--- canonical: https://safekit.evidian.com/products/high-availability-software-for-application-clustering/how-a-virtual-ip-address-works/ --- How a Virtual IP Address (VIP) Works in High Availability Clustering? - SafeKit HA [![Evidian Logo](/wp-content/uploads/2026/01/eviden-logo-black-265-54.png)](https://eviden.com) * [SafeKit](/products/high-availability-software-for-application-clustering/) + - * SafeKit --- * [Home SafeKit](https://safekit.evidian.com/) * [Elevator pitch](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/high-availability-software-ha-cluster-windows-linux/) * [Customer use cases](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/#safekit-use-cases) - * Use cases --- * [Best/Worst Use Cases](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/best-worst-use-cases-high-availability/) * [OEM use case for a software publisher](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/application-clustering-software/) * [Distributed Enterprise use case](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/business-continuity-software/) * [Remote sites and disaster recovery use case](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/business-continuity-and-disaster-recovery-software/) - * High Availability in Physical Security Market --- * [Physical Security Software](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/physical-security-software-redundancy/) * [Video Management Software (VMS)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/video-management-software-vms-redundancy/) * [Electronic Access Control Software (EACS)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/electronic-access-control-software-eacs-redundancy/) * [Building Management System Software (BMS)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/building-management-system-software-bms-redundancy/) * [SCADA Software](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/scada-software-redundancy-high-availability/) * [Solutions](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/cluster-configuration/) + - * New application (real-time replication and failover) --- * [Windows (mirror.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/windows-high-availability-software-synchronous-replication-failover/) * [Linux (mirror.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/linux-high-availability-software-synchronous-replication-failover/) * New application (network load balancing and failover) --- * [Windows (farm.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/windows-load-balancing-failover/) * [Linux (farm.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/linux-load-balancing-failover/) - * Full VM or container real-time replication and failover --- * [Hyper-V (hyperv.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/hyper-v-replication-automatic-failover-load-balancing/) * [KVM (kvm.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/linux-kvm-high-availability-replication-automatic-failover-load-balancing/) * [Docker (mirror.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/docker-container-high-availability-cluster-synchronous-replication-failover/) * [Podman (mirror.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/podman-the-simplest-high-availability-cluster-between-two-redundant-servers/) * [Kubernetes (k3s.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/kubernetes-k3s-the-simplest-high-availability-cluster-with-synchronous-replication-and-failover-between-two-redundant-servers/) - * Database (real-time replication and failover) --- * [Microsoft SQL Server (sqlserver.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/sql-server-high-availability-synchronous-replication-failover/) * [PostgreSQL (postgresql.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/postgresql-high-availability-synchronous-replication-failover/) * [Oracle (oracle.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/oracle-high-availability-synchronous-replication-failover/) * [MySQL (mysql.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/mysql-high-availability-synchronous-replication-failover/) * [MariaDB (mysql.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/mariadb-simplest-high-availability-cluster-synchronous-replication-failover-redundant-servers/) * [Firebird (firebird.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/firebird-high-availability-synchronous-replication-failover/) * Web (network load balancing and failover) --- * [Apache (apache\_farm.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/apache-load-balancing-failover-2/) * [Microsoft IIS (iis\_farm.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/iis-load-balancing-failover/) * [NGINX (farm.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/nginx-the-simplest-load-balancing-cluster-with-failover/) - * Amazon AWS --- * [AWS (mirror.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/aws-high-availability-cluster-synchronous-replication-failover/) * [AWS (farm.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/aws-load-balancing-cluster-failover/) * Google GCP --- * [GCP (mirror.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/gcp-high-availability-cluster-synchronous-replication-failover/) * [GCP (farm.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/gcp-load-balancing-cluster-failover/) * Microsoft Azure --- * [Azure (mirror.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/azure-high-availability-cluster-synchronous-replication-failover/) * [Azure (farm.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/azure-load-balancing-cluster-failover/) * Other clouds --- * [All cloud solutions](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/cluster-in-cloud-computing-generic-solution-amazon-aws-microsoft-azure-google-gcp-other-clouds/) * [Cloud (mirror.