Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Update 2.7.2 to 2.8.0 Dynamic DNS not working with Cloudflare

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    56 Posts 11 Posters 6.4k Views 11 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N Offline
      nation
      last edited by

      Thank you @stephenw10. That worked for me also.

      1 Reply Last reply Reply Quote 1
      • T Offline
        TheBigS
        last edited by

        Is there any news about the problem, or is there a workaround?

        1 Reply Last reply Reply Quote 0
        • M Offline
          Mocha9973
          last edited by

          Trying to follow along, not tried everything you guys did but found this post and that worked for me.

          Turned of Gateway monitoring only and Dynamic DNS became online at once after a force refresh.

          https://www.reddit.com/r/PFSENSE/comments/1kngpej/ddns_using_cloudflare_stopped_working_after/

          1 Reply Last reply Reply Quote 0
          • N Offline
            nation
            last edited by

            @TheBigS try to check the option. For me worked
            26e6f3f0-6ddb-41e1-ab49-9d7bbdf22cab-image.png

            4 1 Reply Last reply Reply Quote 0
            • stephenw10S Offline
              stephenw10 Netgate Administrator
              last edited by

              Yup the change of behaviour here is that the client checks the WAN is up by the gateway status on it before it tries to update. So if your gateway monitoring shows as offline the best solution here is to correct that so it's pinging something that responds. An alternative is to just mark the gateway as always up so it doesn't get monitored but then you lose gateway data.

              T 1 Reply Last reply Reply Quote 0
              • T Offline
                TheBigS @stephenw10
                last edited by

                @stephenw10 thanks a lot. my pfsense is now pinging quad9 and now everything is working. ๐Ÿ‘๐Ÿป

                1 Reply Last reply Reply Quote 1
                • 4 Offline
                  4920441 0
                  last edited by

                  ...its the same here with pppoe and dhcp

                  using afraid, and hurricane electrics as ddns service.

                  but it's half bad, another reason why to abandon pfsense after nearly 18 years of usage.....

                  4 1 Reply Last reply Reply Quote 0
                  • 4 Offline
                    4920441 0 @nation
                    last edited by

                    @nation

                    why in earth should I disable gateway monitoring since i have three pppoe connections and a dhcp connection which is a redundant setup for internet connection?!?

                    disabling gw monitoring is a very crude workaround for a problem which should not exist in the first place! Come on.... ddns is not rocket science!!!!

                    1 Reply Last reply Reply Quote 0
                    • 4 Offline
                      4920441 0 @4920441 0
                      last edited by 4920441 0

                      It seems as if it is the old problem from a couple of years ago coming back again:

                      whent you get an IPv6 Address via pppoe or dhcp you also get some link local addresses for that. somtimes even the default gw is link local.

                      It seems in some circumstances the ddns client of pfsense does not get the right ip address and makes a lot of silly stuff with the ll address....

                      because even if forcing the update and even when the given ipv6 address is the same as before it fails to "update" the ddns service and shows a cached "::" entry ....

                      I cannot say if the entry itself is getting updated, since, in my case, there is no change.....

                      BTW: I just encountered my 4 IPv6 WAN Adresses are totally mixed up in the ddns entries..... I don't recon any rule about how pfsense mangled it.... wan1 has ddns IP from wan3 wan 2 and 4 does not have any dyndns address. The addresses itself are correctly assigned to the correct interfaces in the interface section.

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S Offline
                        stephenw10 Netgate Administrator
                        last edited by

                        Ok so the issue you're seeing is only affecting IPv6 addresses?

                        And gateway monitoring is working fine for those IPv6 interfaces?

                        That seems separate to the issue other users here were hitting.

                        4 1 Reply Last reply Reply Quote 0
                        • 4 Offline
                          4920441 0 @stephenw10
                          last edited by

                          @stephenw10

                          The IPv6 Addresses are not updated in the DNS. I checked that.

                          Why should that be another Issue? Gateway monitoring for itself is working fine as far as I can tell right now.

