pfSense Plus and SG-3100

artooro · Jun 2, 2021, 5:49 PM

Looks like pfSense Plus 21.05 just came out, and this issue is still not fixed. And no word from anyone at Netgate either in this forum or the redmine issue.

jimp · Jun 3, 2021, 3:27 PM

Try the patch to disable PHP PCRE JIT on #11466 Note 32.

You can install the System Patches package and then create an entry for the patch URL https://redmine.pfsense.org/attachments/download/3707/patch-disable-pcrejit-arm.diff to apply the fix.

Then run console menu options 16 and 11 to restart PHP and the GUI, or reboot.

mcury · Jun 3, 2021, 3:38 PM

Applied the patch, thanks Jimp.

Can you confirm if the D28821 fix was ported to 21.05 version?
I got a few php dumps before installing packets, while reloading filters.

jimp · Jun 3, 2021, 3:42 PM

@mcury said in pfSense Plus and SG-3100:

Applied the patch, thanks Jimp.

Can you confirm if the D28821 fix was ported to 21.05 version?
I got a few php dumps before installing packets, while reloading filters.

Yes, the patch from https://reviews.freebsd.org/D28821 is present in the FreeBSD source for 21.05.

Cornel · Jun 5, 2021, 9:20 AM

@jimp has this patch been confirmed as a workaround for the php issue?

NokkieF · Jun 5, 2021, 2:17 PM

@jimp Do I need to run the patch for the new release, or is it already part of it?

SteveITS · Jun 5, 2021, 2:25 PM

@cornel The patch for the PHP crashing issue is in note 32 here and is not in 21.05. Apply via the System Patches package.

mcury · Jun 5, 2021, 2:44 PM

I was getting php errors in 21.05, so I applied this patch.. No more problems noticed.. It seems pretty stable now..
pfblockerng is running perfectly with this patch, along with openvpn and ipsec.

login-to-view

Didn't test snort/suricata..

Cornel · Jun 5, 2021, 4:31 PM

@mcury Thanks!

I bit the bullet and pressed update...

Update was a total failure. Fortunately the pfSense support team is very responsive. A link for the download image was sent in the same minute as I created the ticket. Installed image, restored from backup, applied the patch and up and running again!

Errors I got in console after I pressed update were many lines of:
UFS /dev/diskid/DISK-E937110023s2a (/) cylinder checksum failed: cg 124, cgp: 0x0 != bp: 0xe911d0ad
UFS /dev/diskid/DISK-E937110023s2a (/) cylinder checksum failed: cg 125, cgp: 0x0 != bp: 0x381abb22
UFS /dev/diskid/DISK-E937110023s2a (/) cylinder checksum failed: cg 126, cgp: 0x0 != bp: 0x4eeb7142

NokkieF · Jun 6, 2021, 2:58 PM

I updated to 21.05 too, had no problems updating. Also applied the patch. Thanks for the help!