Page MenuHomeVyOS Platform
Create Task
Maniphest T3316

Use Kea DHCP(v6) instead of ISC DHCP(v6)
In progress, HighPublicFEATURE REQUEST
Actions

Description

Let's consider using ISC Kea instead of ISC DHCP

Perhaps we can get more complete support through migration

This is just a draft, if we can really improve the situation by replacing ISC, I don't see any reason why we shouldn't consider moving

There seems to be no officially packaged Kea on the existing Debian package system, which probably means that if we want to migrate to Kea, we'll need to maintain a package ourselves

https://packages.debian.org/sid/kea

This is a packaged code repository for isc-kea found upstream, but only 1.7.5-1, not the latest version, and may serve as a reference

https://salsa.debian.org/debian/isc-kea

Details

Difficulty level
Normal (likely a few hours)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedBUGc-poT421 Add Pv6 prefix delegation support
 OpenBUGNoneT3315 Supports dhcpv6 agent execution from pppoe0 interface
 In progressFEATURE REQUESTsdevT3316 Use Kea DHCP(v6) instead of ISC DHCP(v6)

Event Timeline

jack9603301 renamed this task from Use Kea DHCP instead of ISC DHCP to Use Kea DHCP(v6) instead of ISC DHCP(v6).Feb 16 2021, 8:56 AM
jack9603301 created this task.
jack9603301 changed the subtype of this task from "Bug" to "Feature Request".
jack9603301 updated the task description. (Show Details)Feb 16 2021, 10:29 AM
pasik added a subscriber: pasik.Feb 16 2021, 11:49 AM
jack9603301 updated the task description. (Show Details)Feb 17 2021, 4:30 AM
jack9603301 triaged this task as Wishlist priority.Feb 17 2021, 11:32 AM
jack9603301 updated the task description. (Show Details)Feb 17 2021, 11:48 AM
jack9603301 updated the task description. (Show Details)
jack9603301 updated the task description. (Show Details)Feb 17 2021, 11:57 AM
c-po added a subscriber: c-po.Feb 17 2021, 1:22 PM

DHCPd shold be vonsistent for both v4 and v6 - running different daemons is simply bad.

jack9603301 added subscribers: zsdc, dmbaturin.Feb 17 2021, 1:28 PM

@dmbaturin @zsdc Perhaps we could discuss the possibility of changing the dhcp(v6) server to a better server (and what feature changes might exist), which I hope will address the older ISC's better support for interfaces such as PPPOE and the latest dhcp(v6) standard

jack9603301 updated the task description. (Show Details)Feb 18 2021, 7:40 AM
Viacheslav changed Difficulty level from Unknown (require assessment) to Normal (likely a few hours).Feb 22 2021, 10:34 AM
MrLenin added a subscriber: MrLenin.Apr 20 2021, 1:41 AM
syncer edited projects, added VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus.Nov 6 2021, 11:24 AM
Viacheslav mentioned this in T3977: dhcp-relay-agent uses "physical" IP instead of vrrp IP.Feb 14 2022, 7:45 PM
eronlloyd added a subscriber: eronlloyd.Feb 21 2022, 11:20 AM
eronlloyd added a comment.Feb 21 2022, 11:26 AM

ISC will be decommissioning dhcpd at some point and continuing to work on Kea:

ISC has developed a new DHCP server, Kea, which we intend to eventually replace ISC DHCP in most server implementations. We recommend that new implementers use Kea and implement ISC DHCP only if Kea does not meet their needs. The Kea distribution does not currently include either a client or a relay.

A transition plan, however long it takes, is a good idea.

olofl mentioned this in T3771: DHCPv6 server prefix delegation - dynamically add route to delegated prefix via requesting router.Feb 23 2022, 9:28 AM
syncer edited projects, added VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).Aug 29 2022, 7:04 AM
victorhooi added a subscriber: victorhooi.Oct 11 2022, 2:52 PM

I believe the ISC DHCP is now officially deprecated and EOLed:

https://www.isc.org/blogs/isc-dhcp-eol/

I saw in the first comment, it mentioned there's no official Debian packages for Kea (at the time I assume).

However, I just checked and there do seem to be Kea packages - currently at version 2.2.0:

https://packages.debian.org/sid/kea
https://packages.debian.org/bookworm/kea

Version 2.2.0 was released in July 2022 (https://www.isc.org/blogs/kea-2-2-0/) - so the Debian packages appear fairly up to date.

Does that help things at all?

Viacheslav removed a project: VyOS 1.3 Equuleus (1.3.3).Oct 11 2022, 9:17 PM
Dmitry added a subscriber: Dmitry.Oct 12 2022, 6:56 AM
Viacheslav added a subscriber: Viacheslav.Oct 13 2022, 11:40 AM

KEA DHCP have some hook limitations https://kea.readthedocs.io/en/kea-2.2.0/arm/hooks.html?#available-hook-libraries

sdev added a subscriber: sdev.Oct 14 2022, 8:53 PM
syncer raised the priority of this task from Wishlist to High.Oct 16 2022, 10:20 PM
syncer added a subscriber: syncer.

Basically,
all commercial hooks need to be implemented

fernando added a subscriber: fernando.Oct 17 2022, 12:11 PM
njh awarded a token.Oct 18 2022, 11:04 AM
njh added a subscriber: njh.
sdev mentioned this in T5003: Upgrade base system to Debian 12 "Bookworm".Feb 13 2023, 12:41 AM
fernando added a comment.Wed, Mar 1, 6:28 PM

Add another feature that is improved if we're thinking of moving to KEA :

https://vyos.dev/T5044

sdev changed the task status from Open to In progress.Thu, Mar 2, 1:41 PM
sdev claimed this task.
sdev moved this task from Need Triage to In Progress on the VyOS 1.4 Sagitta board.

Have started work on migrating isc-dhcp v4/v6 server to Kea.

Migration might cause a fair amount of breakage. Notable issues so far:

  • global-parameters, shared-network-parameters and subnet-parameters nodes will be deleted on migration (likely to be the biggest issue)
  • ping-check no longer available
njh added a comment.Thu, Mar 2, 2:08 PM

I was interested in why ping-check is no longer available.
There is a good article about it here:
https://kb.isc.org/docs/why-doesnt-kea-support-ping-check

indrajitr added a subscriber: indrajitr.Fri, Mar 3, 4:30 AM
Viacheslav mentioned this in T4973: show dhcp server leases error for lease time 4294967295.Mon, Mar 6, 10:23 AM
MartB added a subscriber: MartB.Fri, Mar 10, 5:27 PM

@sdev just for clarification do you mean "deleted" as in only existing entries but new ones will work or completely deleted?
Im asking because I do use keas global, subnet, pool and class option-data support extensively outside of vyos.
If this would stay/become a part of vyos that would be great!