No idea what triggered it? Nothing logged at that time?

So before it asks you to reboot? Like:

Screenshot from 2024-11-15 19-22-31.png

Does the VPN eventually connect and start passing traffic by itself?

What do the log show?

@stephenw10 No, I have the RAM-disk enabled and I don't see anything before.

@marcosm said in Kea DCHP error:

could be in a 2.8 release

Not sure if my 4100 can use 2.8, I'm using 24.03.
I'm planning to switch to 24.11 RC next week.

@stephenw10 Yes, that's correct. I upgraded to the beta initially to see if that would fix the issue, deleted my rules, and retired which led to the same result.

I do not use MIM, I currently only have a single instance running on bare metal locally.

@SteveITS Good to know, I have to tell this to a specific admin at a customer. He has the dashboard open for longer periods of time sometimes ...

A clean install from the net installer? Or upgrade from 24.03?

When you say the first image do you mean the first pkg? Like [1/32]?

@marcosm This patch worked in the beta, and the issue is not present in the RC. Here is the target directory with the backup files present after upgrading the beta to RC and then running the update of the URL blocklists. Everything appears correct.

/cf/conf/RAM_Disk_Store ET_Block.txt.tgz 6.06 KiB ET_Compromised.txt.tgz 4.24 KiB FireHOLweb.txt.tgz 14.22 KiB Threatview.txt.tgz 5.98 KiB

@marcosm Thankyou, I can confirm the RC version has resolved this isssue

installed the RC right now, HAproxy starts OK now. Thanks.

@jimp I felt brave, this time with MIM enabled. And you were right. I managed to log-in with chromium, after clearing some saved information. With FF I had no luck so far but now I had two ways to access pfSense and re-enable https. Thank you.

Wait for RC or apply the patch on the referenced redmine link, then install/uninstall the package.

I posted about this earlier.. and was sent here:

https://forum.netgate.com/topic/190824/cpu-load-on-1100/2

It appears you are right on about the Wireguard widget!

@patient0 Thanks for the suggestion.

I just removed all the widgets, other than system information, one at a time and CPU usage dropped to around 1%. Seems all the widgets are culpable.

Ted

The CPU usage increase may be this:
https://forum.netgate.com/topic/190824/cpu-load-on-1100

Unless you've switched to Kea, the DHCP Relay status text should remain the same.

Then it sounds like you are adding rules that accidentally bypass the Limiters.

Nothing has changed in 24.11 in that regard. But this seems more like a config error than a bug in Limiters.

[24.11-BETA][admin@2100-3.stevew.lan]/root: pkg info -x squid lightsquid-1.8_5 pfSense-pkg-Lightsquid-3.0.7_5 pfSense-pkg-squid-0.5 pfSense-pkg-squidGuard-1.16.23 squid-6.10 squidGuard-1.4_15 squid_radius_auth-1.10 squidclamav-7.3_2

There is some PHP code, mostly to integrate with existing code, but most of it is written in go.