                          The ddns script does not resolve the current IPv6 Address - totaly irrelevant if I use a script or not - in the status display it is always "::" and not a current or past IPv6 Address.

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S Offline
                            stephenw10 Netgate Administrator
                            last edited by

                            Right, it's just that this seems to be a new/different issue to that which was discussed in this thread. Which was that a change in the behaviour of the dyndns update script meant it would not run against a WAN where the gateway is marked down.
                            As I understand it that's not what youre seeing?

                            1 Reply Last reply Reply Quote 0
                            • C Offline
                              cschafer @djstone
                              last edited by cschafer

                              @djstone

                              I just installed 2.8.0 and was having difficulties getting Dynamic DNS to work with Cloudflare. In my case, my WAN is a dual stack IPv4 and IPv6, when I call var_dump(dyndnsCheckIP('igb0')) on my WAN; I see that by default the dyndnsCheck(Interface) is returning the IPv6 address on the WAN interface (a public IPv6 in my case).

                              I happen to have a VLAN defined in my system that only supports IPv4, and when I query that VLAN interface with dyndnsCheck(), I get my public IPv4 address.

                              So, I updated my Dynamic DNS Client to use the VLAN interface for the "Interface to Monitor" and the IPv4 address on cloudfare updated successfully. Strange workaround, but I'm using it for now. My Cloudflare client settings are as follows:

                              Service Type: Cloudflare
                              Interface to monitor: VLAN
                              Check IP Mode: Automatic (default)
                              Hostname: @
                              Domain: xyz.net
                              Cloudflare Proxy: off
                              Username: {cloudflare zone id]
                              Password: [Zone:Edit Token ID]
                              TTL: empty
                              Description: Cloudflare

                              I have not figured out a way to get "Cloudflare (v6)" client to work and update my AAAA record. If I use the WAN as 'Interface to monitor' which returns an IPv6 address as you would think would be useful, the task fails with the generic error. If I use the VLAN workaround as 'Interface to monitor,' it executes successfully but does nothing on Cloudflare (perhaps fails to overwrite an IPv6 address with an IPv4 address??? don't know).

                              If anyone can give a clear guide on how to do Dynamic DNS updates to Cloudflare for both IPv4 and IPv6 with a WAN that has the following setup, I would appreciate it :
                              IPv4 Configuration Type: DHCP
                              IPv6 Configuration Type: DHCP6

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S Offline
                                stephenw10 Netgate Administrator
                                last edited by

                                Ah, nice catch. Hmm... ๐Ÿค”

                                1 Reply Last reply Reply Quote 0
                                • M Offline
                                  m80s
                                  last edited by

                                  I have the same issue on 25.07.1 after upgrading to 24.11.

                                  As I am running pfSense on VM on proxmox it was easy for me to revert back and confirmed no issues with 24.11.

                                  I didn't check if disabling gateway monitoring fixed the issue

                                  1 Reply Last reply Reply Quote 0
                                  • M m80s referenced this topic
                                  • stephenw10S Offline
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Also with Cloudflare? With IPv6?

                                    M 1 Reply Last reply Reply Quote 0
                                    • M Offline
                                      m80s @stephenw10
                                      last edited by

                                      @stephenw10 said in Update 2.7.2 to 2.8.0 Dynamic DNS not working with Cloudflare:

                                      Also with Cloudflare? With IPv6?

                                      didn't try, should it work with it?
                                      Is it something that it will be fixed btw?

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S Offline
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Yes, it will be fixed. We just need more info. Like: are you also using Cloudlfare? Or is this something affecting multiple dyndns providers?

                                        It should work with IPv6, yes, but there was at least on report of that failing specifically on Cloudflare.

                                        4 M 2 Replies Last reply Reply Quote 0
                                        • 4 Offline
                                          4920441 0 @stephenw10
                                          last edited by

                                          @stephenw10

                                          ...and freedns... and hetzner... and hurricane electrics is failing too with ipv6.....

                                          1 Reply Last reply Reply Quote 1
                                          • stephenw10S Offline
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Ah, that's good info. Ok...

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.