Bug#706198: marked as done (keepalived: slave vrrp instance send igmp packet with vmac address)

Debian Bug Tracking System Sat, 12 Mar 2022 07:54:15 -0800

Your message dated Sat, 12 Mar 2022 16:52:13 +0100
with message-id <[email protected]>
and subject line Re: Bug#706198: keepalived: slave vrrp instance send igmp 
packet with vmac address
has caused the Debian Bug report #706198,
regarding keepalived: slave vrrp instance send igmp packet with vmac address
to be marked as done.


This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
706198: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=706198
Debian Bug Tracking System
Contact [email protected] with problems

--- Begin Message ---

Package: keepalived
Version: 1:1.2.7
Severity: important

Dear Maintainer,
We have problem with keepalived in version 1.2.6 and 1.2.7
Slave instance periodical sends igmp report with vrrp vmac source address
which causes that ethernet switch detect mac flapping and for short period of 
time
send traffic to slave node.

root@fwdev2:~# tcpdump -e -i bond0.303 -n ether host 00:00:5e:00:01:f2
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on bond0.303, link-type EN10MB (Ethernet), capture size 65535 byte

15:02:39.060919 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), 
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio 
150, authtype simple, intvl 1s, length 20
15:02:40.061238 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), 
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio 
150, authtype simple, intvl 1s, length 20
15:02:41.061839 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), 
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio 
150, authtype simple, intvl 1s, length 20
15:02:42.062068 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), 
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio 
150, authtype simple, intvl 1s, length 20
15:02:43.062486 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), 
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio 
150, authtype simple, intvl 1s, length 20
15:02:44.062863 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), 
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio 
150, authtype simple, intvl 1s, length 20
15:02:45.063483 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), 
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio 
150, authtype simple, intvl 1s, length 20
15:02:46.064194 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), 
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio 
150, authtype simple, intvl 1s, length 20
15:02:47.064577 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), 
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio 
150, authtype simple, intvl 1s, length 20
15:02:48.065116 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), 
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio 
150, authtype simple, intvl 1s, length 20
15:02:48.780992 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800), 
length 46: 192.168.186.247 > 224.0.0.18: igmp v2 report 224.0.0.18
15:02:48.789431 a0:36:9f:0c:b7:94 > 00:00:5e:00:01:f2, ethertype IPv4 (0x0800), 
length 407: 172.30.254.1.993 > 192.168.186.25.53701: Flags [P.], seq 
959053837:959054178, ack 1342616528, win 255, options [nop,nop,TS val 40155438 
ecr 181989695], length 341
15:02:48.798934 a0:36:9f:0c:b7:94 > 00:00:5e:00:01:f2, ethertype IPv4 (0x0800), 
length 66: 192.168.185.20.443 > 192.168.186.29.59891: Flags [S.], seq 
581030047, ack 2530224970, win 5840, options [mss 
1460,nop,nop,sackOK,nop,wscale 6], length 0
15:02:48.800019 a0:36:9f:0c:b7:94 > 00:00:5e:00:01:f2, ethertype IPv4 (0x0800), 
length 56: 172.17.0.69.3389 > 192.168.186.14.58970: Flags [.], ack 1320220472, 
win 63804, length 0
15:02:48.808608 a0:36:9f:0c:b7:94 > 00:00:5e:00:01:f2, ethertype IPv4 (0x0800), 
length 455: 172.30.254.1.993 > 192.168.186.25.55113: Flags [P.], seq 
613178754:613179143, ack 1555135076, win 254, options [nop,nop,TS val 40155441 
ecr 181989695], length 389
15:02:48.810195 a0:36:9f:0c:b7:94 > 00:00:5e:00:01:f2, ethertype IPv4 (0x0800), 
length 66: 172.17.0.53.1433 > 192.168.186.16.38974: Flags [.], ack 1338485113, 
win 259, options [nop,nop,TS val 36362563 ecr 64346186], length 0

.....

