keepalived // keep the routing states

install | setup | simple | routing states | check-ha

tested on debian12

descr

this sample goes along with a conntrackd setup

setup

global_defs {
        max_auto_priority -1
        notification_email {
                root@localhost
        }
        notification_email_from keepalive@demo.nethence.com
        checker_log_all_failures
        enable_script_security
        script_user keepalive keepalive
}

vrrp_sync_group nat {
        group {
                front-vip
                internal-vip
        }
        notify "/var/tmp/notify.bash"
}

vrrp_instance front-vip {
        state BACKUP
        interface eth0
        virtual_router_id 50
        priority 1
        advert_int 1

        virtual_ipaddress {
                192.168.122.209/24
        }

        # default route remains anyhow
        #virtual_routes {
        #       0.0.0.0/0 via x.x.x.x dev eth0
        #}
}

vrrp_instance internal-vip {
        state BACKUP
        interface eth1
        virtual_router_id 51
        priority 1
        advert_int 1

        virtual_ipaddress {
                10.1.1.254/24
        }
}