net/frr: carp demote does not chnage the metric of a default route
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 1.2k
- Forks
- 863
- Avg merge
- 2d 6h
- Merged PRs (30d)
- 10
Description
- [x ] I have read the contributing guide lines at https://github.com/opnsense/plugins/blob/master/CONTRIBUTING.md
- [x ] I have searched the existing issues, open and closed, and I'm convinced that mine is new.
- [ x] The title contains the plugin to which this issue belongs
Describe the bug
When two OPNsense instances share an VIP via CARP on the WAN interface and are part of an OSPF area on LAN, the backup instance does not demote its default route.
This means the other routers in the OSPF area randomly select either OPNsense instance for the default route.
This leads to problems with the Firewall, where a TCP connection was allowed by one instance, but not already synced to the other and the other then drops the packets. This behavior leads to a noticeable delay, since a few percent of the connections are dropped.
To Reproduce
- Configure two OPNsense instances with CARP on WAN
- Install net/frr
- Routing -> General -> enable [x]
- Routing -> OSPF -> General -> enable [x]
- Routing -> OSPF -> General -> Advertise Default Gateway[x]
- Routing -> OSPF -> Interfaces -> +
7. Interace = LAN
8. Area = 0.0.0.0
9. Cost = 10
10. Cost (when demoted) = 2000
11. Depend on (carp) = WAN
12. Network Type = "Point-to-point network"
Expected behavior
To have one default route metric set to 2000.
Environment
Software version used and hardware type if relevant.
e.g.:
Type opnsense-business
Version 26.4_20
Architecture amd64
Commit 5a5d24ec7
Hardware: two DEC2770 and a Cisco Layer 3 Switch
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the two-instance CARP and OSPF setup described in the issue, focusing on the net/frr plugin's handling of CARP demotion and the OSPF default-gateway advertisement. Confirm that the backup instance advertises its default route with metric 2000 while demoted, and verify that the other routers consistently select the active instance.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- networking
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100