Whereas pfSense's load balancing capabilities may leave something to be desired, pfSense's high availability capabilities are quite good, and pfSense offers an enterprise class CARP solution that provides for stateful failover. We will first consider a basic CARP group for firewall failover, but we will also consider other scenarios involving CARP, such as multi-WAN deployments.
CARP with firewall failover
This is probably the most common deployment scenario in which CARP is involved. The most common scenario involves a two firewall failover group with a dedicated pfsync interface on each and both pfsync interfaces connected with a crossover cable. Setting up a CARP failover group involves several steps:
- Configuration of virtual ...