Re: HELP! Keepalived 1.2.13 VRRP on Amazon EC2 (Non VPC)

Hi,

Tcpdump on NODE A is not able to see VRRP packet send by other node or vice
versa. This indicates the problem is outside of the keepalived host.

VRRP Protocol Packet is getting dropped (probably security group settings
needs to be adjusted







On Tue, Jul 1, 2014 at 2:55 PM, Christopher Rose <
[email protected]> wrote:

> Ranjith,
>
> When I do tcpdump (*tcpdump -i eth0 vrrp -n*) from *LB1 (IP:
> 10.xx.xx.171)* I get:
>
> 09:21:15.221833 IP 10.xx.xx.171 > 10.xx.xx.211: VRRPv2, Advertisement,
> vrid 51, prio 103, authtype none, intvl 1s, length 16
>
> 09:21:16.222004 IP 10.xx.xx.171 > 10.xx.xx.211: VRRPv2, Advertisement,
> vrid 51, prio 103, authtype none, intvl 1s, length 16
>
> 09:21:17.223151 IP 10.xx.xx.171 > 10.xx.xx.211: VRRPv2, Advertisement,
> vrid 51, prio 103, authtype none, intvl 1s, length 16
>
> 09:21:18.223428 IP 10.xx.xx.171 > 10.xx.xx.211: VRRPv2, Advertisement,
> vrid 51, prio 103, authtype none, intvl 1s, length 16
>
> 09:21:19.224607 IP 10.xx.xx.171 > 10.xx.xx.211: VRRPv2, Advertisement,
> vrid 51, prio 103, authtype none, intvl 1s, length 16
>
> 09:21:20.224886 IP 10.xx.xx.171 > 10.xx.xx.211: VRRPv2, Advertisement,
> vrid 51, prio 103, authtype none, intvl 1s, length 16
>
> and doing tcpdump (*tcpdump -i eth0 vrrp -n*) on *LB2 (IP:10.xx.xx.211 )*
> I get:
>
> 09:23:30.495369 IP 10.xx.xx.211 > 10.xx.xx.171: VRRPv2, Advertisement,
> vrid 51, prio 52, authtype none, intvl 1s, length 16
>
> 09:23:31.495482 IP 10.xx.xx.211 > 10.xx.xx.171: VRRPv2, Advertisement,
> vrid 51, prio 52, authtype none, intvl 1s, length 16
>
> 09:23:32.496615 IP 10.xx.xx.211 > 10.xx.xx.171: VRRPv2, Advertisement,
> vrid 51, prio 52, authtype none, intvl 1s, length 16
>
> 09:23:33.496752 IP 10.xx.xx.211 > 10.xx.xx.171: VRRPv2, Advertisement,
> vrid 51, prio 52, authtype none, intvl 1s, length 16
>
>
>
> On 1 July 2014 10:17, Christopher Rose <[email protected]>
> wrote:
>
>> Hi All, Logs from LB1 (after restarting service):
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]: Opening file
>> '/etc/keepalived/keepalived.conf'.
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]: Configuration is
>> using : 64284 Bytes
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_healthcheckers[11121]:
>> Configuration is using : 7527 Bytes
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]: ------< Global
>> definitions >------
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:  Router ID =
>> LVS_DEVEL
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_healthcheckers[11121]:
>> ------< Global definitions >------
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:  Smtp server =
>> 0.0.0.0
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:  Smtp server
>> connection timeout = 30
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:  Email
>> notification from = [email protected]
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:  Email
>> notification = [email protected]
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:  VRRP IPv4 mcast
>> group = 224.0.0.18
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:  VRRP IPv6 mcast
>> group = 224.0.0.18
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]: ------< VRRP
>> Topology >------
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:  VRRP Instance =
>> VI_1
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Want State =
>> MASTER
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Runing on
>> device = eth0
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Using src_ip
>> = 10.xx.xx.171
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Virtual
>> Router ID = 51
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Priority = 101
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Advert
>> interval = 1sec
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Tracked
>> scripts = 1
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:      chk_haproxy
>> weight 2
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Unicast Peer
>> = 1
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:      10.xx.xx.211
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Master state
>> transition script = /etc/keepalived/vrrp.sh
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]: ------< VRRP
>> Scripts >------
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:  VRRP Script =
>> chk_haproxy
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Command =
>> killall -0 haproxy
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Interval = 2
>> sec
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Timeout = 0
>> sec
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Weight = 2
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Rise = 1
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Fall = 1
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:    Status = INIT
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]: Using LinkWatch
>> kernel netlink reflector...
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]: VRRP sockpool:
>> [ifindex(2), proto(112), unicast(1), fd(10,11)]
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_healthcheckers[11121]:
>> Router ID = LVS_DEVEL
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_healthcheckers[11121]:  Smtp
>> server = 0.0.0.0
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_healthcheckers[11121]:  Smtp
>> server connection timeout = 30
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_healthcheckers[11121]:  Email
>> notification from = [email protected]
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_healthcheckers[11121]:  Email
>> notification = [email protected]
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_healthcheckers[11121]:  VRRP
>> IPv4 mcast group = 224.0.0.18
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_healthcheckers[11121]:  VRRP
>> IPv6 mcast group = 224.0.0.18
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_healthcheckers[11121]:
