Friday, 2025-06-06

danfaiDid anyone face an issue before with UDP, where one member going down was not reflected since a client was constantly sending from the same IP:port combination? I'll have to dig more, but maybe someone saw it before13:27
opendevreviewAlexander Shishebarov proposed openstack/octavia master: Add set error to LB on memever revert  https://review.opendev.org/c/openstack/octavia/+/95195613:32
opendevreviewAlexander Shishebarov proposed openstack/octavia master: Add set error to LB on memever revert  https://review.opendev.org/c/openstack/octavia/+/95195613:35
opendevreviewAlexander Shishebarov proposed openstack/octavia master: Add set error to LB on memever revert  https://review.opendev.org/c/openstack/octavia/+/95195613:37
opendevreviewAlexander Shishebarov proposed openstack/octavia master: Add set error to LB when amphora error.  https://review.opendev.org/c/openstack/octavia/+/95195613:45
johnsomdanfai I think you are asking about members not going into ERROR state on a UDP load balancer when the backend server goes down?16:22
johnsomIf so, it's likely a security group configuration error. Since UDP is stateless, the UDP health checks depend on the backend components being able to send the load balancer back ICMP indicating that the backend server is unreachable. If the router/host can't send the ICMP back to the load balancer (such as blocked/dropped by a security rule) the load balancer has no way to know that a UDP service is down.16:24
johnsomThe issue is discussed here in the docs: https://docs.openstack.org/octavia/latest/user/guides/basic-cookbook.html#other-health-monitors16:26
opendevreviewMichael Johnson proposed openstack/octavia master: Fill out the pyproject.toml for Octavia  https://review.opendev.org/c/openstack/octavia/+/95199420:32
rm_workUgh ping21:22
rm_work[m]forgot that UDP-CONNECT would technically also be ICMP21:23
rm_work[m]had to deal with that the other day where wireshark told me I was getting an ICMP back from a UDP delivery failure and was like wut21:23
rm_work[m]didn't realize that stuff was delivered by ICMP, but the more you know21:24
rm_work[m]I wonder if we need to extend that note to the UDP-CONNECT entry too21:24
rm_work[m]oh neat we're moving to pyproject.toml21:25
rm_work[m]wait isn't that the old news now and there's some other thing that's the new hotness XD21:25
rm_work[m]<opendevreview> "Merged openstack/octavia master:..." <- oops, did this always work this way or is it new? I guess I did remove-ssh the dumb way21:27
johnsomProbably, but we are just entering the land of pyproject.toml (with pbr bolted on the side)22:43
johnsomThe SSH thing came in when we fixed an issue with DIB and the cloud images....  We need to revisit that workaround and see if we can remove it frankly22:44
johnsomhttps://github.com/openstack/octavia/blob/master/elements/amphora-agent/package-installs.yaml#L4022:44
johnsomWe really should not need/be including all of those base packages IMO22:45

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!