@saqibs
Boot the computer running pfSense and use the keyboard & monitor as the console. Go into the menu and select 1 to assign interfaces and then, if needed, 2 to assign IP addresses.
@bitrot said in Listen queue overflow:
@ipguy said in Listen queue overflow:
pc.somaxconn' in sys
Have you been able to resolve this?
Yes, in my case it was the process by which we checked users against our ldap sever.
Performing a deep group lookup added to much load to each auth request which chocked the system
The fact the server is reachable locally but not from an external port forward still points to a firewall rule on the server IMO. Though it could also be a routing issue if the server has no route back.
Proxying the connection just means all the connections to the server are local which is why it now works.
Indeed. That file is auto-generated using default values that work for almost everyone. It cannot be edited manually.
It isn't a problem in as much as this is the first time I've ever seen anyone ask about it.
It's clearly a problem for you because you're using a custom client side config.
A solution to that would be to carry a custom patch in pfSense that changes the default values used to generate the file so it works for you.
And/or you can open a feature request to expose those settings in the gui,
The lagg on ports ix0 and ix1 will be completely separate to the switch so you don't create any thing the switch setup.
Instead add it as you would on any other pfSense device. So create the lagg in Interfaces > Assignments > LAGGs. Then create the VLAN(s) on that in Interfaces > Assignments > VLANs.
Then assign those VLANs as interfaces and apply rules etc.
But as I previously noted be aware that a VLAN in the switch on LAGG0 (ix2/ix3) is a completely separate interface to the same VLAN ID on the new LAGG (ix0/ix1). Traffic will not pass between them unless it's routed.
@stephenw10 said in Questions about log messages:
They are still coming into the WAN just without the :5 octet?
Yes. It seems that the :5 is being added by the kernel.