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/cloud-high-availability-cluster-synchronous-replication-failover/) * [Cloud (farm.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/cloud-load-balancing-cluster-failover/) - * Physical security (real-time replication and failover) --- * [Milestone XProtect (milestone.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/milestone-xprotect-corporate-high-availability-synchronous-replication-failover/) * [Nedap (nedap.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/nedap-high-availability-synchronous-replication-failover/) * [Genetec SQL Server (sqlserver.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/genetec-sql-server-the-simplest-high-availability-cluster-with-synchronous-replication-and-failover-between-two-redundant-servers/) * [Bosch AMS (hyperv.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/bosch-ams-the-simplest-high-availability-cluster-between-two-redundant-servers-without-shared-disk/) * [Bosch BIS (hyperv.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/bosch-bis-the-simplest-high-availability-cluster-between-two-redundant-servers-without-shared-disk/) * [Bosch BVMS (hyperv.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/bosch-bvms-the-simplest-high-availability-cluster-between-two-redundant-servers-without-shared-disk/) * [Hanwha Vision (hyperv.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/hanwha-vision-cluster-without-shared-storage-on-a-san/) * [Hanwha Wisenet (hyperv.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/hanwha-wisenet-wave-the-simplest-high-availability-cluster-between-two-redundant-servers-without-shared-disk/) - * Siemens (real-time replication and failover) --- * [Siemens Siveillance suite (hyperv.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/siemens-siveillance-redundancy-high-availability-cluster-active-active/) * [Siemens Desigo CC (hyperv.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/siemens-desigo-cc-redundancy-high-availability-cluster-active-active/) * [Siemens Siveillance VMS (SiveillanceVMS.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/siemens-siveillance-vms-the-simplest-high-availability-cluster-between-two-redundant-servers/) * [Siemens SiPass (hyperv.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/siemens-sipass-redundancy-high-availability-cluster-active-active/) * [Siemens SIPORT (hyperv.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/siemens-siport-redundancy-high-availability-cluster-active-active/) * [Siemens SIMATIC PCS 7 (hyperv.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/siemens-simatic-pcs-7-redundancy-high-availability-cluster-active-active/) * [Siemens SIMATIC WinCC (hyperv.safe)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/siemens-simatic-wincc-redundancy-high-availability-cluster-active-active/) * [Architectures](#) + - * Basic architectures --- * [Overview](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/high-availability-architectures/) * [Mirror Cluster](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/file-replication-byte-level-with-failover-mirror-cluster/) * [Farm Cluster](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/network-load-balancing-cluster/) * [SafeKit Console](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/safekit-smart-console-your-high-availability-cluster-in-your-pocket/) - * Advanced architectures --- * [Farm+Mirror Cluster](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/clustering-software-load-balancing-mirroring/) * [Active Active Cluster with Replicaton](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/active-active-cluster-real-time-replication/) * [N-1 Cluster](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/n-1-redundancy/) - * Hypervisor architectures --- * [Hyper-V Cluster](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/hyper-v-replication-automatic-failover-load-balancing/) * [KVM Cluster](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/linux-kvm-high-availability-replication-automatic-failover-load-balancing/) - * Container architectures --- * [Docker Cluster](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/docker-container-high-availability-cluster-synchronous-replication-failover/) * [Podman Cluster](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/podman-the-simplest-high-availability-cluster-between-two-redundant-servers/) * [Best practises](#) + - * High availability best practises --- * [High Availability Architectures & Software Clustering Best Practices](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/high-availability-architectures-and-best-practices/) * [Shared Nothing vs. Shared Disk Architecture: Choosing the Best HA Cluster](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/shared-nothing-architecture-vs-shared-disk-architecture/) * [Software clusering vs hardware clustering](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/clustering-software-vs-hardware-clustering/) * [VM HA vs. Application HA: Choose Your Redundancy Level with SafeKit](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/vm-ha-vs-application-ha/) * [High Availability and Disaster Recovery (HADR)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/high-availability-disaster-recovery-hadr/) * [HA Cluster vs. Fault Tolerant System: Choosing the Right Redundancy Strategy](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/high-availability-cluster-vs-fault-tolerant-system/) * [How to Implement Redundant Servers with Simple HA Software](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/how-to-implement-redundant-servers-with-a-simple-software-windows-linux/) - * Replication best practises --- * [Data Replication Techniques for High Availability: