I got the below reply from the shorewall firewall mailing list.
>From my own experiment for failover solution (not loadbalancing), it's much
better for you to >play with keepalived, rather than linux HA. Reason: linux
HA tends to put the virtual IP on >aliased interface; where keepalived puts
on the real interface. It's just a bit simpler to configure >in shorewall.
And with keepalived, you can have shorewall runs on both nodes, while with
linux >HA you have to make sure shorewall is turned on/off as the failover
kicks in (I may be wrong in >this).
Is there a Howto to setup failover solution for shorewall firewall
using linux-ha or keepalived
and also is there a mailing list for end users to discuss about keepalived.
Please read the documentation before posting - it's available at:
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users