Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Unbound service getting restarted every 10 seconds due to rc.newwanipv6 script

    Scheduled Pinned Locked Moved IPv6
    19 Posts 9 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      RoFz
      last edited by

      Hi

      The system:
      pfSense 2.3.4-RELEASE (i386)
      ALIX 2D13 (nanobsd 4 GB, 256 MB RAM)

      WAN Interface:
      IPv4: PPPoE (VDSL2 + VLAN – modem is in bridge mode)
      IPv6: DHCPv6 (with “Request a IPv6 prefix/information through the IPv4 connectivity link” checked – that’s how my ISP works)

      LAN Interface:
      IPv4: static
      IPv6: track interface

      DHCPv6 Server & RA Service:
      All default options (RA Assisted), nothing fancy

      Status:
      IPv4 works (did not notice resolution failures yet)
      IPv6 works (10/10 from http://test-ipv6.com/), but DNS resolution sporadically fails

      System Logs/System/General:

      Sep 4 23:21:36	dhcpleases		kqueue error: unkown
Sep 4 23:21:34	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
Sep 4 23:21:34	dhcpleases		/var/etc/hosts changed size from original!
Sep 4 23:21:32	php-fpm	31134	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
Sep 4 23:21:32	php-fpm	31134	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
Sep 4 23:21:30	check_reload_status		Reloading filter
Sep 4 23:21:30	php-fpm	31134	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
Sep 4 23:21:29	php-fpm	31134	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
Sep 4 23:21:29	php-fpm	31134	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:21:22	dhcpleases		kqueue error: unkown
Sep 4 23:21:20	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
Sep 4 23:21:20	dhcpleases		/var/etc/hosts changed size from original!
Sep 4 23:21:19	php-fpm	31134	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
Sep 4 23:21:19	php-fpm	31134	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
Sep 4 23:21:17	check_reload_status		Reloading filter
Sep 4 23:21:16	php-fpm	31134	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
Sep 4 23:21:16	php-fpm	31134	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
Sep 4 23:21:16	php-fpm	31134	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:21:13	dhcpleases		kqueue error: unkown
Sep 4 23:21:12	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
Sep 4 23:21:12	dhcpleases		/var/etc/hosts changed size from original!
Sep 4 23:21:11	php-fpm	31134	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
Sep 4 23:21:11	php-fpm	31134	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
Sep 4 23:21:09	check_reload_status		Reloading filter
Sep 4 23:21:09	php-fpm	77070	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
Sep 4 23:21:09	php-fpm	77070	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
Sep 4 23:21:09	php-fpm	77070	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:21:06	dhcpleases		kqueue error: unkown
Sep 4 23:21:05	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
Sep 4 23:21:04	dhcpleases		/var/etc/hosts changed size from original!
Sep 4 23:21:03	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
Sep 4 23:21:03	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
Sep 4 23:21:01	check_reload_status		Reloading filter
Sep 4 23:21:01	php-fpm	77070	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
Sep 4 23:21:01	php-fpm	77070	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
Sep 4 23:21:01	php-fpm	77070	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:58	dhcpleases		kqueue error: unkown
Sep 4 23:20:57	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
Sep 4 23:20:57	dhcpleases		/var/etc/hosts changed size from original!
Sep 4 23:20:55	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
Sep 4 23:20:55	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
Sep 4 23:20:53	check_reload_status		Reloading filter
Sep 4 23:20:53	php-fpm	77070	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
Sep 4 23:20:53	php-fpm	77070	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
Sep 4 23:20:53	php-fpm	77070	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:50	dhcpleases		kqueue error: unkown
