topic Re: High Availability - Passive Link State in General Topics

High Availability - Passive Link State

Hamid.Saffarzadeh — Tue, 10 May 2022 08:19:47 GMT

Hi Team,

Trust all is well. IN the documents it is only mentioned that the "Auto" link-state makes the convergence faster but it is not mentioned how much faster, for example in the number of seconds. From the guide:

Set the Passive link state to "Auto". Auto setting will bring the interfaces on the passive firewall to UP physical state, the interface will not pass any data traffic. This facilitates faster failover times.

Does anyone have an idea how much faster it becomes by changing the link state from shutdown to auto?

Many thanks in advance.

Re: High Availability - Passive Link State

PavelK — Tue, 10 May 2022 09:59:31 GMT

Thank you for the post @Hamid.Saffarzadeh

based on my experience with Passive Link State set to "auto" the convergence is approximately 1 second or less with "shutdown" it is in the range 3 to 5 seconds.

Kind Regards

Pavel

Re: High Availability - Passive Link State

Hamid.Saffarzadeh — Thu, 12 May 2022 08:15:10 GMT

Thank you Pavel,

One more question if you don't mind. Do you have any idea How long it takes for BGP to converge at the time of a manual firewall failover?

Regards,

Re: High Availability - Passive Link State

KieraMitchell — Thu, 12 May 2022 09:15:10 GMT

Just to agree with @PavelK, for our deployments before initiating test failovers we start a ping -t to an interface that will respond to ping. Then, we initiate the failover - we aim for a single missed ping for "auto"-based failovers and three missed pings for "shutdown"-based failovers.

Re: High Availability - Passive Link State

PavelK — Thu, 12 May 2022 13:01:27 GMT

Hello @Hamid.Saffarzadeh

when it comes to BGP convergence during failover, then it is fairly quick. It is approximately 1 second or less.

Kind Regards

Pavel