Hi Derek,
This is happening because you only have addresses for one of the
servers specified in each subnet. Both need to have their pools split
in half and the special classes for each peer specified (see here:
https://kea.readthedocs.io/en/kea-2.6.1/arm/hooks.html#load-balancing-configuration)
Something like this:
"pools": [
{ "pool": "172.16.120.50 - 172.16.120.125",
"client-class": "HA_server1"
},
{ "pool": "172.16.120.126 - 172.16.120.200",
"client-class": "HA_server2"
}
],
Thank you,
Darren Ankney
On Fri, Mar 21, 2025 at 12:34 PM Derek Swank via Kea-users
<kea-users@lists.isc.org> wrote:
>
> Apologies, I sent this before finishing my writeup. Here is my subnets:
>
> "subnet4": [
>
> <?include "/etc/kea/scopes/vlan-4050.json"?>,
> <?include "/etc/kea/scopes/vlan-4049.json"?>
>
> ],
>
> vlan-4050:
> {
> "id": 1,
> "subnet": "172.16.120.0/24",
> "pools": [ { "pool": "172.16.120.50 - 172.16.120.200",
> "client-class": "HA_server1"}],
> "interface": "ens192",
> "option-data": [
> {
> "name": "routers",
> "data": "172.16.120.1"
> }
> ],
>
> "reservations": [
>
> ]
>
> }
>
> vlan-4049:
> {
> "id": 2,
>
>
> "subnet": "172.16.121.0/24",
> "pools": [ { "pool": "172.16.121.50 - 172.16.121.200",
> "client-class": "HA_server2" }],
> "relay": {
> "ip-address" : ["172.16.121.1"]
> },
>
> "option-data": [
> {
> "name": "routers",
> "data": "172.16.120.1"
> }
> ],
> "reservations": [
>
> ]
>
> }
>
> At least half of machines on both network segments are getting IP addresses,
> but others are getting the "NOT_FOR_US" error. They are all machines spun up
> from the same VM template, the only difference should be their MAC addresses;
> I am unsure what criteria Kea is using to decide the machines are "not for
> us". I do not have this issue when I disable HA and only have 1 Kea server
> running, so the issue definitely seems to be in the HA configuration. Any
> guidance would be appreciated, let me know what other information I can
> provide.
>
> Derek Swank
>
> Systems Engineer
>
> Main: 541-673-4242
>
> 2350 NW Aviation Dr
>
> Roseburg, OR 97470
>
>
>
> ________________________________
> From: Derek Swank <derek.sw...@dfn.net>
> Sent: Friday, March 21, 2025 9:26 AM
> To: kea-users@lists.isc.org <kea-users@lists.isc.org>
> Subject: HA Load Balancing: HA_BUFFER4_RECEIVE_NOT_FOR_US Issue
>
> Hello,
>
> I am setting up a Kea server in a load balancing HA configuration. I am
> experiencing an issue where I am getting the error:
> "HA_BUFFER4_RECEIVE_NOT_FOR_US: dropping query to be processed by another
> server"
>
> Here is an exact line from my Kea HA hooks log:
> "2025-03-20 16:45:28.365 DEBUG [kea-dhcp4.ha-hooks/64143.140171193816768]
> HA_BUFFER4_RECEIVE_NOT_FOR_US [hwtype=1 00:50:56:bb:e1:9c], cid=[no info],
> tid=0xffbd0305: dropping query to be processed by another server"
>
> Here is my HA configuration:
>
> {
> "library": "/usr/lib/x86_64-linux-gnu/kea/hooks/libdhcp_ha.so",
> "parameters": {
> "high-availability": [{
> "this-server-name": "server1",
> "mode": "load-balancing",
> "heartbeat-delay": 10000,
> "max-response-delay": 60000,
> "max-ack-delay": 5000,
> "max-unacked-clients": 3,
> "max-rejected-lease-updates": 10,
> "delayed-updates-limit": 100,
> "peers": [{
> //BEGIN server1
> "name": "server1",
> "url": "http://172.16.120.3:8000/";,
> "role": "primary",
> "auto-failover": true
> //END
> }, {
> //BEGIN server2
> "name": "server2",
> "url": "http://172.16.120.4:8000/";,
> "role": "secondary",
> "auto-failover": true
> //END
> }, {
> //BEGIN server3
> "name": "server3",
> "url": "http://172.16.120.5:8000/";,
> "role": "backup",
> "auto-failover": false
> //END
> }]
> }]
> }
>
>
> All servers have the same configuration, other than "this-server-name".
>
> Derek Swank
>
> Systems Engineer
>
> Main: 541-673-4242
>
> 2350 NW Aviation Dr
>
> Roseburg, OR 97470
>
>
>
> The information contained in this email and any attachments may be
> privileged, confidential, and/or proprietary and is intended solely for the
> use of the person(s) to whom it is addressed. If you are not the intended
> recipient, any review, re-transmission, dissemination or any other use of the
> information contained in this email and any attachments is strictly
> prohibited. If you have received this communication in error, please notify
> the sender immediately by replying to this email and then delete this
> material from any system that it may be on.
>
> --
> ISC funds the development of this software with paid support subscriptions.
> Contact us at https://www.isc.org/contact/ for more information.
>
> To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
>
> Kea-users mailing list
> Kea-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/kea-users
--
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
Kea-users mailing list
Kea-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/kea-users
