• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

KEA DHCP - lacking features

DHCP and DNS
15
60
16.6k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • R
    RobbieTT @maverickws
    last edited by Nov 8, 2023, 8:18 PM

    @maverickws said in KEA DHCP - lacking features:

    My question again is trying to understand why to use (in ISC) a custom option "6" to pass the DNS servers, if you already have a GUI section for that?

    Who said I was using a custom option with a GUI preset available?

    As I said earlier, I use the default setting which provides the interface address. Same for option 119, I use the GUI Domain Name field.

    The custom options on the GUI is really for those options that don't have a bespoke GUI field. Or are you of the mind that GUI preset options differ to those offered by the 'Custom' menu?

    Anyway, I was more focused on options didn't seem to propagate with Kea and a DHCP renew or a clean skin left clients without this data.

    ☕️

    1 Reply Last reply Reply Quote 0
    • M
      maverickws @RobbieTT
      last edited by maverickws Nov 8, 2023, 8:28 PM Nov 8, 2023, 8:28 PM

      @RobbieTT said in KEA DHCP - lacking features:

      Option 6 was the first one I noticed. Missing Option 42 was ok as everything I currently have points to an internal IP address.

      ☕️

      Ok so I don't understand your answers, just that.

      Server Options where you put the DNS Servers Address to pass on to clients is on the exact same place both on ISC or KEA. (corresponds to Option 6 but most people don't care or know that as there is a GUI field to set up).
      You're claiming option 6 is missing? What do you mean? Missing from where then?
      Cause I could only assume you were configuring Option 6 manually, under DHCP/BOOTP params.

      In the regular settings for the DHCP service, the DNS fields are on the same spot, and are working as expected. You can actually see on my screenshots, using KEA, DNS Servers options right there.

      R 1 Reply Last reply Nov 8, 2023, 8:44 PM Reply Quote 0
      • R
        RobbieTT @maverickws
        last edited by RobbieTT Nov 8, 2023, 8:45 PM Nov 8, 2023, 8:44 PM

        @maverickws

        Ok - with Kea the information provided by DHCP Option 6 & 119 slowly vanished from my clients when they did a renewal. Perhaps my screenshots are not displaying for you but they show blanks where option 6 & 119 data should be present when I tested Kea over a few days and the information returning with ISC. If yours works ok in both ISC and Kea then that's great.

        I don't know where the 'Custom Options' came from but as we are talking about what the client receives over DHCP it does not matter, as the client device does not care if a GUI box is used or not - it is just looking for the data in the message.

        ☕️

        M 1 Reply Last reply Nov 8, 2023, 9:03 PM Reply Quote 0
        • M
          maverickws @RobbieTT
          last edited by maverickws Nov 8, 2023, 9:03 PM Nov 8, 2023, 9:03 PM

          @RobbieTT

          Ok I think I got your issue.
          So in my case this one here I don't manually add any DNS addresses. The firewall provides its own interface address as per default settings.
          I haven't had those issues of the resolver address disappearing on any client.

          Figured you were talking about the same issue I was - the whole custom DHCP option part just disappeared.
          (I'm adding a screenshot for better understanding).

          The "Custom Options" I mentioned are present on the ISC DHCP Server backend.
          For those options where you don't get a GUI field, you add them here manually. And this feature is not present in KEA.
          login-to-view

          R 1 Reply Last reply Nov 8, 2023, 9:10 PM Reply Quote 0
          • R
            RobbieTT @maverickws
            last edited by RobbieTT Nov 8, 2023, 9:11 PM Nov 8, 2023, 9:10 PM

            @maverickws
            I know where custom options reside and I only mentioned the impact at the client end.

            ☕️

            M 1 Reply Last reply Nov 8, 2023, 10:03 PM Reply Quote 0
            • M
              maverickws @RobbieTT
              last edited by maverickws Nov 8, 2023, 10:05 PM Nov 8, 2023, 10:03 PM

              @RobbieTT

              Ok.
              But then I believe we are talking about two completely different things.
              You're complaining that a present feature is not working, or malfunctioning.