A Complete Comparison](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/data-replication-techniques/) * [Synchronous vs. Asynchronous Replication: How SafeKit Ensures Zero Data Loss?](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/synchronous-replication-vs-asynchronous-replication/) * [Byte-Level File Replication vs. Block-Level Disk Replication for HA](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/byte-level-file-replication-vs-block-level-disk-replication/) * [Alternative to SQL Server Always On: HA for Express and Standard Editions](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/alternative-always-on-sql-server-express-standard-editions/) - * Clustering best practises --- * [How a Virtual IP Address (VIP) Works in High Availability Clustering?](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/how-a-virtual-ip-address-works/) * [Handling Power Outages and Network Isolation in a HA Cluster](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/power-outage-and-network-isolation-in-a-cluster/) * [Heartbeat, failover and quorum in a cluster](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/heartbeat-failover-quorum-windows-linux-aix-cluster/) * [SAN vs. NAS Shared Storage for Failover Clustering: A Detailed Comparison](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/san-vs-nas-shared-storage-for-a-failover-cluster/) * [What are RPO and RTO? Definitions, Examples, and HA Strategies](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/what-is-rpo-and-rto-with-examples/) * [Microsoft NLB vs SafeKit network load balancing](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/microsoft-nlb-vmware-multicast-unicast-alternative/) * [Resources](#) + - * Free trial --- * [SafeKit free trial](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/safekit-free-trial/) * [One-month license key](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/high-availability-and-load-balancing-cluster-key/) * [Demonstrations](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/high-availability-solutions-ha-solutions-videos/) * [Support](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/safekit-support/) * [Free Training & Certification](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/safekit-on-line-training/) - * Technical documentations --- * [SafeKit quick installation guides](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/safekit-quick-installation-guides/) * [SafeKit user's guide](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/safekit-user-guide-82/) * [SafeKit release notes](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/safekit-release-notes-8-2/) * [SafeKit SRB](https://safekit.evidian.com/wp-content/uploads/downloads_safekit/version-82/82softwarereleasebulletin.pdf) * [Knowledge Base](https://safekit.evidian.com/wp-content/uploads/downloads_safekit/version-82/knowledge-base.pdf) - * Product information --- * [Flyer](https://safekit.evidian.com/wp-content/uploads/documents/high-availability-overview.pdf) * [White Paper - Product](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/high-availability-white-paper/) * [White Paper - High Availability Guide](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/high-availability-guide/) * [Technical Reference for RFI and RFP](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/high-availability-technical-reference-for-rfi-and-rfp-preparation/) * [Support](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/safekit-support/) * [Price](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/get-a-quote-safekit-en/) * [Contact](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/contact-us-for-safekit/) * [![English](https://safekit.evidian.com/wp-content/uploads/flags/us.png)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/how-a-virtual-ip-address-works/) + [![French](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%2018%2012'%3E%3C/svg%3E)![French](https://safekit.evidian.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/fr.png)](https://safekit.evidian.com/fr/produits/haute-disponibilite-logiciel-clustering-application/comment-fonctionne-une-adresse-ip-virtuelle/ "Switch to French") [Eviden >](https://eviden.com/) [Products >](https://safekit.evidian.com/products/) [SafeKit: All-in-One SANless High Availability & Application Clustering Software >](https://safekit.evidian.com/) How a Virtual IP Address (VIP) Works in High Availability Clustering? # How a Virtual IP Address (VIP) Works in High Availability Clustering? ## SafeKit VIP vs. DNS Redirection: Automated Failover for Windows & Linux ## What is a virtual IP address in a high availability cluster? * **Definition:** A **Virtual IP (VIP) address** is a floating network address used in [high availability clustering](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/) to ensure continuous application access. Unlike standard IPs, a VIP is not bound to a specific physical hardware interface but shifts between cluster nodes to maintain a single, persistent entry point for clients. * **No Hardware Required:** SafeKit manages the VIP at the software level using **Gratuitous ARP (GARP)**, eliminating the need for external load balancers in same-subnet environments. * **Application Transparency:** By binding to a local VIP, applications remain unaware of failover events, preserving client source IPs and existing security configurations. * **Disaster Recovery:** Using an **Extended LAN** allows the same VIP to be used across remote datacenters, simplifying site-to-site failover compared to complex DNS rerouting and TTL caching delays. ## Virtual IP Implementation in SafeKit * **Mirror Clusters:** Features a floating IP active only on the primary server to facilitate real-time replication and