Topics

I have a pair of firewalls that have the same issue (they're HA). They're both running 22.10.2_1. When checking for updates, they try to find the non-business repository (22.7) and fail. Any guidance on this would be appreciated.


***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 22.10.2_1 (amd64/OpenSSL) at Tue Aug 22 12:21:29 CDT 2023
Fetching subscription information, please wait... done
Fetching changelog information, please wait... done
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 826 packages processed.
Updating SunnyValley repository catalogue...
pkg: https://updates.sunnyvalley.io/opnsense/FreeBSD:13:amd64/22.7/OpenSSL/latest/meta.txz: Not Found
repository SunnyValley has no meta file, using default settings
pkg: https://updates.sunnyvalley.io/opnsense/FreeBSD:13:amd64/22.7/OpenSSL/latest/packagesite.pkg: Not Found
pkg: https://updates.sunnyvalley.io/opnsense/FreeBSD:13:amd64/22.7/OpenSSL/latest/packagesite.txz: Not Found
Unable to update repository SunnyValley
Error updating repositories!
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***

We're running two OPNsense boxes on identical hardware in an HA configuration. I went to do our quarterly firmware update and updated each firewall from 21.7.7 to 21.7.8 to 22.1. I set the secondary gateway to persistent CARP maintenance mode, performed the updates, disabled persistent carp on the secondary, enabled it on the primary. After the upgrade to 22.1 on the primary, both firewalls appeared down from our remote. After coming in the next morning, we saw that no traffic was being blocked on the LAN side, but that IPS was blocking all incoming traffic on the WAN side. Disabling IPS fixed the issue.

I failed over to our secondary and upgraded our primary to 22.1.4, hoping it might have been a bug. Regardless of which is currently primary, if we enable IPS on one of the gateways, WAN fails on that gateway.