Got System Panic this am

stephenw10

Hmm, the ARP movements are just log spam. You can stop logging it if you know what those devices are and they are in a lagg for example. It wouldn't cause a panic.

https://docs.netgate.com/pfsense/en/latest/troubleshooting/logs-arp-moved.html

swixo

@stephenw10 Could it be related to the new OpenVPN DCO thing? I had made a changed to the tunnel (trying to debug a latency problem) when it panicked. It looks like the last thing was the tunnel enabling.

stephenw10

It was immediately afterwards? And you had DCO enabled?

It could well be related then. What snapshot is that and what hardware?

Steve

swixo

@stephenw10 22.05-BETA (amd64)
built on Tue May 31 06:20:27 UTC 2022
FreeBSD 12.3-STABLE

swixo

@swixo
Oh yes - DCO on - the tunnel that came up just before the panic - is a DCO tunnel

stephenw10

How many OpenVPN tunnels in total do you have there? How many are using DCO?

swixo

@stephenw10 Only this one is UP.

There are two others - but they were completely idle.

stephenw10

All 3 had DCO enabled though?

swixo

@stephenw10 Yes. They were enabled.

stephenw10

Mmm, OK. Is this the only time you have seen it?

swixo

@stephenw10 Yes - this is the first panic I have observed.

stephenw10

Ok, thanks. I've opened an internal bug for it. Our developers are looking into it.

Steve

swixo

@stephenw10 If helpful -

This system is the 'server' side of an s-s OpenVPN tunnel and it crashed.

The action that caused it was an update made to the remote client end. After that change - the tunnel went down, then up - then crashed.

swixo

@stephenw10 Will you let us know when a change is logged internally that should affect this? I dont want to try again until we have a resolution.

stephenw10

We can't know for certain since as far as I know you are the only person who had hit that. We never replicated it here. But we have applied a fix for what appears to be the bug that caused it. It's in 22.05-RC now.

Steve

swixo

@stephenw10 The latest snapshot says 22.09! - Is the fix available to me yet?

stephenw10

It is. If you don't see the branch Next Stable Version (22.05 then first select the stable branch (22.01) and refresh. You should then see 22.05 offered as next which is 22.05-RC.

Steve