<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi Darren,</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thank you for that. I was hoping it was a simple misunderstanding on my part. That resolved the issue. Even using the documentation as my basis, I had gotten it in my head I could have each server serve separate subnets, which I now realize is not the case.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature" class="elementToProof">
<p style="text-align: left; text-indent: 0px; background-color: white; margin: 0px 0px 3.75pt;">
<span style="font-family: "Archivo ExtraBold"; font-size: 12pt; color: rgb(16, 55, 127);"><b>Derek Swank</b></span></p>
<p style="text-align: left; text-indent: 0px; background-color: white; margin: 0px 0px 12pt;">
<span style="font-family: Archivo; font-size: 10pt; color: rgb(50, 51, 56);"><b>Systems Engineer</b></span></p>
<p style="text-align: left; text-indent: 0px; line-height: 24px; background-color: white; margin: 0px 0px 3.75pt;">
<span style="font-family: "Times New Roman", serif; font-size: 12pt; color: black;"><a href="https://dfn.net/" id="OWA8de82112-be8a-d451-ccb7-b9e90c6a0755" class="OWAAutoLink" title="https://dfn.net/" data-auth="NotApplicable" data-linkindex="0" style="margin: 0px;"><img style="height: auto; max-width: 985px; min-width: auto; min-height: auto; margin: 0px;" data-outlook-trace="F:3|T:3" src="cid:b44bd041-b943-4bb0-8fe8-e1297cfdf3ad"></a></span></p>
<p style="text-align: left; text-indent: 0px; background-color: white; margin: 6pt 0px 3pt;">
<span style="font-family: Archivo; font-size: 10pt; color: rgb(50, 51, 56);"><b>Main:</b> 541-673-4242</span></p>
<p style="text-align: left; text-indent: 0px; background-color: white; margin: 0px 0px 2pt;">
<span style="font-family: Archivo; font-size: 9pt; color: rgb(50, 51, 56);">2350 NW Aviation Dr </span></p>
<p style="text-align: left; text-indent: 0px; background-color: white; margin: 0px 0px 6pt;">
<span style="font-family: Archivo; font-size: 9pt; color: rgb(50, 51, 56);">Roseburg, OR 97470 </span></p>
<p style="text-align: left; text-indent: 0px; line-height: 24px; background-color: white; margin: 0px 0px 3.75pt;">
<span style="font-family: "Times New Roman", serif; font-size: 12pt; color: black;"><a href="https://www.linkedin.com/company/douglas-fast-net/" id="OWA198cbb66-1d08-91e7-33a3-49bdba4bb31b" class="OWAAutoLink" title="https://www.linkedin.com/company/douglas-fast-net/" data-auth="NotApplicable" data-linkindex="1" style="margin: 0px;"><img style="height: auto; max-width: 985px; min-width: auto; min-height: auto; margin: 0px;" data-outlook-trace="F:3|T:3" src="cid:7c302609-991a-4901-9854-ed095ae04e94"></a> <a href="https://www.facebook.com/DouglasFastNet" id="OWA4b49efb3-bf95-34ed-1164-0e12883e2edc" class="OWAAutoLink" title="https://www.facebook.com/DouglasFastNet" data-auth="NotApplicable" data-linkindex="2" style="margin: 0px;"><img style="height: auto; max-width: 985px; min-width: auto; min-height: auto; margin: 0px;" data-outlook-trace="F:3|T:3" src="cid:ca3d9038-ee89-4106-93a4-1488afa64554"></a></span></p>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Darren Ankney <darren.ankney@gmail.com><br>
<b>Sent:</b> Friday, March 21, 2025 1:20 PM<br>
<b>To:</b> Kea user's list <kea-users@lists.isc.org><br>
<b>Cc:</b> Derek Swank <derek.swank@dfn.net><br>
<b>Subject:</b> [EXTERNAL] Re: [Kea-users] HA Load Balancing: HA_BUFFER4_RECEIVE_NOT_FOR_US Issue</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Hi Derek,<br>
<br>
This is happening because you only have addresses for one of the<br>
servers specified in each subnet. Both need to have their pools split<br>
in half and the special classes for each peer specified (see here:<br>
<a href="https://kea.readthedocs.io/en/kea-2.6.1/arm/hooks.html#load-balancing-configuration)">https://kea.readthedocs.io/en/kea-2.6.1/arm/hooks.html#load-balancing-configuration)</a><br>
<br>
Something like this:<br>
<br>
"pools": [<br>
{ "pool": "172.16.120.50 - 172.16.120.125",<br>
"client-class": "HA_server1"<br>
},<br>
{ "pool": "172.16.120.126 - 172.16.120.200",<br>
"client-class": "HA_server2"<br>
}<br>
],<br>
<br>
Thank you,<br>
Darren Ankney<br>
<br>
<br>
On Fri, Mar 21, 2025 at 12:34 PM Derek Swank via Kea-users<br>
<kea-users@lists.isc.org> wrote:<br>
><br>
> Apologies, I sent this before finishing my writeup. Here is my subnets:<br>
><br>
> "subnet4": [<br>
><br>
> <?include "/etc/kea/scopes/vlan-4050.json"?>,<br>
> <?include "/etc/kea/scopes/vlan-4049.json"?><br>
><br>
> ],<br>
><br>
> vlan-4050:<br>
> {<br>
> "id": 1,<br>
> "subnet": "172.16.120.0/24",<br>
> "pools": [ { "pool": "172.16.120.50 - 172.16.120.200",<br>
> "client-class": "HA_server1"}],<br>
> "interface": "ens192",<br>
> "option-data": [<br>
> {<br>
> "name": "routers",<br>
> "data": "172.16.120.1"<br>
> }<br>
> ],<br>
><br>
> "reservations": [<br>
><br>
> ]<br>
><br>
> }<br>
><br>
> vlan-4049:<br>
> {<br>
> "id": 2,<br>
><br>