Sep 4 23:20:49	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
Sep 4 23:20:49	dhcpleases		/var/etc/hosts changed size from original!
Sep 4 23:20:48	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
Sep 4 23:20:48	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
Sep 4 23:20:46	check_reload_status		Reloading filter
Sep 4 23:20:46	php-fpm	77070	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
Sep 4 23:20:46	php-fpm	77070	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
Sep 4 23:20:46	php-fpm	77070	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:43	dhcpleases		kqueue error: unkown
Sep 4 23:20:41	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
Sep 4 23:20:41	dhcpleases		/var/etc/hosts changed size from original!
Sep 4 23:20:40	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
Sep 4 23:20:40	php-fpm	77070	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
Sep 4 23:20:39	check_reload_status		Reloading filter
Sep 4 23:20:39	php-fpm	52380	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
Sep 4 23:20:39	php-fpm	52380	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
Sep 4 23:20:39	php-fpm	52380	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:36	dhcpleases		kqueue error: unkown
Sep 4 23:20:34	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
Sep 4 23:20:34	dhcpleases		/var/etc/hosts changed size from original!
Sep 4 23:20:33	php-fpm	52380	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
Sep 4 23:20:33	php-fpm	52380	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
Sep 4 23:20:31	check_reload_status		Reloading filter
Sep 4 23:20:31	php-fpm	52380	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
Sep 4 23:20:31	php-fpm	52380	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
Sep 4 23:20:31	php-fpm	52380	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:28	dhcpleases		kqueue error: unkown
Sep 4 23:20:26	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
Sep 4 23:20:25	dhcpleases		/var/etc/hosts changed size from original!
Sep 4 23:20:24	php-fpm	52380	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
Sep 4 23:20:24	php-fpm	52380	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
Sep 4 23:20:23	check_reload_status		Reloading filter
Sep 4 23:20:23	php-fpm	37026	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
Sep 4 23:20:23	php-fpm	37026	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
Sep 4 23:20:22	php-fpm	37026	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:20	dhcpleases		kqueue error: unkown
Sep 4 23:20:17	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
Sep 4 23:20:17	dhcpleases		/var/etc/hosts changed size from original!
Sep 4 23:20:16	php-fpm	37026	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
Sep 4 23:20:16	php-fpm	37026	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
Sep 4 23:20:15	check_reload_status		Reloading filter
Sep 4 23:20:14	php-fpm	2335	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
Sep 4 23:20:14	php-fpm	2335	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
Sep 4 23:20:14	php-fpm	2335	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:12	dhcpleases		kqueue error: unkown
Sep 4 23:20:10	dhcpleases		Could not deliver signal HUP to process because its pidfile (/var/run/unbound.pid) does not exist, No such process.
Sep 4 23:20:10	dhcpleases		/var/etc/hosts changed size from original!
Sep 4 23:20:09	php-fpm	2335	/rc.newwanipv6: rc.newwanipv6: on (IP address: <hidden>) (interface: wan) (real interface: pppoe0).
Sep 4 23:20:09	php-fpm	2335	/rc.newwanipv6: rc.newwanipv6: Info: starting on pppoe0.
Sep 4 23:20:08	check_reload_status		Reloading filter
Sep 4 23:20:07	php-fpm	75484	/rc.newwanipv6: Removing static route for monitor fe80:: <hidden>and adding a new route through fe80::<hidden>%pppoe0
Sep 4 23:20:07	php-fpm	75484	/rc.newwanipv6: ROUTING: setting IPv6 default route to fe80::<hidden>%pppoe0
Sep 4 23:20:07	php-fpm	75484	/rc.newwanipv6: ROUTING: setting default route to <hidden>Sep 4 23:20:04	dhcpleases		kqueue error: unkown</hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden></hidden>

      System Logs/System/DNS Resolver:

