OPNsense Forum

English Forums => 24.7, 24.10 Legacy Series => Topic started by: Reggie on September 02, 2024, 07:15:22 PM

Title: Unable to remove VIP
Post by: Reggie on September 02, 2024, 07:15:22 PM
Hi there,

I'm facing a challenge in my production cluster. I've shortened the message :)

- VIP is not showing in VIP Settings
- VIP is showing in VIP Status
- Secondary firewall is receiving CARP for the removed, yet enabled, VIP
- Interface is unable to be removed because 'In use by VIP'
- Interface is unable to be enabled because 'In use by VIP'

So I have an disabled interface which is being used by a VIP and the announcement of a VIP that is not configured.

Could really use some suggestions :)



Title: Re: Unable to remove VIP
Post by: Reggie on September 03, 2024, 04:39:05 PM
I have updated my message a bit to be shorter. In hindsight this should have been in the CARP category, my apologies.
Title: Re: Unable to remove VIP
Post by: franco on September 03, 2024, 05:19:58 PM
Did you hit apply in the VIP section?


Cheers,
Franco
Title: Re: Unable to remove VIP
Post by: Reggie on September 03, 2024, 08:21:23 PM
Quote from: franco on September 03, 2024, 05:19:58 PM
Did you hit apply in the VIP section?


Cheers,
Franco

Certainly

- https://192.168.x.x/api/interfaces/vip_settings/searchItem/ returns 7 rows (with a limit of 50)
- https://192.168.x.x/api/interfaces/vip_settings/reconfigure returns {"status":"ok"}
- https://192.168.x.x/api/diagnostics/interface/get_vip_status/ returns 8 rows (limit of 50)

The disabled interface which secretly holds the VIP returns 'This IPv4 address is being used by another interface or VIP.' when I try to enable it to remove the IP.

I also have a video I can share of this behaviour. I've taken the liberty of sending it to you via DM's since it exposes some of our setup. I hope that is fine.
Title: Re: Unable to remove VIP
Post by: franco on September 03, 2024, 08:33:26 PM
Without details it's hard to guess. It looks like the item is not cleaned up on apply which would be a bug, but not why it would trigger. A reboot would probably solve this. If not something mildly related is going on here.


Cheers,
Franco
Title: Re: Unable to remove VIP
Post by: Reggie on September 04, 2024, 07:14:06 AM
Heey Franco,

Thanks for your reply, also on the video :) I suspected that a reboot was needed as well, so I scheduled a maintenance window for early this morning and rebooted the device. The secondary VIP disappeared, thanks again.
Title: Re: Unable to remove VIP
Post by: franco on September 04, 2024, 07:41:37 AM
Hi Reggie,

Ok, thanks. I want to keep an eye on this problem. From what I've seen this could be a removal edge case fail indeed just not sure how to trigger it.


Cheers,
Franco