Router and Firewall Redundancy with OpenBSD and CARP

As more reliance is placed on computing and networking systems, the need for redundancy increases. The Common Address Redundancy Protocol (CARP) protocol and OpenBSD’s pfsync utility provide a means by which to implement redundant routers and firewalls. This paper details how CARP and pfsync work together to provide this redundancy and explores the performance one can expect from the open source solutions. Two experiments were run: one showing the relationship between firewall state creation and state synchronization traffic and the other showing how TCP sessions are transparently maintained in the event of a router failure. Discussion of these simulations along with background information gives an overview of how OpenBSD, CARP, and pfsync can provide redundant routers and firewalls for today’s Internet.

The Pathologic Copepod Phrixocephalus cincinnatus (Copepoda: Pennellidae) in the Eye of Arrowtooth Flounder, Atherestes stomias, and Rex Sole, Glyptocephalus zachirus, from British Columbia

We report Phrixocephalus cincinnatus, a pennellid copepod infecting the eyes of flatfishes, from a single specimen of rex sole, Glyptocephalus zachirus, for the first time. In the typical host, the arrowtooth flounder, Atherestes stomias, the parasite occurred commonly in sampled populations from the Broughton Archipelago in British Columbia, infected primarily the right eye of the flounder, and on only one occasion presented more than two parasites per eye. The copepod attached to the choroid layer and ramified throughout the posterior compartment of the eye, resulting in the disruption of the retina and probably impairing host vision. Inflammation and hyperplasia progressed to necrosis and proliferation of connective tissue, resulting in the total destruction of the eye.