Messages

1

High availability / Re: Monit & HA/pfsync

« on: February 22, 2024, 11:25:18 pm »

Hi all,

We have a 2-node cluster, and I have set a cronjob so that all services sync from node1 to node2 once an hour.
Monit System Monitoring is one of these services and as soon as I set up the hourly sync I was receiving 2 emails each hour: Monit Stopped & Monit Started.

As you can imagine this was getting quite annoying, so I unchecked Monit on https://node1/system_hasync.php from the list. I figured that as long as the config on node2 doesn't get refreshed, there's no need to Monit to restart on this node.

Apparently I ass-u-me-d wrong: Monit still sends me 2 email each hour. Why is that?

Under the Alert Settings for your email, configure the following settings to disable from sending "instance changed" alerts, but still alert on everything else (see screenshot.)

2

High availability / Re: Monit & HA/pfsync

« on: February 22, 2024, 11:23:22 pm »

So if you have two firewalls, and you are using PFSYNC, why do you need an additional sync outside of PFSYNC? I'm new to this also, so wondering, not attacking.

Lets put things into perspective of stateless and stateful

PFSYNC (stateful) only syncs the state table of the firewall at that point and time, aka what connections are open, closed, status, etc.

The HA sync using XMLRPC (stateless, it's a config written to disk) to actually sync the specific configs (which is limited by nature) across the two hosts, with the master being the one that you generally want to make changes to.

https://docs.opnsense.org/manual/how-tos/carp.html is a good place to learn what systems do what, and why.