2.2.4 daily page faults - fresh install with reloaded config.
-
All of the backtraces are different but they all end in the same place, IPsec. Might be the same as one of the other IPsec crashes we've been tracking. Can you elaborate on your IPsec config (number of tunnels, ciphers used, etc)
-
Thanks for the quick response.
It is a very simple IPsec setup to enable remote VPN from an iPhone.
Let me know if you need more info. than the below screen caps.
I'll disable the IPsec VPN and see if the crashes stop.
Current Uptime 03 Hours 37 Minutes 37 Seconds
-
Uptime 1 Day 01 Hour 09 Minutes 00 Seconds
IPsec is looking like the culprit.
-
Uptime 2 Days 14 Hours 13 Minutes 21 Seconds
i think we have a winner!!
IPSec.
-
It's a bit strange, nothing on there would seem to be out of the ordinary… was the mobile IPsec device connected at all times? Or was it connected at all?
Curious if maybe the device was on at all times if it might have been timed such that the phone roamed from tower to tower or went to sleep/woke up, etc.
-
Hi Jimp.
The mobile was an occasional connection and had no correlation with the crashes.
I have since rebooted due to some isp issues. Once I get a chance, I'll turnthe ipsec back on and see how it behaves.
Thanks.
-
In android, you can down load free apps which will force your phone to use a particular cell tower, this will remove one variable namely you phone switching between cell towers as phone companies have software running on these towers to bunk users around to load balance the connection, but it can be overridden with a simple free app which also happens to make it harden to triangulate your position.
Dont know if similar apps exist on iphone or others, androids a bit of a free for all.
-
ok, so it's been running sold with no crash for a few days now with IPSec turned off…
Now, I'll turn it on and see what happens
-
Turned it on and it lasted 12 hours before crashing :(
-
So it's definitely IPsec then. We've seen some other IPsec crashes but I'm not sure we've seen anything that regular, especially for a mobile only tunnel.
We are bringing back a bunch of IPsec updates from FreeBSD as soon as we can, might be in a 2.2.5 release, though I don't think it's there yet.
-
You mentioned an iPhone, is that just a VPN for a single iPhone? If not, knowing which other devices and how many might help.
-
Thanks guys.
Yes, it's just a single iphone that accesses the IPSec VPN (mine). Note is will crash when the vpn is enabled but there has been no access via the iphone/vpn. So just being enabled will cause a crash…not accessing it.
Happy to provide whatever config., logs and do whatever tests you guys want to help narrow it down.
I guess I can also look at moving over to openvpn client on the iphone.
-
If you could get me a backup of your config, that would definitely help. Can PM it to me here, or email to cmb at pfsense dot org, or email me to arrange other means of transfer. I don't see a means of replicating from that, so that should help.
