|
| 1 | +# DHCP Relay (v4) - Specify gaaddr as Primary Interface's Gateway explicitly # |
| 2 | + |
| 3 | +## Table of Content |
| 4 | +1. [Scope](#Scope) |
| 5 | +2. [Definitions](#Definitions/Abbreviations) |
| 6 | +3. [Overview](#Overview) |
| 7 | +4. [Requirements](#Requirements) |
| 8 | +5. [High Level Design](#High-Level-Design) |
| 9 | +6. [Test](#Testing-Considerations) |
| 10 | + |
| 11 | +### Revision |
| 12 | + |
| 13 | +### Scope |
| 14 | + |
| 15 | +This document describes the High Level Design of 'secondary' interfaces of vlan and use of primary (non-secondary) interface as gateway for dhcpv4 relay. |
| 16 | + |
| 17 | +### Definitions/Abbreviations |
| 18 | + |
| 19 | + |
| 20 | + |
| 21 | +### Overview |
| 22 | + |
| 23 | +A vlan can support multiple subnets/interfaces. Some of these interfaces (ideally all except one) can be marked as 'secondary'. |
| 24 | + |
| 25 | +Secondary addresses do not support DHCP (with dhcp relay). Dhcp relay agent will insert its primary address in dhcp request, and dhcp server should assign addresses from primary range only. |
| 26 | + |
| 27 | +When a dhcpv4 packet is forwarded via (isc) dhcprelayagent, it embeds its interface's gateway address as 'giaddr' for return communication. |
| 28 | +In case of multiple (primary) interfaces, dhcprelayagent randomly (mis)configures this giaddr to any of the interfaces. |
| 29 | +This design fixes this behaviour by marking some interfaces as secondary, and explicitly specifying the primary interface for dhcp relay agent's gateway. |
| 30 | + |
| 31 | +Secondary interface increases the number of IPs supported by switch without affecting live workloads. Such IPs will be used for virtualized machines on existing baremetals. This also provides finer control for different workloads from network security. |
| 32 | + |
| 33 | +This feature is limited to IPv4-only. |
| 34 | + |
| 35 | +### Requirements |
| 36 | + |
| 37 | +1. Support a new member 'secondary' of VLAN_INTERFACE in config_db. |
| 38 | +2. Support parsing and assignment of subnets from minigraph/json/cli to config_db. |
| 39 | +3. Support specifying non-secondary interfaces' gateway address to command line arguments to /usr/sbin/dhcrelay as -pg (primary gateway). |
| 40 | +4. isc-dhcp/dhcrelay to support '-pg gateway' argument. |
| 41 | + |
| 42 | +### Architecture Design |
| 43 | + |
| 44 | +This HLD doesn't propose any sonic architectural changes. It follows the existing architecture of sonic - open source asc-dhcp is used for its dhcpv4 requirements. |
| 45 | +This HLD proposes to enhance the dhcp-relay (v4) capability by avoiding ambiguity in dhcpv4 request packet's giaddr field. |
| 46 | + |
| 47 | +### High-Level Design |
| 48 | + |
| 49 | +This section covers the high level design of the feature/enhancement. This section covers the following points in detail. |
| 50 | + |
| 51 | + - Is it a built-in SONiC feature or a SONiC Application Extension? - Built in feature. |
| 52 | + - What are the modules and sub-modules that are modified for this design? - isc-dhcp. |
| 53 | + - What are the repositories that would be changed? - sonic-subnet/sonic-buildimage. |
| 54 | + - Module/sub-module interfaces and dependencies. |
| 55 | + - SWSS and Syncd changes in detail - N/A. |
| 56 | + - DB and Schema changes (APP_DB, ASIC_DB, COUNTERS_DB, LOGLEVEL_DB, CONFIG_DB, STATE_DB) - CONFIG_DB sonic-vlan/sonic-vlan/VLAN_INTERFACE. |
| 57 | + - Sequence diagram if required. - N/A. |
| 58 | + - Linux dependencies and interface - N/A. |
| 59 | + - Warm reboot requirements/dependencies - N/A. |
| 60 | + - Fastboot requirements/dependencies - N/A. |
| 61 | + - Scalability and performance requirements/impact - N/A. |
| 62 | + - Memory requirements - N/A. |
| 63 | + - Docker dependency - N/A, |
| 64 | + - Build dependency if any - N/A. |
| 65 | + - Management interfaces - SNMP, CLI, RestAPI, etc., |
| 66 | + - Serviceability and Debug (logging, counters, trace etc) related design |
| 67 | + - Is this change specific to any platform? Are there dependencies for platforms to implement anything to make this feature work? If yes, explain in detail and inform community in advance. - N/A. |
| 68 | + - SAI API requirements, CLI requirements, ConfigDB requirements. Design is covered in following sections. - ConfigDB requirement is captured below. |
| 69 | + |
| 70 | +### SAI API |
| 71 | + |
| 72 | +No change in SAI API. |
| 73 | + |
| 74 | +### Configuration and management |
| 75 | +(This section should have sub-sections for all types of configuration and management related design. Example sub-sections for "CLI" and "Config DB" are given below. Sub-sections related to data models (YANG, REST, gNMI, etc.,) should be added as required.) |
