Messages

https://github.com/opnsense/changelog/blob/1da7ebefa2dfaf1bc72123ccb9b1d2e59cd6c3cf/community/21.1/21.1.3#L5-L11

Thanks franco that did the trick.

Is there a log or error message I can view to see why os-dyndns plugin is showing as misconfigured when I check the Plugins status page?



This plugin has so few settings so I'm unsure how it can be misconfigured. It's seems to be working and all my DDNS properly resolve.

Unbound crashes for me too.  Have not tried downgrading at this point.

One surprising thing was to see it does not  restart itself - I would imagine for key system services there would be some auto restart process.  Is there not such a thing in opnsense or is it disabled for unbound ?

On my system it does restart but after 5 crashes it triggers the HBSD SEGVGUARD which suspends processes for 600s after 5 crashes.

Thanks for the advice everyone, the opnsense-revert command worked for me.  No reboot needed.

Code Select Expand

opnsense-revert -r 20.7.6 unbound

I was going crazying trying to trace why my network kept dying till I discovered the DNS service shutting down over and over again. I originally thought it was due to my provider since they had a recent bad outage.

[Edit: Messing with my power settings https://forum.opnsense.org/index.php?topic=18450.0 seemed to "fix" this somehow. Very confused, maybe it was stuck in a low power mode? No idea but my speed is fine now, maybe try cycling your power settings.]

This isn't comprehensive by any means, but outlines what I am experiencing.  I've not found any workarounds for these issues.  I consider 1 and 2 more serious than the others.  I'll try and keep this up to date as issues are resolved or more are encountered. 

1. WAN throughput is very slow IPS on or off doesn't matter, I'm only getting about 15% of my actual WAN bandwidth.  A reboot fixes the issue temporarily but at some point it will drop back to being slow.  >:(

Edit: Messing with my power settings https://forum.opnsense.org/index.php?topic=18450.0 seemed to "fix" this somehow.  Very confused, maybe it was stuck in a low power mode?  No idea but my speed is fine now, maybe try cycling your power settings.

2. GEO IP Alias simply doesn't work, the zip file is being downloaded from maxmind.com but the alias won't populate, so any rules containing the alias fail to correctly function.

3. Dashboard traffic graphs don't show data with IPS enabled.  I'm on an Intel NIC, some have suggested it's driver related.  Worked ok in 20.1.9 though maybe there is a bug in the latest driver?  No workaround has resolved the issue as of yet.

4. Syslog-NG service doesn't start on it's own after reboot.  Starting it manually does seem to work, but is inconvenient after reboot.   This appears to be fixed with 20.7.1.

4. Restarting suricata service sometimes stops the ntpd service for some reason.  It can be manually started. 

5. Bogons alias is inexplicably empty at times.  Firewall > Diagnostics > pftables > bogons > "update bogons" does populate the list.   

6. Seeing log spam just like https://forum.opnsense.org/index.php?topic=18480.msg84175#msg84175 constantly in the log.  Not sure if this is cause of issue #1 or not.

Code Select Expand


kernel: pflog0: promiscuous mode enabled
kernel: pflog0: promiscuous mode disabled


I have observed many of the same issues.  #3,4,5,6 are the ones that seem to also affect my installation.

No observed issue with bandwidth slowdowns (#1), even with IPS and traffic shaping turned on. Power Saving settings have "Use PowerD" enabled and Hiadaptive set for all drop downs.

I'm not sure if I have seen a problem with GeoIPs (#2). I checked pfTables and see GeoIPs being filled in for all the Alias. Also "Firewall: Aliases > GeoIP settings tab" claims last update was 2020-08-14T20:38:26. Maybe the install I am looking at is OK, not sure how to test it.

Known error when Sensei or IPS is running in same interface. Needs some time to fix.

Understood, Thanks for update.

I just noticed this affects the "Reporting: Traffic" graph too. WAN traffic graph shows flat line zero bandwidth.


Figure 4 - "Reporting: Traffic" graph and widget also no longer report proper bandwidth.

Hello,

After upgrade to 20.7, VnStat is no longer displaying bandwidth information. I have tried to resolve this via restarting the plugin and also removing the interface and re-adding it. Seems I am also not the only user with this issue as I have found a post on reddit with same issue: https://www.reddit.com/r/OPNsenseFirewall/comments/i747py/has_anyones_vnstat_stop_working_after_207_update/

Screenshot of settings and issue below:

Figure 1 - Settings in VnStat


Figure 2 - No hourly bandwidth data being captured or displayed


Figure 3 - No bandwidth data being captured or displayed. Issue started after 20.7, was able to fix it on the 8/15/2020 but issue returned.

Nothing, it will upgrade from 7.3 to 7.4 and disable requirement for ebgp policies

Thanks!

Before next release (say 20.7.1), do we need un-revert for the system to upgrade?

Basically what should be done once the official fix is in place and one had used the opnsense-revert command?

That seems much more normal now. Probably monitor it a few more times and see if it spikes again.

netflow is using way more CPU cycles than what I would consider normal. In last release it was using python 2.7, I wonder if new python 3.0 usage is causing issue.

For example here is my System Diagnostic Activity while still on 19.1.10:

Code Select Expand

11 root 155 ki31 0 64K CPU0 0 835.0H 92.19% [idle{idle: cpu0}]
88347 root 25 0 1919M 325M select 1 135:00 8.89% /usr/local/bin/suricata -D --netmap --pidfile /var/run/suricata.pid -c /usr/local/etc/suricata/suricata.yaml{W#01-igb1}
27807 root 25 0 39M 32M select 1 73:28 6.49% /usr/local/bin/python2.7 /usr/local/opnsense/scripts/netflow/flowd_aggregate.py
18 root -16 - 0 16K - 3 107:38 2.10% [rand_harvestq]

As workaround to reduce CPU usage you could try to turn off NetFlow. I think you turn off netflow by going to Reporting: Netflow and clear all fields and uncheck capture local.

Or

Maybe try to "Reset Netflow Data" or "repair Netflow Data" at Reporting: Settings.

What does System: Diagnostics: Activity or top command say are highest CPU usage processes?

Any plans for ZFS aware installer for 20.1?   :D

Is your Power Savings set to mode Maximum for highest performance? I found that helped sometimes on APU2.

System>Settings>Miscellaneous>Power Savings
Use PowerD: checked on
Modes set to: Maximum

May need reboot, maybe not. I can't remember I no longer user my APU2.