      Sep 4 23:21:45	unbound	2903:0	info: start of service (unbound 1.6.1).
Sep 4 23:21:44	unbound	2903:0	info: service stopped (unbound 1.6.1).
Sep 4 23:21:44	unbound	2903:0	info: start of service (unbound 1.6.1).
Sep 4 23:21:41	unbound	88934:0	info: service stopped (unbound 1.6.1).
Sep 4 23:21:37	unbound	88934:0	info: start of service (unbound 1.6.1).
Sep 4 23:21:36	unbound	88934:0	info: service stopped (unbound 1.6.1).
Sep 4 23:21:36	unbound	88934:0	info: start of service (unbound 1.6.1).
Sep 4 23:21:32	unbound	60249:0	info: service stopped (unbound 1.6.1).
Sep 4 23:21:22	unbound	60249:0	info: start of service (unbound 1.6.1).
Sep 4 23:21:22	unbound	60249:0	info: service stopped (unbound 1.6.1).
Sep 4 23:21:22	unbound	60249:0	info: start of service (unbound 1.6.1).
Sep 4 23:21:19	unbound	36047:0	info: service stopped (unbound 1.6.1).
Sep 4 23:21:14	unbound	36047:0	info: start of service (unbound 1.6.1).
Sep 4 23:21:13	unbound	36047:0	info: service stopped (unbound 1.6.1).
Sep 4 23:21:13	unbound	36047:0	info: start of service (unbound 1.6.1).
Sep 4 23:21:11	unbound	20725:0	info: service stopped (unbound 1.6.1).
Sep 4 23:21:07	unbound	20725:0	info: start of service (unbound 1.6.1).
Sep 4 23:21:06	unbound	20725:0	info: service stopped (unbound 1.6.1).
Sep 4 23:21:06	unbound	20725:0	info: start of service (unbound 1.6.1).
Sep 4 23:21:03	unbound	8568:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:59	unbound	8568:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:59	unbound	8568:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:58	unbound	8568:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:56	unbound	95239:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:51	unbound	95239:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:50	unbound	95239:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:50	unbound	95239:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:48	unbound	81222:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:43	unbound	81222:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:43	unbound	81222:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:43	unbound	81222:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:40	unbound	68893:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:36	unbound	68893:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:36	unbound	68893:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:36	unbound	68893:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:33	unbound	56144:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:28	unbound	56144:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:28	unbound	56144:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:28	unbound	56144:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:24	unbound	43236:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:21	unbound	43236:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:20	unbound	43236:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:20	unbound	43236:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:16	unbound	11587:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:12	unbound	11587:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:12	unbound	11587:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:12	unbound	11587:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:09	unbound	92464:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:05	unbound	92464:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:04	unbound	92464:0	info: service stopped (unbound 1.6.1).
Sep 4 23:20:04	unbound	92464:0	info: start of service (unbound 1.6.1).
Sep 4 23:20:02	unbound	80250:0	info: service stopped (unbound 1.6.1).
Sep 4 23:19:57	unbound	80250:0	info: start of service (unbound 1.6.1).
Sep 4 23:19:57	unbound	80250:0	info: service stopped (unbound 1.6.1).
Sep 4 23:19:57	unbound	80250:0	info: start of service (unbound 1.6.1).
Sep 4 23:19:53	unbound	64683:0	info: service stopped (unbound 1.6.1).
Sep 4 23:19:49	unbound	64683:0	info: start of service (unbound 1.6.1).

      Looks like the firewall thinks the WAN IPv6 address is getting updated by ISP’s DHCP every 10-15 seconds (which I guess is wrong - not sure about that - because their default lease is 3 hours), thus executing the /rc.newwanipv6 script and restarting (according DNS Resolver logs - shouldn’t it be only a -HUP?) and creating problems with internal DNS clients, such as DNS resolution errors or significant slowness while web browsing.

      I would like to understand why Unbound is getting restarted and why pfSense is thinking that WAN’s IPv6 address is getting updated every few seconds.

      I’m not really sure what else could I do, is there any other troubleshoot procedure someone would recommend?

