[Kea-users] [EXTERNAL] Re: Question regarding to HA for kea-dhcp6 VMs

Darren Ankney darren.ankney at gmail.com
Tue Mar 5 19:37:58 UTC 2024


Hi Yu,

Can you share your kea-ctrl-agent configuration?  You actually send these
commands to the kea-ctrl-agent which then forwards the commands to
appropriate Kea daemon via its control socket.  Please note that
kea-ctrl-agent can only listen on v4 or v6 ... not both (though you can run
two copies) see: https://gitlab.isc.org/isc-projects/kea/-/issues/3082

Thank you,
Darren Ankney

On Tue, Mar 5, 2024 at 12:05 PM Xiao, Yu (CCI-Atlanta) via Kea-users <
kea-users at lists.isc.org> wrote:

> Hi Andrei, Victoria,
>
>
>
> I have another question related, if I have this kea-dhcp6 server which has
> IPv4 address as 192.168.56.33, then how can I control it using curl? It
> looks to me seems I can’t use curl to control the kea-trl-agent via the
> IPv4 address:
>
>
>
> ➜  ~ curl -X POST -H "Content-Type: application/json" -d '{ "command":
> "config-get", "service": [ "dhcp6" ] }' http:// 192.168.56.33:8000/
> <http://192.168.100.197:8000/>
>
> curl: (7) Failed to connect to 192.168.100.197 port 8000 after 1003 ms:
> Couldn't connect to server
>
>
>
> But the IPv6 address is working fine from the local machine:
>
>
>
>
>
>
>
> Best Regards,
>
> Yu
>
>
>
>
>
> *From: *Kea-users <kea-users-bounces at lists.isc.org> on behalf of Xiao, Yu
> (CCI-Atlanta) via Kea-users <kea-users at lists.isc.org>
> *Date: *Friday, March 1, 2024 at 8:34 AM
> *To: *Kea user's list <kea-users at lists.isc.org>
> *Cc: *Xiao, Yu (CCI-Atlanta) <yu.xiao at cox.com>
> *Subject: *Re: [Kea-users] [EXTERNAL] Re: Question regarding to HA for
> kea-dhcp6 VMs
>
> Thank you for the confirmation, Andrei!
>
>
>
>
>
>
>
> Best Regards,
>
> Yu
>
>
>
>
>
> *From: *Kea-users <kea-users-bounces at lists.isc.org> on behalf of Andrei
> Pavel <andrei at isc.org>
> *Date: *Friday, March 1, 2024 at 5:04 AM
> *To: *kea-users at lists.isc.org <kea-users at lists.isc.org>
> *Subject: *Re: [Kea-users] [EXTERNAL] Re: Question regarding to HA for
> kea-dhcp6 VMs
>
> Yes. That configuration is valid.
>
> On 29/02/2024 23:14, Xiao, Yu (CCI-Atlanta) via Kea-users wrote:
>
> Hi Victoria,
>
>
>
> Thank you for your prompt response! But I don’t understand your answer.
> Are you able to support the following config? Having two servers with IPv4
> addresses for HA use but serving as kea-dhcp6 servers?
>
>
>
> "Dhcp6": {
>
>     "hooks-libraries": [
>
>         {
>
>             "library": "/usr/lib/kea/hooks/libdhcp_lease_cmds.so <https://urldefense.com/v3/__http:/libdhcp_lease_cmds.so/__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7Zy0g8bQo$>",
>
>             "parameters": { }
>
>         },
>
>         {
>
>             "library": "/usr/lib/kea/hooks/libdhcp_ha.so <https://urldefense.com/v3/__http:/libdhcp_ha.so/__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7ZyoaWzky$>",
>
>             "parameters": {
>
>                 "high-availability": [ {
>
>                     "this-server-name": "server1",
>
>                     "mode": "load-balancing",
>
>                     "peers": [
>
>                         {
>
>                             "name": "server1",
>
>                             "url": http://192.168.56.33:8000/ <https://urldefense.com/v3/__http:/192.168.56.33:8000/__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7Z2xRBC5P$>,
>
>                             "role": "primary"
>
>                         },
>
>                         {
>
>                             "name": "server2",
>
>                             "url": http://192.168.56.66:8000/ <https://urldefense.com/v3/__http:/192.168.56.66:8000/__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7Z1dbwcxm$>,
>
>                             "role": "secondary"
>
>                         }
>
>                     ],
>
>                     "state-machine": {
>
>                         "states": [
>
>                             {
>
>                                 "state": "waiting",
>
>                                 "pause": "once"
>
>                             }
>
>                         ]
>
>                     }
>
>                 } ]
>
>             }
>
>         }
>
>     ],
>
>     ...
>
> }
>
>
>
>
>
> Best Regards,
>
> Yu
>
>
>
>
>
> *From: *Victoria Risk <vicky at isc.org> <vicky at isc.org>
> *Date: *Thursday, February 29, 2024 at 4:09 PM
> *To: *Kea user's list <kea-users at lists.isc.org> <kea-users at lists.isc.org>,
> Xiao, Yu (CCI-Atlanta) <yu.xiao at cox.com> <yu.xiao at cox.com>
> *Subject: *[EXTERNAL] Re: [Kea-users] Question regarding to HA for
> kea-dhcp6 VMs
>
> Xiao,
>
>
>
> This is actually exactly why we implemented HA instead of DHCPv4 failover!
> So that you can use the same mechanism for DHCPv6.
>
>
>
> I am sorry if the documentation was misleading at all, I think the
> documentation focuses on DHCPv4 because that is what most people are using.
>
>
>
> Vicky
>
>
>
> On Feb 29, 2024, at 4:04 PM, Xiao, Yu (CCI-Atlanta) via Kea-users
> <kea-users at lists.isc.org> <kea-users at lists.isc.org> wrote:
>
>
>
> Greetings,
>
>
>
> I have an interesting question for you esp for ISC developers. I want to
> only use kea-dhcp6, which means I need VMs working as DHCP servers to
> provide IPv6 addresses to other devices so those clients can have IPv6
> addresses. But I don’t care or need that my kea-dhcp6 servers themselves
> have IPv6 addresses or not.
>
>
>
> But the problem is that in the documentation, I can see they give some
> examples which all put the redundancy configurations under the *Dhcp4* configuration
