I noticed that if I add a virtual IP (alias or CARP) to an interface, services like sshd, lighthttp, undound automatically get bound to the it. Is there a way to prevent that from happing?
There is a PR for this https://github.com/opnsense/core/pull/4554 but making each service aware of this is a maintenance nightmare waiting to happen.
If you raise a feature request on GitHub I know what to do as we spoke about the situation internally: instead of patching each service we would add a marker for each virtual IP entry to not be listed as a possible listening IP when the interface IP addresses are queried for such purposes.
https://github.com/opnsense/core/issues/new?assignees=&labels=&template=feature_request.md&title=
Cheers,
Franco
Thank you Franco. I just submitted a feature request for it:
https://github.com/opnsense/core/issues/5086
Keeping my fingers crossed :)
Thanks, ticket assigned, but it will take a few weeks with 21.7 release process running in the background at the moment.
Cheers,
Franco
Thank you, that's awesome! Much appreciated.