Recent posts

#91
25.7, 25.10 Series / Re: What is the official migra...
Last post by meyergru - January 17, 2026, 01:03:03 PM
There is no automatic migration. You can set up your new DHCP server of choice (Kea or DNSmasp) according to the documentation.

The only thing that warrants non-manual setup is the static reversations IMHO, and those you can export as CSV and import to either Kea or DNSmasq.
#92
25.7, 25.10 Series / Re: What is the official migra...
Last post by Seimus - January 17, 2026, 12:59:26 PM
ISC will not be removed from the system it will just be moved from the core as a standalone packages as mentioned above.
You can still use ISC, it will work fine, just make sure after the movement of ISC the ISC package is installed.

About the migration, there is no tool, and honestly not sure if there will be one. You will have to plan it yourself and decide if to mvoe to KEA or DNSMASQ.

Check the documentation so you know what are the benefits negatives and how to do it
https://docs.opnsense.org/manual/dhcp.html

Regards,
S.
#93
25.7, 25.10 Series / Re: DEC2752 - How to check har...
Last post by Seimus - January 17, 2026, 12:56:46 PM
You can use few tools,

Memtest86 - create a bootable USB boot from it and test memory
SMARTS - you can use the smarts package directly on OPNsense via GUI, that will test, show logs etc. on and for disks
Stress-ng - can be installed directly on OPNsense via cli, can test memory, CPU, disk. This is a stress test tool, you can stress test either of them separately or all together. I personally use it to test the stability of Memories during high utilization load with conjugation of high load on CPU.

Regards,
S.
#94
25.7, 25.10 Series / Re: DEC2752 - Stop/Crash at 00...
Last post by stuckoff - January 17, 2026, 12:30:17 PM

Yes, I did this and here is the log from 00:02 last night:

# >>> Invoking stop script 'beep'
>>> Invoking stop script 'freebsd'
snmpd not running? (check /var/run/net_snmpd.pid).
>>> Invoking stop script 'backup'
>>> Invoking backup script 'captiveportal'
>>> Invoking backup script 'dhcpleases'
>>> Invoking backup script 'duid'
>>> Invoking backup script 'netflow'
>>> Invoking backup script 'rrd'
>>> Invoking stop script 'config'
Enter full pathname of shell or RETURN for /bin/sh:

The system log looks the same:
root@fw:/var/log/system # cat system_20260117.log
2026-01-17T00:02:20+02:00 fw.lan kernel - - [meta sequenceId="1"] <3>[30505] pid 78673 (At3plE9U), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:02:20+02:00 fw.lan kernel - - [meta sequenceId="2"] <3>[30527] pid 99067 (FtcZhyzw), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:02:20+02:00 fw.lan kernel - - [meta sequenceId="3"] <3>[30541] pid 16919 (At3plE9U), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:02:20+02:00 fw.lan kernel - - [meta sequenceId="4"] <3>[30560] pid 89389 (FtcZhyzw), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:02:20+02:00 fw.lan kernel - - [meta sequenceId="5"] <3>[30571] pid 6829 (FtcZhyzw), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:02:20+02:00 fw.lan kernel - - [meta sequenceId="6"] <3>[30598] pid 5238 (At3plE9U), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:04:57+02:00 fw.lan kernel - - [meta sequenceId="1"] <3>[30628] pid 86199 (At3plE9U), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:04:57+02:00 fw.lan kernel - - [meta sequenceId="2"] <3>[30667] pid 27392 (FtcZhyzw), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:04:57+02:00 fw.lan kernel - - [meta sequenceId="3"] <3>[30679] pid 68394 (At3plE9U), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:04:57+02:00 fw.lan kernel - - [meta sequenceId="4"] <3>[30721] pid 65517 (FtcZhyzw), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:04:57+02:00 fw.lan kernel - - [meta sequenceId="5"] <3>[30734] pid 76047 (FtcZhyzw), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:06:06+02:00 fw.lan kernel - - [meta sequenceId="1"] <3>[30795] pid 1872 (At3plE9U), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:06:43+02:00 fw.lan kernel - - [meta sequenceId="2"] <3>[30838] pid 39818 (At3plE9U), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:07:28+02:00 fw.lan kernel - - [meta sequenceId="3"] <3>[30877] pid 742 (At3plE9U), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:07:28+02:00 fw.lan kernel - - [meta sequenceId="4"] <3>[30908] pid 30132 (FtcZhyzw), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:09:01+02:00 fw.lan kernel - - [meta sequenceId="1"] <3>[30955] pid 27447 (At3plE9U), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:09:01+02:00 fw.lan kernel - - [meta sequenceId="2"] <3>[30978] pid 18283 (At3plE9U), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:10:57+02:00 fw.lan kernel - - [meta sequenceId="1"] <3>[31085] pid 96108 (At3plE9U), jid 0, uid 0, was killed: a thread waited too long to allocate a page
2026-01-17T00:11:45+02:00 fw.lan kernel - - [meta sequenceId="2"] <3>[31135] pid 4483 (FtcZhyzw), jid 0, uid 0, was killed: failed to reclaim memory
2026-01-17T00:11:45+02:00 fw.lan kernel - - [meta sequenceId="3"] <3>[31139] pid 95992 (FtcZhyzw), jid 0, uid 0, was killed: failed to reclaim memory
2026-01-17T00:11:45+02:00 fw.lan kernel - - [meta sequenceId="4"] <3>[31140] pid 12278 (FtcZhyzw), jid 0, uid 0, was killed: failed to reclaim memory
2026-01-17T00:11:45+02:00 fw.lan kernel - - [meta sequenceId="5"] <3>[31141] pid 28622 (FtcZhyzw), jid 0, uid 0, was killed: failed to reclaim memory
2026-01-17T00:11:45+02:00 fw.lan kernel - - [meta sequenceId="6"] <3>[31142] pid 32151 (php), jid 0, uid 0, was killed: failed to reclaim memory
2026-01-17T00:12:12+02:00 fw.lan syslog-ng 26461 - [meta sequenceId="7"] syslog-ng shutting down; version='4.10.2'

