Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ATT Uverse RG Bypass (0.2 BTC)

    Scheduled Pinned Locked Moved Bounties
    555 Posts 80 Posters 1.2m Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      fresnoboy @fresnoboy
      last edited by fresnoboy

      @fresnoboy

      I think I may have figured out the problem. See here: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=252844 It seems this is the likely issue with the wpa-supplicant running at 100%, since we start it before the routing table is populated as well. The fix there would may solve our problem as well.

      U 1 Reply Last reply Reply Quote 0
      • U
        untamedgorilla @fresnoboy
        last edited by

        @fresnoboy said in ATT Uverse RG Bypass (0.2 BTC):

        https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=252844

        So does the kill and restart of supplicant fix the issue?

        1 Reply Last reply Reply Quote 0
        • Darth AndroidD
          Darth Android @fresnoboy
          last edited by

          @fresnoboy I did notice this as well after upgrading, but I simply killed & restarted wpa_supplicant and things seem to be holding fine. I’ve not rebooted the box since then, so perhaps I’ll re-encounter it at such a time. Things are still working at the moment, so I’m inclined to just not touch anything, but if there’s a fix to test ping me and I can take a look.

          1 Reply Last reply Reply Quote 0
          • T
            t41k2m3
            last edited by

            @fresnoboy have you looked into applying the patch to pfs or would that not be easy/possible?

            F N 2 Replies Last reply Reply Quote 0
            • F
              fresnoboy @t41k2m3
              last edited by

              @t41k2m3

              I haven't tried it yet. I don't have a build environment for PFSense set up (I do have a FreeBSD VM I can play with), but the patch there looks like it's been committed to the production environment, so it should be easy for the Netgate guys to cherry pick this and include it in a beta update.

              Anyone from Netgate want to comment?

              1 Reply Last reply Reply Quote 0
              • N
                netnerdy @t41k2m3
                last edited by netnerdy

                @t41k2m3

                I have written a list of easy mitigation steps for cpu usage issue. Credits go to all ppl who root caused the issue.

                https://github.com/MonkWho/pfatt/issues/41#issuecomment-830450022

                I S 2 Replies Last reply Reply Quote 1
                • N
                  netnerdy
                  last edited by

                  @fresnoboy

                  Do you have steps of how to get vlan0 working on esxi?

                  F 1 Reply Last reply Reply Quote 0
                  • I
                    ikkuranus @netnerdy
                    last edited by ikkuranus

                    @netnerdy Thanks, that was the one hurdle which was keeping me from upgrading.

                    1 Reply Last reply Reply Quote 0
                    • F
                      fresnoboy @netnerdy
                      last edited by

                      @netnerdy

                      You need to create a new switch (it can't be the same switch as your LAN). For the Switch, set the VLAN ID to (0) None. This will strip the VLAN tags off that interface. Make sure your physical adapter is mapped to that switch, and then connect that WAN switch to an interface on your PFSense VM. Enjoy.

                      BTW, the snapshotting feature is super useful when updates are having issues. :)

                      N 1 Reply Last reply Reply Quote 1
                      • N
                        netnerdy @fresnoboy
                        last edited by netnerdy

                        @fresnoboy

                        Do you still use ngeth with this method? I was assuming that ngeth wouldn't be necessary in this case. I couldn't get wpa_supplicant to work with virtualized interface. It only works when I pci passthrough the raw device.

                        F 1 Reply Last reply Reply Quote 0
                        • F
                          fresnoboy @netnerdy
                          last edited by

                          @netnerdy

                          I run virtualized and have no need for ngeth. I think if you are using the WPA supplicant mode, and clear the vlan 0 issue, then you don't need ngeth at all.

                          1 Reply Last reply Reply Quote 0
                          • S
                            slushieken @netnerdy
                            last edited by slushieken

                            I use a Netgate SG-3100 which runs ARM7 32-bit . Wondering if anyone has/can compile this same fix for that platform. Would be great to have this.

                            Right now I have 1 core at constant 100% CPU, and I can't downgrade on this platform easily.

                            N F 2 Replies Last reply Reply Quote 0
                            • N
                              netnerdy @slushieken
                              last edited by

                              @slushieken maybe this might help? http://www.macfreek.nl/memory/FreeBSD_kernel_cross-compiling

                              1 Reply Last reply Reply Quote 0
                              • F
                                fresnoboy @slushieken
                                last edited by

                                @slushieken

                                Can you send support @Netgate a request to get a the cherry picked patch put into the main distribution? They really should just put the fix into the next release of the code so folks don't have to manually patch it, esp for appliance users.

                                S 1 Reply Last reply Reply Quote 0
                                • S
                                  slushieken @fresnoboy
                                  last edited by slushieken

                                  @fresnoboy

                                  @fresnoboy said in ATT Uverse RG Bypass (0.2 BTC):

                                  @slushieken

                                  Can you send support @Netgate a request to get a the cherry picked patch put into the main distribution? They really should just put the fix into the next release of the code so folks don't have to manually patch it, esp for appliance users.

                                  How do I reach them? I don't have a paid support package...

                                  --Edit-- I figured it out and opened a ticket. I'll reply with any feedback.

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    It looks like it should be possible to include this, it's a one line patch, but because it's not in 12-stable we would need to review what impact it might have.

                                    Steve

                                    F 1 Reply Last reply Reply Quote 0
                                    • F
                                      fresnoboy @stephenw10
                                      last edited by

                                      @stephenw10

                                      Thanks for looking into this. It would be a blessing to many users to get this incorporated, but especially those on your appliances, as it's more painful to build a manual patch for them.

                                      The patch has been successfully installed on many user's machines and had no issues reported so far.

                                      Please let us know what you guys decide.

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        When you say 'patch' I assume you mean the patched SSL libs since this is not something that can be patched on an installed system directly.

                                        F 1 Reply Last reply Reply Quote 0
                                        • F
                                          fresnoboy @stephenw10
                                          last edited by

                                          @stephenw10

                                          Sorry if I wasn't clear. By "cherrypick", I meant take the patch from the v13 version of wpa_supplicant and apply it to the current pfsense wpa_supplicant code. It's an easy one line change: https://cgit.freebsd.org/src/commit/?id=d70886d063166786ded0007af8cdcbf57b7b4827

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            That should now be in current 21.09/2.6 snapshots if anyone is able to test.
                                            https://github.com/pfsense/FreeBSD-src/commit/61c7d15d84f80ae1d92b42dc2da56ad94a80b46b

                                            Steve

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.