Bug #15017
openDHCP relay CARP status VIP function is not working in pfsense+ 23.09
100%
Description
Hello,
It seems that after 23.05.1->23.09 upgrade DHCP relay CARP status VIP function is not working properly, DHCP relay agent stays active all times (dhcrelay stays green on the dashboard widget, also pgrep dhcrelay
returns running processes in CLI), it will not be stopped when the chosen VIP is in BACKUP status. Not a big deal, there can be two active relay agents in the same network, but this is not how it supposed to work. Strangely this only affects our pfSense+ 23.09 clusters, in pfSense CE 2.7.1 this is not an issue.
--
BR
Robert
Updated by Robert Karsai over 2 years ago
OK, this is much more serious than it first looks, if you enter to CARP failover mode then leave CARP failover mode on a master unit you will get a second running dhcrelay instance. Do this a few times and will have a bunch of active DHCP relays -- all active -- overwhelming some DHCP clients. This is now not a low prio issue, it can cause problems.
Updated by Marcos M over 2 years ago
- Status changed from New to Incomplete
I was not able to replicate this on 23.09 - toggling maintenance mode on/off on the master correctly stops/starts the relay service. For now I suggest troubleshooting this further in the forums (or with TAC if you have support) to determine if there's a bug and narrow down reproducible steps.
Updated by Florian Apolloner 1 day ago
I can confirm this behavior even on 26.03. The issue occurs if you have multiple CARP interfaces since rc.carpmaster / rc.carpbackup don't loop over the vips but reuse the last $vip from the previous loops (https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/rc.carpmaster#L122). So it can work by accident. Will put up a PR shortly.
Updated by Florian Apolloner about 24 hours ago
https://github.com/pfsense/pfsense/pull/4755 works fine for us (applied via system patches)
Updated by Marcos M about 9 hours ago
- Project changed from pfSense Plus to pfSense
- Category changed from DHCP Relay to DHCP Relay
- Status changed from Incomplete to Feedback
- Target version set to 2.9.0
- % Done changed from 0 to 100
- Affected Plus Version deleted (
23.09) - Plus Target Version set to 26.07
I've put this in with some slight changes, thanks!
Applied in 783fd77f185a5e260ee76e35ec2816604c0fda4c. Show