here is the Process List:
root@fw:/var/log/system # ps ax
  PID TT  STAT       TIME COMMAND
    0  -  DLs     4:59.88 [kernel]
    1  -  ILs     0:00.10 /sbin/init
    2  -  WL      0:05.07 [clock]
    3  -  DL      0:00.00 [crypto]
    4  -  DL      0:00.09 [cam]
    5  -  DL      0:00.00 [busdma]
    6  -  DL      0:08.42 [zfskern]
    7  -  DL      4:33.70 [pf purge]
    8  -  DL      0:58.76 [rand_harvestq]
    9  -  DL      0:39.94 [pagedaemon]
   10  -  DL      0:00.00 [audit]
   11  -  RNL  5091:39.61 [idle]
   12  -  WL      1:29.44 [intr]
   13  -  DL      0:00.00 [geom]
   14  -  DL      0:00.00 [sequencer 00]
   15  -  DL      0:01.43 [usb]
   16  -  DL      0:15.36 [vmdaemon]
   17  -  DL      0:00.72 [bufdaemon]
   18  -  DL      0:00.15 [vnlru]
   19  -  DL      0:00.28 [syncer]
   31  -  DL      0:00.01 [aiod1]
   32  -  DL      0:00.01 [aiod2]
   33  -  DL      0:00.01 [aiod3]
   34  -  DL      0:00.01 [aiod4]
  165  -  DL      0:08.99 [md98]
81979 u2  Ss      0:00.10 -sh (sh)
88824 u2  R+      0:00.00 ps ax

It looks the system enters in single user mode.
There is no traffic on this firewall as we disconnected WAN and LAN interface and switched to our backup device few days ago.
I tested the memory and the nvme - there are no errors reported.

I tested the filesystem:
# zpool status zroot
  pool: zroot
 state: ONLINE
status: Some supported and requested features are not enabled on the pool.
        The pool can still be used, but some features are unavailable.
action: Enable all features using 'zpool upgrade'. Once this is done,
        the pool may no longer be accessible by software that does not support
        the features. See zpool-features(7) for details.
  scan: scrub repaired 0B in 00:00:07 with 0 errors on Sat Jan 17 13:25:05 2026
config:

        NAME        STATE     READ WRITE CKSUM
        zroot       ONLINE       0     0     0
          nda0p3    ONLINE       0     0     0

errors: No known data errors
#

Now I changed the time when this script is executed:
(/usr/local/sbin/configctl -d syslog archive) > /dev/null
let's see when it will stop next time :-)
#95
25.7, 25.10 Series / Re: openvpn instances
Last post by keeka - January 17, 2026, 12:29:38 PM
I've bound (binded?) an openvpn server instance to 127.0.0.1 and port forwarded the relevant interface.
#96
Virtual private networks / Re: os-softether-devel (miscon...
Last post by fhloston - January 17, 2026, 12:17:26 PM
Quote from: mimugmail on December 27, 2025, 09:52:06 PMI added it today on my repo.


Thank you!
#97
25.7, 25.10 Series / Re: DEC2752 - How to check har...
Last post by stuckoff - January 17, 2026, 12:04:27 PM
Hi

I check the nvme health using smartctl and nvmecontrol

It looks that I managed to check my hardware by myself. Nevertheless, I hope this post is helpful for someone else in my situation.
#98
25.7, 25.10 Series / Re: What is the official migra...
Last post by sopex8260 - January 17, 2026, 11:35:23 AM
On 26.1 in 10 - 15 days... ISC will leave the core opnsense and become a plugin. From there, you can migrate to dnsmasq or Kea
#99
25.7, 25.10 Series / What is the official migration...
Last post by +DS_DV+ - January 17, 2026, 11:13:29 AM
Hi all <3,

in the recent patchnotes (https://forum.opnsense.org/index.php?topic=50138.0) it was mentioned that ISC should be removed some time in the future:
QuoteThe changes are otherwise clustered around preparation for the major upgrade
which brings an number of fundamental changes with the ongoing removal of
ISC-DHCP from core.

So i looked for a migration button but did not see one.
As the title of this thread suggests i am wondering what OPNsense plans as a migration tool?
or is there a planned way from OPNsense for all the existing installations?

with kind regards
#100
25.7, 25.10 Series / Re: clarification of snapshots
Last post by Monviech (Cedrik) - January 17, 2026, 11:05:16 AM
I dont know what to additionally clarify. The documentation explains these questions I think. Just try to read it from start to finish and if something is still unclear we can improve the documentation?

https://docs.opnsense.org/manual/snapshots.html