      Thanks
      Rod

      1 Reply Last reply Reply Quote 0
      • P
        pfadmin
        last edited by

        its normal. Use 2.4

        pfadmin

        1 Reply Last reply Reply Quote 0
        • GertjanG
          Gertjan
          last edited by

          @pfadmin:

          its normal. Use 2.4

          Are you sure ?
          @RoFz:

          The system:
          pfSense 2.3.4-RELEASE (i386)

          I would say : go to 2.3.4-RELEASE-p1 (i386) and wait for a solution. 2.4 will NOT be proposed for "i386" based systems.

          Btw : subject like : dhcp-client and unbound restarting, I've seen that before on the forum, recently.

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          1 Reply Last reply Reply Quote 0
          • P
            pfadmin
            last edited by

            not sure with i386  ;D  But unbound restarts every 15min so you can't use it for real in 2.3.4. Maybe its corrected, but…

            pfadmin

            1 Reply Last reply Reply Quote 0
            • R
              RoFz
              last edited by

              Update: yes, IPv4 DNS resolution suffers just as well as IPv6. Web browsing is extremely slow and suffering of recurring 'hiccups' (having to reload pages due to DNS errors).

              Update 2: found a bug report which could be related to this: https://redmine.pfsense.org/issues/7145

              ~~Thanks guys. But, how "normal" would this be? "Normal" as in purposefully developed to accomplish this or "normal" as in "a known software bug"?  :-\

              Unbound it is not restarting every 15 minutes, but every 15 seconds.~~

              Update 3: according to the bug report regarding this problem being fixed in version 2.4 and according to the expected roadmap for this particular version I am basically f**ed!  :'(

              1 Reply Last reply Reply Quote 0
              • ?
                Guest
                last edited by

                @RoFz:

                Update 3: according to the bug report regarding this problem being fixed in version 2.4 and according to the expected roadmap for this particular version I am basically f**ed!  :'(

                Much of the 'fix' for this issue was some upstream modifications to dhcp6c to enable it to give proper responses, the fixes were carried out on FreeBSD 11.0 sources, I know as I did them. There are quite substantial differences in the sources for FreeBSD 10.3 and FreeBSD 11.0 dhcp6c client - apart from just this fix, plus a fair amount of code changes required for pfSense itself. As I am just a contributor to the project I have no idea if the pfSense team intend to back-port the changes to FreeBSD 10.3 and pfSense 2.3.*, however I do know I will not be doing any work on earlier versions.

                Nothing goes on forever, it''s maybe time to update the hardware I'm afraid to say.

                1 Reply Last reply Reply Quote 0
                • R
                  RoFz
                  last edited by

                  Thank you, marjohn56!

                  The problem is that I sold around ten of those Netgate boxes in the past few years to a few customers and I'll have to explain them that we are stuck with IPv4 now. I understand pfSense's move, but I still have that kind of loneliness or betrayal feeling of being 'let go' by a vendor. Pretty much like many other opportunities I had while dealing with Microsoft (which I also resell) and Apple (which I am a customer) when they change or discontinue something without providing a feasible short term alternative to preserve the investment that has already been made.

                  Anyways, thanks again for your honest and thorough explanation.

                  Best regards!

                  1 Reply Last reply Reply Quote 0
                  • ?
                    Guest
                    last edited by

                    May I ask how old the offending units are?

                    1 Reply Last reply Reply Quote 0
                    • R
                      RoFz
                      last edited by

                      Yes. The last was sold between 2014-2015.

                      1 Reply Last reply Reply Quote 0
                      • ?
                        Guest
                        last edited by

                        I don't suppose you have a gold subscription on any of these devices?

                        1 Reply Last reply Reply Quote 0
                        • R
                          RoFz
                          last edited by

                          Absolutely not.

                          1 Reply Last reply Reply Quote 0
                          • ?
                            Guest
                            last edited by

                            So if I understand correctly, you are re-selling A!ix units you purchased after loading pfSense onto them., and you have never purchased a gold subscription either?

                            If this is the case, and I apologize if I have misunderstood, but pfSense/Netgate have not sold you anything, vendor does not apply.

