Skip to content

Commit e83c514

Browse files
yyyniniytzur1
authored andcommitted
[DualToR] enforce same loopback ip and drop bgp pkts on loopback1 for dualtor (sonic-net#18766)
What is the motivation for this PR? This PR updates the DualToR config to enforce the same loopback1 IP address for both ToRs. Based on a recent Incident 628608070 : [SONiC RCA][SLB_DNC] Gemini Tors dropping vip traffic, we need to block BGP from being established on loopback1. How did you do it? Assign the same loopback1 IP to both ToRs. Added an iptables rules to drop the packets sonic-net/sonic-host-services#262 How did you verify/test it? Confirmed both ToRs used the same loopback1 IP, and verify the drop rule. Signed-off-by: Yael Tzur <ytzur@nvidia.com>
1 parent 1c669a2 commit e83c514

15 files changed

Lines changed: 30 additions & 28 deletions

ansible/vars/topo_cable-test.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -93,10 +93,10 @@ topology:
9393
loopback1:
9494
ipv4:
9595
- 10.1.0.34/32
96-
- 10.1.0.35/32
96+
- 10.1.0.34/32
9797
ipv6:
9898
- FC00:1::34/128
99-
- FC00:1::35/128
99+
- FC00:1::34/128
100100
loopback2:
101101
ipv4:
102102
- 10.1.0.36/32

ansible/vars/topo_dualtor-120.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -210,10 +210,10 @@ topology:
210210
loopback1:
211211
ipv4:
212212
- 10.1.0.34/32
213-
- 10.1.0.35/32
213+
- 10.1.0.34/32
214214
ipv6:
215215
- FC00:1:0:34::/128
216-
- FC00:1:0:35::/128
216+
- FC00:1:0:34::/128
217217
loopback2:
218218
ipv4:
219219
- 10.1.0.36/32

ansible/vars/topo_dualtor-56.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -114,10 +114,10 @@ topology:
114114
loopback1:
115115
ipv4:
116116
- 10.1.0.34/32
117-
- 10.1.0.35/32
117+
- 10.1.0.34/32
118118
ipv6:
119119
- FC00:1:0:34::/128
120-
- FC00:1:0:35::/128
120+
- FC00:1:0:34::/128
121121
loopback2:
122122
ipv4:
123123
- 10.1.0.36/32

ansible/vars/topo_dualtor-64-breakout.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -115,10 +115,10 @@ topology:
115115
loopback1:
116116
ipv4:
117117
- 10.1.0.34/32
118-
- 10.1.0.35/32
118+
- 10.1.0.34/32
119119
ipv6:
120120
- FC00:1:0:34::/128
121-
- FC00:1:0:35::/128
121+
- FC00:1:0:34::/128
122122
loopback2:
123123
ipv4:
124124
- 10.1.0.36/32

ansible/vars/topo_dualtor-64.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -118,10 +118,10 @@ topology:
118118
loopback1:
119119
ipv4:
120120
- 10.1.0.34/32
121-
- 10.1.0.35/32
121+
- 10.1.0.34/32
122122
ipv6:
123123
- FC00:1:0:34::/128
124-
- FC00:1:0:35::/128
124+
- FC00:1:0:34::/128
125125
loopback2:
126126
ipv4:
127127
- 10.1.0.36/32

ansible/vars/topo_dualtor-aa-120.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -267,10 +267,10 @@ topology:
267267
loopback1:
268268
ipv4:
269269
- 10.1.0.34/32
270-
- 10.1.0.35/32
270+
- 10.1.0.34/32
271271
ipv6:
272272
- FC00:1:0:34::/128
273-
- FC00:1:0:35::/128
273+
- FC00:1:0:34::/128
274274
loopback2:
275275
ipv4:
276276
- 10.1.0.36/32

ansible/vars/topo_dualtor-aa-56.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -139,10 +139,10 @@ topology:
139139
loopback1:
140140
ipv4:
141141
- 10.1.0.34/32
142-
- 10.1.0.35/32
142+
- 10.1.0.34/32
143143
ipv6:
144144
- FC00:1:0:34::/128
145-
- FC00:1:0:35::/128
145+
- FC00:1:0:34::/128
146146
loopback2:
147147
ipv4:
148148
- 10.1.0.36/32

ansible/vars/topo_dualtor-aa-64-breakout.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -139,10 +139,10 @@ topology:
139139
loopback1:
140140
ipv4:
141141
- 10.1.0.34/32
142-
- 10.1.0.35/32
142+
- 10.1.0.34/32
143143
ipv6:
144144
- FC00:1:0:34::/128
145-
- FC00:1:0:35::/128
145+
- FC00:1:0:34::/128
146146
loopback2:
147147
ipv4:
148148
- 10.1.0.36/32

ansible/vars/topo_dualtor-aa-64.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -155,10 +155,10 @@ topology:
155155
loopback1:
156156
ipv4:
157157
- 10.1.0.34/32
158-
- 10.1.0.35/32
158+
- 10.1.0.34/32
159159
ipv6:
160160
- FC00:1:0:34::/128
161-
- FC00:1:0:35::/128
161+
- FC00:1:0:34::/128
162162
loopback2:
163163
ipv4:
164164
- 10.1.0.36/32

ansible/vars/topo_dualtor-aa.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -91,10 +91,10 @@ topology:
9191
loopback1:
9292
ipv4:
9393
- 10.1.0.34/32
94-
- 10.1.0.35/32
94+
- 10.1.0.34/32
9595
ipv6:
9696
- FC00:1:0:34::/128
97-
- FC00:1:0:35::/128
97+
- FC00:1:0:34::/128
9898
loopback2:
9999
ipv4:
100100
- 10.1.0.36/32

0 commit comments

Comments
 (0)