Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    An earnest appeal - please do fix APINGER in 2.2

    Scheduled Pinned Locked Moved 2.2 Snapshot Feedback and Problems - RETIRED
    95 Posts 29 Posters 32.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ?
      Guest
      last edited by

      …and frequently results in tunnels (IPsec or openVPN) going down for no obvious reasons, except for apinger freakin' out.

      I increased the times for apinger alarm significantly, that helps at least a little...

      1 Reply Last reply Reply Quote 0
      • S
        Supermule Banned
        last edited by

        I dont have these problems at all running 40+ pfsenses….

        I use traceroute to monitor the wanted IP upstream to decide if the GW is down.

        All are stable currently running 0% packetloss..... No change from 2.0.X

        I dont like the idea of monitoring other external hosts not in your upstream environment. That way you dont get a real picture of your GW status.

        Capture.PNG
        Capture.PNG_thumb

        1 Reply Last reply Reply Quote 0
        • Raul RamosR
          Raul Ramos
          last edited by

          @Supermule:

          I dont have these problems at all running 40+ pfsenses….

          What's your config for WAN interfaces? I see allot of people write that have problems but doesn't put configs to help troubleshoot the problem.

          Some times i have the problem in my multi-wan interface (PPPoE only config user and pass and a ppp (LTE) WAN only config default number). Don't see the problem when i disconnect my ppp.

          pfSense:
          ASRock -> Wolfdale1333-D667 (2GB TeamElite Ram)
          Marvell 88SA8040 Sata to CF(Sandisk 4GB) Controller
          NIC's: RTL8100E (Internal ) and Intel® PRO/1000 PT Dual (Intel 82571GB)

          1 Reply Last reply Reply Quote 0
          • S
            Supermule Banned
            last edited by

            More or less the same for all 40+….

            Capture.PNG
            Capture.PNG_thumb

            1 Reply Last reply Reply Quote 0
            • N
              naras
              last edited by

              @Supermule:

              I use traceroute to monitor the wanted IP upstream to decide if the GW is down.

              All are stable currently running 0% packetloss….. No change from 2.0.X

              I dont like the idea of monitoring other external hosts not in your upstream environment. That way you dont get a real picture of your GW status.

              Could you please tell us how to use traceroute to monitor the wanted IP upstream to decide if the GW is down?

              Multi-wan with static IPs and different gateways within each wan subnets are stable at least in my tests,  but I use pppoe connections and we get the same gateway IP allmost all the times, so we have to set at least one monitor IP outside the wan subnet,  and this line with outside  monitor ip allways gets offline as the apinger reported, but the connection  functional as normal.

              If there is another to monitor the gatwway, that really helps.

              1 Reply Last reply Reply Quote 0
              • S
                Supermule Banned
                last edited by

                http://ping.eu/traceroute/

                Use the first one thats not in your WAN subnet.

                1 Reply Last reply Reply Quote 0
                • N
                  naras
                  last edited by

                  @Supermule:

                  http://ping.eu/traceroute/

                  Use the first one thats not in your WAN subnet.

                  It's not within pfsense, and not done  automaticly either?

                  1 Reply Last reply Reply Quote 0
                  • S
                    Supermule Banned
                    last edited by

                    I understand why you are confused…

                    I use traceroute to monitor the wanted IP upstream to decide if the GW is down.

                    I use traceroute to locate the IP to monitor and then use the built in GW monitor tool in PFSense.

                    Works fine here.

                    1 Reply Last reply Reply Quote 0
                    • N
                      naras
                      last edited by

                      @Supermule:

                      I understand why you are confused…

                      I use traceroute to monitor the wanted IP upstream to decide if the GW is down.

                      I use traceroute to locate the IP to monitor and then use the built in GW monitor tool in PFSense.

                      Works fine here.

                      OK, I did that several months ago,  and with no use.
                      The next hop routers are always outside my wan subnet:(

                      Thanks anyway.

                      1 Reply Last reply Reply Quote 0
                      • dennypageD
                        dennypage
                        last edited by

                        I've been running into quite a few problems with apinger in the 2.1 series with a simple single wan configuration.

                        https://redmine.pfsense.org/issues/3692

                        I was thinking that I would try to debug it and went looking for the source code to apinger but wasn't able to find it in the 2.1.5 main or packages. Can someone send me a pointer to it?

