Page MenuHomeVyOS Platform

VRRP with conntrack-sync does not work
Closed, ResolvedPublicBUG

Description

Tested in VyOS 1.4-rolling-202201060842

To recreate:

set high-availability vrrp group LAN interface 'eth1'
set high-availability vrrp group LAN no-preempt
set high-availability vrrp group LAN priority '200'
set high-availability vrrp group LAN address '10.0.0.5/24'
set high-availability vrrp group LAN vrid '101'
set high-availability vrrp group WAN interface 'eth0'
set high-availability vrrp group WAN no-preempt
set high-availability vrrp group WAN priority '200'
set high-availability vrrp group WAN address '192.168.0.5/27'
set high-availability vrrp group WAN vrid '100'
set high-availability vrrp sync-group SYNCgrp member 'LAN'
set high-availability vrrp sync-group SYNCgrp member 'WAN'
set interfaces ethernet eth0 address '169.254.0.2/27'
set interfaces ethernet eth0 description 'outside'
set interfaces ethernet eth1 address '10.0.0.2/24'
set interfaces ethernet eth1 description 'inside'
set interfaces ethernet eth3 address '169.254.3.2/24'
set service conntrack-sync accept-protocol 'tcp'
set service conntrack-sync accept-protocol 'udp'
set service conntrack-sync accept-protocol 'icmp'
set service conntrack-sync disable-external-cache
set service conntrack-sync failover-mechanism vrrp sync-group 'SYNCgrp'
set service conntrack-sync interface eth3
set system host-name 'VyOS-B'

[email protected]:~$ sh vrrp
VRRP is not running

restart vrrp starts VRRP but conntrack-sync does not work
And VRRP doesn't start after reboot

VRRP logs after reboot:

[email protected]:~$ journalctl -b | grep keepal
Jan 07 07:18:08 VyOS-B Keepalived[1577]: Command line: '/usr/sbin/keepalived' '--use-file' '/run/keepalived/keepalived.conf' '--pid'
Jan 07 07:18:08 VyOS-B Keepalived[1577]:               '/run/keepalived/keepalived.pid' '--dont-fork' '--snmp'
Jan 07 07:18:08 VyOS-B Keepalived[1577]: Configuration file /run/keepalived/keepalived.conf
Jan 07 07:18:08 VyOS-B Keepalived[1577]: NOTICE: setting config option max_auto_priority should result in better keepalived performance
Jan 07 07:18:11 VyOS-B keepalived-fifo.py[1587]: Starting FIFO pipe for Keepalived
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: Loaded configuration: {'group': {'LAN': {'address': ['10.0.0.5/24'], 'interface': 'eth1', 'no_preempt': {}, 'priority': '200', 'vrid': '101'}, 'WAN': {'address': ['192.168.0.5/27'], 'interface': 'eth0', 'no_preempt': {}, 'priority': '200', 'vrid': '100'}}, 'sync_group': {'SYNCgrp': {'member': ['LAN', 'WAN']}}}
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: PIPE already exist: /run/keepalived/keepalived_notify_fifo
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: Message reading start
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: Message processing start
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: Received message: GROUP "SYNCgrp" BACKUP 0
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: GROUP SYNCgrp changed state to BACKUP
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: Received message: INSTANCE "LAN" BACKUP 200
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: INSTANCE LAN changed state to BACKUP
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: Received message: INSTANCE "WAN" BACKUP 200
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: INSTANCE WAN changed state to BACKUP
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: Received message: INSTANCE "WAN" MASTER 200
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: INSTANCE WAN changed state to MASTER
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: Received message: INSTANCE "LAN" MASTER 200
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: INSTANCE LAN changed state to MASTER
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: Received message: GROUP "SYNCgrp" MASTER 0
Jan 07 07:18:13 VyOS-B keepalived-fifo.py[1587]: GROUP SYNCgrp changed state to MASTER
Jan 07 07:18:23 VyOS-B keepalived-fifo.py[1587]: Ending processing: Received SIGTERM signal
Jan 07 07:18:23 VyOS-B keepalived-fifo.py[1587]: Closing FIFO pipe
Jan 07 07:18:23 VyOS-B keepalived-fifo.py[1587]: Received message: INSTANCE "LAN" STOP 200
Jan 07 07:18:23 VyOS-B keepalived-fifo.py[1587]: INSTANCE LAN changed state to STOP
Jan 07 07:18:23 VyOS-B keepalived-fifo.py[1587]: Received message: INSTANCE "WAN" STOP 200
Jan 07 07:18:23 VyOS-B keepalived-fifo.py[1587]: INSTANCE WAN changed state to STOP
Jan 07 07:18:23 VyOS-B keepalived-fifo.py[1587]: Received message: GROUP "SYNCgrp" STOP 0
Jan 07 07:18:23 VyOS-B keepalived-fifo.py[1587]: GROUP SYNCgrp changed state to STOP
Jan 07 07:18:23 VyOS-B keepalived-fifo.py[1587]: Terminating messages processing thread
Jan 07 07:18:24 VyOS-B systemd[1]: keepalived.service: Succeeded.
Jan 07 07:18:24 VyOS-B systemd[1]: keepalived.service: Consumed 2.058s CPU time.

Details

Difficulty level
Unknown (require assessment)
Version
VyOS 1.4-rolling-202201060842
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)

Event Timeline

The situation has not changed in VyOS 1.4-rolling-202201070726

Viacheslav changed the task status from Open to In progress.Jan 8 2022, 10:50 AM
Viacheslav claimed this task.
Viacheslav changed the subtype of this task from "Task" to "Bug".

Re-tested in VyOS 1.4-rolling-202201140317
Now it works, thank you!