Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.3 stops routing traffic every 1 og 2 days.

    Scheduled Pinned Locked Moved General pfSense Questions
    27 Posts 10 Posters 6.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      denmly
      last edited by

      Just experienced another of these fw breakdowns even with the new kernel from CMB :-(

      it came at the same time that a big transfer of data started through a site to site vpn tunnel…

      1 Reply Last reply Reply Quote 0
      • C
        cmb
        last edited by

        @denmly:

        Just experienced another of these fw breakdowns even with the new kernel from CMB :-(

        it came at the same time that a big transfer of data started through a site to site vpn tunnel…

        That's not good, maybe something different in your case. Others have had promising results with the no-netmap kernel, though it hasn't been long enough yet to have a lot of confidence. What type of VPN?

        1 Reply Last reply Reply Quote 0
        • D
          denmly
          last edited by

          Ipsec VPN to another Pfsense 2.3…

          1 Reply Last reply Reply Quote 0
          • C
            cmb
            last edited by

            Could you get me a status tgz from your system? Browse to status.php and click the link to download the tgz. Email the file or a link to it to cmb at pfsense dot org.

            1 Reply Last reply Reply Quote 0
            • D
              denmly
              last edited by

              Email is now sent to you.

              1 Reply Last reply Reply Quote 0
              • B
                byusinger84
                last edited by

                @denmly:

                Just experienced another of these fw breakdowns even with the new kernel from CMB :-(

                it came at the same time that a big transfer of data started through a site to site vpn tunnel…

                I also experienced the same issue even using the new kernel. Also I don't think this is related to SIP traffic because one of the sites that's had the issue doesn't use SIP.

                1 Reply Last reply Reply Quote 0
                • T
                  thx2000
                  last edited by

                  @byusinger84:

                  @denmly:

                  Just experienced another of these fw breakdowns even with the new kernel from CMB :-(

                  it came at the same time that a big transfer of data started through a site to site vpn tunnel…

                  I also experienced the same issue even using the new kernel. Also I don't think this is related to SIP traffic because one of the sites that's had the issue doesn't use SIP.

                  I don't think it's strictly related to SIP traffic, but there are tons of RTP UDP packets that are sent during a call.  So for whatever reason that payload over the VPN is exacerbating the underlying issue.

                  1 Reply Last reply Reply Quote 0
                  • D
                    denmly
                    last edited by

                    Just has yet another insident, it seems that everytime it happends it is on the hour, eg. 21.00, 23.00, 01.00. or 05.00 are the times i've noticed this problems starts.

                    I can see it on my MRTG traffic graphs, when traffic stops comming through the FW.

                    1 Reply Last reply Reply Quote 0
                    • C
                      cmb
                      last edited by

                      @denmly:

                      Just has yet another insident, it seems that everytime it happends it is on the hour, eg. 21.00, 23.00, 01.00. or 05.00 are the times i've noticed this problems starts.

                      I can see it on my MRTG traffic graphs, when traffic stops comming through the FW.

                      Do you have any cron jobs that run on the hour? pfblocker for instance.

                      1 Reply Last reply Reply Quote 0
                      • D
                        denmly
                        last edited by

                        I used to have PF Blocker installed, but have removed the package.

                        Just checked crontab, and there still was two jobs in cron from pfblocker.

                        I have now disabled both of the jobs…

                        yesterday i was very desperate, so i tried to upgrade to the latest development version 2.3.1, and this morning i had no problems yet...
                        Not sure if this was a good move to upgrade to 2.3.1-development?

                        1 Reply Last reply Reply Quote 0
                        • B
                          byusinger84
                          last edited by

                          I have set pfblocker to now only update once a day. Other than that there are no other custom cron jobs. We shall see.

                          1 Reply Last reply Reply Quote 0
                          • S
                            SoloIT
                            last edited by

                            pfBlocker is not the issue. I've been running with no packages and still have in the issue. (see my thread: https://forum.pfsense.org/index.php?topic=110525)

                            I've started rolling mine back to 2.2.6. Too many headaches and sleepless nights with 2.3.

                            1 Reply Last reply Reply Quote 0
                            • C
                              cmb
                              last edited by

                              It looks like disabling SMP is an immediate workaround for the problem while we track down and fix the root cause.
                              https://forum.pfsense.org/index.php?topic=110953.0

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.