Hoi,

(straying off topic, but) -
If I set an IP address, or MTU, or admin-state on an interface, using the
VPP API or CLI, I would expect that to show up in Linux as well. If VPP
does not propagate this state, I have two choices:
1) do not (ever) use VPP to manipulate these things, but purely rely on
netlink;
2) set the state twice, once in VPP and once again in Linux

Doing that will expose a few subtle issues; Some examples:
a) creating a Bond (create bond), exposing it in LCP (lcp create), and then
adding an interface to the bond (bond add); VPP will change the MAC address
of the Bond to that of the first joined interface. Linux will not know of
it.
b) creating a sub-int, and changing its MTU to 9216, then changing its phy
to MTU 9000 is valid in VPP; Linux will not be able to cope with this
(sub-ints must be capped at their parent's MTU)
c) VRRP may be running and transition state, removing or adding the VIP.
Linux will not be aware of this.
d) Wireguard adds/removes a peer, which exposes a new prefix from their
allowed-ip list; this effectively becomes a route into the wireguard
interface. These routes will be invisible to Linux.

There will be several cases in which a plugin or possibly vnet itself will
make a change to an interface or the FIB on our behalf. One might argue
it's indeed desirable to reflect those changes, otherwise users will
continuously be confused by functionality that works in VPP-proper, but
doesn't work or has unexpected side effects in VPP-LinuxCP.

groet,
Pim

On Tue, Sep 21, 2021 at 4:47 AM Jim Thompson <j...@netgate.com> wrote:

>
>
> > On Sep 20, 2021, at 5:07 PM, Pim van Pelt <p...@ipng.nl> wrote:
> >
> > Matt: this is one of those places where having, in general, a sync from
> VPP -> Linux would be useful.
>
> I think this is somewhat inadvisable. To quote someone else on-list, “VPP
> is not your control plane”.
>
> Jim
>
>

-- 
Pim van Pelt <p...@ipng.nl>
PBVP1-RIPE - http://www.ipng.nl/
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#20168): https://lists.fd.io/g/vpp-dev/message/20168
Mute This Topic: https://lists.fd.io/mt/85736384/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to