root@fwdev2:~# ip a s bond0.34
13: bond0.34@bond0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
state UP 
    link/ether a0:36:9f:03:dd:e5 brd ff:ff:ff:ff:ff:ff
    inet 192.168.186.247/24 brd 192.168.186.255 scope global bond0.34


root@fwdev2:~# ip a s bond0.303
15: bond0.303@bond0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
state UP 
    link/ether a0:36:9f:03:dd:e5 brd ff:ff:ff:ff:ff:ff
    inet 10.248.248.102/24 brd 10.248.248.255 scope global bond0.303


48: [email protected]: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc 
noqueue state UNKNOWN 
    link/ether 00:00:5e:00:01:f2 brd ff:ff:ff:ff:ff:ff




root@fwdev2:~# cat /etc/keepalived/keepalived.conf 
vrrp_sync_group VG1 {
         group {
        VI_5
        VI_34
#                VI_36
        VI_303
         }
}

vrrp_instance VI_5 {
    state BACKUP
    interface bond2.5
    preempt_delay 60
    virtual_router_id 240
    priority 30
    use_vmac
    advert_int 1
    garp_master_delay 120
    authentication {
        auth_type PASS
        auth_pass secFWDEV
    }
    virtual_ipaddress {
        193.138.208.7
    }
}

#vrrp_instance VI_10 {
#    interface bond0.10
#    virtual_router_id 253
#    priority 90
#    use_vmac
#    advert_int 1
#    garp_master_delay 5
#    authentication {
#        auth_type PASS
#        auth_pass secFWDEV
#    }
#    virtual_ipaddress {
#        192.168.191.243
#    }
#}

vrrp_instance VI_34 {
    interface bond0.34
    state BACKUP
    preempt_delay 60
    virtual_router_id 241
    priority 30
    use_vmac
    advert_int 1
    garp_master_delay 120
    authentication {
        auth_type PASS
        auth_pass secFWDEV
    }
    virtual_ipaddress {
        192.168.186.245
    }
}

#vrrp_instance VI_36 {
#    interface bond0.36
#    virtual_router_id 250
#    priority 90
#    use_vmac
#    advert_int 1
#    garp_master_delay 5
#    authentication {
#        auth_type PASS
#        auth_pass secFWDEV
#    }
#    virtual_ipaddress {
#        192.168.192.2
#    }
#}

vrrp_instance VI_303 {
    interface bond0.303
    state BACKUP
    preempt_delay 60
    virtual_router_id 242
    priority 30
    use_vmac
    advert_int 1
    garp_master_delay 120
    authentication {
        auth_type PASS
        auth_pass secFWDEV
    }
    virtual_ipaddress {
        10.248.248.100
    }
}

root@fwdev2:~#



-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.9 (SMP w/8 CPU cores)
Locale: LANG=pl_PL, LC_CTYPE=pl_PL (charmap=ISO-8859-2)
Shell: /bin/sh linked to /bin/dash

Versions of packages keepalived depends on:
ii  iproute      20120521-3
ii  ipvsadm      1:1.26-1
ii  libc6        2.13-38
pn  libnl1       <none>
ii  libpopt0     1.16-7
ii  libsnmp15    5.4.3~dfsg-2.7
ii  libssl1.0.0  1.0.1e-2

keepalived recommends no packages.

keepalived suggests no packages.

-- no debconf information

--- End Message ---

--- Begin Message ---

 ❦ 26 April 2013 10:03 +02, root:

> We have problem with keepalived in version 1.2.6 and 1.2.7
> Slave instance periodical sends igmp report with vrrp vmac source address
> which causes that ethernet switch detect mac flapping and for short period of 
> time
> send traffic to slave node.

This bug is quite old. I think this can be solved with vmac_xmit_base.
Upstream says: https://github.com/acassen/keepalived/issues/1957

Feel free to reopen the bug if it still happens with a recent version
and cannot be fixed with configuration.
-- 
Make input easy to prepare and output self-explanatory.
            - The Elements of Programming Style (Kernighan & Plauger)

--- End Message ---

Bug#706198: marked as done (keepalived: slave vrrp instance send igmp packet with vmac address)

Reply via email to