              I'm complaining about the whole freaking section of Custom DHCP Options disappearing, not being there, the impossibility of configuring the interface MTU via DHCP Options. So if you're having an issue with the DNS Servers options disappearing from clients or whatever that is, that is not the kind of issue I opened this thread to talk about. I'm talking about actual features that are no longer there, at all.
              Completely different things. I'd suggest a new thread to approach that specific issue. Thank you.

              1 Reply Last reply Reply Quote 0
              • J
                jimp Rebel Alliance Developer Netgate
                last edited by Nov 9, 2023, 12:34 AM

                For what it's worth, I have a macOS system behind a VM using Kea and it's been through multiple lease renewals and the DNS + domains are still there.

                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                R 1 Reply Last reply Nov 9, 2023, 8:05 AM Reply Quote 0
                • R
                  RobbieTT @jimp
                  last edited by Nov 9, 2023, 8:05 AM

                  @jimp said in KEA DHCP - lacking features:

                  For what it's worth...

                  It's worth a lot. Thinking back I only looked at wifi clients as that is where I noticed it. I wonder if these were lost on the UniFi AP chain.

                  ☕️

                  1 Reply Last reply Reply Quote 1
                  • J
                    jimp Rebel Alliance Developer Netgate
                    last edited by Nov 9, 2023, 8:10 PM

                    Hard to say what might be coming into play there. My test client is still up now >1 day later and still has all its info, and it's been though 12+ renewals (some manual). So at least from what I can tell here it's been solid.

                    Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                    Need help fast? Netgate Global Support!

                    Do not Chat/PM for help!

                    1 Reply Last reply Reply Quote 1
                    • J
                      JonathanLee
                      last edited by JonathanLee Nov 10, 2023, 7:02 PM Nov 10, 2023, 7:01 PM

                      With the knowledge of DHCP option issues in Kea, temporarly where can I add my DHCP options for Kea? Or just use the twightlighted ISC dhcp server?

                      without the options pfsense and internet traffic slows to a crawl for me.
                      I have no port 80 web gui is 8080 so I use option 252 to serve wpad over https port 8080. This works for my small home network needs and rouge laptops to and from university.

                      login-to-view

                      Kea when enabled slows everything down again like it was before I started using wpad.

                      Any recommendations?

                      Make sure to upvote

                      1 Reply Last reply Reply Quote 0
                      • J
                        jimp Rebel Alliance Developer Netgate
                        last edited by Nov 10, 2023, 7:48 PM

                        If you need custom options, keep using ISC for now.

                        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                        Need help fast? Netgate Global Support!

                        Do not Chat/PM for help!

                        P 1 Reply Last reply Nov 24, 2023, 6:25 AM Reply Quote 1
                        • P
                          pfsvrb @jimp
                          last edited by Nov 24, 2023, 6:25 AM

                          @jimp said in KEA DHCP - lacking features:

                          If you need custom options, keep using ISC for now.

                          @jimp do you know if the Unbound restarts with registered dynamic clients will be fixed one KEA integration is finalized? I don't use custom options with ISC DHCP however, I do use the static leases function to get around the constant Unbound restarts (and loss of Unbound caching) that happen when I attempt to use the "register DHCP leases in DNS resolver" option. I've been following Bug 5413 for years but unfortunately it just keeps getting pushed perpetually. Is there any possibility KEA fixes this when its finalized?

                          Bug for reference: https://redmine.pfsense.org/issues/5413

                          GertjanG J 2 Replies Last reply Nov 24, 2023, 6:43 AM Reply Quote 0
                          • GertjanG
                            Gertjan @pfsvrb
                            last edited by Gertjan Nov 24, 2023, 6:45 AM Nov 24, 2023, 6:43 AM

                            @pfsvrb said in KEA DHCP - lacking features:

                            do you know if the Unbound restarts with registered dynamic clients will be fixed one KEA integration is finalized?

                            Registering DHCP lease clients, this one :

                            login-to-view

                            ?

