Limiter config disappered
-
Adding one more bit.
When the limiter malfunctions and the network becomes unstable, CPU is through the roof.
This is the exact same condition that happened last year when i was trying to troubleshoot this problem. I later figured out it was due to a configured limiter. Once I deleted it all my instability went away.
Good thing i remembered because those symptoms are back...
Solution: Delete the limiter all together. But when i went to go do that, its no longer in the GUI.
-
Hmm, so the config file itself never changed?
Do you have MIM enabled on that system?
Do you see anything in Diag > Limiter Info?
-
@stephenw10
Config file never changed.
I do have MIM enabled.
Diag > Limiter says i have no limiters configured. Which is crazy! Even my firewall rule using the Limiter stated it was there (gear icon denoting the advanced options being used). When i went into the firewall rule, the limiter In/Out configuration was set to None.
Its like it never happened but for sure the limiter was what was causing my connectivity issue.I think i am hitting that redmine bug about the disappearing configuration but why at 50Mbps..?
-
Doers it return if you reload the ruleset in Status > Filter Reload?
Does it return if you reboot?
-
Performing a Filter Reload
Sadly, the Limiters configuration is not present in the GUI.
I don't want to restart the firewall now that its working but i don't think it will help in this case (could be wrong tho)
-
Do they exist in /tmp/config.cache?
-
@stephenw10 Yes sir
-
Just spitballing, but could it be a browser/browser cache issue? Try another browser, another machine?
-
@provels nothing is off the table.
I just tried FF and the problem is still there.
Hate to say it again but this looks like that redmine bug i noted above. Limiter just disappears after a reboot. The only difference is that the OP was setting a high limit (~4Gbps) while i am using 50Mbps
-
I would think that rebooting to make sure the Limiters are loaded from the config as expected should be the next step if you can.
-
Thanks for the report. I've opened a redmine for this here https://redmine.pfsense.org/issues/16051 and will post a workaround there later.
-
@marcosm dont think that redmine is relevant here, no?
edit:
You mean this one. https://redmine.pfsense.org/issues/16051So its something to do with MIM enabled. Very interesting. Is there a commitID i can try to test?
-
@michmoor Not yet - I need to work on it further on Monday.
-
@marcosm no problem. Enjoy the weekend.
-
I've updated the redmine with additional info that you can test out if you'd like.
-
Confirmed that once i applied the PHP code the limiters came back (no reboot needed) and can be applied.
Got this notice as well.
If i reboot my firewall again, do i have to re-apply this PHP code?
25.03 i take it has the perm fix.
-
No, patches survive a reboot. They may not survive an update but, yes, this would be in 25.03 anyway so you shouldn't need to do anything.
