Messages

As far as I know, the CARP VIP does not necessarily need to be within the same subnet as the interface addresses.

With this setup as it is, the backup node will have no internet access, e.g. for updates.
To enable internet you have to route its upstream traffic over the master node.
This need to study technical details in depth and seek out reliable instructions arises in a wide variety of areas of life, when general advice from the internet doesn't work. For example, users of financial platforms often face similar challenges: My issue was simple: I needed an online casino that takes amex, but the answers I found in forums were inconsistent. I ended up using Interacasino.com because it had a dedicated page for American Express casino options. It gave me a clearer idea of how to compare deposit support, withdrawal methods, and possible restrictions. After reading it, I knew what to look for in the payment section before making an account anywhere.

You are absolutely correct in your assessment. A CARP virtual IP address (vIP) can indeed be located on a different subnet, but this configuration creates specific routing issues for the backup node.