Unable to remove VIP

Started by Reggie, September 02, 2024, 07:15:22 PM

Previous topic - Next topic
September 02, 2024, 07:15:22 PM Last Edit: September 03, 2024, 04:38:31 PM by Reggie
Hi there,

I'm facing a challenge in my production cluster. I've shortened the message :)

- VIP is not showing in VIP Settings
- VIP is showing in VIP Status
- Secondary firewall is receiving CARP for the removed, yet enabled, VIP
- Interface is unable to be removed because 'In use by VIP'
- Interface is unable to be enabled because 'In use by VIP'

So I have an disabled interface which is being used by a VIP and the announcement of a VIP that is not configured.

Could really use some suggestions :)




I have updated my message a bit to be shorter. In hindsight this should have been in the CARP category, my apologies.

Did you hit apply in the VIP section?


Cheers,
Franco
"AI has absolutely reduced the cost of creating technical debt." -- ChatGPT

Quote from: franco on September 03, 2024, 05:19:58 PM
Did you hit apply in the VIP section?


Cheers,
Franco

Certainly

- https://192.168.x.x/api/interfaces/vip_settings/searchItem/ returns 7 rows (with a limit of 50)
- https://192.168.x.x/api/interfaces/vip_settings/reconfigure returns {"status":"ok"}
- https://192.168.x.x/api/diagnostics/interface/get_vip_status/ returns 8 rows (limit of 50)

The disabled interface which secretly holds the VIP returns 'This IPv4 address is being used by another interface or VIP.' when I try to enable it to remove the IP.

I also have a video I can share of this behaviour. I've taken the liberty of sending it to you via DM's since it exposes some of our setup. I hope that is fine.

Without details it's hard to guess. It looks like the item is not cleaned up on apply which would be a bug, but not why it would trigger. A reboot would probably solve this. If not something mildly related is going on here.


Cheers,
Franco
"AI has absolutely reduced the cost of creating technical debt." -- ChatGPT

Heey Franco,

Thanks for your reply, also on the video :) I suspected that a reboot was needed as well, so I scheduled a maintenance window for early this morning and rebooted the device. The secondary VIP disappeared, thanks again.

Hi Reggie,

Ok, thanks. I want to keep an eye on this problem. From what I've seen this could be a removal edge case fail indeed just not sure how to trigger it.


Cheers,
Franco
"AI has absolutely reduced the cost of creating technical debt." -- ChatGPT