Unbound service getting restarted every 10 seconds due to rc.newwanipv6 script



  • Hi

    The system:
    pfSense 2.3.4-RELEASE (i386)
    ALIX 2D13 (nanobsd 4 GB, 256 MB RAM)

    WAN Interface:
    IPv4: PPPoE (VDSL2 + VLAN – modem is in bridge mode)
    IPv6: DHCPv6 (with “Request a IPv6 prefix/information through the IPv4 connectivity link” checked – that’s how my ISP works)

    LAN Interface:
    IPv4: static
    IPv6: track interface

    DHCPv6 Server & RA Service:
    All default options (RA Assisted), nothing fancy

    Status:
    IPv4 works (did not notice resolution failures yet)
    IPv6 works (10/10 from http://test-ipv6.com/), but DNS resolution sporadically fails

    System Logs/System/General:

    Sep 4 23:21:36	dhcpleases		kqueue error: unkown
    Sep 4 23:21:34	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
    Sep 4 23:21:34	dhcpleases		/var/etc/hosts changed size from original!
    Sep 4 23:21:32	php-fpm	31134	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
    Sep 4 23:21:32	php-fpm	31134	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
    Sep 4 23:21:30	check_reload_status		Reloading filter
    Sep 4 23:21:30	php-fpm	31134	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
    Sep 4 23:21:29	php-fpm	31134	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
    Sep 4 23:21:29	php-fpm	31134	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:21:22	dhcpleases		kqueue error: unkown
    Sep 4 23:21:20	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
    Sep 4 23:21:20	dhcpleases		/var/etc/hosts changed size from original!
    Sep 4 23:21:19	php-fpm	31134	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
    Sep 4 23:21:19	php-fpm	31134	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
    Sep 4 23:21:17	check_reload_status		Reloading filter
    Sep 4 23:21:16	php-fpm	31134	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
    Sep 4 23:21:16	php-fpm	31134	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
    Sep 4 23:21:16	php-fpm	31134	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:21:13	dhcpleases		kqueue error: unkown
    Sep 4 23:21:12	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
    Sep 4 23:21:12	dhcpleases		/var/etc/hosts changed size from original!
    Sep 4 23:21:11	php-fpm	31134	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
    Sep 4 23:21:11	php-fpm	31134	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
    Sep 4 23:21:09	check_reload_status		Reloading filter
    Sep 4 23:21:09	php-fpm	77070	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
    Sep 4 23:21:09	php-fpm	77070	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
    Sep 4 23:21:09	php-fpm	77070	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:21:06	dhcpleases		kqueue error: unkown
    Sep 4 23:21:05	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
    Sep 4 23:21:04	dhcpleases		/var/etc/hosts changed size from original!
    Sep 4 23:21:03	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
    Sep 4 23:21:03	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
    Sep 4 23:21:01	check_reload_status		Reloading filter
    Sep 4 23:21:01	php-fpm	77070	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
    Sep 4 23:21:01	php-fpm	77070	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
    Sep 4 23:21:01	php-fpm	77070	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:58	dhcpleases		kqueue error: unkown
    Sep 4 23:20:57	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
    Sep 4 23:20:57	dhcpleases		/var/etc/hosts changed size from original!
    Sep 4 23:20:55	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
    Sep 4 23:20:55	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
    Sep 4 23:20:53	check_reload_status		Reloading filter
    Sep 4 23:20:53	php-fpm	77070	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
    Sep 4 23:20:53	php-fpm	77070	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
    Sep 4 23:20:53	php-fpm	77070	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:50	dhcpleases		kqueue error: unkown
    Sep 4 23:20:49	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
    Sep 4 23:20:49	dhcpleases		/var/etc/hosts changed size from original!
    Sep 4 23:20:48	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
    Sep 4 23:20:48	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
    Sep 4 23:20:46	check_reload_status		Reloading filter
    Sep 4 23:20:46	php-fpm	77070	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
    Sep 4 23:20:46	php-fpm	77070	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
    Sep 4 23:20:46	php-fpm	77070	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:43	dhcpleases		kqueue error: unkown
    Sep 4 23:20:41	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
    Sep 4 23:20:41	dhcpleases		/var/etc/hosts changed size from original!
    Sep 4 23:20:40	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
    Sep 4 23:20:40	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
    Sep 4 23:20:39	check_reload_status		Reloading filter
    Sep 4 23:20:39	php-fpm	52380	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
    Sep 4 23:20:39	php-fpm	52380	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
    Sep 4 23:20:39	php-fpm	52380	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:36	dhcpleases		kqueue error: unkown
    Sep 4 23:20:34	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
    Sep 4 23:20:34	dhcpleases		/var/etc/hosts changed size from original!
    Sep 4 23:20:33	php-fpm	52380	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
    Sep 4 23:20:33	php-fpm	52380	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
    Sep 4 23:20:31	check_reload_status		Reloading filter
    Sep 4 23:20:31	php-fpm	52380	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
    Sep 4 23:20:31	php-fpm	52380	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
    Sep 4 23:20:31	php-fpm	52380	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:28	dhcpleases		kqueue error: unkown
    Sep 4 23:20:26	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
    Sep 4 23:20:25	dhcpleases		/var/etc/hosts changed size from original!
    Sep 4 23:20:24	php-fpm	52380	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
    Sep 4 23:20:24	php-fpm	52380	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
    Sep 4 23:20:23	check_reload_status		Reloading filter
    Sep 4 23:20:23	php-fpm	37026	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
    Sep 4 23:20:23	php-fpm	37026	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
    Sep 4 23:20:22	php-fpm	37026	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:20	dhcpleases		kqueue error: unkown
    Sep 4 23:20:17	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
    Sep 4 23:20:17	dhcpleases		/var/etc/hosts changed size from original!
    Sep 4 23:20:16	php-fpm	37026	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
    Sep 4 23:20:16	php-fpm	37026	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
    Sep 4 23:20:15	check_reload_status		Reloading filter
    Sep 4 23:20:14	php-fpm	2335	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
    Sep 4 23:20:14	php-fpm	2335	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
    Sep 4 23:20:14	php-fpm	2335	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:12	dhcpleases		kqueue error: unkown
    Sep 4 23:20:10	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
    Sep 4 23:20:10	dhcpleases		/var/etc/hosts changed size from original!
    Sep 4 23:20:09	php-fpm	2335	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
    Sep 4 23:20:09	php-fpm	2335	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
    Sep 4 23:20:08	check_reload_status		Reloading filter
    Sep 4 23:20:07	php-fpm	75484	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
    Sep 4 23:20:07	php-fpm	75484	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
    Sep 4 23:20:07	php-fpm	75484	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:04	dhcpleases		kqueue error: unkown</hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden> 
    

