vmxnet3 vNIC and ARP filtering

[nightowl]

I was troubleshooting an issue with two VMs that use CARP to perform IP fail-over. I had disabled MAC filtering on these VMs, but the ARP responses for virtual IPs were never sent from the VMs. I saw somewhere that there may be limitations in ebtables or iptables when using a non-virtio vNIC and disabling MAC filtering may not be available for these vNICs.

I was just wondering why - in case there was a simple explanation as to what path was available to virtio vNIC versus non-virtio vNIC traffic that would cause this. Once I switched to virtio vNICs, and reconfigured everything to use these, ARP responses worked perfectly.

 

[v95klima]

hi, I just posted a carp FreeBSD question to get Unbound to work.

Seems you have experience and answer was to abandon vrb1 vrb0 Linux bridge in PROXMOX and instead use SRVIO nics?

I have a connectx-4 and will try that based on your comments above, to get a functional router/firewall with carp.

Any carp configs you can share to get carp to work in VMs as router firewall with recursive dns?
Thanks in advance!