Page MenuHomePhabricator

conntrack-sync no longer works with VRRP/high-availability
Open, Requires assessmentPublicBUG

Description

When trying to assign conntrack-sync to a new 'high-availability' vrrp group, it says the group does not exist.

Example:

set high-availability vrrp group int1 hello-source-address '10.60.1.3'
set high-availability vrrp group int1 interface 'eth1.200'
set high-availability vrrp group int1 peer-address '10.60.1.2'
set high-availability vrrp group int1 preempt-delay '600'
set high-availability vrrp group int1 priority '200'
set high-availability vrrp group int1 virtual-address '10.60.1.1/24'
set high-availability vrrp group int1 vrid '200'
set service conntrack-sync accept-protocol 'tcp,udp,icmp'
set service conntrack-sync event-listen-queue-size '8'
set service conntrack-sync failover-mechanism vrrp sync-group int1
set service conntrack-sync interface 'eth1.200'
set service conntrack-sync mcast-group '225.0.0.50'
set service conntrack-sync sync-queue-size '8'

When you commit it, you get this error:

vyos@fw1# commit
[ service conntrack-sync ]
conntrack-sync error: VRRP sync-group int1 is not configured

[[service conntrack-sync]] failed
Commit failed
[edit]
vyos@fw1#

I assume it works with the old style of vrrp assigned to an interface, with an explicit sync-group tag, but I didn't test it, as I didn't want to rebuild everything using the older style!

Details

Difficulty level
Unknown (require assessment)
Version
vyos-1.2.0-rolling+201907210337
Why the issue appeared?
Will be filled on close

Event Timeline

xrobau created this task.Jul 22 2019, 1:46 PM
xrobau updated the task description. (Show Details)Jul 22 2019, 1:48 PM