Messages

just noticed my log file is full of these since going to 18.1.r2

Jan 18 18:39:18   radvd[37605]: version 1.15 started
Jan 18 18:39:18   radvd[71698]: removing /var/run/radvd.pid
Jan 18 18:39:18   radvd[71698]: sending stop adverts
Jan 18 18:39:18   radvd[71698]: Exiting, sigterm or sigint received.
Jan 18 18:38:20   radvd[71478]: version 1.15 started
Jan 18 18:38:20   radvd[72393]: removing /var/run/radvd.pid
Jan 18 18:38:20   radvd[72393]: sending stop adverts
Jan 18 18:38:20   radvd[72393]: Exiting, sigterm or sigint received.


they repeat every few minutes

I see you snuck out 17.7.12 when I was testing 18.1r2

thought my eyes where going for a minute when I looked in the System:Firmware 

@nivek1612: I noticed this too today. Even on 17.7.12 where nothing changed. I'm guessing GeoIP alias?

You are correct o wise one:-) GeoIP alias for both IPv4 and IPv6 are in use

Umm how do you apply these patches?

Just run?

# opnsense-patch #####


??

once your at 18.1.r2 from console issue

opnsense-patch bba40c97 947718b

That's a couple of OKs now from different directions, good. Only one issue left in the tracker, then we are ready for tomorrows code freeze.... hopefully.  8)


Cheers,
Franco

Just rebooted noticed again that after reboot the CPU usage is circa 25% for 3-4 minutes that drops to the more normal 3-4%. Never noticed this at 17.7.11, but it may have been the same. Also during this time the servers are very sluggish to requests from WAN again not something I'd observed before but may have been the same. Once the CPU has calmed down though all is working as expected and back to normal.

So maybe there is a little bit of sub optimal process intensive stuff going on at 18.1 compared to 17 

Ok its working

I had to go into the alias section of GUI and re-save one of them first then re-apply,

After reboot its survived but it seemed to take a while for my servers to be accessible from outside my LAN. It may be that 4G link I was using was slow. But i did notice that my CPU load on the lobby dashboard was quiet high for a while almost implying the firewall was busy doing something - Alias table rebuild maybe

I'll leave it a while then give it another reboot and check if the same happens 

So before i test (I'm now home)

We are using 18.1rc2 with

just patches bba40c97 947718b

or are there others to apply as well

I did a fresh install of a 18.1 vga image from European mirror on a new SSD

I then restored my config from 17.7.11

Hi nivek,

Can you dump this output for me?

# df -h

I think you are using /var MFS through Nano image maybe?


Cheers,
Franco

Sorry Franco not back at home until mid week, hopefully Martins reply will suffice . I know we are using the same settings as i think I stole them from him originally :-)

Also like Martin
after reboot 'configctl filter refresh_aliases' just freezes when I run it. CTRL-C and run it again it says OK.

Hi Franco

Alias seems broken for me also at 18.1. I use them extensively to avoid me having to list the ports and IP address in the WAN rules

After a reboot I cannot access servers from outside my firewall

"configctl filter refresh_aliases"

fixes the problem

but the issue returns after reboot and another "configctl filter refresh_aliases" is required

I pulled in my config from 17.7.11 into a fresh install of 18.1r

I have applied patch 60e4e80

The full fix was in https://github.com/opnsense/core/commit/3914236ce for 18.1-RC2 and should also work on 17.7.11. :)

It was sensible to move that code to priv-sep execution. Very nice find overall. Thanks again!


Franco

Perfect, was bugging me having an extra gateway defined to allow me to test the 18.1. Its been rock solid though (bar a users error  :-[) so i may flip my SSD out of my prod router later (just in case) and do a clean install of a new SDD of 18.1r and go live in prod

Having been over on darkside and experienced the dismissive nature of the mods and dev team over there this forum and the support provided are a refreshing change

Just sorry it took me so long to figure that out

Now do I promote 18.1r from test to prod :-)

That patch makes the ipv6 route work as well

Wow great patch who wrote it :-)

Eh Franco what did we do wrong in Europe not to get the vga image on the mirror :-)

Rest of the world got it  ;D

LOL

I have a usb stick in my hand, if i go quiet it means it didn't go well :-)