<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word;-webkit-nbsp-mode: space;line-break:after-white-space">
<div class="WordSection1">
<p class="MsoNormal">I’ve only used Kea in Hot-Standby configuration so I don’t have direct experience with Load-Balancing config but failover is similar.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Docs indicate that your Kea 2 host should mark Kea 1 as “partner-down” state if number of un-ack’d clients is exceeded ( 1 in your configuration ). In order for Kea 2 to detect the un-ack’d requests (that should be handled by Kea 1), the
secs (Seconds elaspsed) field must exceed max-ack-delay value ( 10 seconds in your case ).
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Do your DHCP request include the secs field and exceed 10 seconds in your tests?<o:p></o:p></p>
<p class="MsoNormal">Does “Kea 2” show any unacked-clients during your test/network disruption?
<o:p></o:p></p>
<p class="MsoNormal">(status-get cmd will show unacked-clients as well as current state).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">Kea-users <kea-users-bounces@lists.isc.org> on behalf of Mathias Aichinger <mathias.aichinger@easysol.at><br>
<b>Date: </b>Sunday, January 1, 2023 at 6:11 PM<br>
<b>To: </b>kea-users@lists.isc.org <kea-users@lists.isc.org><br>
<b>Subject: </b>[Kea-users] Load-Balancing Network issue between Relay and Kea<o:p></o:p></span></p>
</div>
<div style="border:solid #9C6500 1.0pt;padding:2.0pt 2.0pt 2.0pt 2.0pt">
<p class="MsoNormal" style="line-height:12.0pt;background:#FFEB9C"><b><span style="font-size:10.0pt;color:#9C6500">CAUTION:</span></b><span style="font-size:10.0pt;color:black"> This email originated from outside of the organization. Do not click links or open
attachments unless you recognize the sender and know the content is safe.<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<div>
<p class="MsoNormal">Hi,<br>
<br>
I currently playing around with the HA and load balancing and I one question appeared:<br>
<br>
Scenario:<br>
<br>
Multiple DHCP-Relays at different sites with both KEA-Servers as DHCP-Servers. Both servers are available and the load balancing shifts the requests between the two servers.<br>
<br>
Incident: Because of a network issue Kea 1 is not available from the clients. The network connection between Kea 1 and Kea 2 still works, so no partner-down state.<br>
<br>
Expected behaviour: Kea 2 sees the unacked clients of Kea 1 and sets Kea 1 in partner-down state and handles all requests.<br>
<br>
Experienced behaviour: Kea 2 still reports HA_BUFFER4_RECEIVE_NOT_FOR_US and does not handle the requests<br>
<br>
Is there a misunderstanding or configuration mistake on my side?<br>
<br>
{<br>
"library": "/usr/local/lib/kea//hooks/libdhcp_ha.so",<br>
"parameters": {<br>
"high-availability": [<br>
{<br>
"this-server-name": "server2",<br>
"mode": "load-balancing",<br>
"heartbeat-delay": 10000,<br>
"max-response-delay": 60000,<br>
"max-ack-delay": 10000,<br>
"max-unacked-clients": 1,<br>
"delayed-updates-limit": 100,<br>
"peers": [<br>
{<br>
"name": "server1",<br>
"url": "<a href="https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2F192.168.248.1%3A8080%2F&data=05%7C01%7Crick.frey%40windstream.com%7C03e10dc7ee6b44bf8b9508daec55f3c2%7C2567b4c1b0ed40f5aee358d7c5f3e2b2%7C0%7C0%7C638082151158318762%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=jpDZewyvQFVTEdrLMhapcgClTcerL8gfvZKK8qYeQhc%3D&reserved=0">http://192.168.248.1:8080/</a>",<br>
"role": "primary",<br>
"auto-failover": true<br>
},<br>
{<br>
"name": "server2",<br>
"url": "<a href="https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2F192.168.248.2%3A8080%2F&data=05%7C01%7Crick.frey%40windstream.com%7C03e10dc7ee6b44bf8b9508daec55f3c2%7C2567b4c1b0ed40f5aee358d7c5f3e2b2%7C0%7C0%7C638082151158318762%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Ck5xI%2B4nn6huIG9KIG2VfLItqyHWlZCbrAgKdx%2F7Nxs%3D&reserved=0">http://192.168.248.2:8080/</a>",<br>
"role": "secondary",<br>
"auto-failover": true<br>
}<br>
]<br>
}<br>
]<br>
}<br>
}<br>
<br>
Thank you,<br>
<br>
Mathias<o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="line-height:16.5pt"><span style="color:black"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</div>
<br>
<p style="font-family:Calibri;font-size:8pt;color:#000000;margin:15pt;" align="Left">
Sensitivity: Internal<br>
</p>
</body>
</html>