Hi, Thank for clarification how allowed_address_pairs works . It seems that I had issue with arp, thats why I saw route change. As Tomasz said in other mail I just put address on the loopback. In this case we need set arp_ignore to get proper behaviour. Solution with vrrp seems to works as well. I've just checked and address is switching between VM. I'm just only curious what is the arp timeout in vrouter. Normally in linux is 300 seconds.
Kind Regards Piotr Pieprzycki On 29 August 2015 at 08:41, Naveen N <[email protected]> wrote: > Hi Piotr, > > Contrail-vrouter-agent decides if a IP is address is active based on > > 1> If VM interface generates any traffic with source IP as Allowed > address pair IP > > 2> VM interface sends a GARP for Allowed address pair IP or if VM > responds to ARP request > > for that IP. > > > In ur scenario are u running VRRP between active-standby instance? > > Is there any VRRP mastership flap? > > > Regards > > Naveen N > > > > ------------------------------ > *From:* Users <[email protected]> on behalf of Piotr P > <[email protected]> > *Sent:* Friday, August 28, 2015 7:36 PM > *To:* <[email protected]> > *Subject:* [Users] Allowed address pair on multiple virtual interfaces. > > > > I've assigned allowed_address_pairs to two ports belonging to different > virtual machines. > We have need to attach additional address that could be switched over in > case application failure on a VM. It could work in active-standby fashion. > > > While this address is assigned via neutron for both VM we starting to > seeing often BGP updates. > Those updates are visible on the gateway and for XMPP and iBGP routes in > Contrail for prefix 100.10.10.251/32. > > > It seems that this update occurs maily about every 90 seconds, but also it > can happen after 20 seconds. > First port is selected for most of the time. However second port can be > announced as best path for shorter time like 20 seconds. > > Routes for fixed ips are stable. > > Does this is known behaviour or it could be some kind of route flapping > between compute nodes ? > Is it allowed or possible for contrail to have allowed address pairs > assigned to multiple interface at the same time? > > > Following is short example how these allowed_address_pairs are visible in > neutron. > > $ neutron port-show d196a3e5-d905-4121-ba01-d7541a7a42b5 > > +-----------------------+--------------------------------------------------------------------------------------+ > | Field | Value > | > > +-----------------------+--------------------------------------------------------------------------------------+ > | admin_state_up | True > | > | allowed_address_pairs | {"ip_address": "100.10.10.251", "mac_address": > ["02:d1:96:a3:e5:d9"]} | > | > | fixed_ips | {"subnet_id": > "e8c7d350-f539-422f-b8b1-0b5f83f5f16e", "ip_address": "100.10.10.12"} | > | id | d196a3e5-d905-4121-ba01-d7541a7a42b5 > | > | mac_address | 02:d1:96:a3:e5:d9 > | > | > > +-----------------------+--------------------------------------------------------------------------------------+ > > $ neutron port-show 2a2b95aa-6d0b-4487-838d-80c3f8540cbd > > +-----------------------+--------------------------------------------------------------------------------------+ > | Field | Value > | > > +-----------------------+--------------------------------------------------------------------------------------+ > | admin_state_up | True > | > | allowed_address_pairs | {"ip_address": "100.10.10.251", "mac_address": > ["02:2a:2b:95:aa:6d"]} | > | > | fixed_ips | {"subnet_id": > "e8c7d350-f539-422f-b8b1-0b5f83f5f16e", "ip_address": "100.10.10.13"} | > | id | 2a2b95aa-6d0b-4487-838d-80c3f8540cbd > | > | mac_address | 02:2a:2b:95:aa:6d > | > > +-----------------------+--------------------------------------------------------------------------------------+ > > Occurences of updates: > > last_modified: "2015-Aug-28 13:45:20.636004", > last_modified: "2015-Aug-28 13:47:00.799524", > last_modified: "2015-Aug-28 13:48:40.931728", > last_modified: "2015-Aug-28 13:50:24.904813", > last_modified: "2015-Aug-28 13:50:56.552607", > > > Changes visible at the gateway > > > 100.10.10.251/32 *[BGP/170] 00:00:19, localpref 100, from 10.0.0.11 > AS path: 64799 ?, validation-state: unverified > > via gr-0/3/0.32769, Push 16 > [BGP/170] 00:00:19, localpref 100, from 10.0.0.12 > AS path: 64799 ?, validation-state: unverified > > via gr-0/3/0.32769, Push 16 > [BGP/170] 00:00:19, localpref 100, from 10.0.0.13 > AS path: 64799 ?, validation-state: unverified > > via gr-0/3/0.32769, Push 16 > > > 100.10.10.251/32 *[BGP/170] 00:00:00, localpref 100, from 10.0.0.11 > AS path: 64799 ?, validation-state: unverified > > via gr-0/3/0.32774, Push 16 > [BGP/170] 00:00:00, localpref 100, from 10.0.0.12 > AS path: 64799 ?, validation-state: unverified > > via gr-0/3/0.32774, Push 16 > [BGP/170] 00:00:00, localpref 100, from 10.0.0.13 > AS path: 64799 ?, validation-state: unverified > > via gr-0/3/0.32774, Push 16 > > > Kind Regards > Piotr Pieprzycki >
_______________________________________________ Users mailing list [email protected] http://lists.opencontrail.org/mailman/listinfo/users_lists.opencontrail.org