                            I think you can see where this is going. :)

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              So the problem is with the DHCP6C client is it not?  So don't use it.. If you want to rollout ipv6 why does your firewall need to be dhcp to get its IPv6 address?  If your isp will not give you static prefix, then use HE and get a /48.. Rollout IPv6..

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • ?
                                Guest
                                last edited by

                                @johnpoz:

                                So the problem is with the DHCP6C client is it not?  So don't use it.. If you want to rollout ipv6 why does your firewall need to be dhcp to get its IPv6 address?  If your isp will not give you static prefix, then use HE and get a /48.. Rollout IPv6..

                                It's not only the client, there's a bunch of changes in pfSense 2.4 itself that handle those changes in dhcp6c. It's also not his ISP, but those of the customers he has sold the units to.

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by

                                  I have been running ipv6 and unbound for long time.. Never had any problems with unbound restarting, even back on 2.3.x - but I have been running HE.. pretty much since day one.. I tried using isp but not a fan of track and having my prefix change at the drop of a hat, etc.

                                  Just thought throw out a possible solution to get up and running on ipv6 if there is a problem when its dhcp.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • B
                                    bts4
                                    last edited by

                                    A bit late to the game - but have you looked at using the DNS Forwarder (dnsmasq) instead of DNS Resolver (unbound)? I've been using the DNS Forwarder for quite a few years as it's substantially faster, and I haven't had any issues with IPv6.

                                    All you need to do is Disable the DNS Resolver Service, and then Enable the DNS Forwarder Service (you have to disable first due to port collisions).

                                    If you want to benchmark/test, you could always set the DNS Forwarder Service to a different port, and then send dig commands at that ip/port combo.

                                    1 Reply Last reply Reply Quote 0
                                    • B
                                      bimmerdriver
                                      last edited by

                                      It's worth giving HE a try. Their service is rock solid and it's free. Not to mention they have added lots more endpoints.

                                      1 Reply Last reply Reply Quote 0
                                      • ivorI
                                        ivor
                                        last edited by

                                        @marjohn56:

                                        So if I understand correctly, you are re-selling A!ix units you purchased after loading pfSense onto them., and you have never purchased a gold subscription either?

                                        If this is the case, and I apologize if I have misunderstood, but pfSense/Netgate have not sold you anything, vendor does not apply.

                                        I think you can see where this is going. :)

                                        I agree with @marjohn56, this has nothing to do with Netgate.

                                        @RoFz:

                                        The problem is that I sold around ten of those Netgate boxes in the past few years to a few customers and I'll have to explain them that we are stuck with IPv4 now. I understand pfSense's move, but I still have that kind of loneliness or betrayal feeling of being 'let go' by a vendor. Pretty much like many other opportunities I had while dealing with Microsoft (which I also resell) and Apple (which I am a customer) when they change or discontinue something without providing a feasible short term alternative to preserve the investment that has already been made.

                                        I understand your frustration however we are not to blame and we certainly didn't "let go" anyone. Alix is a very old platform and along with all of the i386 architecture, it's no longer supported starting from pfSense 2.4. We spent at least a year talking about the upcoming 64 bit requirement, just like we announced the AES-NI requirement earlier this year for future pfSense 2.5. Lastly, Alix boxes we sold were named VK-2D13. Those went EOS in 2014 and EOL in 2015. Once 2.4 is released, security releases for 2.3 will be available for another year. I'm sorry you ended up in this situation, I understand it's frustrating however we did everything we were supposed to do.

                                        Need help fast? Our support is available 24/7 https://www.netgate.com/support/

                                        1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          Hmm, I have a similar WAN setup here (in the UK) and do not see an issue. Though my box has more than 256MB of RAM. I don't see what looks like a RAM issue there though.

                                          Can we get any more detail on who your ISP is and what the exact settings your using on WAN are?

                                          I have seen similar things happen with Unbound failing to start before it is restarted and ending up with a bad or missing PID.

                                          Steve

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.