From owner-freebsd-current@FreeBSD.ORG Thu Jul 16 18:46:45 2009 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6A9941065672 for ; Thu, 16 Jul 2009 18:46:45 +0000 (UTC) (envelope-from delphij@delphij.net) Received: from tarsier.delphij.net (delphij-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:2c9::2]) by mx1.freebsd.org (Postfix) with ESMTP id F08988FC15 for ; Thu, 16 Jul 2009 18:46:44 +0000 (UTC) (envelope-from delphij@delphij.net) Received: from tarsier.geekcn.org (tarsier.geekcn.org [211.166.10.233]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by tarsier.delphij.net (Postfix) with ESMTPS id E50935C024 for ; Fri, 17 Jul 2009 02:46:43 +0800 (CST) Received: from localhost (tarsier.geekcn.org [211.166.10.233]) by tarsier.geekcn.org (Postfix) with ESMTP id 8D85655CD83A; Fri, 17 Jul 2009 02:46:43 +0800 (CST) X-Virus-Scanned: amavisd-new at geekcn.org Received: from tarsier.geekcn.org ([211.166.10.233]) by localhost (mail.geekcn.org [211.166.10.233]) (amavisd-new, port 10024) with ESMTP id ccvKp5taAeLU; Fri, 17 Jul 2009 02:45:44 +0800 (CST) Received: from charlie.delphij.net (adsl-76-237-33-62.dsl.pltn13.sbcglobal.net [76.237.33.62]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by tarsier.geekcn.org (Postfix) with ESMTPSA id 9C37655CD61B; Fri, 17 Jul 2009 02:45:38 +0800 (CST) DomainKey-Signature: a=rsa-sha1; s=default; d=delphij.net; c=nofws; q=dns; h=message-id:date:from:reply-to:organization:user-agent: mime-version:to:cc:subject:references:in-reply-to: x-enigmail-version:openpgp:content-type:content-transfer-encoding; b=MOWHwMQ80vJwZS+0SEqRnPFe3E2tweDpkCX3N2TrokqnorsecP+ap7ozM0FOapr/i C/HRaOtn+jZCOwQcAsYiw== Message-ID: <4A5F7540.7070201@delphij.net> Date: Thu, 16 Jul 2009 11:45:20 -0700 From: Xin LI Organization: The FreeBSD Project User-Agent: Thunderbird 2.0.0.22 (X11/20090701) MIME-Version: 1.0 To: Ian FREISLICH References: <4A5EF889.6040604@delphij.net> In-Reply-To: X-Enigmail-Version: 0.95.7 OpenPGP: id=18EDEBA0; url=http://www.delphij.net/delphij.asc Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: FreeBSD Current , d@delphij.net Subject: Re: CARP broken on -CURRENT? X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: d@delphij.net List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jul 2009 18:46:45 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ian FREISLICH wrote: [...] > I have noticed that if there are multiple IP addresses on the carp > interface and these are configured in a different order on each > host, the you can expect messages like the following: > > Jun 9 23:56:29 firewall2 kernel: carp15: incorrect hash > Jun 9 23:56:30 firewall2 kernel: carp15: incorrect hash > Jun 9 23:56:31 firewall2 kernel: carp15: incorrect hash > Jun 9 23:56:32 firewall2 kernel: carp15: incorrect hash > > And both hosts will claim MASTER status. This reminded me... I've set net.inet.carp.log=2 now but except some bad CARP packets on the outside (12.xxx.xxx.112/28) network due to VRRP router, I didn't saw any complain about incorrect hash. Are you using "pass" parameter when setting up CARP? On server 1: carp0: flags=49 metric 0 mtu 1500 inet 12.xxx.xxx.116 netmask 0xfffffff0 inet 12.xxx.xxx.120 netmask 0xfffffff0 inet 12.xxx.xxx.122 netmask 0xfffffff0 inet 12.xxx.xxx.124 netmask 0xfffffff0 inet 12.xxx.xxx.126 netmask 0xfffffff0 carp: MASTER vhid 10 advbase 1 advskew 0 carp1: flags=49 metric 0 mtu 1500 inet 12.xxx.xxx.119 netmask 0xfffffff0 inet 12.xxx.xxx.121 netmask 0xfffffff0 inet 12.xxx.xxx.123 netmask 0xfffffff0 inet 12.xxx.xxx.125 netmask 0xfffffff0 carp: MASTER vhid 20 advbase 20 advskew 20 carp2: flags=49 metric 0 mtu 1500 inet 10.255.0.4 netmask 0xfffffe00 carp: MASTER vhid 30 advbase 1 advskew 0 carp3: flags=49 metric 0 mtu 1500 inet 10.255.0.3 netmask 0xfffffe00 carp: MASTER vhid 40 advbase 20 advskew 20 On server 2: carp0: flags=49 metric 0 mtu 1500 inet 12.xxx.xxx.116 netmask 0xfffffff0 inet 12.xxx.xxx.120 netmask 0xfffffff0 inet 12.xxx.xxx.122 netmask 0xfffffff0 inet 12.xxx.xxx.124 netmask 0xfffffff0 inet 12.xxx.xxx.126 netmask 0xfffffff0 carp: MASTER vhid 10 advbase 20 advskew 20 carp1: flags=49 metric 0 mtu 1500 inet 12.xxx.xxx.119 netmask 0xfffffff0 inet 12.xxx.xxx.121 netmask 0xfffffff0 inet 12.xxx.xxx.123 netmask 0xfffffff0 inet 12.xxx.xxx.125 netmask 0xfffffff0 carp: MASTER vhid 20 advbase 1 advskew 0 carp2: flags=49 metric 0 mtu 1500 inet 10.255.0.4 netmask 0xfffffe00 carp: MASTER vhid 30 advbase 20 advskew 20 carp3: flags=49 metric 0 mtu 1500 inet 10.255.0.3 netmask 0xfffffe00 carp: MASTER vhid 40 advbase 1 advskew 0 Cheers, - -- Xin LI http://www.delphij.net/ FreeBSD - The Power to Serve! -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.12 (FreeBSD) iEYEARECAAYFAkpfdT8ACgkQi+vbBBjt66Cp2gCfVv/3J10SY0XmbwZYLW76sg4I 9XEAnRiMe4kQYOq68nOhZWvVhOTK2rtc =VTWT -----END PGP SIGNATURE-----