VRRP Object Tracking / Routes dependent on VRRP state

[Alasdair Muckart]

Is there any way in FRR to make routes depend on the state of a VRRP 
instance?

I have an issue where I can't bind static routes to the VRRP interface, 
because they get jammed in 'inactive' state, but I have a pair of 
routers acting as the gateway to a network (where I can't run a dynamic 
routing protocol or BFD). That other network has a static route to me 
pointing at the VIP, but I have no way to influence the OSPF routes I 
send to the rest of my network based on the VRRP state.

If I leave everything ECMP then half the time I'll get to the router 
that's the VRRP backup and the traffic blackholes because it's 
asymmetrical and the firewalls chuck it away.

If I weight things so that the path through the VRRP primary is 
preferred, everything breaks if the VRRP fails over, which defeats the 
purpose.

On appliance routers (Cisco, Junper, whatever) it's standard to be able 
to use object tracking to withdraw routes if the VRRP is in backup 
state. Is there any way to do this with FRR?

Thanks

-- 
Alasdair Muckart (he/him)
Network Infrastructure Architect
Catalyst.Net Limited - Expert Open Source Solutions

Catalyst.Net Ltd - a Catalyst IT group company
DDI: +64 4 897 7794 | Mobile: +64 22 638 5141 | Tel: +64 4 499 2267 | www.catalyst.net.nz

CONFIDENTIALITY NOTICE: This email is intended for the named
recipients only. It may contain privileged, confidential or copyright
information. If you are not the named recipient, any use, reliance
upon, disclosure or copying of this email or its attachments is
unauthorised. If you have received this email in error, please reply
via email or call +64 4 499 2267.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x5DD6A73F91100786.asc
Type: application/pgp-keys
Size: 5430 bytes
Desc: OpenPGP public key
URL: <http://lists.frrouting.org/pipermail/frog/attachments/20240628/79b72316/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.frrouting.org/pipermail/frog/attachments/20240628/79b72316/attachment.sig>