BGP & CARP

[mimugmail]

Some content regarding VIP and carp, I didnt read your last post yet

https://github.com/opnsense/plugins/issues/2540#issuecomment-922526058

[random1104]

Well, that seems the way to go for a OPNsense firewall regular usecase (firewall, VPN server, etc)

Active/Active would be nice, but doesn't play nice with the other services. As a pure router I wouldn't use opnsense, just linux with frr or bird for example.

[mimugmail]

You can always just install the pkg via CLI and don't use the UI, then you have the full power, with FRR or Bird

[Patrick M. Hausen]

@random1104 you can still NAT the outbound BGP connection ...

[random1104]

@random1104 you can still NAT the outbound BGP connection ...

Yup, taken from the ticket:

1- Keep default of listening in all interfaces
2- Blocking undesired traffic to the base/fixed IP
3- Only allowing incomming connections to the VIP
4- Setting up outgoing NAT to the remote routers