Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    if_pppoe problems with php-fpm causing loops. (resolved)

    Scheduled Pinned Locked Moved General pfSense Questions
    77 Posts 4 Posters 15.3k Views 7 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C Offline
      chrcoluk @stephenw10
      last edited by chrcoluk

      @stephenw10 I have another update on 2.8.1 and using the up down commands manually.

      It turns out running 'ifconfig pppoe2 down' has the same issue, the 'ifconfig' after running the down command reports this for ppppoe2. Censoring IP's

      pppoe2: flags=1008851<UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST,LOWER_UP> metric 0 mtu 1500
              description: WAN
              options=0
              inet x.x.x.x --> x.x.x.x netmask 0xffffffff
              inet6 fe80::xxx:xxxx:xxxx:xxxx%pppoe2 prefixlen 64 scopeid 0x10
              groups: pppoec
              nd6 options=121<PERFORMNUD,AUTO_LINKLOCAL,NO_DAD>
      

      So the inet is the VIP, the main IP is removed but VIP remains, link local IPv6 remains. Note it still has 'UP' status as well, but with a dead connection.

      On the GUI WAN is showing as green up arrow but with blank ip information, no ip info there at all.

      However as before, going in the GUI, disabling WAN. Save, Enabling WAN save, then Apply successfully does a full WAN cycle and brings back online. (or rebooting)

      I hope this new info helps that the down command fails to take the PPPOE session offline.

      Sadly although my ISP did start an investigation, no updates were provided after.

      I will run the down command again another time with debug enabled, and upload that log to the link provided, I dont know when this will be, as I have people using this connection who are almost around the clock streaming. I hope the new more verbose logging enhancements made it into 2.8.1.

      I have a sneaky feeling VIP may be the problem acting as a blocker on if_pppoe termination, when I do the later test I will remove VIP, then run down command.

      pfSense CE 2.8.1

      C 1 Reply Last reply Reply Quote 0
      • C Offline
        chrcoluk @chrcoluk
        last edited by chrcoluk

        Looks like VIP is the culprit, after I removed it, pppoe2 down worked, and up then brought it back up. So I guess wasnt just a VIP bug causing loops, but also one affecting pppoe termination.

        'if_pppoe: pppoe2: lcp close(initial)' is the only log entry with VIP removed.

        pfSense CE 2.8.1

        stephenw10S 1 Reply Last reply Reply Quote 0
        • C Offline
          chrcoluk @ajtuk
          last edited by

          @ajtuk Forgot to ask, do you have any additional IP's added as virtual IP's on your install?

          pfSense CE 2.8.1

          A 1 Reply Last reply Reply Quote 0
          • stephenw10S Offline
            stephenw10 Netgate Administrator @chrcoluk
            last edited by

            @chrcoluk said in if_pppoe problems with php-fpm causing loops. (resolved):

            Looks like VIP is the culprit, after I removed it, pppoe2 down worked, and up then brought it back up.

            Hmm, that's good info. Let me see....

            1 Reply Last reply Reply Quote 1
            • A Offline
              ajtuk @chrcoluk
              last edited by

              @chrcoluk Yes, I have 3 VIP's setup. Also not had any drops for a good few weeks, but could just be that both AAISP and City Fibre have been stable.

              C 1 Reply Last reply Reply Quote 1
              • C Offline
                chrcoluk @ajtuk
                last edited by

                @ajtuk Yep I have not had any outages either, I updated to 2.8.1 then decided to test those commands as it was something I wanted to do to further diagnose.

                I think we may have found the reason then. Hopefully Netgate can repeat this.

                pfSense CE 2.8.1

                1 Reply Last reply Reply Quote 0
                • stephenw10S Offline
                  stephenw10 Netgate Administrator
                  last edited by

                  Yep. So to be clear you have IPAlias VIPs on the PPPoE interface?

                  C 2 Replies Last reply Reply Quote 0
                  • C Offline
                    chrcoluk @stephenw10
                    last edited by chrcoluk

                    @stephenw10 Yep IP alias for me.

                    pfSense CE 2.8.1

                    1 Reply Last reply Reply Quote 1
                    • C Offline
                      chrcoluk @stephenw10
                      last edited by

                      @stephenw10 Hi again, is there any news on this? like has it being tested as confirmed or anything like that yet? Thanks.

                      pfSense CE 2.8.1

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S Offline
                        stephenw10 Netgate Administrator
                        last edited by

                        Sorry not yet. Let me see what I can do....

                        1 Reply Last reply Reply Quote 1
                        • C Offline
                          chrcoluk @w0w
                          last edited by

                          @w0w said in if_pppoe problems with php-fpm causing loops. (resolved):

                          @chrcoluk said in if_pppoe problems with php-fpm causing loops. (resolved):

                          issue related to fragments

                          What issue?

                          A little bit more info now as to why if_pppoe fixed it.

                          I think mpd tcpmssfix wasnt working properly, if_pppoe uses scrub instead for same feature. I did a little bit of testing with iperf and that reports a weird mss value when using mpd combined with tcpmssfix.

                          I havent however confirmed on the cloudflare icmpcheck.popcount test yet as site seems to be down now.

                          pfSense CE 2.8.1

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.