You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
After proxy process crash the proxy since Meridio 1.1.2 can recover former connections with LBs.
Without continuing former NSM connections without reselect request the related interfaces in LB and proxy will remain intact.
While this might sound as an improvement, the NSM connection between any TAPA and the affected proxy will be tried to be fixed by NSM heal ordering a reselect due to no datapath monitoring being enabled. This will replace the interfaces of the TAPA connection causing a MAC address update but normally keeping the old IPs. Thus, the LB might end up with outdated neighbor entries related to Targets.
To Reproduce
Steps to reproduce the behavior:
Deploy a fully fledged trench with 1 conduit, stream, flow etc. Configure Attractor to have 1 replica.
Deploy target application with 1 replica.
Note the proxy running on the same node as the single target POD.
Send external traffic using ctraffic for 10 seconds to the VIP address hosted by the Target.
Monitor neighbor cache and links in the single LB POD: ip monitor neigh|while read -r line; do echo "=> $(date) | $(hostname) | $line"; done & ip monitor link|while read -r line; do echo "=> $(date) | $(hostname) | $line"; done &
Kill the proxy process. And wait until the proxy recovers.
Run ctraffic again shortly. There could be some outage due to the old invalid neighbor entry being around.
Expected behavior
No invalid neighbor entry should linger on in LB after proxy process restart.
Context
Network Service Mesh: v1.13.2
Meridio: v1.1.2
...
Logs
NA
The text was updated successfully, but these errors were encountered:
Describe the bug
After proxy process crash the proxy since Meridio 1.1.2 can recover former connections with LBs.
Without continuing former NSM connections without reselect request the related interfaces in LB and proxy will remain intact.
While this might sound as an improvement, the NSM connection between any TAPA and the affected proxy will be tried to be fixed by NSM heal ordering a reselect due to no datapath monitoring being enabled. This will replace the interfaces of the TAPA connection causing a MAC address update but normally keeping the old IPs. Thus, the LB might end up with outdated neighbor entries related to Targets.
To Reproduce
Steps to reproduce the behavior:
ip monitor neigh|while read -r line; do echo "=> $(date) | $(hostname) | $line"; done &
ip monitor link|while read -r line; do echo "=> $(date) | $(hostname) | $line"; done &
Expected behavior
No invalid neighbor entry should linger on in LB after proxy process restart.
Context
...
Logs
NA
The text was updated successfully, but these errors were encountered: