Unable to remove VIP

[Reggie]

Hi there,

I'm facing a challenge in my production cluster. I've shortened the message

- VIP is not showing in VIP Settings
- VIP is showing in VIP Status
- Secondary firewall is receiving CARP for the removed, yet enabled, VIP
- Interface is unable to be removed because 'In use by VIP'
- Interface is unable to be enabled because 'In use by VIP'

So I have an disabled interface which is being used by a VIP and the announcement of a VIP that is not configured.

Could really use some suggestions

[Reggie]

I have updated my message a bit to be shorter. In hindsight this should have been in the CARP category, my apologies.

[franco]

Did you hit apply in the VIP section?


Cheers,
Franco

[Reggie]

Did you hit apply in the VIP section?


Cheers,
Franco

Certainly

- https://192.168.x.x/api/interfaces/vip_settings/searchItem/ returns 7 rows (with a limit of 50)
- https://192.168.x.x/api/interfaces/vip_settings/reconfigure returns {"status":"ok"}
- https://192.168.x.x/api/diagnostics/interface/get_vip_status/ returns 8 rows (limit of 50)

The disabled interface which secretly holds the VIP returns 'This IPv4 address is being used by another interface or VIP.' when I try to enable it to remove the IP.

I also have a video I can share of this behaviour. I've taken the liberty of sending it to you via DM's since it exposes some of our setup. I hope that is fine.

[franco]

Without details it's hard to guess. It looks like the item is not cleaned up on apply which would be a bug, but not why it would trigger. A reboot would probably solve this. If not something mildly related is going on here.


Cheers,
Franco

[Reggie]

Heey Franco,

Thanks for your reply, also on the video I suspected that a reboot was needed as well, so I scheduled a maintenance window for early this morning and rebooted the device. The secondary VIP disappeared, thanks again.

[franco]

Hi Reggie,

Ok, thanks. I want to keep an eye on this problem. From what I've seen this could be a removal edge case fail indeed just not sure how to trigger it.


Cheers,
Franco