    System Logs/System/DNS Resolver:

    Sep 4 23:21:45	unbound	2903:0	info: start of service (unbound 1.6.1).
    Sep 4 23:21:44	unbound	2903:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:21:44	unbound	2903:0	info: start of service (unbound 1.6.1).
    Sep 4 23:21:41	unbound	88934:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:21:37	unbound	88934:0	info: start of service (unbound 1.6.1).
    Sep 4 23:21:36	unbound	88934:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:21:36	unbound	88934:0	info: start of service (unbound 1.6.1).
    Sep 4 23:21:32	unbound	60249:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:21:22	unbound	60249:0	info: start of service (unbound 1.6.1).
    Sep 4 23:21:22	unbound	60249:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:21:22	unbound	60249:0	info: start of service (unbound 1.6.1).
    Sep 4 23:21:19	unbound	36047:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:21:14	unbound	36047:0	info: start of service (unbound 1.6.1).
    Sep 4 23:21:13	unbound	36047:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:21:13	unbound	36047:0	info: start of service (unbound 1.6.1).
    Sep 4 23:21:11	unbound	20725:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:21:07	unbound	20725:0	info: start of service (unbound 1.6.1).
    Sep 4 23:21:06	unbound	20725:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:21:06	unbound	20725:0	info: start of service (unbound 1.6.1).
    Sep 4 23:21:03	unbound	8568:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:59	unbound	8568:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:59	unbound	8568:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:58	unbound	8568:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:56	unbound	95239:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:51	unbound	95239:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:50	unbound	95239:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:50	unbound	95239:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:48	unbound	81222:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:43	unbound	81222:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:43	unbound	81222:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:43	unbound	81222:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:40	unbound	68893:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:36	unbound	68893:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:36	unbound	68893:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:36	unbound	68893:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:33	unbound	56144:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:28	unbound	56144:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:28	unbound	56144:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:28	unbound	56144:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:24	unbound	43236:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:21	unbound	43236:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:20	unbound	43236:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:20	unbound	43236:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:16	unbound	11587:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:12	unbound	11587:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:12	unbound	11587:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:12	unbound	11587:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:09	unbound	92464:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:05	unbound	92464:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:04	unbound	92464:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:20:04	unbound	92464:0	info: start of service (unbound 1.6.1).
    Sep 4 23:20:02	unbound	80250:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:19:57	unbound	80250:0	info: start of service (unbound 1.6.1).
    Sep 4 23:19:57	unbound	80250:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:19:57	unbound	80250:0	info: start of service (unbound 1.6.1).
    Sep 4 23:19:53	unbound	64683:0	info: service stopped (unbound 1.6.1).
    Sep 4 23:19:49	unbound	64683:0	info: start of service (unbound 1.6.1).
    
