- LAN on eth0: #Kea #DHCP serving internal hosts
- WAN on eth0.3: DHCP client talking to ISP

Kea: „I don't care about VLAN tagging, give me all your packets for my raw socket. By the way, how about using this nice internal LAN address for my hosts WAN interface?“

https://gitlab.isc.org/isc-projects/kea/-/issues/1117

At least the issue has recently been closed (after six years). Now waiting for an updated package to arrive. Or an alternative - whatever comes first. Any recommendations apart from dnsmasq?

Searching the internet for #CARP, many sites recommend using a password length of 30 characters. #FreeBSD silently truncates it to 19. The Debian manpage of #ucarp claims to support 20 characters, but refuses to run given more than 19.

So why exactly 19 characters? 20 is the size of SHA-1 hashes and a comment in ip_carp.h suggests that CARP is supposed to use such a hash derived from a password. However, actual implementations treat it as a null-terminated string.