>> ------< SSL definitions >------
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_healthcheckers[11121]:  Using
>> autogen SSL context
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_healthcheckers[11121]: Using
>> LinkWatch kernel netlink reflector...
>>
>> Jul  1 09:11:45 ip-10--xx-xx-171 Keepalived_vrrp[11122]:
>> VRRP_Script(chk_haproxy) succeeded
>>
>> Jul  1 09:11:46 ip-10--xx-xx-171 Keepalived_vrrp[11122]:
>> VRRP_Instance(VI_1) Transition to MASTER STATE
>>
>> Jul  1 09:11:47 ip-10--xx-xx-171 Keepalived_vrrp[11122]:
>> VRRP_Instance(VI_1) Entering MASTER STATE
>>
>>
>>
>> Logs on LB2 (After restarting service):
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]: Opening file
>> '/etc/keepalived/keepalived.conf'.
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_healthcheckers[7622]:
>> Configuration is using : 7527 Bytes
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]: Configuration is
>> using : 64284 Bytes
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]: ------< Global
>> definitions >------
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:  Router ID =
>> LVS_DEVEL
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:  Smtp server =
>> 0.0.0.0
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:  Smtp server
>> connection timeout = 30
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:  Email
>> notification from = [email protected]
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:  Email
>> notification = [email protected]
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:  VRRP IPv4 mcast
>> group = 224.0.0.18
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:  VRRP IPv6 mcast
>> group = 224.0.0.18
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]: ------< VRRP
>> Topology >------
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:  VRRP Instance =
>> VI_1
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Want State =
>> BACKUP
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Runing on
>> device = eth0
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Using src_ip =
>> 10.xx.xx.211
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Virtual Router
>> ID = 51
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Priority = 50
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Advert interval
>> = 1sec
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Tracked scripts
>> = 1
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:      chk_haproxy
>> weight 2
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Unicast Peer = 1
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:      10.xx.xx.171
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Master state
>> transition script = /etc/keepalived/vrrp.sh
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]: ------< VRRP
>> Scripts >------
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:  VRRP Script =
>> chk_haproxy
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Command =
>> killall -0 haproxy
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Interval = 2 sec
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Timeout = 0 sec
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Weight = 2
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Rise = 1
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Fall = 1
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:    Status = INIT
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]: Using LinkWatch
>> kernel netlink reflector...
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:
>> VRRP_Instance(VI_1) Entering BACKUP STATE
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]: VRRP sockpool:
>> [ifindex(2), proto(112), unicast(1), fd(10,11)]
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_healthcheckers[7622]: ------<
>> Global definitions >------
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_healthcheckers[7622]:  Router
>> ID = LVS_DEVEL
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_healthcheckers[7622]:  Smtp
>> server = 0.0.0.0
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_healthcheckers[7622]:  Smtp
>> server connection timeout = 30
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_healthcheckers[7622]:  Email
>> notification from = [email protected]
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_healthcheckers[7622]:  Email
>> notification = [email protected]
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_healthcheckers[7622]:  VRRP
>> IPv4 mcast group = 224.0.0.18
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_healthcheckers[7622]:  VRRP
>> IPv6 mcast group = 224.0.0.18
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_healthcheckers[7622]: ------<
>> SSL definitions >------
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_healthcheckers[7622]:  Using
>> autogen SSL context
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_healthcheckers[7622]: Using
>> LinkWatch kernel netlink reflector...
>>
>> Jul  1 09:15:07 ip-10-xx-xx-211 Keepalived_vrrp[7623]:
>> VRRP_Script(chk_haproxy) succeeded
>>
>> Jul  1 09:15:11 ip-10-xx-xx-211 Keepalived_vrrp[7623]:
>> VRRP_Instance(VI_1) Transition to MASTER STATE
>>
>> Jul  1 09:15:12 ip-10-xx-xx-211 Keepalived_vrrp[7623]:
>> VRRP_Instance(VI_1) Entering MASTER STATE
>>
>>
>> IPtables service is off and the AWS security group is allow all TCP,UDP
>> and ICMP from Any IP (I know this is not ideal but for troubleshooting
>> purposes set it up this way).
>>
>
>

------------------------------------------------------------------------------
Open source business process management suite built on Java and Eclipse
Turn processes into business applications with Bonita BPM Community Edition
Quickly connect people, data, and systems into organized workflows
Winner of BOSSIE, CODIE, OW2 and Gartner awards
http://p.sf.net/sfu/Bonitasoft

_______________________________________________
Keepalived-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/keepalived-devel