Messages

Thanks for the hint, I read that thread as well but this one is one step further already. I'm one stage before. I follow nearly the same approach as described in the beginning of the issue and get via DHCPv6 request send from my OPNsense an address from my IPv6 proving router, but I'm not at the point (yet) of advertising addresses further into my networks.

My example is still showing to be stuck at not being able to contact the providing GW again via link local address while I saw it perfectly answering on the multicast before.
I would guess, gary201 has the same problem, as he is also having the gateway as link local address in the routing table - exactly as I have. So there is nothing wrong that way, but why can't it be pinged directly from the WAN interface?

[fe80::c225:6ff:feff:820d]

I second that (running 20.7.7_1), even though I cannot break it down to some time working after start, from my point of view it is never working.

If I do login to the console (IPv6 activated, GW setup via DHCv6, all FW rules allowing all IPv6 traffic) from the console and I do this to detect my next IPv6 router via multicast, it is detected:

root@OPNsense:~ # ping6 -c 2 ff02::2%bce0
PING6(56=40+8+8 bytes) fe80::221:5eff:fec8:be88%bce0 --> ff02::2%bce0
16 bytes from fe80::c225:6ff:feff:820d%bce0, icmp_seq=0 hlim=64 time=0.531 ms
16 bytes from fe80::c225:6ff:feff:820d%bce0, icmp_seq=1 hlim=64 time=0.465 ms

--- ff02::2%bce0 ping6 statistics ---
2 packets transmitted, 2 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.465/0.498/0.531/0.033 ms

A few seconds later, I just try to directly ping the answering IPv6 router and I cannot talk to it:

root@OPNsense:~ # ping6 -c 1 fe80::c225:6ff:feff:820d%bce0
PING6(56=40+8+8 bytes) fe80::221:5eff:fec8:be88%bce0 --> fe80::c225:6ff:feff:820d%bce0

--- fe80::c225:6ff:feff:820d%bce0 ping6 statistics ---
1 packets transmitted, 0 packets received, 100.0% packet loss


So, IPv6 does for sure not work and to my records this is since quite some time back within 20.7. I had several unsolved issues here already and I would be more than happy to support this getting solved.

Nonetheless interesting to read :-). I still have IPv6 problems as I cannot ping my next (local) gateway via link local from WAN directly from my OPNsense. So something is still wrong with the IPv6 implementation, Firewall states all ICMPv6 as green, so something else is n the way, so this is why I was following your thoughts with interest :-).

Just want to update this topic, I have the same problem here and I have just updated today to OPNsense 20.7.6-amd64 and I'm running this on bare metal, so nothing virtualized. I still cannot ping my link local router GW directly from OPNsense - even though in the firewall it's all green aka allowed.

So I'm currently also not using IPv6 due to this issue, but I really hope with every release to see it fixed :-\. I'm happy to provide an help I'm able to contribute here to get this solved.

Just updated to OPNsense v20.7.4 and this error is still existing and can be reproduced exactly the same way :-\.

When rebooting, I ping my wireguard side2side VPN peer and get a working wg handshake. I do not do anything to the network towards the other side for around ~5 minutes (or more). Then the peer pings me or a host in my net (~ at 21:00:20) and I get the following error right in the moment I receive the ping (read bottom up, see timestamp):

2020-10-23T21:02:55   kernel   775.438456 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:02:50   kernel   770.065512 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:02:45   kernel   764.944924 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:02:40   kernel   759.823284 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:02:34   kernel   754.446545 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:02:29   kernel   749.073050 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:02:23   kernel   743.694746 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:02:18   kernel   738.574607 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:02:13   kernel   733.199104 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:02:08   kernel   728.080889 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:02:02   kernel   722.702687 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:02:00   configctl[65140]   error in configd communication Traceback (most recent call last): File "/usr/local/opnsense/service/configd_ctl.py", line 68, in exec_config_cmd line = sock.recv(65536).decode() socket.timeout: timed out
2020-10-23T21:02:00   configctl[97151]   error in configd communication Traceback (most recent call last): File "/usr/local/opnsense/service/configd_ctl.py", line 68, in exec_config_cmd line = sock.recv(65536).decode() socket.timeout: timed out
2020-10-23T21:01:57   kernel   717.330560 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:01:52   kernel   712.208508 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:01:46   kernel   706.830221 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:01:41   kernel   701.710273 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:01:36   kernel   696.334982 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:01:31   kernel   690.959233 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:01:25   kernel   685.582285 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:01:20   kernel   680.206269 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:01:15   kernel   675.088935 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:01:09   kernel   669.711789 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:01:04   kernel   664.334168 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:00:59   kernel   659.213843 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:00:54   kernel   653.966996 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T21:00:49   kernel   648.882188 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-10-23T20:28:15   configctl[79183]   event @ 1603477695.12 exec: system event config_changed
2020-10-23T20:28:15   configctl[79183]   event @ 1603477695.12 msg: Oct 23 20:28:15 OPNsense.lan config[42107]: config-event: new_config /conf/backup/config-1603477695.1182.xml
2020-10-23T20:28:02   configctl[79183]   event @ 1603477682.01 exec: system event config_changed
2020-10-23T20:28:02   configctl[79183]   event @ 1603477682.01 msg: Oct 23 20:28:02 OPNsense.lan config[42107]: config-event: new_config /conf/backup/config-1603477682.0029.xml
2020-10-23T20:23:28   opnsense[97415]   plugins_configure dhcp (execute task : dhcpd_dhcp_configure())
2020-10-23T20:23:28   opnsense[97415]   plugins_configure dhcp ()

So this problem is still existing and could not be fixed with new drivers so far or likewise.

