Bug 278979 - CARP not working on 14.0-RELEASE on VMware
Summary: CARP not working on 14.0-RELEASE on VMware
Status: New
Alias: None
Product: Base System
Classification: Unclassified
Component: kern (show other bugs)
Version: 14.0-RELEASE
Hardware: amd64 Any
: --- Affects Many People
Assignee: freebsd-virtualization (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-05-14 14:00 UTC by tburns
Modified: 2024-05-30 15:03 UTC (History)
2 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description tburns 2024-05-14 14:00:54 UTC
After upgrading from from 13.2 to 14.0, CARP stopped working as expected. For one, no matter what I do with manually setting the state or adjusting the advskew, it doesn't work as expected. The same with the preempt kernel parameter. I have tried both unicast and multicast peer settings.

Here are the configs:

host1 $ ifconfig | grep 'vhid 10'
    inet 172.21.4.170 netmask 0xffffffff broadcast 172.21.4.170 vhid 10
    carp: MASTER vhid 10 advbase 1 advskew 50
host1 $ grep 'vhid 10' /etc/rc.conf
ifconfig_vmx0_alias10="inet vhid 10 advskew 50 pass redacted alias 172.21.4.170/32"
host1 $

$ export PS1='host2 $ '
host2 $ export PS1='host2 $ '^C
host2 $ ifconfig | grep 'vhid 10'
    inet 172.21.4.170 netmask 0xffffffff broadcast 172.21.4.170 vhid 10
    carp: MASTER vhid 10 advbase 1 advskew 100
host2 $ grep 'vhid 10' /etc/rc.conf
ifconfig_vmx0_alias10="inet vhid 10 advskew 100 pass redacted alias 172.21.4.170/32"
host2 $

host1 $ cat /etc/sysctl.conf
net.inet.carp.allow=1
net.inet.carp.preempt=1
net.inet.carp.log=1

Nothing has changed other than the OS version. I verified the hypervisor environment by making sure two 13.2 hosts with identical configs except their IPs work on the same vSwitch and the same ESXi hosts. I also tried changing the NIC type from VMXNET3 (vmx driver) to intel (em driver) with the same results.
Comment 1 Mark Linimon freebsd_committer freebsd_triage 2024-05-14 22:46:05 UTC
^Triage: reassign to valid address.
Comment 2 Evaldas Auryla 2024-05-30 15:03:17 UTC
Hi, to allow CARP chatting on vmware network security policies "Promiscuous mode" and "Forged transmits" should be set to "Allow".

Also see this https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277349 about the new net source validation mechanism introduced in FreeBSD 14.