#pfsync
For the first time in several years, I decided to stand up a pair of NAT gateways with OpenBSD's CARP and pfsync. It's 20 minutes of fun wherein you can get things stood up and just yank connections nilly-willy as packets keep traversing.
March 14, 2024 at 7:58 AM
David Gwynne (dlg@)'s huge pfsync rewrite diff, which should improve firewall performance/reliability, has been committed to OpenBSD -current! 😎

https://marc.info/?l=openbsd-cvs&m=168861927203498&w=2
July 6, 2023 at 5:18 AM
After spending half a day with CARP, iBGP, OSPFv3 and "pfsync" (pf state table synchronization), I now have seamless failover for my datacenter router working 🙂

Legacy-IP switches to a different provider assigned IP (I don't care!) while IPv6 stays exactly […]

[Original post on burningboard.net]
May 31, 2026 at 2:43 PM
Catching CARP: Fishing for Firewall States in PFSync Traffic https://isc.sans.edu/diary/31616
January 22, 2025 at 6:16 PM
SANS ISC Stormcast, Jan 23, 2025: PFSync Protocol; Oracle CPU; Korean VPN Supply Chain Attack; Ivanti Guidance
https://isc.sans.edu/podcastdetail/9292
January 22, 2025 at 11:45 PM
Catching CARP: Fishing for Firewall States in PFSync Traffic, (Wed, Jan 22nd)

Legend has it that in the Middle Ages, monchs raised carp to be as "round" as possible. The reason was that during Lent, one could only eat as much as fit on a plate, and the round shape of a carp gave…

#hackernews #news
Catching CARP: Fishing for Firewall States in PFSync Traffic, (Wed, Jan 22nd)
Legend has it that in the Middle Ages, monchs raised carp to be as "round" as possible. The reason was that during Lent, one could only eat as much as fit on a plate, and the round shape of a carp gave them the most "fish per plate". But we are not here to exchange recipes. I want to talk about CARP and the network failover feature.
isc.sans.edu
January 23, 2025 at 6:13 PM
"An (obviously) AI-assisted report ... tells us FOR SURE that field is being computed on send, but not checked on arrival which is a security risk!!!! ... [But] it is all an elaborate fiction built upon two words 'pfcksum' and 'PF_MD5_DIGEST_LENGTH'."
#infosec #genai #llm
pfsync(4) Packet Header Field Renamed to Avoid AI Bug Report Noise
www.undeadly.org
April 13, 2026 at 2:49 PM
Understanding the Common Address Redundancy Protocol (CARP) is key for effective firewall failover management. It synchronizes connection states using PFSYNC and ensures secure traffic transmission. Implementing CARP can enhance your network's resilience. #cybersecurity #threat #firewalls #networkin
Catching CARP: Overview of Firewall Failover Protocols
The Common Address Redundancy Protocol (CARP) facilitates failover management between firewalls, utilizing PFSYNC for connection state synchronization, with recommendations for secure traffic transmission.
decrypt.lol
January 24, 2025 at 7:49 AM
Big Update to OpenBSD's Pfsync (marc.info)

Main Link | HN Post
July 6, 2023 at 1:00 PM
📢 Catching CARP: Fishing for Firewall States in PFSync Traffic, (Wed, Jan 22nd)
https://isc.sans.edu/diary/rss/31616
January 22, 2025 at 7:47 PM