tcatyb
I have recently set up a poor man's HA setup for a client based on his specs.
What I have is a single router coming into the building, feeding a Layer 2 switch in a server/wiring closet.
That switch has on it the following, 2 HA-Proxy servers, 2 OpenVPN Servers and 2 pfSense firewalls.
The 2 openVPN Servers are identical with the exception of the server statement (network is 20.8.0.0/24 on 1, 20.10.0.0/24 on the other). I have made this extremely simple for users due to logins required later, so all I have is a key/cert login. My data flow should be into router, into ha-proxy boxes, roundrobin to openvpn servers (based on availablity), then to openvpn servers. Rules on router say all 1194 data to either network goes to ha-proxy, then ha-proxy routes say 20.8 goes to openvpn A, 20.10 goes to openvpn B.
(I would love to configure these to listen on a shared interface instead, but time constraints are not feasible for that learning curve right now.)
On the 20.10.0.0 server, everything works great. No issues, no flow problems, getting to websites in the internal network, even no speed issues. However, the 20.8.0.0 never establishes routing correctly. Haven't got a dam clue what it might be. I originally suspected routing, but went back to all boxes in the way, and they are fine. Identical statements for the two networks on router, ha-proxy boxes. If you are outside, you round robin to one of the vpn servers with no issues at all, but if you don't get the 20.10.0.0 network, you go nowhere. You cannot even ping the router, which is the default gateway for the 20.8.0.0 vpn server. If you ssh into the 20.8 vpn server, you can ping everything on the net, so I know it is somewhere in the routing table or network rules for the 20.8 net, but damned if I know where....
I built the 20.8 server by a vanilla 12.04LTS ubuntu install, openvpn install, and copying the config files directly from the 20.10 server. Changed only the interface and server statements.
Any pointer would be greatly appreciated....