                            KEA has been introduced so it resolves just that issue, like redmine.pfsense.org/issues/5413
                            Looks like KEA will replace DHCPd by ISC anyway.

                            edit : a bit like : at first, pfSense (M0n0wall) came with dnsmasq, a DNS forwarder.
                            Then unbound, a resolver was introduced as a option, as a pfSense package (if I recall well), and then it as build in, as it is today : you have a choice : just one, or the other, or, if you like, both of them. Unbound is now the default.

                            No "help me" PM's please. Use the forum, the community will thank you.
                            Edit : and where are the logs ??

                            P 1 Reply Last reply Nov 24, 2023, 7:56 AM Reply Quote 1
                            • P
                              pfsvrb @Gertjan
                              last edited by pfsvrb Nov 24, 2023, 7:56 AM Nov 24, 2023, 7:56 AM

                              @Gertjan
                              Thanks for the response but this was more concerning the persistent Unbound restarts under the current implementation, and the need to keep ISC DHCP for reserved DHCP IPs in order to bypass the restart issue. See the underlined in the screenshot showing that KEA doesn't currently support registered or dynamic DHCP clients (my use case would be both of those).

                              login-to-view

                              GertjanG 1 Reply Last reply Nov 24, 2023, 9:22 AM Reply Quote 0
                              • GertjanG
                                Gertjan @pfsvrb
                                last edited by Gertjan Nov 27, 2023, 6:32 AM Nov 24, 2023, 9:22 AM

                                @pfsvrb

                                login-to-view

                                At first, I was really convinced that the static dhcp mac leases were also use by KEA, but I was mistaken.
                                In some other thread, jimp corrected me on that.
                                So I borrowed some pfSense sub-GUI scripts to re create my own /var/unbound/host_entries.conf file before KEA gets started, as I still want to test drive KEA,- and have my local 'DHCP' devices resolved by host name.

                                The dynamic DHCPd clients : I'll leave that one to Netgate ;)

                                No "help me" PM's please. Use the forum, the community will thank you.
                                Edit : and where are the logs ??

                                P 1 Reply Last reply Nov 26, 2023, 6:52 AM Reply Quote 0
                                • P
                                  pfsvrb @Gertjan
                                  last edited by Nov 26, 2023, 6:52 AM

                                  @Gertjan So it will resolve the static DHCP entries even though the release notes do not indicate that? Or are you saying that you have it working only after some manual script to convert static entries to Unbound?

                                  If you have to manually script something in to Unbound I'm not sure how this is relevant to the discussion? It would definitely fall under the "lacking features" of the thread though. ;)

                                  GertjanG J 2 Replies Last reply Nov 27, 2023, 6:46 AM Reply Quote 1
                                  • GertjanG
                                    Gertjan @pfsvrb
                                    last edited by Nov 27, 2023, 6:46 AM

                                    @pfsvrb said in KEA DHCP - lacking features:

                                    It would definitely fall under the "lacking features" of the thread though. ;)

                                    Exact.

                                    Open your /var/unbound/unbound.conf file, this is the main unbound config file.;
                                    When you use 'dhcpd', you'll find :

                                    # Static host entries
                                    include: /var/unbound/host_entries.conf
                                    

                                    This entry will exist when you've checked :

                                    login-to-view

                                    This /var/unbound/host_entries.conf looks lie :

                                    local-zone: "bhf.tld." static
                                    local-data-ptr: "127.0.0.1 localhost.bhf.tld"
                                    local-data: "localhost. A 127.0.0.1"
                                    local-data: "localhost.bhf.tld. A 127.0.0.1"
                                    local-data-ptr: "::1 localhost.bhf.tld"
                                    local-data: "localhost. AAAA ::1"
                                    local-data: "localhost.bhf.tld. AAAA ::1"
                                    local-data-ptr: "192.168.1.1 pfSense.bhf.tld"
                                    local-data: "pfSense.bhf.tld. A 192.168.1.1"
                                    local-data-ptr: "2a01:cb19:907:a6eb:92ec:77ff:fe29:392c pfSense.bhf.tld"
                                    local-data: "pfSense.bhf.tld. AAAA 2a01:cb19:907:a6eb:92ec:77ff:fe29:392c"
                                    local-data-ptr: "192.168.1.2 bureau2.bhf.tld"
                                    local-data: "bureau2.bhf.tld. A 192.168.1.2"
                                    etc.
                                    ......
                                    