failover. * **Farm Clusters:** Enables network load balancing by maintaining the VIP across all nodes simultaneously. **Key Benefit:** By utilizing **Gratuitous ARP (Address Resolution Protocol)** or **MAC Address Takeover**, the VIP allows for seamless application failover without manual client reconfiguration, ensuring 24/7 business continuity. * **Cloud & Multi-Subnet:** Managed via external load balancer health checks (AWS, Azure, GCP) to redirect traffic across different subnets. ![Comparison diagram of Virtual IP (VIP) behavior in Evidian SafeKit: Mirror Clusters showing a floating IP on the active node vs. Farm Clusters showing network load balancing across all nodes.](https://safekit.evidian.com/wp-content/uploads/2026/01/vip-3-1024.jpg "Virtual IP implementation strategies for Mirror and Farm clusters in SafeKit.") **Virtual IP implementation strategies for Mirror and Farm clusters in SafeKit.** [🧑 Contact us](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/contact-us-for-safekit/) [🎁 SafeKit free trial](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/safekit-free-trial/) [🏅 Free certification](https://training.my.evidian.com/mod/page/view.php?id=712) [💰 Perpetual license cost](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/get-a-quote-safekit-en/) ## Table of Contents * [How a Virtual IP Address (VIP) Works in a Same-Subnet Failover (Mirror Cluster)](#virtual-ip-same-subnet-failover) * [How a Virtual IP (VIP) Works Across Different Subnets (Mirror Cluster)](#virtual-ip-different-subnets-failover) * [How a Load Balanced Virtual IP Works in a Same-Subnet Farm (Farm Cluster)](#vip-load-balancing-same-subnet) * [How a Load Balanced Virtual IP Works Across Different Subnets (Farm Cluster)](#vip-load-balancing-different-subnets) * [Virtual IP vs. DNS Redirection: Why DNS Failover Often Fails](#virtual-ip-vs-dns-redirection-failover) * [Comparison: Virtual IP Implementation, Latency, and Application Transparency](#vip-vs-dns-comparison) * [Configuring a Virtual IP Address for Network Loadbalancing and High Availability](#virtual-ip-configuration-load-balancing-ha) * [Frequently Asked Questions on Virtual IP (VIP)](#virtual-ip-faq) * [🔍 SafeKit High Availability Navigation Hub](#hub) ## How a Virtual IP Address (VIP) Works in a Same-Subnet Failover (Mirror Cluster) ### Automated Failover & Network Rerouting in a Local Subnet For organizations requiring seamless business continuity within a local infrastructure, **SafeKit Software-Defined High Availability for Local Network Clusters** provides a robust, automated solution for managing Virtual IP addresses and real-time application failover. ### Local Mirror Cluster: Seamless 2-Node Windows or Linux Failover ![SafeKit Virtual IP (VIP) failover mechanism between two servers in the same subnet](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20700%20700'%3E%3C/svg%3E)![SafeKit Virtual IP (VIP) failover mechanism between two servers in the same subnet](https://safekit.evidian.com/wp-content/uploads/2023/05/vip-mirror-same-subnet-1.png) SafeKit VIP Aliasing and MAC Address Mapping In a standard **SafeKit mirror cluster** where both nodes reside in the same local subnet, high availability is achieved through a **software-defined Virtual IP (VIP)**. Unlike hardware-based solutions, SafeKit manages this VIP directly within the OS networking stack. This VIP acts as a persistent logical entry point for clients, layered on top of the unique physical IP addresses of Server 1 and Server 2 via **IP aliasing**. #### SafeKit’s Advanced IP Aliasing & Multiple VIP Support A key advantage of the **SafeKit solution** is its flexibility in managing network identities. The VIP is a third IP address that "floats" between the nodes. Notably, SafeKit is capable of managing **multiple virtual IP addresses** within a single cluster. These can be assigned to the same primary Ethernet card or distributed across different physical cards, allowing for complex configurations where different services are bound to specific virtual identities. #### The Failover Mechanism: Gratuitous ARP (GARP) SafeKit ensures zero manual intervention during a hardware failure. Under normal operations, the VIP is mapped to **Server 1's MAC address (mac1)**. If SafeKit detects a heartbeat failure on Server 1, it executes a two-step recovery: * **Application Recovery:** SafeKit automatically restarts the critical application services on Server 2. * **Network Rerouting:** SafeKit instantly broadcasts a **Gratuitous ARP (GARP)** message. This force-updates the ARP caches of all network switches and connected clients, remapping the VIP to **Server 2's MAC address (mac2)**. #### Remote Data Centers & Extended VLANs While typically used for local clusters, **SafeKit’s same-subnet algorithm** is the preferred choice for **Disaster Recovery (DR)** across remote sites connected via an **extended LAN or stretched VLAN**. This "stretched" architecture allows you to maintain a single subnet across geographical distances, significantly simplifying your network topology and avoiding the overhead of complex routing protocols. > **⚠️ Note:** Layer 2 rerouting via Gratuitous ARP is the **most transparent solution** for applications. Unlike Layer 3 rerouting with a Load Balancer, it avoids **Source/Destination IP Translation (SNAT/DNAT)**. The application receives traffic directly with the original client IP, and the Virtual IP is configured locally. **Many applications prefer** seeing the Virtual IP locally and receiving the original client IP directly. Without this transparency, they **might not work as expected** due to complex network translations. ## How a Virtual IP (VIP) Works Across Different Subnets (Mirror Cluster) ### Cloud-Ready Traffic Orchestration via Load Balancer