#1152412 keepalived subscribes to gratuitous ARP/NDISC packets

Package:
keepalived
Source:
keepalived
Description:
Failover and monitoring daemon for LVS clusters
Submitter:
Thomas Goirand
Date:
2026-10-29 12:49:01 UTC
Severity:
normal
Tags:
#1152412#5
Date:
2026-10-28 21:35:33 UTC
From:
To:
Hi Vincent,

As per this pull request:
https://github.com/acassen/keepalived/pull/2750

It looks like keepalived subscribes to gratuitous ARP/NDISC packets, which
may generate an enormous load on one single core.

In our case, on OpenStack network nodes, keepalived was getting absolutely
all ARP packets from all of the subnets connected to it. Imagine this with
thousands of VMs on the cluster, and you can easily imagine that this is
a real disaster: we naively had to scale the number of network nodes to
handle the (single core) load.

You'll find the patch we came with attached to this bug report, which is
the same as what we forwarded upstream, and was merged a few days ago.

I would love to get this fixed in Unstable first, and then to Trixie and
Bookworm. If you do not have time to manage either of them, please let me
know: I can attempt to deal it with the Stable release team, and hopefuly
make it happen.

Let me know,

Cheers,

Thomas Goirand (zigo)

#1152412#10
Date:
2026-10-29 12:46:34 UTC
From:
To:
Hi,

I've opened a MR for this bug in unstable:

https://salsa.debian.org/debian/pkg-keepalived/-/merge_requests/4

Also, I pushed a debian/bookworm and debian/trixie branch, which
wouldn't need merging, just your approval if it's OK for an upload to
Trixie p-u and Bookworm (through the LTS process).

CHeers,

Thomas Goirand (zigo)