Ah, that would do it!

@Gertjan @stephenw10 Thank you for the support. I received the device at my office. So tried all possible commands, but the web gui failed to show up. I also did factory reset to default but that didn't help. Finally I have decided to reinstall the system.

Definitely not the 1100 internal switch. But, yes, could be a bridge somewhere if you have any defined. Bridges in pfSense do support STP.

@mrrobot . I managed to solve the problem, but what exactly is going on? I can't say. Change DNS Resolution Behavior to "Use remote DNS Servers" and put 9.9.9.9 as your first DNS server.

Open a ticket with us to get the link: https://www.netgate.com/tac-support-request

@jimp said in HAProxy error after upgrade to 23.05.01: If you still get this try, moving from haproxy-devel to haproxy. The haproxy-devel you were on in past versions is now haproxy. The version of haproxy on 23.05.1 (now) has the same PHP/package code as haproxy-devel but haproxy-devel is now on an even newer base version of haproxy binaries that may have other problems as it hasn't been tested as much (if at all). Swapping to HAProxy fixed the issue - thank you.

The resolver log is also rotating every 15mins but, yes, the filter log is was rotating every minute when that data was taken.

I should have been more clear when I said containers, I was actually talking about containers and virtual machines, which I serve via HAProxy. Everytime I configure a new container I have to use the HAProxy web gui in pfsense, I do this frequently enough that I was wondering if pfsense had an API, which I now know it does not. I like to automate things when I can, thanks for the responses.

I mean I would expect to see increased CPU usage when passing traffic. But that does look higher than expected. Suricata running on that traffic would explain it though as you say.

@SteveITS said in Trouble Accessing Internet on pfSense fresh install.: trying to decide how the Cheez-it scale is scored… 🧐 Oh the brand name ones are "meh" you come above them ;-)

@jimp I'm pretty sure at this point that the problem was caused by the MACs changing. Since I set the MACs to static and the problem has not reoccurred.

https://redmine.pfsense.org/issues/14679

@rtorres https://docs.netgate.com/pfsense/en/latest/vpn/wireguard/index.html https://docs.netgate.com/pfsense/en/latest/recipes/index.html#id1 :)

Looks like your webgui is open to the internet and those are drive-by connection attempts. Make sure your WAN firewall rules are now passing traffic to the webgui. Steve

@04CC40 Good update.

Are you able to show the MySQL service in 2.6? It doesn't exist AFAIK. This could also just be terminology confusion.

@SteveITS I have literally been laying in the closet for 3 whole days. Factory reseting things, changing settings until it breaks, and starting over. Thank you so much!

Was that after upgrading? The de-install error is common across an upgrade because php gets upgraded before the deinstall script. That's normally not an issue. The filter reload errors are because those pfBlocker aliases are not populated yet. That is usually resolved after the first boot. If you clear those errors and they do not return it's unlikely to be a problem. Steve

Thank you both for your help! I wanted to follow up and let you know that Option 2 worked like a charm. I installed pfSense 2.7 CE, moved the NIC over to the new system, upgraded to pfSense Plus 23.05.1, and then restored the 23.05.1 config from the old system. The whole process probably took less than 30 minutes and everything was working fine by the end of it. I only ran into two minor issues: After config restoration the udpbroadcastrelay package service refused to start. Disabling / Re-Enabling the package via its GUI configuration page solved the issue and the service started fine. I was greeted with a bunch of errors after the initial reboot that followed config restoration. These were mainly pfBlockerNG related. I use pfBlockerNG lists as aliases in firewall rules and these lists don't exist without the initial pfBlockerNG update (that downloads and creates them). Once I ran a manual pfBlockerNG update, the lists were created everything was fine going forward. Overall I'm very impressed with how smoothly the hardware upgrade went - a big thank you to everyone at Netgate for making the installation and restoration process so seamless.

There is no change in 2.7. RSS still does not support it so it cannot be used by multiple queues and hence threads/cores. Yup, the fix for this is non-trivial! Steve