Apologies, I sent this before finishing my writeup. Here is my subnets:
"subnet4": [
<?include "/etc/kea/scopes/vlan-4050.json"?>,
<?include "/etc/kea/scopes/vlan-4049.json"?>
],
vlan-4050:
{
"id": 1,
"subnet": "172.16.120.0/24",
"pools": [ { "pool": "172.16.120.50 - 172.16.120.200",
"client-class": "HA_server1"}],
"interface": "ens192",
"option-data": [
{
"name": "routers",
"data": "172.16.120.1"
}
],
"reservations": [
]
}
vlan-4049:
{
"id": 2,
"subnet": "172.16.121.0/24",
"pools": [ { "pool": "172.16.121.50 - 172.16.121.200",
"client-class": "HA_server2" }],
"relay": {
"ip-address" : ["172.16.121.1"]
},
"option-data": [
{
"name": "routers",
"data": "172.16.120.1"
}
],
"reservations": [
]
}
At least half of machines on both network segments are getting IP addresses,
but others are getting the "NOT_FOR_US" error. They are all machines spun up
from the same VM template, the only difference should be their MAC addresses; I
am unsure what criteria Kea is using to decide the machines are "not for us". I
do not have this issue when I disable HA and only have 1 Kea server running, so
the issue definitely seems to be in the HA configuration. Any guidance would be
appreciated, let me know what other information I can provide.
Derek Swank
Systems Engineer
[cid:c3fe3259-17fe-4afe-97c0-c222d2e78f31]<https://dfn.net/>
Main: 541-673-4242
2350 NW Aviation Dr
Roseburg, OR 97470
[cid:384c062b-44bd-4a2e-a3ff-255cd9d1ec58]<https://www.linkedin.com/company/douglas-fast-net/>
[cid:f5c76e2a-3645-49e1-8827-8a3169af85f3]
<https://www.facebook.com/DouglasFastNet>
________________________________
From: Derek Swank <derek.sw...@dfn.net>
Sent: Friday, March 21, 2025 9:26 AM
To: kea-users@lists.isc.org <kea-users@lists.isc.org>
Subject: HA Load Balancing: HA_BUFFER4_RECEIVE_NOT_FOR_US Issue
Hello,
I am setting up a Kea server in a load balancing HA configuration. I am
experiencing an issue where I am getting the error:
"HA_BUFFER4_RECEIVE_NOT_FOR_US: dropping query to be processed by another
server"
Here is an exact line from my Kea HA hooks log:
"2025-03-20 16:45:28.365 DEBUG [kea-dhcp4.ha-hooks/64143.140171193816768]
HA_BUFFER4_RECEIVE_NOT_FOR_US [hwtype=1 00:50:56:bb:e1:9c], cid=[no info],
tid=0xffbd0305: dropping query to be processed by another server"
Here is my HA configuration:
{
"library": "/usr/lib/x86_64-linux-gnu/kea/hooks/libdhcp_ha.so",
"parameters": {
"high-availability": [{
"this-server-name": "server1",
"mode": "load-balancing",
"heartbeat-delay": 10000,
"max-response-delay": 60000,
"max-ack-delay": 5000,
"max-unacked-clients": 3,
"max-rejected-lease-updates": 10,
"delayed-updates-limit": 100,
"peers": [{
//BEGIN server1
"name": "server1",
"url": "http://172.16.120.3:8000/";,
"role": "primary",
"auto-failover": true
//END
}, {
//BEGIN server2
"name": "server2",
"url": "http://172.16.120.4:8000/";,
"role": "secondary",
"auto-failover": true
//END
}, {
//BEGIN server3
"name": "server3",
"url": "http://172.16.120.5:8000/";,
"role": "backup",
"auto-failover": false
//END
}]
}]
}
All servers have the same configuration, other than "this-server-name".
Derek Swank
Systems Engineer
[cid:3d0033dd-59b6-43be-ac01-f4c675156d74]<https://dfn.net/>
Main: 541-673-4242
2350 NW Aviation Dr
Roseburg, OR 97470
[cid:bcd84d17-fef1-42d6-8e4a-c004b50829ab]<https://www.linkedin.com/company/douglas-fast-net/>
[cid:d20587ea-6e17-4039-b0d3-cdb512ad27a7]
<https://www.facebook.com/DouglasFastNet>
The information contained in this email and any attachments may be privileged,
confidential, and/or proprietary and is intended solely for the use of the
person(s) to whom it is addressed. If you are not the intended recipient, any
review, re-transmission, dissemination or any other use of the information
contained in this email and any attachments is strictly prohibited. If you have
received this communication in error, please notify the sender immediately by
replying to this email and then delete this material from any system that it
may be on.
--
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
Kea-users mailing list
Kea-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/kea-users
