Looks like the syntax is not valid and I cannot find any reference in the
man pages either. Maybe am missing the intent of your reply. Is it intended
as pseudo code that would pose as my intent or is it actually already
possible to achieve this?

# bgpd -vn
/etc/bgpd.conf:47: syntax error

# awk 'NR==47' /etc/bgpd.conf
match to group "leaf" depend on carp100 prepend-self 5

# uname -a
OpenBSD fw1 6.8 GENERIC.MP#2 amd64

# ifconfig carp100 | grep carp:
carp: MASTER carpdev vlan100 vhid 1 advbase 1 advskew 10

On Thu, Jun 10, 2021 at 2:10 PM <open...@kene.nu> wrote:

> This looks precisely what I am looking for. Will try it out. Thank you!
>
> On Wed, Jun 9, 2021 at 10:42 AM Claudio Jeker <cje...@diehard.n-r-g.com>
> wrote:
>
>> On Wed, Jun 09, 2021 at 09:57:32AM +0200, open...@kene.nu wrote:
>> > Hello,
>> >
>> > Just a question and maybe a suggestion. I am implementing a few DCs that
>> > use vxlan symmetric routing and hence, layer2 redundancy protocols like
>> > CARP (and VRRP/HSRP) do not work as intended due to evpn layer2 being
>> the
>> > technology of choice to announce ARP entries.
>> >
>> > This led me to try out the "depend on carp" functionality that is
>> available
>> > on openbgpd. It does what I want, partially. It would be much more
>> usable
>> > if you cold define what this functionality does in case of a CARP backup
>> > state. Currently it puts the bgp neighbor into Idle state. However, it
>> > would be better if one could define that it should as-path prepend
>> and/or
>> > add a metric (MED) instead. This way, carp failovers would not rely on
>> the
>> > tedious and relatively time consuming process of setting up a BGP
>> session
>> > and announcing prefixes before it can truly be carp master.
>> >
>> > WDYT?
>>
>> The 'depend on' feature was added to use a CARP cluster as a BGP border
>> router (e.g. at an IXP that only gives one IP/port). In that case the
>> backup carp interface is not able to open a TCP session. The backup carp
>> interface is not reachable and the session would conflict with the master
>> session.
>>
>> What you would like is to add depend on on announcements (network
>> 10.0.0.0/24 depend on carp0) or probably as a filter (match to group
>> uplinks depend on carp set med 100). At least this is how I understand
>> your request.
>>
>> --
>> :wq Claudio
>>
>>

Reply via email to