Make pfsense resilient to sudden power outages?



  • Hi

    Is there any way to make pfsense resilient to sudden power losses?  The first thing that comes to mind is to add  "sync" into fstab.

    Any more suggestions?

    thanks


  • LAYER 8 Global Moderator

    Thing that comes to mind to me would be a UPS ;)  duh!!!



  • sure, but that was not the question :)



  • Excessive syncing will kill performance from what I remember, and a UPS is a much better solution.



  • There is an UPS but the automatic shutdown is being problematic to say the least.  And having the software itself be resilient to sudden power outages is always a good practice.

    Does anyone else can think of anything else?

    thanks



  • @spyshagg:

    There is an UPS but the automatic shutdown is being problematic to say the least.  And having the software itself be resilient to sudden power outages is always a good practice.

    Does anyone else can think of anything else?

    thanks

    I'd love some sort of unattended install that will look for a config.xml where you could just leave a cd-rom copy in the drive and some sort of conditional reinstall if no interaction within 5 minutes upon boot.

    I'd also love a bugatti, so..you know.  Can't hurt to shoot for the stars, though.



  • I am running pfsense virtualized and what you said is possible. Have a script on the host with some variables to test the good working order of pfsense. If it fails = restore "good" cloned VDI.

    Thats actually a pretty good idea thanks.  It depends on the host to being resilient it self. But My ups refuses to work under centos 6.8.



  • I think that would be the most hassle free way to go about it to be honest.


  • Banned

    Using 2.4 with ZFS is your only hope. UFS is anything but resilient. It may completely cripple itself on a single power failure, if not, fsck will gradually finish it with its clueless attempts on "fixing" things.



  • amen! I've had to reload pfsense twice out of the 5 times I've shut it down unexpectedly. I keep a backup of my config of course but it shouldnt be so easily killed.



  • So  fstab /  0 0  to avoid checkdisk

    got it


  • LAYER 8 Global Moderator

    What UPS do you have, and what is your HOST running?  I would say your primary goal here would be to get your host to shutdown correctly on power loss… Or you could have problems with the host even coming back, or any other vms you have running on it.



  • Centos 6.8 x64

    Phasak 9469 usb
    Eaton 5E usb

    The Eaton throws usb errors in linux kernel immediately after plugging it in. It does this in all red hat distros I tired.

    drivers/hid/usbhid/hid-core.c: usb_submit_urb(ctrl) failed

    The newer revisions of phasak 9469 fail to sustain reliable usb communication phasak very own virtualpower app, and nut cannot even recognize the damn ups. The older revision 9465 as exactly the same usb controller and works well, but are no longer available.

    So, two shots two failures. I cant try any more ups. These are it.



  • At least with Linux you could probably pay someone to make you a driver that will work.


  • Banned

    @spyshagg:

    So  fstab /  0 0  to avoid checkdisk

    got it

    Seriously, this solves nothing when the filesystem is utter junk. Even reiser4 was more stable than this.



  • @doktornotor:

    Seriously, this solves nothing when the filesystem is utter junk. Even reiser4 was more stable than this.

    theres a slim line between brilliance and being a psychopatic murderer ….. reiser4 combined both those personalities :D



  • Are you guys familiar with "bad file descriptor" error which essentially bricks pfsense at  boot time?

    I can reproduce this error everytime the virtualbox machine closes without proper shutdown.  Everytime. Luckily, to fix this I just have to copy the backup VDI I keep stored.

    I am anticipating a world of hurt once the UPS's lose their batteries and the server goes down on power failures.

    Thinking of testing 2.4 with zfs before deploying another 15 machines.


Log in to reply