Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    switch over from ISC DHCP to Kea DHCP

    Scheduled Pinned Locked Moved DHCP and DNS
    70 Posts 18 Posters 19.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      netboy @johnpoz
      last edited by

      @johnpoz Let me pose the question differently?
      When will KEA be stable?

      johnpozJ 1 Reply Last reply Reply Quote 1
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @netboy
        last edited by

        @netboy When its ready, like with every release of pfsense ever in the history of pfsense ;)

        Pfsense releases when they feel its ready.. I have not seen any info about when that might be.. Maybe it will be in 24.X or maybe it will be 25.X ?

        I am sure there are many people looking forward to it, possible some cool things when it happens like unbound not restarting on every dhcp event, etc. But when that might be??? I would suggest you read the blog ;) and release notes of new versions when they are posted ;)

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @Gertjan
          last edited by

          @Gertjan said in switch over from ISC DHCP to Kea DHCP:

          Kea - the pfSense GUI front end - is still missing a lot of options and features, if you don't need them, then Kea will do just fine.

          Things like working DHCP? I tried switching today and DHCP failed completely. Other than that, it's great! 😉

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          N 1 Reply Last reply Reply Quote 1
          • N
            netboy @JKnott
            last edited by

            @JKnott That is exactly my point if DHCP is failing why have this feature which is not fully baked in? Or am I missing something?

            johnpozJ 1 Reply Last reply Reply Quote 1
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @netboy
              last edited by

              @netboy I have no idea what jknott is or was doing when he switched.. But when they first released the "preview" I tested it and worked just fine if all you wanted to do was hand out an IP.. Sure there are many users of pfsense that all they need is that, etc. But I am not one of those people ;) hehehe

              Its limitations were blogged about, and in the release notes.. Yeah its not quite ready for prime time.. But it could serve as your dhcp server if all you wanted was hey client asks for IP, give him one..

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              N JKnottJ A 3 Replies Last reply Reply Quote 0
              • N
                netboy @johnpoz
                last edited by

                @johnpoz
                Here is my issue.
                When I go to Services > DHCP Server > LAN I see the following message:

                "ISC DHCP has reached end-of-life and will be removed in a future version of Netgate pfSense Plus. Visit System > Advanced > Networking to switch DHCP backend"

                When I see the above message, I expect the change to Kea DHCP will be fully functional which is not the case.

                I am using DHCP for

                • Defining address pool range

                • Get a new IP address when new network device is connected and

                • Defining STATIC mapping for some DHCP device

                Does the existing change to kea DHCP allow me to do ALL OF THE ABOVE without issues (meaning has been tested)?

                P 1 Reply Last reply Reply Quote 1
                • P
                  Patch @netboy
                  last edited by Patch

                  @netboy said in switch over from ISC DHCP to Kea DHCP:

                  @johnpoz
                  Here is my issue.
                  When I go to Services > DHCP Server > LAN I see the following message:

                  As has been commented many times on this forum, the message displayed by the software could have been better worded and less alarming. Users need to read the software release notes and understand what they are saying to accurately interpret the software message. That is why many users refer to the current Kea implementation in pfsense as a software preview.

                  • Defining STATIC mapping for some DHCP device

                  Does the existing change to kea DHCP allow me to do ALL OF THE ABOVE without issues (meaning has been tested)?

                  Please read the software release notes and earlier posts in this thread.

                  1 Reply Last reply Reply Quote 1
                  • JKnottJ
                    JKnott @johnpoz
                    last edited by

                    @johnpoz said in switch over from ISC DHCP to Kea DHCP:

                    I have no idea what jknott is or was doing when he switched.

                    I just enabled Kea. Later in the day, when I used my notebook, anything that required IPv4 wasn't working. On Linux, I had no IPv4 address and on Windows, I got an APIPA address. My cell phone also stopped connecting to WiFi. After going back to ISC, DHCP works again.

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    N P 2 Replies Last reply Reply Quote 1
                    • N
                      netboy @JKnott
                      last edited by

                      @JKnott Thx for the update. Very helpful

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @netboy
                        last edited by

                        @netboy no it wasn't.. For all we know kea didn't even start..

                        here you go - working

                        boom.jpg

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • A
                          ambrosios @johnpoz
                          last edited by ambrosios

                          @johnpoz said in switch over from ISC DHCP to Kea DHCP:

                          @netboy But when they first released the "preview" I tested it and worked just fine if all you wanted to do was hand out an IP..

                          If my network is more complicated then just needing IPs handed out, I may be grossly underestimating how complicated my network setup actually is. 🤣

                          I'm no expert, but I think I know a good bit. ISC: defaults, single subnet, a few static IPs.... DHCP works fine. Switch to KEA and everything drops, never to be seen again.

                          Granted I could spend more time on root cause, but I'm surprised to hear it worked for you. I may have to give it another go.

                          Edit:
                          I read the blog post. I'm dumb. Thanks for playing. I'll go get the cone of shame now.

                          JKnottJ 1 Reply Last reply Reply Quote 0
                          • P
                            Patch @JKnott
                            last edited by Patch

                            @JKnott said in switch over from ISC DHCP to Kea DHCP:

                            After going back to ISC, DHCP works again.

