Hi Piotr,

  Contrail-vrouter-agent decides if a IP is address is active based on

1> If VM interface  generates any traffic with source IP as Allowed address 
pair IP

2> VM interface sends a GARP for Allowed address pair IP or if VM responds to 
ARP request

      for that IP.


In ur scenario are u running VRRP between active-standby instance?

Is there any VRRP mastership flap?


Regards

Naveen N


________________________________
From: Users <[email protected]> on behalf of Piotr P 
<[email protected]>
Sent: Friday, August 28, 2015 7:36 PM
To: <[email protected]>
Subject: [Users] Allowed address pair on multiple virtual interfaces.



I've assigned allowed_address_pairs to two ports belonging to different virtual 
machines.
We have need to attach additional address that could be switched over in case 
application failure on a VM. It could work in active-standby fashion.


While this address is assigned via neutron for both VM we starting to seeing 
often BGP updates.
Those updates are visible on the gateway and for XMPP and iBGP routes in  
Contrail for prefix 100.10.10.251/32<http://100.10.10.251/32>.


It seems that this update occurs maily about every 90 seconds, but also it can 
happen after 20 seconds.
First port is selected for most of the time. However second port can be 
announced as best path for shorter time like 20 seconds.

Routes for fixed ips  are stable.

Does this is known behaviour or it could be some kind of route flapping between 
compute nodes ?
Is it allowed or possible for contrail to have allowed address pairs assigned 
to multiple interface at the same time?


Following is short example how these allowed_address_pairs are visible in 
neutron.

$ neutron port-show d196a3e5-d905-4121-ba01-d7541a7a42b5
+-----------------------+--------------------------------------------------------------------------------------+
| Field                 | Value                                                 
                               |
+-----------------------+--------------------------------------------------------------------------------------+
| admin_state_up        | True                                                  
                               |
| allowed_address_pairs | {"ip_address": "100.10.10.251", "mac_address": 
["02:d1:96:a3:e5:d9"]}               |                                          
                               |
| fixed_ips             | {"subnet_id": "e8c7d350-f539-422f-b8b1-0b5f83f5f16e", 
"ip_address": "100.10.10.12"} |
| id                    | d196a3e5-d905-4121-ba01-d7541a7a42b5                  
                               |
| mac_address           | 02:d1:96:a3:e5:d9                                     
                               |                                                
    |
+-----------------------+--------------------------------------------------------------------------------------+

$ neutron port-show 2a2b95aa-6d0b-4487-838d-80c3f8540cbd
+-----------------------+--------------------------------------------------------------------------------------+
| Field                 | Value                                                 
                               |
+-----------------------+--------------------------------------------------------------------------------------+
| admin_state_up        | True                                                  
                               |
| allowed_address_pairs | {"ip_address": "100.10.10.251", "mac_address": 
["02:2a:2b:95:aa:6d"]}               |                                          
                             |
| fixed_ips             | {"subnet_id": "e8c7d350-f539-422f-b8b1-0b5f83f5f16e", 
"ip_address": "100.10.10.13"} |
| id                    | 2a2b95aa-6d0b-4487-838d-80c3f8540cbd                  
                               |
| mac_address           | 02:2a:2b:95:aa:6d                                     
                               |
+-----------------------+--------------------------------------------------------------------------------------+

Occurences of updates:

 last_modified: "2015-Aug-28 13:45:20.636004",
 last_modified: "2015-Aug-28 13:47:00.799524",
 last_modified: "2015-Aug-28 13:48:40.931728",
 last_modified: "2015-Aug-28 13:50:24.904813",
 last_modified: "2015-Aug-28 13:50:56.552607",


Changes visible at the gateway


100.10.10.251/32<http://100.10.10.251/32>  *[BGP/170] 00:00:19, localpref 100, 
from 10.0.0.11
                      AS path: 64799 ?, validation-state: unverified
                    > via gr-0/3/0.32769, Push 16
                    [BGP/170] 00:00:19, localpref 100, from 10.0.0.12
                      AS path: 64799 ?, validation-state: unverified
                    > via gr-0/3/0.32769, Push 16
                    [BGP/170] 00:00:19, localpref 100, from 10.0.0.13
                      AS path: 64799 ?, validation-state: unverified
                    > via gr-0/3/0.32769, Push 16


100.10.10.251/32<http://100.10.10.251/32>  *[BGP/170] 00:00:00, localpref 100, 
from 10.0.0.11
                      AS path: 64799 ?, validation-state: unverified
                    > via gr-0/3/0.32774, Push 16
                    [BGP/170] 00:00:00, localpref 100, from 10.0.0.12
                      AS path: 64799 ?, validation-state: unverified
                    > via gr-0/3/0.32774, Push 16
                    [BGP/170] 00:00:00, localpref 100, from 10.0.0.13
                      AS path: 64799 ?, validation-state: unverified
                    > via gr-0/3/0.32774, Push 16


Kind Regards
Piotr Pieprzycki
_______________________________________________
Users mailing list
[email protected]
http://lists.opencontrail.org/mailman/listinfo/users_lists.opencontrail.org

Reply via email to