OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 20.7 Legacy Series »
  • Unbound service routinely stopping/crashing following 20.7.7 update
« previous next »
  • Print
Pages: [1] 2 3 ... 7

Author Topic: Unbound service routinely stopping/crashing following 20.7.7 update  (Read 53545 times)

deejacker

  • Newbie
  • *
  • Posts: 4
  • Karma: 2
    • View Profile
Unbound service routinely stopping/crashing following 20.7.7 update
« on: December 18, 2020, 09:22:56 am »
Pretty much as the subject states. All working fine before update, updated fine, but then noticed that Unbound service had just stopped. Managed to log into the GUI to restart, but this is now happening routinely. Anybody else experiencing this?
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 6405
  • Karma: 446
    • View Profile
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #1 on: December 18, 2020, 09:33:53 am »
Anything in the logs? Do you use DNSBL?
Logged
Twitter: mimu_muc
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

deejacker

  • Newbie
  • *
  • Posts: 4
  • Karma: 2
    • View Profile
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #2 on: December 18, 2020, 10:06:31 am »
No don’t use DNSBLs, just a Pi-hole.
Looking at the Unbound logs, I can’t see anything obvious which would suggest a service failure, but that may be my limited knowledge.


2020-12-18T08:09:47   unbound[36701]   [36701:0] info: start of service (unbound 1.13.0).   
2020-12-18T08:09:47   unbound[9063]   daemonize unbound dhcpd watcher.   
2020-12-18T08:09:46   unbound[36701]   [36701:0] notice: init module 0: iterator   
2020-12-18T07:53:33   unbound[81533]   [81533:2] notice: sendto failed: Permission denied   
2020-12-18T07:29:56   unbound[81533]   [81533:0] info: start of service (unbound 1.13.0).   
2020-12-18T07:29:55   unbound[48254]   daemonize unbound dhcpd watcher.   
2020-12-18T07:29:55   unbound[81533]   [81533:0] notice: init module 0: iterator   
2020-12-18T01:04:07   unbound[9402]   [9402:3] notice: sendto failed: Permission denied
Logged

Gauss23

  • Hero Member
  • *****
  • Posts: 739
  • Karma: 38
    • View Profile
    • BackendMedia
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #3 on: December 18, 2020, 10:33:27 am »
Please check the interfaces it is listening to. Maybe there is something wrong. Change this setting and hit save. Then change it back and save again.
Logged
„The S in IoT stands for Security!“ :)

System 1: ESXi, i3-9100F (2 Cores), 4GB RAM, 4x NIC
System 2: ESXi, Xeon E3-1220 V2 (2 Cores), 4GB RAM, 4x NIC
System 3: KVM, Xeon Skylake (2 Cores), 4GB RAM, 2x NIC
System 4: KVM, AMD EPYC 7702P (2 Cores), 8GB RAM, 1x NIC (Datacenter VPN Hub)

miruoy

  • Newbie
  • *
  • Posts: 31
  • Karma: 2
    • View Profile
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #4 on: December 18, 2020, 10:43:33 am »
Same/comparable issue on my end. Although my configuration is using DNSBL.

Code: [Select]
2020-12-18T09:20:51 kernel -> pid: 63934 ppid: 1 p_pax: 0xa50<SEGVGUARD,ASLR,NOSHLIBRANDOM,NODISALLOWMAP32BIT>
2020-12-18T09:20:51 kernel [HBSD SEGVGUARD] [unbound (63934)] Suspension expired.
2020-12-18T09:20:51 kernel pid 63934 (unbound), jid 0, uid 59: exited on signal 11

What additional info can I/we append to investigate this issue further? Should we revert to the previous version?
Logged

brendanbank

  • Newbie
  • *
  • Posts: 3
  • Karma: 0
    • View Profile
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #5 on: December 18, 2020, 12:07:53 pm »
Same here, I've upgraded to 20.7.7 to get IPv6 prefix delegation working again, however, unbound crashed twice since I've upgraded:

Code: [Select]
root@fw:~ # dmesg | grep unbound
pid 85049 (unbound), jid 0, uid 59: exited on signal 11

Here is my unbound config:

