SRv6 L3VPN VRF Route install failed

[liuyuefengcn]

Describe the bug
[ X] Did you check if this is a duplicate issue?
[ X] Did you test it on the latest FRRouting/frr master branch?
on frrouting/frr/tree/stable/9.0.

To Reproduce

Router 1 ：

docker exec -it router1 bash:
ip link add vrf10 type vrf table 10
ip link set dev vrf10 up
ip link set dev eth-north master vrf10

docker exec -it router1 vtysh:
Current configuration:
!
frr version 9.0_git
frr defaults traditional
hostname router1
log syslog informational
!
ipv6 route 2001:db8:3:1::/64 2001::3:1
!
interface lo
 ipv6 address 2001::1:1/128
exit
!
interface eth1 vrf vrf10
 ipv6 address 2001:1::1/64
exit
!
router bgp 65000
 bgp router-id 192.168.1.1
 no bgp ebgp-requires-policy
 no bgp default ipv4-unicast
 no bgp network import-check
 neighbor 2001::3:1 remote-as 65000   (Use OSPF or ISIS to learn the remote 2001::3:1 route)
 neighbor 2001::3:1 update-source lo
 !
 segment-routing srv6
  locator loc1
 exit
 !
 address-family ipv6 vpn
  neighbor 2001::3:1 activate 
 exit-address-family
exit
!
router bgp 65000 vrf vrf10
 bgp router-id 192.168.1.1
 no bgp ebgp-requires-policy
 no bgp default ipv4-unicast
 !
 address-family ipv6 unicast
  redistribute connected
  sid vpn export auto
  rd vpn export 1:10
  rt vpn both 99:99
  export vpn
  import vpn
 exit-address-family
exit
!
segment-routing
 srv6
  locators
   locator loc1
    prefix 2001:db8:1:1::/64 block-len 40 node-len 24 func-bits 8
   exit
   !
  exit
  !
 exit
 !
 traffic-eng
 exit
exit
!
end

Router 2 ：

docker exec -it router2 bash:
ip link add vrf10 type vrf table 10 
ip link set dev vrf10 up 
ip link set dev eth-north master vrf10

docker exec -it router2 vtysh:
Current configuration:
!
frr version 9.0_git
frr defaults traditional
hostname router2
log syslog informational
!
ipv6 route 2001:db8:1:1::/64 2001::1:1
!
interface lo
 ipv6 address 2001::3:1/128
exit
!
interface eth-1
 ipv6 address 2001:3::1/64
exit
!
router bgp 65000
 bgp router-id 192.168.3.1
 no bgp ebgp-requires-policy
 no bgp default ipv4-unicast
 no bgp network import-check
 neighbor 2001::1:1 remote-as 65000
 neighbor 2001::1:1 update-source lo
 !
 segment-routing srv6
  locator loc1
 exit
 !
 address-family ipv6 vpn
  neighbor 2001::1:1 activate
 exit-address-family
exit
!
router bgp 65000 vrf vrf10
 bgp router-id 192.168.3.1
 no bgp ebgp-requires-policy
 no bgp default ipv4-unicast
 !
 address-family ipv6 unicast
  redistribute connected
  sid vpn export auto
  rd vpn export 2:10
  rt vpn both 99:99
  export vpn
  import vpn
 exit-address-family
exit
!
segment-routing
 srv6
  locators
   locator loc1
    prefix 2001:db8:3:1::/64 block-len 40 node-len 24 func-bits 8
   exit
   !
  exit
  !
 exit
 !
 traffic-eng
 exit
exit
!
end

Expected behavior:
The VRF route 2001:3::/64 from Router3 learned on Router1 was successfully installed into Router1's FIB table

Actual behavior:
CentOS Linux release 8.5.2111
Linux version 4.18.0-348.el8.x86_64

debug error info：
[ERR!] zebra: [HSYZM-HV7HF] Extended Error: lwt encapsulation type not supported

Referring to #10896 this issue, I upgraded the Linux kernel to the latest version
[root@localhost frrlab]# sudo docker exec -it router1 bash
[root@router1 /]# uname -a
Linux router1.1 6.5.7-1.el8.elrepo.x86_64 #1 SMP PREEMPT_DYNAMIC Tue Oct 10 21:50:37 EDT 2023 x86_64 x86_64 x86_64 GNU/Linux
[root@router1 /]#

But the problem remains unsolved。

any solutions please.. 😢

[cscarpitta]

@liuyuefengcn Your kernel does not have the SEG6 lightweight tunnel support.
You need to build a custom kernel with the CONFIG_IPV6_SEG6_LWTUNNEL option enabled

[liuyuefengcn]

Thanks, I'll try it the way you say.