Package: keepalived
Version: 1:1.2.7
Severity: important
Dear Maintainer,
We have problem with keepalived in version 1.2.6 and 1.2.7
Slave instance periodical sends igmp report with vrrp vmac source address
which causes that ethernet switch detect mac flapping and for short period of
time
send traffic to slave node.
root@fwdev2:~# tcpdump -e -i bond0.303 -n ether host 00:00:5e:00:01:f2
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on bond0.303, link-type EN10MB (Ethernet), capture size 65535 byte
15:02:39.060919 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800),
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio
150, authtype simple, intvl 1s, length 20
15:02:40.061238 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800),
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio
150, authtype simple, intvl 1s, length 20
15:02:41.061839 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800),
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio
150, authtype simple, intvl 1s, length 20
15:02:42.062068 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800),
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio
150, authtype simple, intvl 1s, length 20
15:02:43.062486 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800),
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio
150, authtype simple, intvl 1s, length 20
15:02:44.062863 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800),
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio
150, authtype simple, intvl 1s, length 20
15:02:45.063483 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800),
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio
150, authtype simple, intvl 1s, length 20
15:02:46.064194 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800),
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio
150, authtype simple, intvl 1s, length 20
15:02:47.064577 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800),
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio
150, authtype simple, intvl 1s, length 20
15:02:48.065116 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800),
length 56: 10.248.248.101 > 224.0.0.18: VRRPv2, Advertisement, vrid 242, prio
150, authtype simple, intvl 1s, length 20
15:02:48.780992 00:00:5e:00:01:f2 > 01:00:5e:00:00:12, ethertype IPv4 (0x0800),
length 46: 192.168.186.247 > 224.0.0.18: igmp v2 report 224.0.0.18
15:02:48.789431 a0:36:9f:0c:b7:94 > 00:00:5e:00:01:f2, ethertype IPv4 (0x0800),
length 407: 172.30.254.1.993 > 192.168.186.25.53701: Flags [P.], seq
959053837:959054178, ack 1342616528, win 255, options [nop,nop,TS val 40155438
ecr 181989695], length 341
15:02:48.798934 a0:36:9f:0c:b7:94 > 00:00:5e:00:01:f2, ethertype IPv4 (0x0800),
length 66: 192.168.185.20.443 > 192.168.186.29.59891: Flags [S.], seq
581030047, ack 2530224970, win 5840, options [mss
1460,nop,nop,sackOK,nop,wscale 6], length 0
15:02:48.800019 a0:36:9f:0c:b7:94 > 00:00:5e:00:01:f2, ethertype IPv4 (0x0800),
length 56: 172.17.0.69.3389 > 192.168.186.14.58970: Flags [.], ack 1320220472,
win 63804, length 0
15:02:48.808608 a0:36:9f:0c:b7:94 > 00:00:5e:00:01:f2, ethertype IPv4 (0x0800),
length 455: 172.30.254.1.993 > 192.168.186.25.55113: Flags [P.], seq
613178754:613179143, ack 1555135076, win 254, options [nop,nop,TS val 40155441
ecr 181989695], length 389
15:02:48.810195 a0:36:9f:0c:b7:94 > 00:00:5e:00:01:f2, ethertype IPv4 (0x0800),
length 66: 172.17.0.53.1433 > 192.168.186.16.38974: Flags [.], ack 1338485113,
win 259, options [nop,nop,TS val 36362563 ecr 64346186], length 0
.....
root@fwdev2:~# ip a s bond0.34
13: bond0.34@bond0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue
state UP
link/ether a0:36:9f:03:dd:e5 brd ff:ff:ff:ff:ff:ff
inet 192.168.186.247/24 brd 192.168.186.255 scope global bond0.34
root@fwdev2:~# ip a s bond0.303
15: bond0.303@bond0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue
state UP
link/ether a0:36:9f:03:dd:e5 brd ff:ff:ff:ff:ff:ff
inet 10.248.248.102/24 brd 10.248.248.255 scope global bond0.303
48: vrrp.242@bond0.303: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
noqueue state UNKNOWN
link/ether 00:00:5e:00:01:f2 brd ff:ff:ff:ff:ff:ff
root@fwdev2:~# cat /etc/keepalived/keepalived.conf
vrrp_sync_group VG1 {
group {
VI_5
VI_34
# VI_36
VI_303
}
}
vrrp_instance VI_5 {
state BACKUP
interface bond2.5
preempt_delay 60
virtual_router_id 240
priority 30
use_vmac
advert_int 1
garp_master_delay 120
authentication {
auth_type PASS
auth_pass secFWDEV
}
virtual_ipaddress {
193.138.208.7
}
}
#vrrp_instance VI_10 {
# interface bond0.10
# virtual_router_id 253
# priority 90
# use_vmac
# advert_int 1
# garp_master_delay 5
# authentication {
# auth_type PASS
# auth_pass secFWDEV
# }
# virtual_ipaddress {
# 192.168.191.243
# }
#}
vrrp_instance VI_34 {
interface bond0.34
state BACKUP
preempt_delay 60
virtual_router_id 241
priority 30
use_vmac
advert_int 1
garp_master_delay 120
authentication {
auth_type PASS
auth_pass secFWDEV
}
virtual_ipaddress {
192.168.186.245
}
}
#vrrp_instance VI_36 {
# interface bond0.36
# virtual_router_id 250
# priority 90
# use_vmac
# advert_int 1
# garp_master_delay 5
# authentication {
# auth_type PASS
# auth_pass secFWDEV
# }
# virtual_ipaddress {
# 192.168.192.2
# }
#}
vrrp_instance VI_303 {
interface bond0.303
state BACKUP
preempt_delay 60
virtual_router_id 242
priority 30
use_vmac
advert_int 1
garp_master_delay 120
authentication {
auth_type PASS
auth_pass secFWDEV
}
virtual_ipaddress {
10.248.248.100
}
}
root@fwdev2:~#
-- System Information:
Debian Release: 7.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.9 (SMP w/8 CPU cores)
Locale: LANG=pl_PL, LC_CTYPE=pl_PL (charmap=ISO-8859-2)
Shell: /bin/sh linked to /bin/dash
Versions of packages keepalived depends on:
ii iproute 20120521-3
ii ipvsadm 1:1.26-1
ii libc6 2.13-38
pn libnl1 <none>
ii libpopt0 1.16-7
ii libsnmp15 5.4.3~dfsg-2.7
ii libssl1.0.0 1.0.1e-2
keepalived recommends no packages.
keepalived suggests no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
