This happens with any web browser, too. Non-https web browsing works mostly fine when switched over to that mode but the status "up/no carrier" images on the Interfaces widget, the Traffic Graphs, the circle refresh symbol, etc. do not load immediately or correctly.

The system in production I've seen this first is SG-5100 with WAN igb0 and WAN2 ix1. My lab testing is VMware. -Rico

Hello, what problem is this? Crash report begins. Anonymous machine information: amd64 11.2-RELEASE-p10 FreeBSD 11.2-RELEASE-p10 #9 4a2bfdce133(RELENG_2_4_4): Wed May 15 18:54:42 EDT 2019 root@buildbot1-nyi.netgate.com:/build/ce-crossbuild-244/obj/amd64/ZfGpH5cd/build/ce-crossbuild-244/pfSense/tmp/FreeBSD-src/sys/pfSense Crash report details: No PHP errors found. Filename: /var/crash/info.0 Dump header from device: /dev/label/swap0 Architecture: amd64 Architecture Version: 1 Dump Length: 71680 Blocksize: 512 Dumptime: Thu Aug 20 22:23:13 2020 Hostname: Pfsense5.mtz.jovenclub.cu Magic: FreeBSD Text Dump Version String: FreeBSD 11.2-RELEASE-p10 #9 4a2bfdce133(RELENG_2_4_4): Wed May 15 18:54:42 EDT 2019 root@buildbot1-nyi.netgate.com:/build/ce-crossbuild-244/obj/amd64/ZfGpH5cd/build/ce-crossbuild-244/pfS Panic String: Dump Parity: 692791847 Bounds: 0 Dump Status: good Filename: /var/crash/textdump.tar.0 ddb.txt?????????????????????????????????????????????????????????????????????????????????????????????0600????0???????0???????140000??????13717630021? 7072? ?????????????????????????????????????????????????????????????????????????????????????????????????????ustar???root????????????????????????????wheel??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????db:0:kdb.enter.default> run lockinfo db:1:lockinfo> show locks No such command; use "help" to list available commands db:1:lockinfo> show alllocks No such command; use "help" to list available commands db:1:lockinfo> show lockedvnods Locked vnodes db:0:kdb.enter.default> show pcpu cpuid = 0 dynamic pcpu = 0x898380 curthread = 0xfffff8000481d000: pid 12 "irq21: fxp0" curpcb = 0xfffffe004d975cc0 fpcurthread = none idlethread = 0xfffff800042e7000: tid 100003 "idle: cpu0" curpmap = 0xffffffff82b85998 tssp = 0xffffffff82bb6810 commontssp = 0xffffffff82bb6810 rsp0 = 0xfffffe004d975cc0 gs32p = 0xffffffff82bbd068 ldt = 0xffffffff82bbd0a8 tss = 0xffffffff82bbd098 db:0:kdb.enter.default> bt Tracing pid 12 tid 100066 td 0xfffff8000481d000 __mtx_lock_sleep() at __mtx_lock_sleep+0xcd/frame 0xfffffe004d975620 syncache_lookup() at syncache_lookup+0xc9/frame 0xfffffe004d975650 syncache_add() at syncache_add+0x16e/frame 0xfffffe004d9757a0 tcp_input() at tcp_input+0x1410/frame 0xfffffe004d9758e0 ip_input() at ip_input+0x139/frame 0xfffffe004d975940 netisr_dispatch_src() at netisr_dispatch_src+0xa8/frame 0xfffffe004d975990 ether_demux() at ether_demux+0x173/frame 0xfffffe004d9759c0 ether_nh_input() at ether_nh_input+0x32b/frame 0xfffffe004d975a20 netisr_dispatch_src() at netisr_dispatch_src+0xa8/frame 0xfffffe004d975a70 ether_input() at ether_input+0x26/frame 0xfffffe004d975a90 if_input() at if_input+0xa/frame 0xfffffe004d975aa0 fxp_intr() at fxp_intr+0x411/frame 0xfffffe004d975b20 intr_event_execute_handlers() at intr_event_execute_handlers+0xe9/frame 0xfffffe004d975b60 ithread_loop() at ithread_loop+0xe7/frame 0xfffffe004d975bb0 fork_exit() at fork_exit+0x83/frame 0xfffffe004d975bf0 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe004d975bf0 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- db:0:kdb.enter.default> ps

That thread hit the nail right on the head as far as I can tell! Awesome! I knew I wasn't searching the right terms, but I couldn't figure out what to use. Thanks for the help!

@chrcoluk I've decided in that way. ZFS with 2 SSD in mirror, and RAM disk. Hope it will run ok.

I can still think of no good reason to have to do that. To me that's a sign something in your config is broken. Are those three gateways in the same subnet on WAN? Which of them is actually defined on the WAN interface? What do you have set as the default IPv4 gateway in the GUI? You are setting the WAN IP address at boot every time. What IP does igb0 have if you do not run those commands? The only reason I can think of the interface would come up without an IP is if it conflicted with another interface somehow. Steve

@Gertjan Thanks for the great info. None of the statuses have reported incorrectly today so all good there. I'll check the sockets if/when it happens again. Only issue I'm seeing in the logs is, "WARNING: 'ifconfig' is present in local config but missing in remote config, local='ifconfig 10.255.27.9 10.255.27.10'" same as this old post https://forum.netgate.com/topic/31751/openvpn-ifconfig-warning ...and I've reached the same conclusons as the OP in that - in that I believe my configuration is correct and there's no config actually to correct in the web GUI. Doesn't seem related but just thought I'd mention it.

@Raffi_ said in Enable DNS over TLS via DHCP: Good point, yea could be more difficult to figure out what's going on with DNS The point is, don't release the 53 port out of the inner world...

Replying to own post to say that this problem is fixed - solution had nothing to do with pfSense.

Note : even excellent hardware can die on you.

@stephenw10 said in LAGG interfaces help: r Yes the reason I need to do Failover is because the two switches that are connected one to each interface don't stack and don't know each other. Had a switch failure and I'm trying to make an HA scenario so we don't have this happen again.

see https://redmine.pfsense.org/issues/10836

Then enable pfscrub. That is required for fragment re-assembly. Steve

Well normally a device switching to an AP shouldn't cause a problem with connectivity.. Unless your AP are actually natting.. Since your device would still have the same IP just roaming between AP. Unless sure it was having connectivity issues.

HI Gertjan, Thanks for the pointer, I am just a tech enthusiast running pfSense at home. I did some Google search on setting up gateway monitoring and stumbled upon lots of literature on SNMP, NRPE as well. As of now this is way over my head but let me read a bit and come back here with results and/or questions Thanks again

Thanks guys for chiming in and suggesting VPN; however, the idea isn't about connecting to one's home network ... the idea assumes that one doesn't have a home network at all ... the only assumptions are that one has a laptop and one is traveling as well as the laptop has limited RAM (16 or less). One avenue that looks very promising is pfSense cloud and I will look into it this week: https://www.netgate.com/solutions/pfsense/index.html#cloud

Hi again After about 40 min all network stats was suddenly there. I have no idea what made it work. Regards Henning