Code: [Select]
  <unbound>
    <enable>1</enable>
    <custom_options/>
    <regdhcp>1</regdhcp>
    <cache_max_ttl/>
    <cache_min_ttl/>
    <incoming_num_tcp>10</incoming_num_tcp>
    <infra_cache_numhosts>10000</infra_cache_numhosts>
    <infra_host_ttl>900</infra_host_ttl>
    <jostle_timeout>200</jostle_timeout>
    <log_verbosity>1</log_verbosity>
    <msgcachesize>4</msgcachesize>
    <num_queries_per_thread>4096</num_queries_per_thread>
    <outgoing_num_tcp>10</outgoing_num_tcp>
    <unwanted_reply_threshold/>
    <hosts>
      <host>******</host>
      <domain>*********</domain>
      <rr>A</rr>
      <ip>***********</ip>
      <mxprio/>
      <mx/>
      <descr/>
      <aliases>
        <item/>
      </aliases>
    </hosts>
    <hosts>
      <host>******</host>
      <domain>*********</domain>
      <rr>A</rr>
      <ip>**********</ip>
      <mxprio/>
      <mx/>
      <descr/>
      <aliases>
        <item/>
      </aliases>
    </hosts>
    <hosts>
      <host>******</host>
      <domain>**********</domain>
      <rr>A</rr>
      <ip>**********</ip>
      <mxprio/>
      <mx/>
      <descr/>
      <aliases>
        <item/>
      </aliases>
    </hosts>
    <hosts>
      <host>******</host>
      <domain>*********</domain>
      <rr>A</rr>
      <ip>**********</ip>
      <mxprio/>
      <mx/>
      <descr/>
      <aliases>
        <item/>
      </aliases>
    </hosts>
    <regdhcpstatic>1</regdhcpstatic>
  </unbound>
Logged

brendanbank

  • Newbie
  • *
  • Posts: 3
  • Karma: 0
    • View Profile
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #6 on: December 18, 2020, 12:10:48 pm »
Interfaces setting was set to 'All' but that setting does not seem to be available anymore and I've enabled all interfaces manually. 
Logged

Gauss23

  • Hero Member
  • *****
  • Posts: 739
  • Karma: 38
    • View Profile
    • BackendMedia
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #7 on: December 18, 2020, 12:17:18 pm »
Stability is now better?
Logged
„The S in IoT stands for Security!“ :)

System 1: ESXi, i3-9100F (2 Cores), 4GB RAM, 4x NIC
System 2: ESXi, Xeon E3-1220 V2 (2 Cores), 4GB RAM, 4x NIC
System 3: KVM, Xeon Skylake (2 Cores), 4GB RAM, 2x NIC
System 4: KVM, AMD EPYC 7702P (2 Cores), 8GB RAM, 1x NIC (Datacenter VPN Hub)

deejacker

  • Newbie
  • *
  • Posts: 4
  • Karma: 2
    • View Profile
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #8 on: December 18, 2020, 12:30:21 pm »
I followed your suggestion of changing the interface and back again. Will monitor to see if this makes any difference.
Logged

brendanbank

  • Newbie
  • *
  • Posts: 3
  • Karma: 0
    • View Profile
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #9 on: December 18, 2020, 03:04:28 pm »
I just had another crash. I'm considering downgrading at the end of our workday. As a workaround, I've disabled unbound and enabled Dnsmasq to do the DNS resolving.
« Last Edit: December 18, 2020, 03:36:49 pm by brendanbank »
Logged

Fright

  • Hero Member
  • *****
  • Posts: 1631
  • Karma: 151
    • View Profile
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #10 on: December 18, 2020, 03:43:33 pm »
can you try to set Log level verbosity to 5, disable DHCP registration (just in case), restart unbound and wait for crash?
share fresh logs please

looks like a unbound bug
« Last Edit: December 18, 2020, 04:06:58 pm by Fright »
Logged

Fright

  • Hero Member
  • *****
  • Posts: 1631
  • Karma: 151
    • View Profile
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #11 on: December 18, 2020, 03:53:19 pm »
related?
https://github.com/NLnetLabs/unbound/issues/376
Logged

Fright

  • Hero Member
  • *****
  • Posts: 1631
  • Karma: 151
    • View Profile
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #12 on: December 18, 2020, 04:13:06 pm »
can test with Log level 0?
Logged

miruoy

  • Newbie
  • *
  • Posts: 31
  • Karma: 2
    • View Profile
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #13 on: December 18, 2020, 04:24:05 pm »
Setting the interfaces manually appears to have stabilized the issue. Will report back if the situation changes.
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 14343
  • Karma: 1243
    • View Profile
Re: Unbound service routinely stopping/crashing following 20.7.7 update
« Reply #14 on: December 18, 2020, 04:51:49 pm »
Easy workaround for the affected:

# opnsense-revert -r 20.7.6 unbound

Looks like Unbound 1.13.0 has a number of issues but was necessary to fix CVE....


Cheers,
Franco
Logged

  • Print
Pages: [1] 2 3 ... 7
« previous next »
  • OPNsense Forum »
  • Archive »
  • 20.7 Legacy Series »
  • Unbound service routinely stopping/crashing following 20.7.7 update
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2