What is the official migration way from ISC to Kea?

[+DS_DV+]

Hi all <3,

in the recent patchnotes (https://forum.opnsense.org/index.php?topic=50138.0) it was mentioned that ISC should be removed some time in the future:

The changes are otherwise clustered around preparation for the major upgrade
which brings an number of fundamental changes with the ongoing removal of
ISC-DHCP from core.

So i looked for a migration button but did not see one.
As the title of this thread suggests i am wondering what OPNsense plans as a migration tool?
or is there a planned way from OPNsense for all the existing installations?

with kind regards

[sopex8260]

On 26.1 in 10 - 15 days... ISC will leave the core opnsense and become a plugin. From there, you can migrate to dnsmasq or Kea

[Seimus]

ISC will not be removed from the system it will just be moved from the core as a standalone packages as mentioned above.
You can still use ISC, it will work fine, just make sure after the movement of ISC the ISC package is installed.

About the migration, there is no tool, and honestly not sure if there will be one. You will have to plan it yourself and decide if to mvoe to KEA or DNSMASQ.

Check the documentation so you know what are the benefits negatives and how to do it
https://docs.opnsense.org/manual/dhcp.html

Regards,
S.

[meyergru]

There is no automatic migration. You can set up your new DHCP server of choice (Kea or DNSmasp) according to the documentation.

The only thing that warrants non-manual setup is the static reversations IMHO, and those you can export as CSV and import to either Kea or DNSmasq.

[nero355]

On 26.1 in 10 - 15 days... ISC will leave the core opnsense and become a plugin. From there, you can migrate to dnsmasq or Kea

I think he wants to know what the preferred way is to do that :

or is there a planned way from OPNsense for all the existing installations?

Since you can't install the plug-in before updating to the version that has ISC as plug-in install option for the first time :)



Maybe just setup DNSmasqd/KEA before the update first and then update OPNsense I guess ?!

[Patrick M. Hausen]

I think he wants to know what the preferred way is to do that

I guess they want to know if there is any automatic migration.

Answer:

No, there is not. You are supposed to manually move all your settings form ISC to either Kea or DNSmasq. With the exception of static assignments which can me moved in bulk as @meyergru already explained.

The existence of the ISC plugin simply buys you time to postpone that migration for yet another (or two, three ... nobody knows quite yet) release. As far as I know it will be installed automatically on upgrade.

I moved to Kea at home. Wasn't a big deal. Will move all installations at work before April, because that will be when business edition 26.4 hits with most probably the exact same constraints and I want a final stable base for my BE installations. Community editions will have been converted, by February or so.

It's the same with IPsec or OpenVPN. Manual migration it is.

HTH,
Patrick

[nero355]

With the exception of static assignments which can me moved in bulk as @meyergru already explained.

Which is very cool by the way! :)

As far as I know it will be installed automatically on upgrade.

That would be very convenient so I hope you are right!

Community editions will have been converted, by February or so.

What do you mean exactly when you say 'converted' ?

[Patrick M. Hausen]

Community editions will have been converted, by February or so.

What do you mean exactly when you say 'converted' ?

In the final part of my previous post I laid out my plans for the OPNsense installations I am personally responsible for.

So that means I will have converted all my CE based installs by February. Manually - come on, that's an hour per firewall maximum. How many VLANs do you have with DHCP?

[nero355]

In the final part of my previous post I laid out my plans for the OPNsense installations I am personally responsible for.

So that means I will have converted all my CE based installs by February.

d0h!

I totally misread that part...

I know now what you meant :)