    

    Looks like the firewall thinks the WAN IPv6 address is getting updated by ISP’s DHCP every 10-15 seconds (which I guess is wrong - not sure about that - because their default lease is 3 hours), thus executing the /rc.newwanipv6 script and restarting (according DNS Resolver logs - shouldn’t it be only a -HUP?) and creating problems with internal DNS clients, such as DNS resolution errors or significant slowness while web browsing.

    I would like to understand why Unbound is getting restarted and why pfSense is thinking that WAN’s IPv6 address is getting updated every few seconds.

    I’m not really sure what else could I do, is there any other troubleshoot procedure someone would recommend?

    Thanks
    Rod



  • its normal. Use 2.4

    pfadmin



  • @pfadmin:

    its normal. Use 2.4

    Are you sure ?
    @RoFz:

    The system:
    pfSense 2.3.4-RELEASE (i386)

    I would say : go to 2.3.4-RELEASE-p1 (i386) and wait for a solution. 2.4 will NOT be proposed for "i386" based systems.

    Btw : subject like : dhcp-client and unbound restarting, I've seen that before on the forum, recently.



  • not sure with i386  ;D  But unbound restarts every 15min so you can't use it for real in 2.3.4. Maybe its corrected, but…

    pfadmin



  • Update: yes, IPv4 DNS resolution suffers just as well as IPv6. Web browsing is extremely slow and suffering of recurring 'hiccups' (having to reload pages due to DNS errors).

    Update 2: found a bug report which could be related to this: https://redmine.pfsense.org/issues/7145

    ~~Thanks guys. But, how "normal" would this be? "Normal" as in purposefully developed to accomplish this or "normal" as in "a known software bug"?  :-\

    Unbound it is not restarting every 15 minutes, but every 15 seconds.~~

    Update 3: according to the bug report regarding this problem being fixed in version 2.4 and according to the expected roadmap for this particular version I am basically f**ed!  :'(



  • @RoFz:

    Update 3: according to the bug report regarding this problem being fixed in version 2.4 and according to the expected roadmap for this particular version I am basically f**ed!  :'(

    Much of the 'fix' for this issue was some upstream modifications to dhcp6c to enable it to give proper responses, the fixes were carried out on FreeBSD 11.0 sources, I know as I did them. There are quite substantial differences in the sources for FreeBSD 10.3 and FreeBSD 11.0 dhcp6c client - apart from just this fix, plus a fair amount of code changes required for pfSense itself. As I am just a contributor to the project I have no idea if the pfSense team intend to back-port the changes to FreeBSD 10.3 and pfSense 2.3.*, however I do know I will not be doing any work on earlier versions.

    Nothing goes on forever, it''s maybe time to update the hardware I'm afraid to say.



  • Thank you, marjohn56!

    The problem is that I sold around ten of those Netgate boxes in the past few years to a few customers and I'll have to explain them that we are stuck with IPv4 now. I understand pfSense's move, but I still have that kind of loneliness or betrayal feeling of being 'let go' by a vendor. Pretty much like many other opportunities I had while dealing with Microsoft (which I also resell) and Apple (which I am a customer) when they change or discontinue something without providing a feasible short term alternative to preserve the investment that has already been made.

