Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 1222 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DHCP Daemon @ 100% on Bridged Interfaces: 10Mbps broadcast storm

James Bourne
Hi there,

ASG 8.102 virtualised (vSphere 4.1 Update 1)
Three interfaces

I need to bridge two VLANs - both VLANs are public internet facing:

VLAN1: the real interwebs
VLAN2: a myriad of KVM based VMs

It's not possible for me to route or NAT.

The VMs (CentOS 5.5) on VLAN2 need public internet DHCP lease as they are instantiated.

So I though - easy - bridged interface, packet filter rules on the bridge along with DHCP.

Well ... what happened is astounding - you can spin up the DHCP server - but as soon as the first VM requests a lease dhcpd is at 100% as literally thousands of DHCP responses are pumped out of the DHCP daemon.

The VMs (all 2 of them) do get a lease but the DHCP server goes mad issuing close to 225000 duplicate leases in 15 minutes and close to 10Mbps of broadcast.

Bug ... anyone else seen this ... or a I committing a cardinal sin of putting a DHCP server on a bridge?

Thanks!

James


This thread was automatically locked due to age.
Parents
  • 0
    Hey, James!  You have some interesting problems!

    I didn't know it was possible to bridge VLANs in Astaro.  Is there a separate DHCP server for each VLAN - couldn't you turn one off and have things work right?

    Cheers - Bob
Reply
  • 0
    Hey, James!  You have some interesting problems!

    I didn't know it was possible to bridge VLANs in Astaro.  Is there a separate DHCP server for each VLAN - couldn't you turn one off and have things work right?

    Cheers - Bob
Children
No Data