Integration By leveraging external network infrastructure, **SafeKit Software-Defined High Availability for Multi-AZ and Cloud Clusters** integrates seamlessly with a **Network Load Balancer** to orchestrate traffic failover across separate subnets and availability zones. ### Cross-Subnet Mirror Clusters: Windows & Linux Implementation ![Diagram of a Virtual IP failover using a Load Balancer across two different subnets](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20707%20837'%3E%3C/svg%3E)![Diagram of a Virtual IP failover using a Load Balancer across two different subnets](https://safekit.evidian.com/wp-content/uploads/2023/05/vip-mirror-different-subnet.png) Multi-Subnet Traffic Routing via Load Balancer Health Checks When cluster nodes reside in **different subnets**, standard ARP-based failover is not possible. In this scenario, the **Virtual IP (VIP)** is hosted on a **Load Balancer (LB)** rather than the server's Ethernet card. The Load Balancer acts as the gateway, directing traffic to the physical IP addresses of the primary and secondary nodes based on real-time availability. #### Dynamic Routing via SafeKit Health Checks SafeKit manages traffic steering by providing a dedicated **Health Check URL** on each node. The Load Balancer queries these URLs to determine the cluster state: * **Primary Node (PRIM):** The health check returns `HTTP 200 OK`. The Load Balancer directs all traffic here. * **Secondary Node (SECOND):** The health check returns `HTTP 404 NOT FOUND`. The Load Balancer sends no traffic to this node. During a **failover event**, SafeKit instantly toggles the health check responses, triggering the Load Balancer to reroute client traffic to the new primary server. > **⚠️ Note:** SafeKit provides the health check logic; the physical or virtual Load Balancer must be provided by your network infrastructure. #### Cloud Integration: AWS, Azure, and GCP This "Load Balancer + Health Check" model is the industry standard for **Cloud High Availability**. It is essential for implementing SafeKit in environments such as: * [**Amazon AWS**](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/aws-high-availability-cluster-synchronous-replication-failover/) (AWS Network Load Balancer) * [**Microsoft Azure**](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/azure-high-availability-cluster-synchronous-replication-failover/) (Azure Load Balancer) * [**Google Cloud (GCP)**](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/gcp-high-availability-cluster-synchronous-replication-failover/) (Google Cloud Load Balancing) #### Network Considerations: Load Balancer vs. Extended LAN If a load balancer is not desired, consult your network team about implementing an **Extended LAN (VLAN stretching)** between subnets. This allows you to revert to the simpler "Same Subnet" VIP model. > **⚠️ Note:** When opting for a Load Balancer, verify that your application is compatible with **Source/Destination IP Translation (SNAT/DNAT)**. With a Load Balancer, the application may lose track of the original user's identity or fail to start because it no longer sees the Virtual IP configured directly on its own network interface. ## How a Load Balanced Virtual IP Works in a Same-Subnet Farm (Farm Cluster) ### Scalable Performance: Kernel-Level Load Balancing & Redundancy For high-traffic environments, the **Architecture Guide: Scalable High Availability with Multi-Node Farm Clusters** explains how SafeKit distributes workloads across multiple active servers while maintaining total redundancy. ### Farm Cluster Architecture: Load Balancing Across Windows or Linux Nodes ![Diagram of a load balanced Virtual IP (VIP) within a same-subnet farm cluster](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20704%20694'%3E%3C/svg%3E)![Diagram of a load balanced Virtual IP (VIP) within a same-subnet farm cluster](https://safekit.evidian.com/wp-content/uploads/2023/05/vip-farm-same-subnet.png) Distributed Traffic Processing via Kernel Filtering In a **load-balancing farm cluster**, a Virtual IP (VIP) address is used to distribute client requests across multiple servers simultaneously. While this example features two nodes, the architecture scales to support larger server farms. In a same-subnet configuration, the VIP is configured on the Ethernet card of **every server** in the cluster via IP aliasing. #### Traffic Distribution: The Kernel-Level Filter Unlike a simple failover cluster, a farm cluster manages traffic through a specialized **kernel-level filter**. The process works as follows: * **ARP Mapping:** In the clients' ARP caches, the VIP is initially associated with a single hardware address (e.g., `mac1` of Server 1). * **Packet Splitting:** When Server 1 receives the traffic, the SafeKit kernel filter analyzes the identity of the incoming packets (based on **Client IP** or **TCP Port**). * **Load Sharing:** The filter determines which packets should be processed locally and which should be redirected to other nodes (e.g., Server 2) for processing, ensuring a balanced workload. #### Failover and Rerouting with Gratuitous ARP If the primary node (Server 1) fails, the cluster maintains availability through **Gratuitous ARP (GARP)**. SafeKit broadcasts a GARP message to update client ARP caches with `mac2` of Server 2. This ensures that even if the primary "entry point" fails, clients are immediately rerouted to the surviving nodes in the farm. #### Deployment in Remote Sites For organizations operating across **remote data centers**, this load-balancing algorithm remains functional provided the sites are linked via an **extended LAN or VLAN**. This creates a virtual "same-subnet" environment, which is the most efficient configuration for geographically distributed farm