Upgrade 22.1 to 22.1.10_4 breaks no internet and no web gui - Resolved

[jezza007]

Hi,

I am stuck, I have to do an interim upgrade to 22.1.10_4 before it will allow upgrade to 22.7

I have a QEMU/KVM using virtio interface adapter with no vlans, there are no parent interfaces to add as I am not using vlans (per the solutions I have read).
I have also checked Hardware CRC, TSO, LRO is disabled, and VLAN hardware filtering is set to default as per forum articles I have read.

I have reverted to previous version on failure to reattempt. On one such attempt it successfully upgraded to 22.1.10_4 and I was able to logon to the web-gui, and internet worked for a few minutes then it stopped working.

Any help appreciated on which log files I need to check or how to determine what is happening?

[jezza007]

UPDATE - progress
After reading some of the forum articles again some of the symptoms reported pointed to issues upgrading from 22.1 to various itterations of problems from 22.1.3 thru to 22.1.10_4

The clues suggested issue with interface hardware offloading.
Ref https://github.com/opnsense/core/issues/5521

To resolve this upgrade issue, i have tested the following steps.

1. Enabled hardware offloading on interface for CRC, TSO, LRO
2. Rebooted, and checked status, the reason this was disabled before was due to throughput issues
3. Upgraded to 22.1.10
4. Tested and checked Wan access, and Lan Gui now accessible post upgrade
5. Upgraded to 22.7
6. Tested wan and Lan Gui still accessible
7. I have left the hardware offload settings unchecked, throughput seems fine

Clients are now able to access Gui and internet

I will log a seperate query for the next symptom, as now it seems some ios (safari) and android (chrome) browsers are saying no internet but are working fine, and also looks like there may now be some issues with some root CA certificates, as some websites now reporting not trusted
Will look at this when i get some spare time

[jezza007]

Flip me, one issue after another, but I've got there
After successfully getting to 22.7 with a working webgui and some internet access,
I started looking through the logs.

The next issue was half the websites were saying untrusted including https://forum.opensense.org of all sites
I figured this out that the firewall rules were not loading correctly due to an issue with some firewall aliases.
An article I read said there were alias issues with 22.1.8, so I assumed these issues were not patched and have been carried over to 22.1.10_4 and 22.7 ?
Anyway I disabled the aliases and rules mentioned in the error log, and hey presto the firewall rules then successfully loaded and all internet sites were accessible.

Then onto the next issue with a device with failing nat ports, again I figured this was alias related,  as it was working perfectly fine in 22.1, so I changed the nat rules for the client with issue from using it's alias to using its ip address, and again Eureka! this is now working again!

Hope this helps some people out who may have been facing similar issues