    Anyways, thanks again for your honest and thorough explanation.

    Best regards!



  • May I ask how old the offending units are?



  • Yes. The last was sold between 2014-2015.



  • I don't suppose you have a gold subscription on any of these devices?



  • Absolutely not.



  • So if I understand correctly, you are re-selling A!ix units you purchased after loading pfSense onto them., and you have never purchased a gold subscription either?

    If this is the case, and I apologize if I have misunderstood, but pfSense/Netgate have not sold you anything, vendor does not apply.

    I think you can see where this is going. :)


  • Rebel Alliance Global Moderator

    So the problem is with the DHCP6C client is it not?  So don't use it.. If you want to rollout ipv6 why does your firewall need to be dhcp to get its IPv6 address?  If your isp will not give you static prefix, then use HE and get a /48.. Rollout IPv6..



  • @johnpoz:

    So the problem is with the DHCP6C client is it not?  So don't use it.. If you want to rollout ipv6 why does your firewall need to be dhcp to get its IPv6 address?  If your isp will not give you static prefix, then use HE and get a /48.. Rollout IPv6..

    It's not only the client, there's a bunch of changes in pfSense 2.4 itself that handle those changes in dhcp6c. It's also not his ISP, but those of the customers he has sold the units to.


  • Rebel Alliance Global Moderator

    I have been running ipv6 and unbound for long time.. Never had any problems with unbound restarting, even back on 2.3.x - but I have been running HE.. pretty much since day one.. I tried using isp but not a fan of track and having my prefix change at the drop of a hat, etc.

    Just thought throw out a possible solution to get up and running on ipv6 if there is a problem when its dhcp.



  • A bit late to the game - but have you looked at using the DNS Forwarder (dnsmasq) instead of DNS Resolver (unbound)? I've been using the DNS Forwarder for quite a few years as it's substantially faster, and I haven't had any issues with IPv6.

    All you need to do is Disable the DNS Resolver Service, and then Enable the DNS Forwarder Service (you have to disable first due to port collisions).

    If you want to benchmark/test, you could always set the DNS Forwarder Service to a different port, and then send dig commands at that ip/port combo.



  • It's worth giving HE a try. Their service is rock solid and it's free. Not to mention they have added lots more endpoints.


  • Galactic Empire Netgate

    @marjohn56:

    So if I understand correctly, you are re-selling A!ix units you purchased after loading pfSense onto them., and you have never purchased a gold subscription either?

    If this is the case, and I apologize if I have misunderstood, but pfSense/Netgate have not sold you anything, vendor does not apply.

    I think you can see where this is going. :)

    I agree with @marjohn56, this has nothing to do with Netgate.

    @RoFz:

    The problem is that I sold around ten of those Netgate boxes in the past few years to a few customers and I'll have to explain them that we are stuck with IPv4 now. I understand pfSense's move, but I still have that kind of loneliness or betrayal feeling of being 'let go' by a vendor. Pretty much like many other opportunities I had while dealing with Microsoft (which I also resell) and Apple (which I am a customer) when they change or discontinue something without providing a feasible short term alternative to preserve the investment that has already been made.

    I understand your frustration however we are not to blame and we certainly didn't "let go" anyone. Alix is a very old platform and along with all of the i386 architecture, it's no longer supported starting from pfSense 2.4. We spent at least a year talking about the upcoming 64 bit requirement, just like we announced the AES-NI requirement earlier this year for future pfSense 2.5. Lastly, Alix boxes we sold were named VK-2D13. Those went EOS in 2014 and EOL in 2015. Once 2.4 is released, security releases for 2.3 will be available for another year. I'm sorry you ended up in this situation, I understand it's frustrating however we did everything we were supposed to do.


  • Netgate Administrator

    Hmm, I have a similar WAN setup here (in the UK) and do not see an issue. Though my box has more than 256MB of RAM. I don't see what looks like a RAM issue there though.

    Can we get any more detail on who your ISP is and what the exact settings your using on WAN are?

    I have seen similar things happen with Unbound failing to start before it is restarted and ending up with a bad or missing PID.

    Steve