall state sync

Posted: Sat Oct 11, 2014 12:46 am
by 2dfx
Hi!

1. Sync sections of config between 2 or more routers.
I have 15 routers with same config in ip firewall section.
Some one like this:
/system sync add section=ip-firewall auth=Secret destination=4.4.4.4

2. HighAvailability services.
You have VRRP for HA. Now we need checkbox services to use it.
Now for up/down DHCP-Relay i need to use script.
foreach i in=[/ip dhcp-relay find disabled=yes] do={
ip dhcp-relay set numbers=$i disabled=no
}
You can do it for DHCP-Server/DHCP-Client/DHCP-Router/DNS/HotSpot/ and other

3. Firewall state sync
If you use VRRP and one router goes down - all connections will be reconnect...

4. VRRP Groups.
Group VRRP interfaces and if one fail - all other take state of one.

5. /User export with hashed password, public ssh key and other.
It's good way to batch setup and/or simple restore.

6. Tool to crypt .rsc files
For i can send to user crypted .rsc file for inital config of router.

7. USB Drivers for Iphone.
I want to use it for WAN redundancy.


Sorry for my bad English :)

Re: Features request:Config sync,HA services,Firewall state

Posted: Mon Nov 17, 2014 10:17 pm
by andreacoppini
+1

HA has been a long time coming

Re: Features request:Config sync,HA services,Firewall state

Posted: Tue Dec 23, 2014 12:43 am
by klibby
+1 for true HA with config/state sync

We're currently moving all our venues to redundant pairs of CCRs. As part of that I have been working on a way to emulate this kind of functionality through use of scripts, but this would be great to be able to support natively.

In addition to config & firewall state sync, I would like to see DHCP binding, hotspot user state, etc. sync to create a true HA environment.

Re: Features request:Config sync,HA services,Firewall state

Posted: Sun Jan 04, 2015 7:35 am
by brotherdust
Who knows they are doing behind the curtain? I surmise that the current implementation is the limiting factor against your feature request. Assuming your requests are implemented, it would require quite a bit of re-architecting from the developer's standpoint. Why? Because conntrackd (which, I believe is what MikroTik has based their implementation on) wasn't designed for clustering, much less basic state-transfer.

It might be of use to note that the features you are requesting are, for the most part, already available in an open-source package. Namely, CARP. It's got a fairly mature code-base, too. The catch? For firewall state transfer and the like, the ancillary functions of pfsync would be required, which requires PF, which is a BSD-only thing. =( It could probably be ported...

Re: Features request:Config sync,HA services,Firewall state

Posted: Sun Jan 04, 2015 1:10 pm
by andreacoppini
Config sync would already be a great start. connstate sync would just be a nice to have.

Re: Features request:Config sync,HA services,Firewall state

Posted: Wed Jan 07, 2015 3:00 pm
by randomseed
+1 for progress on HA.

Re: Features request:Config sync,HA services,Firewall state

Posted: Sun Jan 11, 2015 4:26 pm
by tweetyspn
It would be really nice +

Re: Features request:Config sync,HA services,Firewall state

Posted: Fri Nov 20, 2015 10:02 am
by magnavox
Who knows they are doing behind the curtain? I surmise that the current implementation is the limiting factor against your feature request. Assuming your requests are implemented, it would require quite a bit of re-architecting from the developer's standpoint. Why? Because conntrackd (which, I believe is what MikroTik has based their implementation on) wasn't designed for clustering, much less basic state-transfer.

It might be of use to note that the features you are requesting are, for the most part, already available in an open-source package. Namely, CARP. It's got a fairly mature code-base, too. The catch? For firewall state transfer and the like, the ancillary functions of pfsync would be required, which requires PF, which is a BSD-only thing. =( It could probably be ported...
+1 for pfsync

Re: Features request:Config sync,HA services,Firewall state sync

Posted: Fri Oct 19, 2018 6:54 pm
by Botter
+1 HA Sync

Re: Features request:Config sync,HA services,Firewall state sync

Posted: Tue Jan 08, 2019 4:09 pm
by mixig
+1 for HA