Upgraders beware

[hursjohn]

The GUI upgrade to 24.1 states that it is safe to upgrade.  It is not, its failed on one bare metal device and VMWare virtual.  The only time it hasn't failed is when the router only has two interfaces.  If you have 3+ including vlans it gets confused and doesn't build all the interfaces back again. 

I've had to default and reload from backup.  If you complete this upgrade do it while your physically next to the equipment or consider having a High Availability set up.

[dmurphy]

Disagree.  I have a half dozen VLANs, a set of LAGGs and no issues.  Upgrade was easy.

[passeri]

Also disagree. I have updated 6 port and 4 port connected devices with no hitch. Granting that I have no VLANs, where are the many others with the same problem? They should exist.

If your upgrades have problems and they are continuing better to describe configuration and issues sufficiently to get help with diagnosis.

[ellog]

Hi,
i did the GUI update from working 23.7.12_5 to 24.1.1. successful and without any error message, but Port Forwarding and HAProxy had not worked. Services and Servers had not been accessible from WAN. After complete restore to 23.7.12_5 all is working again fine. I will not update that fast again.

[bimbar]

This is not that useful - have you opened issues for the problems you had?

[Patrick M. Hausen]

Without any diagnosis what do you expect will happen when you eventually upgrade to 24.1.4 or 24.1.5 ...? My prediction: exactly the same. The malfunction is particular to your individual system and the root cause needs to be identified and resolved. Problems like this do not magically disappear three versions later - because nobody but you has encountered this exact problem.

[ellog]

I invite you to take it as it is, making aware having a backup is not that bad.

It's since years my first time having issues upgrading OPNsense

I'm not asking for help just making aware that there can be a Issue with ACME/HAProxy and Port Forwarding

[Patrick M. Hausen]

Having a configuration backup is always a good idea. As is having a ZFS snapshot/boot environment to perform a quick and smooth rollback 

[alex303]

No issues with upgrade to 24.1 on 3 completely different machines with 6+ ports and tons of VLANs and VPN tunnels. Moderators should really do something about people that start topics like these. Its borderline misleading.

[franco]

You'd be surprised how obnoxious these topics get when you engage people posting blank warnings about updates / upgrades.

That's how /r/opnsense and /r/opnsensefirewall had their fallout.

I tend to ignore unsubstantial reports, because usually I do 20 - 50 upgrade tests for each major iteration depending on their scope.

This dies down more quickly without responses or more detailed responses come to a refined bug report that can be fixed. Either way I'm fine with that.

And there have also been a lot of questions asked and resolved, some of them multiple times...


Cheers,
Franco

[alex303]

I admire your patience and composure.

[lshantz]

I see lots of haters, but I think it has to do with the individual setups. I too borked two systems.

I am still struggling to get my new image working correctly. Things are not properly migrated to the new setup. Fortunately, I have a spare box with the older image until I get it all sorted out.

Blankets statements will get you hate, but to the haters, just because your particular configuration is fine, doesn't mean a different setup is. Just my 2 cents. 

[alex303]

I too borked two systems.

Me too. But, if im unable to resolve the issue, i wont come to this forum and create a thread with subject "Upgraders beware". Title like that is suggesting that there is something very wrong with opnsense and that you should not upgrade.

just because your particular configuration is fine, doesn't mean a different setup is.

That statement goes both ways.

[passeri]

... just because your particular configuration is fine, doesn't mean a different setup is.

That is rather the point. Obvious reasons for stating you have a working configuration while noting the degree of [dis]similarity are to reassure someone who appears to be panicking or giving up, and to provide some characterisation so they can see where their system might differ, where a problem might lie.

First time I have seen modest helping called "hating".    It's about the problem, not the person.

[franco]

> First time I have seen modest helping called "hating".    It's about the problem, not the person.

Who said "hating". Did I miss something?