Hi, We are adding blackhole routes via linux command "sudo ip netns exec dataplane ip -6 route add blackhole 2001:50:10:a111::101/64 table 1203"
After adding blackhole routes on linux (that are leaked to vpp), if we try to view the route in vpp ,we get the below output [root@j3chysr01stg05 ~]# vppctl show ip6 fib table 1203 2001:50:10:a111::/64 ipv6-VRF:1203, fib_index:3, flow hash:[src dst sport dport proto flowlabel ] epoch:0 flags:none locks:[CLI:3, lcp-rt:1, ] 2001:50:10:a111::/64 fib:3 index:86 locks:2 lcp-rt refs:1 entry-flags:drop, src-flags:added,contributing,active, path-list:[126] locks:2 flags:drop, uPRF-list:76 len:0 itfs:[] path:[126] pl-index:126 ip6 weight=1 pref=0 deag: cfg-flags:drop, fib-index:0 forwarding: unicast-ip6-chain [@0]: dpo-load-balance: [proto:ip6 index:88 buckets:1 uRPF:76 to:[0:0]] [0] [@0]: dpo-drop ip6 [root@j3chysr01stg05 ~]# Now, if we add another route via ipip tunnel (that supposedly should overwrite the blackhole route) using the API. We get below below output for command "show ip6 fib table 1203 2001:50:10:a111::/64" [root@j3chysr01stg05 ~]# vppctl show ip6 fib table 1203 2001:50:10:a111::/64 ipv6-VRF:1203, fib_index:3, flow hash:[src dst sport dport proto flowlabel ] epoch:0 flags:none locks:[CLI:3, lcp-rt:1, ] 2001:50:10:a111::/64 fib:3 index:86 locks:3 lcp-rt refs:1 entry-flags:drop, src-flags:added,contributing,active, path-list:[126] locks:2 flags:drop, uPRF-list:76 len:0 itfs:[] path:[126] pl-index:126 ip6 weight=1 pref=0 deag: cfg-flags:drop, fib-index:0 API refs:1 entry-flags:attached,import, src-flags:added, path-list:[161] locks:1 flags:shared, uPRF-list:106 len:1 itfs:[40, ] path:[211] pl-index:161 ip6 weight=100 pref=0 attached: oper-flags:resolved, ipip19 forwarding: unicast-ip6-chain [@0]: dpo-load-balance: [proto:ip6 index:88 buckets:1 uRPF:76 to:[0:0]] [0] [@0]: dpo-drop ip6 [root@j3chysr01stg05 ~]# lcp-rt gets added the moment the blackhole routes get leaked to VPP. I think "lcp-rt" denotes the blackhole routes. API is still below the "lcp-rt" route. How can we prioritize API route over lcp-rt route? Thanks and Regards, Chinmaya Agarwal.
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#21201): https://lists.fd.io/g/vpp-dev/message/21201 Mute This Topic: https://lists.fd.io/mt/90236408/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
