VRRP


many people ran pairs of firewalls
1 active, 1 hot-standby, manual failover

automagic failover would be great

and there is a protocol for it: VRRP!

but cisco makes patent claims

so change it just so much that all patents are avoided
not compatible then - but OpenBSD to sth else failover?