91
20.7 Legacy Series / Re: Ipsec Site-to-Site VPN goes down regularly
« on: November 22, 2020, 07:31:54 pm »
Nobody uses dynamic IP with site2site IPSEC VPN?
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Your static mappings need to be outside of the range chosen for auto mapping.
I think the info you're after is now in the 'iflib.driver_version' component instead of '%desc'.
# sysctl -a | grep -E 'dev.(igb|ix|em).*.iflib.driver_version:'
dev.igb.1.iflib.driver_version: 7.6.1-k
dev.igb.0.iflib.driver_version: 7.6.1-k
This from my APU2C4; I think you just missed the two last characters of the string whilst copying it.
root@opnsense:~ # sysctl -a | grep -E 'dev.(igb|ix|em).*.%desc:'
dev.igb.2.%desc: Intel(R) PRO/1000 PCI-Express Network Driver
dev.igb.1.%desc: Intel(R) PRO/1000 PCI-Express Network Driver
dev.igb.0.%desc: Intel(R) PRO/1000 PCI-Express Network Driver
I'm not sure. We can't really tell people what to do and what not to do. Some complain about having to do (so many) updates, but the truth is they just can avoid pressing the update button.
And as for reading what we write specifically... let's say it can be difficult for any number of reasons: time, language, context, larger version jumps, plugin use and other local complications.
We try to pack all release-relevant information into the releases notes and that includes current issues that a lot of people are struggling with, see the netmap information in 20.7.2 for example.
Syslog-ng had issues for sure, but so much that it kept crashing people's deployments completely so we have to weigh importance and for this reason syslog-ng did not meet the bar for inclusion.
A number of workarounds existed prior to 20.7.2 and if you need personal assistance there is also commercial things to be considered.
All of this is no substitute to test locally and roll back if you really need to. Snapshots and backups are great.
I know that people see their issues first and would like to not deal with them and ask us to be super up front and direct for every small issue, but this is neither done intentionally nor do we not work on fixes in the background in the scope of what impact is relevant for whom.
To circle back, a known issues section is more for something permanent that is unlikely to change for a longer period, not as transient bug. First releases of a major version are always a little noisy and if persistent issues emerge we shall document and report on them properly. So far we seem to be on a good standing for syslog-ng on 20.7.2.
Cheers,
Franco
@jassonmc: Welcome to the opensense community
Very in-depth, thoughtful and helpful comeback. ¯\_(ツ)_/¯
OPNsense 20.7.2-amd64
Coreboot v4.12.0.4
APU4D4
No problems whatsoever.
HTH,
Patrick
Thanks. Has someone experiences with this?
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203856#c11