Puzzling issue with opnsense OPNsense

[saigan]

I have been having a puzzling problem with opnsense.

Symptoms:
I seem to loose internet connection randomly.
I can access services in the LAN but cannot reach to any internet site.
Weird thing is that if I am on a teams call, the voice/video call does not drop, but I cannot open any other internet site on the same computer.

I have updated to the latest version. OPNsense 24.7.4_1-amd64 and have the latest micro code for N100 and has not helped.

I have searched the forums and have not seen anyone having the issues. I have monitoring enabled on WAN, but do not see any issues around the times of the incidents. the only thing that helps is rebooting the machine.

Need help with pointers as to what log files I should be looking at to begin troubleshooting. Challenge is that when this happens during work hours, I cannot afford to spend time on troubleshooting the issue. This has started happening more often for the past two weeks and at this point I am tempted to go and buy a ubiquity gateway.

Any help is greatly appreciated.

[pfScrub]

https://docs.opnsense.org/releases/CE_24.7.html


Sent from my iPhone using Tapatalk

[pfScrub]

Maybe check out DHCP on WAN, try the top command to see if something is using too much cpu or check if your traffic inspector or ids is up to date or has certs and if they are trusted by endpoints. Maybe also delete endpoint expired certs.


Sent from my iPhone using Tapatalk

[chansen]

I'm seeing a similar issue with 24.7.5, I just updated on Sept 27th, all traffic flows fine, then after anywhere between 15 minutes and 18 hours internet access stops. Local inter-VLAN traffic works fine, I see outbound DNS traffic going through the firewall, but pings from OPNsense to internet IP fail, rebooting OPNsense (via web GUI), or restarting services from the OPNsense console fixes the issue.

Any guidance on what logs to gather/share would be appreciated.

[Stitch10925]

Check your disk space. I have a similar issue in which my disk space runs full, which causes Unbound DNS to stop responding.

Anything that was resolved before Unbound crashed will keep working, but anything after that will not be able to resolve.

I haven't found out yet what causing my disk space to fill up, but it happens every few days.

I made a thread in the General forum about my issue:
https://forum.opnsense.org/index.php?topic=43140.0

[saigan]

My disk space is at 1% and am pretty sure that it's not the issue.

Need to help tounderstand the approach on how to go about trou leshooting this issue.

[chansen]

My disk space is at 1% and am pretty sure that it's not the issue.

Need to help tounderstand the approach on how to go about trou leshooting this issue.

Yeah, for me it,s not disk space either, and it's not just UnBound, accessing anything on the internet via IP fails too.

[sendaris]

I've been experiencing the same thing since upgrading to 24.7, randomly for anywhere from a few seconds to 5 minutes the OPNSense router will stop passing internet traffic (without dropping WAN connection). The router was rock solid with a year of use without a drop previously on 24.1 so I'm not sure what's happened.

The only thing of interest I can see is that the quality report shows a small (5-15%) spike in packet loss and ping delay at the same time. If anyone can direct me to what report or logs I should provide, I will...