                            Cool. So Kea DHCP is working as advertised

                            From https://www.netgate.com/blog/netgate-adds-kea-dhcp-to-pfsense-plus-software-version-23.09-1

                            the Kea implementation lacks the following DHCP server features:

                            • Local DNS Resolver/Forwarder Registration for static and dynamic DHCP clients
                            • Remote DNS server registration
                            • DHCPv6 Prefix Delegation
                            • High Availability Failover
                            • Lease statistics/graphs
                            • Custom DHCP options

                            Note: If you have assigned hostnames to devices on your network using static leases, or rely on dynamic lease registration in DNS, switching to Kea DHCP results in those hostnames being ignored. The static lease configuration is kept, so switching back to ISC DHCP will restore the functionality.

                            1 Reply Last reply Reply Quote 0
                            • JKnottJ
                              JKnott @ambrosios
                              last edited by

                              @ambrosios said in switch over from ISC DHCP to Kea DHCP:

                              I'm no expert, but I think I know a good bit. ISC: defaults, single subnet, a few static IPs.... DHCP works fine. Switch to KEA and everything drops, never to be seen again.

                              I have multiple subnets and any device that lives here has a static mapped IPv4 address, other than my desktop computer and pfSense, both of which have a static configuration. After I noticed it failed, I even tried rebooting pfSense, but that made no difference.

                              PfSense running on Qotom mini PC
                              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                              UniFi AC-Lite access point

                              I haven't lost my mind. It's around here...somewhere...

                              johnpozJ 1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator @JKnott
                                last edited by johnpoz

                                @JKnott said in switch over from ISC DHCP to Kea DHCP:

                                any device that lives here has a static mapped IPv4 address

                                Well since preview of kea doesn't support those - no wonder it not working for you..

                                So clearly you did not read the blog or the release notes..

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                JKnottJ 1 Reply Last reply Reply Quote 0
                                • JKnottJ
                                  JKnott @johnpoz
                                  last edited by

                                  @johnpoz said in switch over from ISC DHCP to Kea DHCP:

                                  So clearly you did not read the blog or the release notes..

                                  We're supposed to read??? 😉

                                  I'll just ignore the warnings. Hopefully this gets fixed before ISC is dropped.

                                  PfSense running on Qotom mini PC
                                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                  UniFi AC-Lite access point

                                  I haven't lost my mind. It's around here...somewhere...

                                  johnpozJ 1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator @JKnott
                                    last edited by

                                    @JKnott said in switch over from ISC DHCP to Kea DHCP:

                                    I'll just ignore the warnings.

                                    You can turn the warning off.. It right there in the same place you switch to kea..

                                    Hopefully this gets fixed before ISC is dropped.

                                    This is nonsense - yeah netgate is going to drop isc before kea is even at parity with feature set of isc.. That makes no freaking sense at all..

                                    If you would of read the info from ISC.. Its not going anywhere any time soon.. They are stopping development on it, so yeah its eol.. Their own wording - time to start thinking of moving.

                                    https://www.isc.org/blogs/isc-dhcp-eol/

                                    Does this mean ISC DHCP won’t work anymore?
                                    No. The existing open source software will continue to function as it has, and current operators do not need to stop using ISC DHCP.

                                    However, it is time to start thinking about a migration plan to a more modern system that is actively maintained.

                                    If you have basic hey hand out an IP need for your dhcpd - then sure you can switch.. Maybe this is 90% of pfsense userbase for all I know.. Sure we get a few non reading users here complaining.. But for all we know a million users have clicked switch and have no issues at all in their environment

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    N JKnottJ 2 Replies Last reply Reply Quote 0
                                    • N
                                      netboy @johnpoz
                                      last edited by

                                      @johnpoz Based on the discussion it appears like Kea does not support static IP address (no I have not read the release notes) - am i right?

                                      1 Reply Last reply Reply Quote 0
                                      • JKnottJ
                                        JKnott @johnpoz
                                        last edited by

                                        @johnpoz said in switch over from ISC DHCP to Kea DHCP:

                                        You can turn the warning off.. It right there in the same place you switch to kea.

                                        That's what I did.

                                        However, it is time to start thinking about a migration plan to a more modern system that is actively maintained.

                                        If you have basic hey hand out an IP need for your dhcpd - then sure you can switch.. Maybe this is 90% of pfsense userbase for all I know.. Sure we get a few non reading users here complaining.. But for all we know a million users have clicked switch and have no issues at all in their environment

                                        I use static mapped addresses so that I have consistent addresses.

                                        PfSense running on Qotom mini PC
                                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                        UniFi AC-Lite access point

                                        I haven't lost my mind. It's around here...somewhere...

                                        johnpozJ 1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator @JKnott
                                          last edited by

                                          @JKnott said in switch over from ISC DHCP to Kea DHCP:

                                          I use static mapped addresses so that I have consistent addresses.

                                          What does that have to do with cost of tea in china? Great I use a lot of reservations as well - what part are you not understanding that kea does not support this in pfsense as of yet..

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                                          N 1 Reply Last reply Reply Quote 0
                                          • N
                                            netboy @johnpoz
                                            last edited by

                                            @johnpoz said in switch over from ISC DHCP to Kea DHCP:

                                            what part are you not understanding that kea does not support this in pfsense as of yet..

                                            How do I interpret this statement?
                                            Kea has no support for static address
                                            OR
                                            pfsense's kea implementation does not support static address NOW but will support later?

                                            johnpozJ 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.