keepalived // keep the routing states

install | setup | simple | routing states | check-ha

tested on debian12

descrdescr

this sample goes along with a conntrackd setup

setupsetup

global_defs {
    max_auto_priority -1
    notification_email {
        root@localhost
    }
    notification_email_from keepalive@demo.nethence.com
    checker_log_all_failures
    enable_script_security
    script_user keepalive keepalive
}

vrrp_sync_group nat {
    group {
        front-vip
        internal-vip
    }
    notify "/var/tmp/notify.bash"
}

vrrp_instance front-vip {
    state BACKUP
    interface eth0
    virtual_router_id 50
    priority 1
    advert_int 1

    virtual_ipaddress {
        192.168.122.209/24
    }

    # default route remains anyhow
    #virtual_routes {
    #       0.0.0.0/0 via x.x.x.x dev eth0
    #}
}

vrrp_instance internal-vip {
    state BACKUP
    interface eth1
    virtual_router_id 51
    priority 1
    advert_int 1

    virtual_ipaddress {
        10.1.1.254/24
    }
}