| 76 | + |
| 77 | +#### Minigraph |
| 78 | + |
| 79 | +Redis DB Structure | Json Style |
| 80 | +``` |
| 81 | +{ |
| 82 | +"VLAN_INTERFACE": { |
| 83 | + "Vlan1000": {}, |
| 84 | + "Vlan1000|20.11.12.13/27": {"secondary": "true"}, |
| 85 | + "Vlan1000|20.11.10.13/27": {}, |
| 86 | + } |
| 87 | +} |
| 88 | +``` |
| 89 | + |
| 90 | +#### Manifest (if the feature is an Application Extension) |
| 91 | + |
| 92 | +N/A |
| 93 | + |
| 94 | + |
| 95 | +#### CLI/YANG model Enhancements |
| 96 | + |
| 97 | +Extend CLI to specify an interface ip as secondary during add: |
| 98 | + |
| 99 | + $ sudo config interface ip add Vlan1000 20.11.12.13/27 20.11.12.254 --secondary |
| 100 | + Usage: config interface ip add <interface_name> <ip_addr> <default gateway IP address> <secondary> |
| 101 | + |
| 102 | +Extend yang (sonic-vlan.yang): |
| 103 | +``` |
| 104 | + list VLAN_INTERFACE_IPPREFIX_LIST { |
| 105 | +
|
| 106 | + leaf secondary { |
| 107 | + description "Optional field to specify if the prefix is secondary subnet"; |
| 108 | + type boolean; |
| 109 | + } |
| 110 | + } |
| 111 | +``` |
| 112 | + |
| 113 | +#### Config DB Enhancements |
| 114 | + |
| 115 | +Support a new optional member 'secondary' of VLAN_INTERFACE in config_db. Type: bool, Default: false. |
| 116 | +No upgrade/action required in config_db for existing interfaces during upgrade. |
| 117 | + |
| 118 | + |
| 119 | +### Warmboot and Fastboot Design Impact |
| 120 | +This feature doesnt impact warmboot/fastboot. This feature is limited to dhcpv4 relay agent behaviour, which doesnt affect warmboot/fastboot. |
| 121 | + |
| 122 | +### Memory Consumption |
| 123 | +No memory consumption is expected when the feature is disabled via compilation and no growing memory consumption while feature is disabled by configuration. |
| 124 | + |
| 125 | +### Restrictions/Limitations |
| 126 | + |
| 127 | +### Testing Requirements/Design |
| 128 | +Explain what kind of unit testing, system testing, regression testing, warmboot/fastboot testing, etc., |
| 129 | +Ensure that the existing warmboot/fastboot requirements are met. For example, if the current warmboot feature expects maximum of 1 second or zero second data disruption, the same should be met even after the new feature/enhancement is implemented. Explain the same here. |
| 130 | +Example sub-sections for unit test cases and system test cases are given below. |
| 131 | + |
| 132 | +#### Unit Test cases |
| 133 | + |
| 134 | +Sonic has an extensive set of unit tests to validate dhcpv4 scenarios. Few test cases were modified with additional 'subnets', to validate existing test cases. |
| 135 | + |
| 136 | +``` |
| 137 | +1. [sonic-buildimage] yang - model validation test case: |
| 138 | + src/sonic-config-engine/tests/test_minigraph_case.py::test_minigraph_vlan_interfaces - to check if secondary flag is added. |
| 139 | + src/sonic-config-engine/tests/test_minigraph_case.py:::test_minigraph_vlan_interfaces_keys - to check if secondary subnet is added in IPInterfaces. |
| 140 | +2. [sonic-utilities] cli validation test cases: all the below cases are covered in tests/ip_config_test.py |
| 141 | + validating --secondary flag in the command |
| 142 | + validating -s flag in the command |
| 143 | + Check if a primary subnet is present and only if it is add the secondary flag - if not fail |
| 144 | +3. [sonic-mgmt] dhcp relay test case: Modify the existing two_vlan scenario to extend and have secondary subnet field in the minigraph |
| 145 | + ansible/templates/minigraph_dpg.j2 - changes to add SecondarySubnets xml entry |
| 146 | + ansible/vars/topo_t0.yml - changes to add secondary_subnet to the vlan |
| 147 | +4. [sonic-buildimage] test dhcp-relay j2 file generation: |
| 148 | + src/sonic-config-engine/tests/test_j2files.py::test_dhcp_relay - add a test case to read minigraph file with secondary subnet field present and validate it against the expected generated file. |
| 149 | + src/sonic-config-engine/tests/t0-sample-graph-secondary-subnets.xml - minigraph with secondary subnets in Vlan1000 |
| 150 | + docker-dhcp-relay-secondary-subnets.supervisord.conf - expected output file in sample-output folder |
| 151 | +``` |
| 152 | + |
| 153 | +#### System Test cases |
| 154 | +N/A. |
| 155 | + |
| 156 | +### Open/Action items - if any |
| 157 | + |
| 158 | + |
| 159 | +NOTE: All the sections and sub-sections given above are mandatory in the design document. Users can add additional sections/sub-sections if required. |
0 commit comments