clusters. ## How a Load Balanced Virtual IP Works Across Different Subnets (Farm Cluster) ### Multi-Zone Scaling: Orchestrating Traffic Across Cloud Subnets The **Architecture Guide: Scaling Farm Clusters in Multi-Zone and Cloud Environments** provides the blueprint for distributing application workloads across separate availability zones and subnets. ### Cross-Subnet Farm Clusters: Multi-Node Windows & Linux Scalability ![Diagram of a load-balanced farm cluster operating across two different subnets](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20715%20830'%3E%3C/svg%3E)![Diagram of a load-balanced farm cluster operating across two different subnets](https://safekit.evidian.com/wp-content/uploads/2023/05/vip-farm-different-subnet.png) Global Traffic Distribution via External Load Balancing When farm nodes are distributed across **different subnets** (common in Multi-AZ cloud deployments), the **Virtual IP (VIP)** is managed by an external **Load Balancer (LB)**. The LB holds the VIP and directs incoming traffic to the physical IP addresses of the servers located in their respective subnets. #### Intelligent Traffic Routing & Load Balancing Rules The Load Balancer distributes client requests based on two primary factors: * **Distribution Rules:** Traffic is split according to session affinity or load-balancing algorithms (e.g., analyzing **Client IP address** or **Client TCP port**). * **Node Availability:** Traffic is only routed to healthy nodes as determined by the SafeKit health check. > **⚠️ Note:** SafeKit provides the health check logic; the physical or virtual Load Balancer must be provided by your network infrastructure. #### SafeKit Health Check Mechanism SafeKit provides a real-time **Health Check URL** on every server in the farm to communicate its operational status to the Load Balancer: * **Node UP:** The health check returns `HTTP 200 OK`. The Load Balancer includes this server in the active rotation. * **Node DOWN/Failover:** If a server or application fails, SafeKit returns `HTTP 404 NOT FOUND` (or the service becomes unreachable). The Load Balancer immediately stops sending traffic to the failed node. #### Cloud Deployment Standards: AWS, Azure, and GCP This architecture is the foundational model for **Cloud Farm clusters**, ensuring that if an entire subnet or zone goes offline, the remaining nodes continue to handle the load. This is natively supported by: * [**Amazon AWS**](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/aws-load-balancing-cluster-failover/) (AWS Network Load Balancer) * [**Microsoft Azure**](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/azure-load-balancing-cluster-failover/) (Azure Load Balancer) * [**Google Cloud (GCP)**](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/gcp-load-balancing-cluster-failover/) (Google Cloud Load Balancing) ## Virtual IP vs. DNS Redirection: Why DNS Failover Often Fails ### The DNS Propagation Trap: Why VIPs Outperform DNS Redirection Relying on DNS for failover often creates a **false sense of security** in high-availability architectures. While modifying a DNS record to point to a backup server seems like a straightforward recovery path, it introduces a critical variable: **unpredictable latency**. Because DNS-based redirection relies on an uncontrolled ecosystem of intermediate recursive resolvers to acknowledge and propagate the change, it is fundamentally incompatible with the "zero-downtime" requirements of modern enterprise services. ### The Technical Scenario: DNS Resolution and the "Stuck" Client In a standard networking setup, a **Virtual Name** (the DNS Name) acts as the human-readable entry point for users. However, for data to travel across the network, that name must be resolved to a specific **Physical IP** address. ![Diagram showing DNS Name resolution to Physical IP 1 in a high availability cluster](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20708%20836'%3E%3C/svg%3E)![Diagram showing DNS Name resolution to Physical IP 1 in a high availability cluster](https://safekit.evidian.com/wp-content/uploads/2025/12/dns-rerouting.png) DNS Resolution and "Stuck" Clients on Physical IP 1 in a High Availability Cluster #### Current State: Resolution to Physical IP 1 Initially, **Client 1** and **Client 2** query the DNS system for the Virtual Name. The system returns **Physical IP 1**. The clients then establish a direct network connection (socket) to that specific hardware address. #### The Failover Challenge: Rerouting to Physical IP 2 If the server at Physical IP 1 fails, an administrator updates the DNS record to point to **Physical IP 2**. To successfully reroute the clients, a "perfect" sequence must occur: * The **Time to Live (TTL)** must expire on all intermediate ISP and corporate resolvers. * The local DNS cache on both Client 1 and Client 2 must be flushed. * The application must close its existing socket and initiate a *new* DNS lookup. If any of these steps are missed, **Client 1 and Client 2 will remain "stuck"** attempting to communicate with the dead Physical IP 1, resulting in service downtime despite the update in the DNS records. ### The Two "Black Boxes" of DNS Redirection * **Recursive Caching:** Many Internet Service Providers (ISPs) and corporate DNS resolvers ignore low TTL settings to reduce traffic, often caching the "old" Physical IP 1 for minutes or even hours beyond the requested expiration. * **Application Persistence:** Modern applications (such as Java-based microservices or web browsers) often perform a DNS lookup only once at startup. Even if the DNS record is updated to Physical IP 2, the application continues to use the initial IP stored in its internal memory. ### Conclusion DNS redirection is an inconsistent solution for a high availability