Ensure OSPF default route is used by all IntraNought nodes
Open, NormalPublic
Actions

Assigned To

Authored By

	yousra
	Mon, May 4, 14:07

Description

In the current setup, IntraNought nodes still rely on a static default gateway (172.27.27.1), which leads to inconsistent and asymmetric routing.

For example, traffic from Windriver correctly reaches IntraNought nodes through the GRE tunnel and the active router. However, the return traffic does not follow the same path: it is sent to the static gateway (172.27.27.1), which corresponds to a different router (e.g. router-001, a non-active router).

Additionally, the tunnel between Windriver and router-001 is no longer used. Windriver prefers the more specific /27 route via gre1 over the broader /24 route via gre0, so traffic is routed through the active router instead, as it should.

traceroute to 172.27.27.7 (172.27.27.7), 64 hops max, 40 byte packets
 1  172.27.27.243 (172.27.27.243)  5.635 ms  5.650 ms  5.634 ms
 2  * * *

So we need to ensure that:

IntraNought nodes receive the default route from the active router
default gateway (172.27.27.1) should be replaced
traffic always follows the active router
failover (CARP) is properly reflected in routing

Related Objects

Mentioned In: D4099: Add PF firewall configuration management for routers
T2303: Installation and configuration of FRRouting
Mentioned Here: D4099: Add PF firewall configuration management for routers

Event Timeline

yousra renamed this task from Ensure all IntraNought nodes use OSPF for default routing to Ensure all IntraNought nodes use OSPF-learned default route from the active router.Mon, May 4, 14:07

yousra renamed this task from Ensure all IntraNought nodes use OSPF-learned default route from the active router to Ensure OSPF default route is used by all IntraNought nodes.

yousra triaged this task as Normal priority.

yousra created this task.

yousra updated the task description. (Show Details)Mon, May 4, 14:10

yousra updated the task description. (Show Details)

yousra updated the task description. (Show Details)Mon, May 4, 14:23

After testing Complector with OSPF enabled to receive the default route, it works as expected.

[yousra@complector ~]$ netstat -rn

Routing tables

Internet:
Destination        Gateway            Flags         Netif Expire
default            172.27.27.12       UG1            vmx0
127.0.0.1          link#2             UHS             lo0
172.27.27.0/27     link#1             U              vmx0
172.27.27.7        link#2             UHS             lo0

As a result, the ping works :

[yousra@windriver /usr/local/etc/frr]$ traceroute 172.27.27.7

traceroute to 172.27.27.7 (172.27.27.7), 64 hops max, 40 byte packets
 1  172.27.27.243 (172.27.27.243)  5.805 ms  5.644 ms  5.604 ms
 2  complector (172.27.27.7)  6.015 ms  5.828 ms  5.705 ms

yousra updated the task description. (Show Details)Mon, May 4, 14:33

yousra mentioned this in T2303: Installation and configuration of FRRouting.Mon, May 4, 14:36

yousra mentioned this in D4099: Add PF firewall configuration management for routers.Mon, May 4, 18:00

However, after the default route was changed, complector could no longer reach the Internet (e.g. ping 8.8.8.8).

fixed in D4099

[yousra@complector /opt/salt/nasqueron-operations/roles/router/pf]$ traceroute 8.8.8.8

traceroute to 8.8.8.8 (8.8.8.8), 64 hops max, 40 byte packets
 1  172.27.27.12 (172.27.27.12)  0.257 ms  0.316 ms  0.149 ms
 2  51.210.99.252 (51.210.99.252)  0.603 ms  0.661 ms  0.542 ms
 3  10.162.98.154 (10.162.98.154)  0.683 ms  0.761 ms
    10.162.98.156 (10.162.98.156)  0.789 ms
 4  10.17.152.66 (10.17.152.66)  0.599 ms
    10.17.152.64 (10.17.152.64)  0.590 ms
    10.17.152.74 (10.17.152.74)  0.628 ms
.....

yousra added a project: Servers.Mon, May 4, 18:13

yousra edited projects, added Drake network; removed Servers.

When router-002 takes over, the default route changes as expected.