<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Thank you for your answers.<div class=""><br class=""></div><div class="">Unfortunately it's not increasing the unacked packets and I have many log outputs with following:</div><div class=""><br class=""></div><div class="">2023-01-04 17:29:04.289 DEBUG [kea-dhcp4.ha-hooks/1427854.139856620329408] HA_BUFFER4_RECEIVE_NOT_FOR_US [hwtype=1], cid=[], tid=0x4036b3d: dropping query to be processed by another server</div><div class=""><br class=""></div><div class="">But these packets cannot be processed by the other server because I'm dropping them for testing purposes.</div><div class=""><br class=""></div><div class="">Maybe somebody from the KEA team can clarify?</div><div class=""><br class=""></div><div class="">Best Regards,</div><div class=""><br class=""></div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 02.01.2023, at 15:50, Frey, Rick E <<a href="mailto:Rick.Frey@windstream.com" class="">Rick.Frey@windstream.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta charset="UTF-8" class=""><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">I’ve only used Kea in Hot-Standby configuration so I don’t have direct experience with Load-Balancing config but failover is similar. <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Docs indicate that your Kea 2 host should mark Kea 1 as “partner-down” state if number of un-ack’d clients is exceeded ( 1 in your configuration ).  In order for Kea 2 to detect the un-ack’d requests (that should be handled by Kea 1), the secs (Seconds elaspsed) field must exceed max-ack-delay value ( 10 seconds in your case ). <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Do your DHCP request include the secs field and exceed 10 seconds in your tests?<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Does “Kea 2” show any unacked-clients during your test/network disruption? <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">(status-get cmd will show unacked-clients as well as current state).<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(181, 196, 223); padding: 3pt 0in 0in;" class=""><p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 11pt; font-family: Calibri, sans-serif;"><b class=""><span style="font-size: 12pt;" class="">From:<span class="Apple-converted-space"> </span></span></b><span style="font-size: 12pt;" class="">Kea-users <<a href="mailto:kea-users-bounces@lists.isc.org" style="color: blue; text-decoration: underline;" class="">kea-users-bounces@lists.isc.org</a>> on behalf of Mathias Aichinger <<a href="mailto:mathias.aichinger@easysol.at" style="color: blue; text-decoration: underline;" class="">mathias.aichinger@easysol.at</a>><br class=""><b class="">Date:<span class="Apple-converted-space"> </span></b>Sunday, January 1, 2023 at 6:11 PM<br class=""><b class="">To:<span class="Apple-converted-space"> </span></b><a href="mailto:kea-users@lists.isc.org" style="color: blue; text-decoration: underline;" class="">kea-users@lists.isc.org</a><span class="Apple-converted-space"> </span><<a href="mailto:kea-users@lists.isc.org" style="color: blue; text-decoration: underline;" class="">kea-users@lists.isc.org</a>><br class=""><b class="">Subject:<span class="Apple-converted-space"> </span></b>[Kea-users] Load-Balancing Network issue between Relay and Kea<o:p class=""></o:p></span></p></div><div style="border: 1pt solid rgb(156, 101, 0); padding: 2pt;" class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 12pt; background-color: rgb(255, 235, 156);" class=""><b class=""><span style="font-size: 10pt; color: rgb(156, 101, 0);" class="">CAUTION:</span></b><span style="font-size: 10pt;" class=""><span class="Apple-converted-space"> </span>This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.<o:p class=""></o:p></span></div></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div class=""><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Hi,<br class=""><br class="">I currently playing around with the HA and load balancing and I one question appeared:<br class=""><br class="">Scenario:<br class=""><br class="">Multiple DHCP-Relays at different sites with both KEA-Servers as DHCP-Servers. Both servers are available and the load balancing shifts the requests between the two servers.<br class=""><br class="">Incident: Because of a network issue Kea 1 is not available from the clients. The network connection between Kea 1 and Kea 2 still works, so no partner-down state.<br class=""><br class="">Expected behaviour: Kea 2 sees the unacked clients of Kea 1 and sets Kea 1 in partner-down state and handles all requests.<br class=""><br class="">Experienced behaviour: Kea 2 still reports HA_BUFFER4_RECEIVE_NOT_FOR_US and does not handle the requests<br class=""><br class="">Is there a misunderstanding or configuration mistake on my side?<br class=""><br class="">{<br class="">         "library": "/usr/local/lib/kea//hooks/libdhcp_ha.so",<br class="">         "parameters": {<br class="">           "high-availability": [<br class="">             {<br class="">               "this-server-name": "server2",<br class="">               "mode": "load-balancing",<br class="">               "heartbeat-delay": 10000,<br class="">               "max-response-delay": 60000,<br class="">               "max-ack-delay": 10000,<br class="">               "max-unacked-clients": 1,<br class="">               "delayed-updates-limit": 100,<br class="">               "peers": [<br class="">                 {<br class="">                   "name": "server1",<br class="">                   "url": "<a href="https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2F192.168.248.1%3A8080%2F&data=05%7C01%7Crick.frey%40windstream.com%7C03e10dc7ee6b44bf8b9508daec55f3c2%7C2567b4c1b0ed40f5aee358d7c5f3e2b2%7C0%7C0%7C638082151158318762%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=jpDZewyvQFVTEdrLMhapcgClTcerL8gfvZKK8qYeQhc%3D&reserved=0" style="color: blue; text-decoration: underline;" class="">http://192.168.248.1:8080/</a>",<br class="">                   "role": "primary",<br class="">                   "auto-failover": true<br class="">                 },<br class="">                 {<br class="">                   "name": "server2",<br class="">                   "url": "<a href="https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2F192.168.248.2%3A8080%2F&data=05%7C01%7Crick.frey%40windstream.com%7C03e10dc7ee6b44bf8b9508daec55f3c2%7C2567b4c1b0ed40f5aee358d7c5f3e2b2%7C0%7C0%7C638082151158318762%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Ck5xI%2B4nn6huIG9KIG2VfLItqyHWlZCbrAgKdx%2F7Nxs%3D&reserved=0" style="color: blue; text-decoration: underline;" class="">http://192.168.248.2:8080/</a>",<br class="">                   "role": "secondary",<br class="">                   "auto-failover": true<br class="">                 }<br class="">               ]<br class="">             }<br class="">           ]<br class="">         }<br class="">       }<br class=""><br class="">Thank you,<br class=""><br class="">Mathias<o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 16.5pt;" class=""><span style="" class=""><o:p class=""> </o:p></span></div></div></div></div></div></div><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><p align="Left" style="font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; font-family: Calibri; font-size: 8pt; margin: 15pt;" class="">Sensitivity: Internal</p></div></blockquote></div><br class=""></div></body></html>