[SOLVED] HAProxy slow / website does not load after upgrade

[BeNe]

Hi Community,

i updated my OPNsense box from OPNsense 20.7.7_1-amd64 to the current 21.1 Version. The Update was without errors and so far everything is fine expect HAProxy. HAProxy is extremely slow and does not deliver all content. I host Nextcloud, Weewx Wheater etc. and none of the sites are usable after the update.

I did not changed any config or so - just update from OPNsense 20.7.7_1-amd64 to OPNsense 21.1.
I rolled back my snapshot to 20.7.7_1 and everything runs fast as expected. The Problem starts in OPNsense 20.7.8. I did the update again in steps. And in 20.7.8 the sites behind the HAProxy are not usable anymore.
So i will stay at 20.7.7_1 this time and need to find the needle in the hay.

Someone else with the same problem ?
Thanks, BeNe

[Ralf Kirmis]

Hi,

do you use your opnsense with the flavour libressl?
Then that's the cause, because libressl seems broken after that update.
Rollback libressl to version 20.7.7 of OPNSense, and i should work again.

regards,
Ralf

[BeNe]

Hi Ralf,

thanks for that information! And yes, i use the LibreSSL instead of OpenSSL.
I will give it a try and come back with a report.

Thanks for that hint.

Cheers!
BeNe

[BeNe]

Thanks @Ralf -  Problem solved 

I switched to OpenSSL in OPNsense 21.1 for a quick workaround.
HAProxy is working fine after that change.

I will check the next release for a LibreSSL fix to switch back in future version.

Cheers,
BeNe