AWS OpenVpn routing issues after update.

swansense

I have two pfsenses lets call them Home and aws connected via openvpn and nothing has changed in at least a year on the configs.

Just noticed today that i cant connect to the aws devices from my home so checked and openvpn is running and is showing as connected. I did a reboot of both thinking that would be an easy fix but no its still the same.

Looking at the home pfsense i can see it was update the latest version below today

2.4.5-RELEASE-p1 (amd64)
built on Tue Jun 02 17:51:17 EDT 2020
FreeBSD 11.3-STABLE

The system is on the latest version.
Version information updated at Mon Jul 17 9:54:23 UTC 2023

while the other pfsnese is on

21.02.2-RELEASE (amd64)
built on Mon Apr 12 07:50:18 EDT 2021
FreeBSD 12.2-STABLE

Version 23.01 is available.
Version information updated at Mon Jul 17 11:05:59 UTC 2023

home pfsense is running in Vmware and aws pfsense is running in aws

After checking the VPN logs to see could i figure our whats going on i can see that "ERROR: FreeBSD route add command failed: external program exited with error status: 1 "

Connecting to the aws vpn using my phone works as expected so the issue appears to be the route not being adding on home pfsense.

Is this a known bug with 2.4.5-RELEASE-p1 (amd64) and if so any suggestions on how to fix it?

swansense

I just spun up a backup of the home pfsense and i see it auto updated again and i am getting the same issue again.

viragomann

@swansense
I'm wondering, what is auto-updating there. This version is out of date for more than two years. You should consider to upgrade it.
However, I don't expect that an upgrade resolve your issue to be honest.

Which route does OpenVPN intend to add?
There should be a hint in the log. If not, maybe set a higher verbosity level.
Possibly the route is overlapping your local network.

swansense

@viragomann said in AWS OpenVpn routing issues after update.:

@swansense
I'm wondering, what is auto-updating there. This version is out of date for more than two years. You should consider to upgrade it.
However, I don't expect that an upgrade resolve your issue to be honest.

Which route does OpenVPN intend to add?
There should be a hint in the log. If not, maybe set a higher verbosity level.
Possibly the route is overlapping your local network.

Thank you.

You were correct changing the release branch and updating fixed my issue