><br>
> "subnet": "172.16.121.0/24",<br>
> "pools": [ { "pool": "172.16.121.50 - 172.16.121.200",<br>
> "client-class": "HA_server2" }],<br>
> "relay": {<br>
> "ip-address" : ["172.16.121.1"]<br>
> },<br>
><br>
> "option-data": [<br>
> {<br>
> "name": "routers",<br>
> "data": "172.16.120.1"<br>
> }<br>
> ],<br>
> "reservations": [<br>
><br>
> ]<br>
><br>
> }<br>
><br>
> At least half of machines on both network segments are getting IP addresses, but others are getting the "NOT_FOR_US" error. They are all machines spun up from the same VM template, the only difference should be their MAC addresses; I am unsure what criteria
Kea is using to decide the machines are "not for us". I do not have this issue when I disable HA and only have 1 Kea server running, so the issue definitely seems to be in the HA configuration. Any guidance would be appreciated, let me know what other information
I can provide.<br>
><br>
> Derek Swank<br>
><br>
> Systems Engineer<br>
><br>
> Main: 541-673-4242<br>
><br>
> 2350 NW Aviation Dr<br>
><br>
> Roseburg, OR 97470<br>
><br>
><br>
><br>
> ________________________________<br>
> From: Derek Swank <derek.swank@dfn.net><br>
> Sent: Friday, March 21, 2025 9:26 AM<br>
> To: kea-users@lists.isc.org <kea-users@lists.isc.org><br>
> Subject: HA Load Balancing: HA_BUFFER4_RECEIVE_NOT_FOR_US Issue<br>
><br>
> Hello,<br>
><br>
> I am setting up a Kea server in a load balancing HA configuration. I am experiencing an issue where I am getting the error: "HA_BUFFER4_RECEIVE_NOT_FOR_US: dropping query to be processed by another server"<br>
><br>
> Here is an exact line from my Kea HA hooks log:<br>
> "2025-03-20 16:45:28.365 DEBUG [kea-dhcp4.ha-hooks/64143.140171193816768] HA_BUFFER4_RECEIVE_NOT_FOR_US [hwtype=1 00:50:56:bb:e1:9c], cid=[no info], tid=0xffbd0305: dropping query to be processed by another server"<br>
><br>
> Here is my HA configuration:<br>
><br>
> {<br>
> "library": "/usr/lib/x86_64-linux-gnu/kea/hooks/libdhcp_ha.so",<br>
> "parameters": {<br>
> "high-availability": [{<br>
> "this-server-name": "server1",<br>
> "mode": "load-balancing",<br>
> "heartbeat-delay": 10000,<br>
> "max-response-delay": 60000,<br>
> "max-ack-delay": 5000,<br>
> "max-unacked-clients": 3,<br>
> "max-rejected-lease-updates": 10,<br>
> "delayed-updates-limit": 100,<br>
> "peers": [{<br>
> //BEGIN server1<br>
> "name": "server1",<br>
> "url": "<a href="http://172.16.120.3:8000/">http://172.16.120.3:8000/</a>",<br>
> "role": "primary",<br>
> "auto-failover": true<br>
> //END<br>
> }, {<br>
> //BEGIN server2<br>
> "name": "server2",<br>
> "url": "<a href="http://172.16.120.4:8000/">http://172.16.120.4:8000/</a>",<br>
> "role": "secondary",<br>
> "auto-failover": true<br>
> //END<br>
> }, {<br>
> //BEGIN server3<br>
> "name": "server3",<br>
> "url": "<a href="http://172.16.120.5:8000/">http://172.16.120.5:8000/</a>",<br>
> "role": "backup",<br>
> "auto-failover": false<br>
> //END<br>
> }]<br>
> }]<br>
> }<br>
><br>
><br>
> All servers have the same configuration, other than "this-server-name".<br>
><br>
> Derek Swank<br>
><br>
> Systems Engineer<br>
><br>
> Main: 541-673-4242<br>
><br>
> 2350 NW Aviation Dr<br>
><br>
> Roseburg, OR 97470<br>
><br>
><br>
><br>
> The information contained in this email and any attachments may be privileged, confidential, and/or proprietary and is intended solely for the use of the person(s) to whom it is addressed. If you are not the intended recipient, any review, re-transmission,
dissemination or any other use of the information contained in this email and any attachments is strictly prohibited. If you have received this communication in error, please notify the sender immediately by replying to this email and then delete this material
from any system that it may be on.<br>
><br>
> --<br>
> ISC funds the development of this software with paid support subscriptions. Contact us at
<a href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.<br>
><br>
> To unsubscribe visit <a href="https://lists.isc.org/mailman/listinfo/kea-users">
https://lists.isc.org/mailman/listinfo/kea-users</a>.<br>
><br>
> Kea-users mailing list<br>
> Kea-users@lists.isc.org<br>
> <a href="https://lists.isc.org/mailman/listinfo/kea-users">https://lists.isc.org/mailman/listinfo/kea-users</a><br>
</div>
</span></font></div>
<p style="font-size:10pt; font-family: 'sans-serif','times roman',serif; color:#9A9A9A;">
The information contained in this email and any attachments may be privileged, confidential, and/or proprietary and is intended solely for the use of the person(s) to whom it is addressed. If you are not the intended recipient, any review, re-transmission,
dissemination or any other use of the information contained in this email and any attachments is strictly prohibited. If you have received this communication in error, please notify the sender immediately by replying to this email and then delete this material
from any system that it may be on.</p>
</body>
</html>