From owner-freebsd-net@FreeBSD.ORG Mon Mar 18 21:51:16 2013 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id D309E2C9 for ; Mon, 18 Mar 2013 21:51:16 +0000 (UTC) (envelope-from ml@my.gd) Received: from mail-wg0-f43.google.com (mail-wg0-f43.google.com [74.125.82.43]) by mx1.freebsd.org (Postfix) with ESMTP id 6CA65EFD for ; Mon, 18 Mar 2013 21:51:16 +0000 (UTC) Received: by mail-wg0-f43.google.com with SMTP id e12so4928693wge.34 for ; Mon, 18 Mar 2013 14:51:09 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:references:mime-version:in-reply-to:content-type :content-transfer-encoding:message-id:cc:x-mailer:from:subject:date :to:x-gm-message-state; bh=u5nTfswZU9tXAtnhQcaghqV/iq07TlAixfU7LzbodZc=; b=AiU0XvWQJ66/AD9Mvk/dEw6+3C5VIIVMEkbV7GyFiCWzdg6NFfvE+gaW5otDgyrbhD 8wzMP6kLYW0TzesuQohb8bTOvEcQvIPWobZZQ0hZPqRd20M8ZihmKbWAOb+GPCP79Jkr o6CG5vGxmus5hCA2gEuJWg1mlL8414GFZ9/LxfzjHzz3bpj2RYlhGi+vkOZAhgnxgLgK oa7ZPoGdMCoXjhVb2VeDYQm7KN1W8KoatuBnhITUeIYoIdQoTze2h+lbyo9eASUUG1D4 y995k6UWcIUPa6qU3G6SVNxGuwZwfBHZqHk6MmiRiDPUKNDtDKV2QzUEatLx59KENuBy SrDQ== X-Received: by 10.180.13.166 with SMTP id i6mr1020165wic.21.1363643469614; Mon, 18 Mar 2013 14:51:09 -0700 (PDT) Received: from [10.208.255.159] ([92.90.16.102]) by mx.google.com with ESMTPS id j4sm3242276wiz.10.2013.03.18.14.51.08 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 18 Mar 2013 14:51:08 -0700 (PDT) References: Mime-Version: 1.0 (1.0) In-Reply-To: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-Id: X-Mailer: iPhone Mail (10B144) From: Damien Fleuriot Subject: Re: Carp strange behavior Date: Mon, 18 Mar 2013 22:50:44 +0100 To: Rafael Ganascim X-Gm-Message-State: ALoCoQnkZIqbXonG11fGUa54dY7jZAVwAyne7/54XoBei+qM9CQ1Y34iMvUXFTZHxKw0OVO2zEWZ Cc: "freebsd-net@freebsd.org" X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Mar 2013 21:51:16 -0000 On 18 Mar 2013, at 22:22, Rafael Ganascim wrote: > Hi list, > > I have multiple FreeBSD firewalls with carp working well. I have no problem > and the vast majority of firewalls works perfectly. > > But now, I'm with problems with a simple firewall cluster with carp that > the state randomly goes to MASTER and randomly returns to BACKUP. > > Looking to the L1/L2 tests, I have no rx/tx erros, buffers miss, in/out > drops , etc. The physical conection between the firewalls looks good. > > Monitoring the interfaces/buffers/mbufs/virtual memory with netstat, > vmstat.... no errors was found. > > Using tcpdump, I can see that in the exact moment of the state change, the > currently master's firewall stop sending multicasts to the 224.0.0.18 > during some seconds and the state change occurs. > > The system: > # uname -a > FreeBSD fw-cj-01 9.1-RELEASE FreeBSD 9.1-RELEASE #0: Thu Feb 28 13:18:41 > BRT 2013 root@fw-new-01:/usr/obj/usr/src/sys/DEDICr9v1CoreX64 amd64 > > > Now, how can I debug why carp stops to send multicast packets? > Lots of things to be said here. First, how do you know carp stops sending packets ? Might not be the case. Second, triple check that the VHID is not already used somewhere else. Third, any firewalling in place ? If so, disable it, check for better results. Fourth, netstat -m -p carp Fifth, raise advbase on both boxes and see if that helps. Sixth, what's the frequency of these role swaps ? Seventh, what do you get in dmesg ?