> section. Does it imply that in order to use the HA feature for kea-dhcp6
> servers, my DHCP servers themselves must be configured to have their own
> IPv6 addresses? I don’t think this makes any sense since in reality we only
> need the connectivity between primary and secondary servers no matter this
> connectivity is based on IPv4 or IPv6.
>
>
>
> "Dhcp4": {
>
>     "hooks-libraries": [
>
>         {
>
>             "library": "/usr/lib/kea/hooks/libdhcp_lease_cmds.so
> <https://urldefense.com/v3/__http:/libdhcp_lease_cmds.so/__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7Zy0g8bQo$>
> ",
>
>             "parameters": { }
>
>         },
>
>         {
>
>             "library": "/usr/lib/kea/hooks/libdhcp_ha.so
> <https://urldefense.com/v3/__http:/libdhcp_ha.so/__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7ZyoaWzky$>
> ",
>
>             "parameters": {
>
>                 "high-availability": [ {
>
>                     "this-server-name": "server1",
>
>                     "mode": "load-balancing",
>
>                     "peers": [
>
>                         {
>
>                             "name": "server1",
>
>                             "url": http://192.168.56.33:8000/
> <https://urldefense.com/v3/__http:/192.168.56.33:8000/__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7Z2xRBC5P$>
> ,
>
>                             "role": "primary"
>
>                         },
>
>                         {
>
>                             "name": "server2",
>
>                             "url": http://192.168.56.66:8000/
> <https://urldefense.com/v3/__http:/192.168.56.66:8000/__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7Z1dbwcxm$>
> ,
>
>                             "role": "secondary"
>
>                         }
>
>                     ],
>
>                     "state-machine": {
>
>                         "states": [
>
>                             {
>
>                                 "state": "waiting",
>
>                                 "pause": "once"
>
>                             }
>
>                         ]
>
>                     }
>
>                 } ]
>
>             }
>
>         }
>
>     ],
>
>     ...
>
> }
>
>
>
> May I ask can I configure my servers like this?
>
>
>
> "Dhcp6": {
>
>     "hooks-libraries": [
>
>         {
>
>             "library": "/usr/lib/kea/hooks/libdhcp_lease_cmds.so <https://urldefense.com/v3/__http:/libdhcp_lease_cmds.so/__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7Zy0g8bQo$>",
>
>             "parameters": { }
>
>         },
>
>         {
>
>             "library": "/usr/lib/kea/hooks/libdhcp_ha.so <https://urldefense.com/v3/__http:/libdhcp_ha.so/__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7ZyoaWzky$>",
>
>             "parameters": {
>
>                 "high-availability": [ {
>
>                     "this-server-name": "server1",
>
>                     "mode": "load-balancing",
>
>                     "peers": [
>
>                         {
>
>                             "name": "server1",
>
>                             "url": http://192.168.56.33:8000/ <https://urldefense.com/v3/__http:/192.168.56.33:8000/__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7Z2xRBC5P$>,
>
>                             "role": "primary"
>
>                         },
>
>                         {
>
>                             "name": "server2",
>
>                             "url": http://192.168.56.66:8000/ <https://urldefense.com/v3/__http:/192.168.56.66:8000/__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7Z1dbwcxm$>,
>
>                             "role": "secondary"
>
>                         }
>
>                     ],
>
>                     "state-machine": {
>
>                         "states": [
>
>                             {
>
>                                 "state": "waiting",
>
>                                 "pause": "once"
>
>                             }
>
>                         ]
>
>                     }
>
>                 } ]
>
>             }
>
>         }
>
>     ],
>
>     ...
>
> }
>
>
>
>
>
>
>
> Related section:
>
>
> https://downloads.isc.org/isc/kea/2.5.5/doc/html/arm/hooks.html#hooks-high-availability
> <https://urldefense.com/v3/__https:/downloads.isc.org/isc/kea/2.5.5/doc/html/arm/hooks.html*hooks-high-availability__;Iw!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7Z_ukr4C_$>
>
>
>
>
>
>
>
>
>
> Best Regards,
>
> Yu
>
>
>
> --
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/
> <https://urldefense.com/v3/__https:/www.isc.org/contact/__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7ZxOQsxAh$>
>  for more information.
>
> To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users
> <https://urldefense.com/v3/__https:/lists.isc.org/mailman/listinfo/kea-users__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7ZziJLuAX$>
> .
>
> Kea-users mailing list
> Kea-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/kea-users
> <https://urldefense.com/v3/__https:/lists.isc.org/mailman/listinfo/kea-users__;!!Hit2Ag!06m2yzYaZYgAjWXnEV6uDsNyyqb1YedvAndIPn2eo6KzSrsYKWP56bTaCyTl-2p7ZziJLuAX$>
>
>
>
>
>
> --
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
> To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
>
> Kea-users mailing list
> Kea-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/kea-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20240305/cc716016/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 148340 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20240305/cc716016/attachment-0001.png>


More information about the Kea-users mailing list