Hej, this might be a known error and related to this bug: https://github.com/opnsense/core/issues/4338
This does not immediately solve your issue, but at least might give you an indication about the why :).

I've plenty of IPv6 issues as well, I'm currently behind a FritzBox as well but I cannot even ping my FB via link local address, even though I can see the FW sending and returning ICMP packets in the FW log. I gave up and wait for a new release.

Ok, interessant, bei mir ist es seit dem letzten Release noch schlimmer geworden.
Hatte das mit dem Tack Interface auf WAN auch al getestet, aber beim ersten mal nur ohne Änderungen gespeichert und dann ist die Firewall Oberfläche hängengeblieben, also das Web Frontend war tot und kam nach einiger zeit wieder, hat vermutlich rebootet (Uptime fing wieder bei 0 an). Als so richtig stable ist das aktuell nicht.
Ich warte auf die nächste Release-Runde und gucke dann mal. Bis dahin ist IPv6 bei mir zumindest leider vollkommen unbrauchbar.

Not sure, but I have a comparable issue but only with IPv6 as I stated very precise here: https://forum.opnsense.org/index.php?topic=18923.0
IPv4 does not make any problems, but with a delegated IPv6 prefix I see the same strange and/or inconsistent behavior within the firewall logs.

I know, not helpful :-\, but I'm still trying to find some relation so I can nail the problem.

So this is driver related and nothing I can manipulate via setup adjustments? Else let me know, if there is something I can do to test any suggestions.

Yes, exactly in that moment (or +~2secs).

[Another case:]

Ok, I see.
So I hope, this helps, for a screenshot I need to provoke it later again, these are messages from v20.7.2 (see dates):


2020-09-10T00:28:10   kernel   490.690419 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-10T00:28:05   kernel   485.572543 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-10T00:28:00   kernel   480.194945 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-10T00:28:00   kernel   479.940436 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-10T00:27:54   kernel   474.761838 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-10T00:27:49   kernel   469.475112 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-10T00:27:44   kernel   464.324372 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-10T00:27:39   kernel   459.205033 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-10T00:27:33   kernel   453.830080 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-10T00:27:28   kernel   448.126626 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-10T00:27:23   kernel   443.431391 [ 320] generic_netmap_register Emulated adapter for bce0 activated
2020-09-10T00:27:23   kernel   443.431259 [1130] generic_netmap_attach Emulated adapter for bce0 created (prev was NULL)
2020-09-10T00:27:23   kernel   bce0: permanently promiscuous mode enabled
2020-09-10T00:27:23   kernel   443.407436 [1035] generic_netmap_dtor Emulated netmap adapter for bce0 destroyed
2020-09-10T00:27:23   kernel   443.407409 [1130] generic_netmap_attach Emulated adapter for bce0 created (prev was NULL)


Another case:

2020-09-09T23:42:03   kernel   723.581121 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-09T23:41:58   kernel   718.205255 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-09T23:41:53   kernel   713.085191 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-09T23:41:48   kernel   707.965228 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-09T23:41:42   kernel   702.589255 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-09T23:41:37   kernel   697.337566 [4006] netmap_transmit bce0 drop mbuf that needs checksum offload
2020-09-09T23:02:00   configctl[8592]   error in configd communication Traceback (most recent call last): File "/usr/local/opnsense/service/configd_ctl.py", line 68, in exec_config_cmd line = sock.recv(65536).decode() socket.timeout: timed out
2020-09-09T23:02:00   configctl[53856]   error in configd communication Traceback (most recent call last): File "/usr/local/opnsense/service/configd_ctl.py", line 68, in exec_config_cmd line = sock.recv(65536).decode() socket.timeout: timed out
2020-09-09T22:43:00   /update_tables.py[68067]   fetch alias url https://www.spamhaus.org/drop/drop.txt (lines: 944)
2020-09-09T22:02:00   /update_tables.py[62598]   fetch alias url https://www.spamhaus.org/drop/dropv6.txt (lines: 39)
2020-09-09T22:02:00   configctl[9337]   error in configd communication Traceback (most recent call last): File "/usr/local/opnsense/service/configd_ctl.py", line 68, in exec_config_cmd line = sock.recv(65536).decode() socket.timeout: timed out
2020-09-09T22:02:00   configctl[46137]   error in configd communication Traceback (most recent call last): File "/usr/local/opnsense/service/configd_ctl.py", line 68, in exec_config_cmd line = sock.recv(65536).decode() socket.timeout: timed out
2020-09-09T21:59:09   /flowd_aggregate.py[5222]   vacuum done

Cool, thanks @Franco, so if I understood you correctly, then I'm back on the netmap testing track with my update now? So the update worked as initially assumed by me?

Hehe, sorry, that was not my intention, I thought, if no package is available yet, it would not find anyhing and therefor not proceed.
That's why I surprisped myself slightly :P. So as said, I guess too ambigious, it rebooted, but kernel does not look much different (it's from 21.09.).

Upsi, then I was too ambitious....

root@OPNsense:~ # opnsense-update -kr 20.7.3-netmap
Fetching kernel-20.7.3-netmap-amd64.txz: ......... done
!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!
! A critical upgrade is in progress. !
! Please do not turn off the system. !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Installing kernel-20.7.3-netmap-amd64.txz... done
Please reboot.

Kind of a same question, I just updated to v20.7.3 and came from the 20.7.2-netmap kernel. Now my wireguard side2side tunnel does not connect anymore.

Is there something like opnsense-update -kr 20.7.3-netmap so I can proceed testing the new kernel?