[Solved] After upgrade to 19.7 routing over IPsec tunnels seems broken

[mimugmail]

...and I am back to the primary HA cluster partner with version 19.1.10_1.

Got the following error on the secondary HA cluster partner this morning...
...
Sep  3 08:56:45 opnsense02 kernel: ixl2: WARNING: queue 2 appears to be hung!
Sep  3 08:57:32 opnsense02 kernel: ixl2: WARNING: queue 6 appears to be hung!
Sep  3 09:10:18 opnsense02 kernel: ixl1: WARNING: queue 6 appears to be hung!
...

And then the services went down since those are the lagg members...

maybe worth open a bug report on GH, perhaps check if you can update the nic firmware too, esp. when you use X710

[rainerle]

Thanks for the quick replies!

Updated the firmware on the Lenovo ThinkServer Intel X722 LOM board today and it seems the hanging queues messages are gone now.

Will open a separate thread for the GeoIP problem.

Thanks
Rainer

[mimugmail]

Good!