                        Thanks

                        1 Reply Last reply Reply Quote 0
                        • bmeeksB
                          bmeeks
                          last edited by

                          @dennypage:

                          I've been running into quite a few problems with apinger in the 2.1 series with a simple single wan configuration.

                          https://redmine.pfsense.org/issues/3692

                          I was thinking that I would try to debug it and went looking for the source code to apinger but wasn't able to find it in the 2.1.5 main or packages. Can someone send me a pointer to it?

                          Thanks

                          The source code is in the pfsense-tools repo.  You must complete a couple of electronic documents in order to access it.  Access is controlled via SSH public keys.  It is based off the FreeBSD port here: http://www.freshports.org/net/apinger/

                          Information on what is required to get access is posted in a Sticky Thread at the top of the Development sub-forum here: https://forum.pfsense.org/index.php?topic=76132.0.

                          Bill

                          1 Reply Last reply Reply Quote 0
                          • dennypageD
                            dennypage
                            last edited by

                            @bmeeks:

                            The source code is in the pfsense-tools repo.  You must complete a couple of electronic documents in order to access it.  Access is controlled via SSH public keys.  It is based off the FreeBSD port here: http://www.freshports.org/net/apinger/

                            Information on what is required to get access is posted in a Sticky Thread at the top of the Development sub-forum here: https://forum.pfsense.org/index.php?topic=76132.0.

                            Thanks. I downloaded what I thought was the packages distribution from

                            https://github.com/pfsense/pfsense-packages/releases/tag/RELENG_2_1_5

                            but apinger wasn't in there. Is there a different repo?

                            1 Reply Last reply Reply Quote 0
                            • H
                              heper
                              last edited by

                              the packages repo is only for optional addons. (stuff that is not included in a base-install from CD)

                              i believe bmeeks said in which repo you can find apinger, and how to access it

                              1 Reply Last reply Reply Quote 0
                              • bmeeksB
                                bmeeks
                                last edited by

                                @heper:

                                the packages repo is only for optional addons. (stuff that is not included in a base-install from CD)

                                i believe bmeeks said in which repo you can find apinger, and how to access it

                                Correct. It's in the pfsense-tools repo which is NOT hosted on Github directly.  It's hosted on a server operated by the pfSense team and you must follow the instructions in the link I posted above to gain access to the repo.

                                Bill

                                1 Reply Last reply Reply Quote 0
                                • E
                                  eri--
                                  last edited by

                                  I pushed a fix.

                                  Please try with next snapshots and see if you still get the same issues.

                                  1 Reply Last reply Reply Quote 0
                                  • A
                                    applerule
                                    last edited by

                                    @ermal:

                                    I pushed a fix.

                                    Please try with next snapshots and see if you still get the same issues.

                                    Still broken for me. :(  See attachment.  Let me know if there is anything else I can provide.

                                    Capture.PNG
                                    Capture.PNG_thumb

                                    1 Reply Last reply Reply Quote 0
                                    • E
                                      eman_resu
                                      last edited by

                                      Any update on the matter ?

                                      My box just went dark after apinger decided that the wan is not up and then remained stuck with a cpu load of 99% denying to be restarted.

                                      1 Reply Last reply Reply Quote 0
                                      • R
                                        Roots0
                                        last edited by

                                        APINGER does't cope well with my WAN flapping whenever this happens my HENET ipv6 gateway starts reporting loss forever even though the ipv6 tunnel is backup and stable!

                                        Mobile Computer & Network Support Stockport, UK
                                        www.timotten.co.uk

                                        1 Reply Last reply Reply Quote 0
                                        • G
                                          grandrivers
                                          last edited by

                                          why wouldn't adding some other methods of detection be a good idea had a xincom (same as syswan) that did 3 different means of detection (imcp ping, http heartbeat, traffic flow, DPD
                                          (RFC3706) ) years ago the was like a $250 router which was nice cause my isp use to block imcp

                                          pfsense plus 25.03 super micro A1SRM-2558F
                                          C2558 32gig ECC  60gig SSD

                                          1 Reply Last reply Reply Quote 0
                                          • E
                                            eman_resu
                                            last edited by

                                            @naras:

                                            +1
                                            This is a quite annoying issue.

                                            and the outcome in my case is a nonfunctional apinger with miles of logentries like: apinger: No usable targets found, exiting

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.