solution. For instantaneous failover within a local or regional environment, a software-defined **Virtual IP (VIP)** is the only way to ensure guaranteed zero-downtime persistence. ## Comparison: Virtual IP Implementation, Latency, and Application Transparency Technical comparison of Virtual IP (VIP) redirection methods versus DNS rerouting for High Availability and Disaster Recovery. | Environment & Use Case | High Availability Type | Redirection Mechanism | Network Latency | Application Transparency & IP Locality | | --- | --- | --- | --- | --- | | **Primary/Backup** (High Availability) | Mirror Cluster | Gratuitous ARP / MAC Takeover | **Very low:** Time to detect and send broadcast GARP | **Full Transparency:** Virtual IP is local on the active node. Client IP is preserved. | | **Load Balancing** (Active/Active) | Farm Cluster | Kernel-Level Network Filter / GARP | **Very Low:** Time to detect and reconfigure network filters | **Full Transparency:** Virtual IP is local on all nodes. Client IP is preserved. | | **Same Subnet / Extended LAN** (VLAN Stretching) | Disaster Recovery (remote datacenters) | Standard IP Aliasing / GARP | **Low:** Depends on stretched VLAN RTT (Round Trip Time) | **Full Transparency:** Virtual IP is local on the nodes. Client IP is preserved. | | **Different Subnets** | Disaster Recovery (remote datacenters / Cloud) | External Load Balancer | **Moderate:** Higher failover latency due to Load Balancer health check intervals | **⚠️ Partial Transparency:** Uses SNAT/DNAT. Virtual IP is **NOT** local on the nodes. Client IP is **NOT** preserved. Application must support it. | | **DNS rerouting: No VIP** | Disaster Recovery (remote datacenters) | DNS Record Update (name / physical IP) | **High/Unpredictable:** Dependent on DNS TTL (Time To Live) and Client DNS Caching. | **⚠️ Unreliable:** Client must re-resolve DNS. Most often, clients continue using the stale IP resolved at startup and are not rerouted after a failover. | ## Configuring a Virtual IP Address for Network Loadbalancing and High Availability ### [SafeKit Tutorial: Network Loadbalancing and Virtual IP Management (5:03)](https://www.youtube.com/embed/1Ww2-cXHNx4?rel=0&autoplay=1) In this video, learn how to implement a **virtual IP address** to provide a single entry point for a 2-node cluster. SafeKit simplifies **network loadbalancing** by automatically managing the virtual IP, ensuring that client traffic is distributed across nodes and redirected instantly during a failover. ### Video Highlights 1. [**Architecture:** Preparing 2 nodes for a shared Virtual IP](https://www.youtube.com/embed/1Ww2-cXHNx4?rel=0&autoplay=1&start=0&end=13) (0:13) 2. [**Configuration:** Setting up the farm.safe module and **Virtual IP address**](https://www.youtube.com/embed/1Ww2-cXHNx4?rel=0&autoplay=1&start=13&end=153) (2:20) 3. [**Validation:** Failover testing and Virtual IP redirection on server crash](https://www.youtube.com/embed/1Ww2-cXHNx4?rel=0&autoplay=1&start=153) (2:30) ### Step-by-Step Implementation: * [Read the guide on setting up a loadbalanced Virtual IP Address on **Windows** with SafeKit (Free Trial)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/windows-load-balancing-failover/safekit-quick-installation-guide-for-a-new-windows-application-with-network-load-balancing-and-failover/) * [Read the guide on setting up a Loadbalanced Virtual IP Address on **Linux** with SafeKit (Free Trial)](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/linux-load-balancing-failover/safekit-quick-installation-guide-for-a-new-linux-application-with-network-load-balancing-and-failover/) ## Frequently Asked Questions on Virtual IP (VIP) ### Virtual IP (VIP) & Networking What is a Virtual IP (VIP) and how does it differ from a physical IP? While a **physical IP address** is bound to a specific network interface, a **Virtual IP (VIP)** is a "floating" address independent of hardware. In a SafeKit cluster, the VIP acts as a persistent entry point; if the primary server fails, the VIP automatically migrates to a healthy secondary node, ensuring zero client reconfiguration. Do I need a hardware load balancer to use a Virtual IP? No. **SafeKit High Availability software** manages the Virtual IP at the software level. In same-subnet architectures, it utilizes **IP aliasing** and **Gratuitous ARP (GARP)** to redirect traffic. This eliminates the cost and complexity of external hardware load balancers or dedicated proxy servers. What is Gratuitous ARP (GARP) and why is it used? **Gratuitous ARP (GARP)** is a network broadcast that updates the ARP tables of network switches and routers. During a failover, the new primary server sends a GARP packet to announce that the **Virtual IP** is now mapped to its MAC address, forcing immediate traffic rerouting across the network fabric. Can I associate a DNS name with a Virtual IP? **Yes.** You can associate a DNS name with a VIP by creating a standard A record. The key benefit is that redirection is managed at the **VIP level** (via ARP or network redirection) and **not at the DNS level**. This ensures **application transparency** by avoiding delays associated with DNS propagation and TTL expiration. ### Cloud & Advanced Architectures How does a Virtual IP work in the Cloud (AWS, Azure, GCP)? In cloud environments where Layer 2 (ARP) is restricted, SafeKit integrates with **Cloud Load Balancers** (AWS ELB, Azure LB, or Google GCLB). SafeKit provides a **Health Check URL** that the platform monitors to route traffic to the active node using SNAT/DNAT. Is an Extended LAN better than a Load Balancer for Disaster Recovery? **Yes**. For remote datacenters, an **Extended LAN (stretched VLAN)** is often superior because it maintains **application transparency** across