                                    When you switch to kea, these (both) : are not present anymore on the unbound main config setup page :

                                    login-to-view

                                    The very net time you 'save' the unbound config main settings page, and then Apply (== restart) unbound, the /var/unbound/host_entries.conf will still include the host overrides, but not the DHCP static MAC lease info anymore.

                                    No "help me" PM's please. Use the forum, the community will thank you.
                                    Edit : and where are the logs ??

                                    1 Reply Last reply Reply Quote 0
                                    • J
                                      jimp Rebel Alliance Developer Netgate @pfsvrb
                                      last edited by Nov 27, 2023, 2:49 PM

                                      @pfsvrb said in KEA DHCP - lacking features:

                                      @jimp said in KEA DHCP - lacking features:

                                      If you need custom options, keep using ISC for now.

                                      @jimp do you know if the Unbound restarts with registered dynamic clients will be fixed one KEA integration is finalized? I don't use custom options with ISC DHCP however, I do use the static leases function to get around the constant Unbound restarts (and loss of Unbound caching) that happen when I attempt to use the "register DHCP leases in DNS resolver" option. I've been following Bug 5413 for years but unfortunately it just keeps getting pushed perpetually. Is there any possibility KEA fixes this when its finalized?

                                      Bug for reference: https://redmine.pfsense.org/issues/5413

                                      That's the goal. We're designing a completely new mechanism for Kea to talk to Unbound using its API and/or unbound-control functions to add/remove/update DNS information dynamically without restarting the daemon.

                                      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                      Need help fast? Netgate Global Support!

                                      Do not Chat/PM for help!

                                      1 Reply Last reply Reply Quote 1
                                      • J
                                        jimp Rebel Alliance Developer Netgate @pfsvrb
                                        last edited by Nov 27, 2023, 2:50 PM

                                        @pfsvrb said in KEA DHCP - lacking features:

                                        @Gertjan So it will resolve the static DHCP entries even though the release notes do not indicate that? Or are you saying that you have it working only after some manual script to convert static entries to Unbound?

                                        If you have to manually script something in to Unbound I'm not sure how this is relevant to the discussion? It would definitely fall under the "lacking features" of the thread though. ;)

                                        It's technically not supported but if you happened to have DNS registration of static mappings enabled before switching to Kea, then Unbound will still parse the static mappings and use them for DNS resolution. But it only updates when Unbound is restarted, not when mappings are edited.

                                        So while it may function (partially) it's not officially supported yet.

                                        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                        Need help fast? Netgate Global Support!

                                        Do not Chat/PM for help!

                                        1 Reply Last reply Reply Quote 0
                                        • R
                                          Robert_Knabe @maverickws
                                          last edited by Nov 30, 2023, 10:33 AM

                                          @maverickws said in KEA DHCP - lacking features:

                                          Hiya,

                                          I have taken a look into the new DHCP Server service, KEA, only to find out that when enabled, the Additional BOOTP/DHCP Options disappear.

                                          Now, Additional BOOTP/DHCP Options is a real thing that provides said DHCP config options to the client.
                                          I have dozens of machines that require this option, and by setting the MTU on the correspondent interface, that doesn't make the clients set the proper MTU.
                                          That's DHCP option 26.

                                          This is a critical component and honestly if pfSense is dropping this, I will have to find another firewall software that supports it. Even if I finally have to go Cisco, I mean, I'm completely baffled by this.

                                          Another custom option that is indispensable to me is option 121, the configuration of routes on the client. Without that a centralized client management is not possible. For now i will keep ISC DHCP.

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.