From nobody Sat Apr 15 17:18:20 2023 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4PzKld37rCz45hRL for ; Sat, 15 Apr 2023 17:18:21 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4PzKld22lCz3QW3 for ; Sat, 15 Apr 2023 17:18:21 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1681579101; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=QoXQ1STeoDV7mEdqdnKGGFdsZD/JMlm8w3zEXN5iVrA=; b=Lh2+sGY6PZFTxxvUzNKudeYa6M8Ft0Jf0m9lwbHdG4zdr7NY/QE2T0UYGIjRbSEXR+AAsS 6tVcl2aTIGPmrFV75ubE2/LZFjtLJF6ntD8Z9KM7hYNGPQA5ILDYU5ooRicMdhcQfUNZL1 HDxNF4ItijNlVyjQO5HJ2uy4TlCMQUl5B+wGySn9P5o3KWvHCbagOCywSHyErtkp9t28C0 d2TD/dRnaqJciFTyjSLb8NAu8GhfdmCBBYq/X8F9QkW64g3TwKjlOxNh0dUmIVYRcjcrRT TumdRtyp3Tdvgur7GvYcuqYX8xeZ+mJ1sT6ZQ4Njr5MJ0nMPWk4uQRxsf/9zWg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1681579101; a=rsa-sha256; cv=none; b=gfQAp6wfmQF7vsrFK4Va4e2uYBXYoaOO4+vWpxj7zPcm36NhGFDGt2DAP9eL/Qig5hmZGx eVhcewhqAPPPafvzokZkVgIqov/6ao9h1aSJ44SPgn+214dYFbdxPs28TPE3+poonyxIv9 MCc4oDaPUF+P1SIqMYq0D53LIaq2/NchbpEcXAZ0giATKbChI0RaftdkBFd+pTnQ50yw6F JrTTC+WQrqCWwYXtEl/Wp0JVNbJJ2rbknYNWTo/5yeiiulY9AixHZqG4teKxFiQBe6VmKv 8LcjiBltQa6UnWWhbMl9gCxdtIG4qX7ZVHyYMPyhX6olQOpqd80aIQ0APU/ZVA== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4PzKld19B2zFKR for ; Sat, 15 Apr 2023 17:18:21 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 33FHILae085749 for ; Sat, 15 Apr 2023 17:18:21 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 33FHILqQ085748 for net@FreeBSD.org; Sat, 15 Apr 2023 17:18:21 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 269908] CARP feature breaks the network Date: Sat, 15 Apr 2023 17:18:20 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 13.1-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: zlei@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D269908 --- Comment #11 from Zhenlei Huang --- While testing carp, I see multiple issues. The fix will not come immediatel= y, so I'd like to propose you do the following to see if it helps. 1. While in the example of the man doc, host A and B are set different advs= kew, I recommend against and set advskew to a same one. So you can change vhid s= tate on either host. 2. The preferred way to make a host master or backup is `ifconfig nic0 vhid= 1 state master` or `ifconfig nic0 vhid 1 state backup`. 3. For aliases, the recommend prefixlen / netmask is 32 / 255.255.255.255 4. If `CISCO ACI endpoint table messed up`, can you try setting only virtua= l IP 10.10.4.19 on both hosts and see whether it helps or not ? i.e., only `ifco= nfig nic0 vhid 1 advskew 20 10.10.4.19/28`. Apparently the fourth suggestion has drawbacks and you lost the ability to reach exact host via host IP (not the virtual one). --=20 You are receiving this mail because: You are the assignee for the bug.=