sites. By keeping the **same Virtual IP**, the application and its clients continue to communicate using the same identity, making the transition between data centers completely seamless. What are the limitations of DNS rerouting vs. Virtual IP? **DNS rerouting** is limited by **TTL (Time to Live)** and client-side caching, which can delay recovery for hours. A major drawback is that **clients which do not re-resolve their DNS name remain stuck** attempting to connect to the failed server. In contrast, a **Virtual IP** provides instantaneous Layer 2 failover that reroutes all traffic immediately, ensuring connectivity regardless of client-side DNS cache status. ### Transparency & Security Why is a local Virtual IP important for application transparency? A local **Virtual IP (VIP)** ensures **application transparency** by allowing the software to bind to a persistent VIP. SafeKit handles redirection at the **kernel level**, keeping the application unaware of cluster failovers, unlike DNAT solutions where the binded IP changes. Does using a Virtual IP preserve the client's original IP address? Yes. SafeKit avoids Source Network Address Translation (SNAT). Because the VIP is local to the active server, the application receives the **original Client IP**, which is critical for security auditing, session persistence, and regulatory logging. ## 🔍 SafeKit High Availability Navigation Hub Explore SafeKit: Features, technical videos, documentation, and free trial | Resource Type | Description | Direct Link | | --- | --- | --- | | **Key Features** | Why Choose SafeKit for Simple and Cost-Effective High Availability? | [See Why Choose SafeKit for High Availability](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/#why-choose-safekit-for-ha "Discover SafeKit features for simple and cost-effective high availability") | | **Use Cases** | Explore How SafeKit Ensures the High Availability of Critical Infrastructure | [See All Use Cases](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/#safekit-use-cases "Explore SafeKit high availability use cases") | | **Deployment Model** | All-in-One SANless HA: Shared-Nothing Software Clustering | [See SafeKit All-in-One SANless HA](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/#all-in-one-sanless-ha "Learn about all-in-one SANless high availability with shared-nothing software clustering") | | **HA Strategies** | SafeKit: Infrastructure (VM) vs. Application-Level High Availability | [See SafeKit HA & Redundancy: VM vs. Application Level](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/#safekit-ha-redundancy-choices "Compare VM-level redundancy with SafeKit application-level high availability strategies") | | **Technical Specifications** | Technical Limitations for SafeKit Clustering | [See SafeKit High Availability Limitations](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/#safekit-ha-limitations "Technical requirements and limitations for SafeKit application clustering") | | **Proof of Concept** | SafeKit: High Availability Configuration & Failover Demos | [See SafeKit Failover Tutorials](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/#safekit-failover-tutorials "Step-by-step videos on SafeKit high availability, from installation to automated failover") | | **Architecture** | How the SafeKit Mirror Cluster works (Real-Time Replication & Failover) | [See SafeKit Mirror Cluster: Real-Time Replication & Failover](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/#safekit-mirror-cluster "See technical architecture and failover mechanism of SafeKit Mirror Cluster") | | **Architecture** | How the SafeKit Farm Cluster works (Network Load Balancing & Failover) | [See SafeKit Farm Cluster: Network Load Balancing & Failover](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/#safekit-farm-cluster "Technical overview of SafeKit Farm Cluster architecture with network load balancing") | | **Competitive Advantages** | Comparison: SafeKit vs. Traditional High Availability (HA) Clusters | [See SafeKit vs. Traditional HA Cluster Comparison](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/#safekit-ha-comparison "Detailed comparison of SafeKit software vs traditional hardware-based HA clusters") | | **Technical Resources** | SafeKit High Availability: Documentation, Downloads & Trial | [See SafeKit HA Free Trial & Technical Documentation](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/#safekit-ha-technical-resources "Access SafeKit free trial, technical documentation, and high availability white papers") | | **Pre-configured Solutions** | SafeKit Application Module Library: Ready-to-Use HA Solutions | [See SafeKit High Availability Application Modules](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/#safekit-ha-application-modules "Browse the library of pre-configured SafeKit modules for automated application failover") | [🧑 Contact us](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/contact-us-for-safekit/) [🎁 SafeKit free trial](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/safekit-free-trial/) [🏅 Free certification](https://training.my.evidian.com/mod/page/view.php?id=712) [💰 Perpetual license cost](https://safekit.evidian.com/products/high-availability-software-for-application-clustering/get-a-quote-safekit-en/) * © Eviden, all rights reserved * |[Eviden privacy](https://eviden.com/privacy-policy) * |[Eviden terms and conditions](https://eviden.com/terms-and-conditions) * |[Eviden](https://eviden.com) [![eviden-logo](https://safekit.evidian.com/wp-content/uploads/2026/01/eviden-logo-black-265-54.png)](https://eviden.com/) We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept”, you consent to the use of ALL the cookies. However you may visit Cookie Settings to provide a controlled consent.