Page MenuHomeVyOS Platform

Migrate to keepalived 2.x (including IPv6 VRRP)
Closed, ResolvedPublic

Description

A supertask for all issues with VRRP and IPv6.

The situation is the following: keepalived 1.3.x made an incompatible change and no longer supports mixing IPv4 and IPv6 virtual addresses in the same VRRP instance. This is arguably a good thing, but it's still an incompatible change, and we cannot do anything about it. If we want to move forward with IPv6 VRRP in particular, or VRRP in general, we have to support it.

Besides, keepalived from Debian Jessie has some bugs that are holding us back, and that are fixed in the latest version.

The only question is how to handle it.

Option one:
Make the VRRP config script separate IPv4 and IPv6 VIPs and generate two instances. The advantage is that we can keep our CLI compatible despite the incompatible change in keepalived. The disadvantage is that it implementing IPv6-specific options such as hello source address and peer address will be awkward (remember, you can no longer advertise IPv6 VIPs over IPv4, so we'll need separate options for IPv4 and IPv6 hello source).

Option two:
Make a new vrrp6 subtree (or similar) specially for IPv6 and disallow IPv6 VIPs in the vrrp subtree. This is incompatible and nearly impossible to migrate automatically, but far cleaner.

Details

Version
-

Related Objects

Event Timeline

dmbaturin created this object with visibility "Public (No Login Required)".

My opinion is option#2 for a separate "cleaner" sub-tree for vrrp6 is best.

I think option 2 is the best, but keep in mind the VRRP version is 3, and it support both IPv4 and IPv6.

In the VRRP configuration I think a "vrrp version 2..3" should be implemented. If VRRP version 3 is configured, it may be used both for IPv4 and IPv6.

@aopdal I agree VRRPv3 supports both IPv4 and IPv6 at the protocols level, but keepalived wants groups to use either IPv4 or IPv6 addresses, but not both at the same time, so you need different groups for them in the config.

syncer triaged this task as High priority.May 21 2018, 6:30 PM
syncer moved this task from Need Triage to Backlog on the VyOS 1.2 Crux board.

Hi, I agree too in that option 2 makes more sense IMHO. It will require more effort regarding migrations, but in the long term it seems better to me.

I also agree that option 2 seems cleaner. We'll have to deal with migrations, but the result is worthwhile.

Option 2 seems best. VRRP version does not need a setting, use VRRP V2 when no vrrp6 block is present for backward compatibility. Use VRRP v3 when it is.

dmbaturin renamed this task from Migrate to keepalived 1.3.x (including IPv6 VRRP) to Migrate to keepalived 2.x (including IPv6 VRRP).Aug 4 2018, 8:08 PM
dmbaturin closed this task as Resolved.
dmbaturin closed subtask T666: Define new VRRP syntax as Resolved.
dmbaturin edited projects, added VyOS 1.2 Crux (VyOS 1.2.0-rc1); removed VyOS 1.2 Crux.