How long should SG-1100 upgrade take? Update: She dead. Update2: She on life support.
-
@scurrier NTP server is magically back up today. Not sure what was going on with that.
So far, so good after fixing the default gateway problem.
-
NTP can take a while to sync upstream and then start serving data. That's not entirely unexpected.
Steve
-
I'm down again. Not responding to pings and the downstream network operator messeged me that my internal traffic from behind the firewall is leaking onto their network.
-
@ahking19 said in How long should SG-1100 upgrade take? Update: She dead. Update2: She on life support.:
@jlw52761 this is off topic but..
a disaster for me, woefully underpowered<<
sounds like you under spec'd based on your needs. That's your fault not a product fault. The IMIX Traffic/performance info is on the appliances product page.
The site has 25Mbps down and 5Mbps up, only Site2Site IPSec, and DHCP/DNS. Hardly what one would expect to overload the SG-1100, even stripping all this back, the packet forwarding really is not good on the hardware due to the way the Marvell switch is implemented, IMHO The SG-1100 is really only good for the most basic of items, that a Walmart router at half the cost can do. The SG-1100 should really not be a product and I regret spending the $$$'s on it. I spent only slightly more on a x86 board and installed CE on it and that guy does all the heavy lifting such as pfBlocker, IPSec, OpenVPN, WireGuard, PBF/PBR, DNS, Snort, and absolutely takes all that without much more than a brief puff of hot air.
lackluster ARM support is ridiculous<<
what does that mean? You want an ARM CE version so you can run it on Raspberry Pi, etc?
Well, I wouldn't be opposed to a CE version, I get better support from the community to be honest. I had a problem with the SG-1100 that required a reflash as the device was good and well FUBAR'd, and it took almost two days to "prove" to support that I have a valid device and support on said device, even after providing the serial#, Netgate Device ID, and the Netgate Crypto ID. Once the person was "convinced" I had a supported device, it took another couple of days for the support person to figure out how to help me and eventually got ahold of an engineer that was able to provide the IMG file for relfashing. So yeah, lackluster to say the least.
A CE version would enable broader ARM support, possibly on something like an Odroid or LattePanda. There are a number of ARM based SoC's out there with multiple PHY's, which would be perfect.entire ARM based product line is lackluster<<
if you want to make a value/price argument on the ARM product line do that
Just look at the forums, there are a ton of issues around the ARM platform, and these are supposed to fully supported and have no CE version, only a Plus version, so having to turn to the forums for support is really lackluster IMHO. For the price, one can get COTS x86 hardware and go to town.
You are correct, it is off topic, more of a "Here we go again with ARM" rant. -
@jlw52761 I have 50/50 Mbps and pretty much the same services running here minus IPSec and Snort and it barely breaks a sweat.
CPU sits at 2% with occasional spike to 6-7% when PFBlocker updates or I access the WebGUI. I expect Snort or IDS/IPS would be a problem for this device. But then the SG-1100 is a SOHO device and as such IDS/IPS shouldn't apply IMHO.I agree a couple days to get the image file is not good. Not making accuses for customer support but I have friends living in Texas and saw the Netgate blog post about the storm (https://www.netgate.com/blog/snowpocalypse-over-netgate-up-and-running.html) which made for really bad timing of 2.5/21.02 release.
-
@stephenw10 said
It can take quite a long time on the SG-1100 but not 2 hours.
Does that include hanging at "Please wait while the update system initializes"? I am attempting to upgrade from 2.4.4_3 to 21.02 on my SG-1100. I made 2 attempts and waited about 10 minutes each time with the unit hanging at the above message. Do I just need more patience, or is this likely a separate issue?
Just checked conf/upgrade_log and all I see is this.
>>> Updating repositories metadata... failed.Thanks
-
@pzanga said in How long should SG-1100 upgrade take? Update: She dead. Update2: She on life support.:
Does that include hanging at "Please wait while the update system initializes"?
No it doesn't. That should not normally take more than 20s or so.
If it takes longer there is probably some issue. Very occasionally we see the gui lose connection with the process and it upgrades as expected in the background.If you upgrade from the the console menu, via SSH or serial console, you can see exactly what is happening and any errors that are produced. I would recommend upgrading that way if you can though we realise that the vast majority of users user the webgui to upgrade and that is the method we test.
Steve
-
@stephenw10 said in How long should SG-1100 upgrade take? Update: She dead. Update2: She on life support.:
Does that include hanging at "Please wait while the update system initializes"?
No it doesn't. That should not normally take more than 20s or so.
Didn't think so, but thought I would ask to be sure.
If you upgrade from the the console menu, via SSH or serial console, you can see exactly what is happening and any errors that are produced. I would recommend upgrading that way if you can though we realise that the vast majority of users user the webgui to upgrade and that is the method we test.
I think I will go the console route when I attempt to upgrade again. Can't try again until the weekend (can't risk borking things up during the work week). Plus I have seem folks reporting issues with unbound on the SG-1100 after the upgrade, so want to wait a bit to look into that a little more.
Thanks
-
@stephenw10 How do I do the upgrade VIA SSH? I can connect to the SG-1100 via USB and PuTTY but I cannot connect to it via SSH. The system is not booting at all from what I can see in the terminal. Sitting here with nothing but a cellphone hotspot and a lot of work backing up. HELP!!!!
When I try to use PuTTY via USB to run the update, via: pkg install -y pfSense-upgrade this is what I get:
pkg install -y pfSense-upgrade
Updating pfSense-core repository catalogue...
pkg: https://repo.netgate.com/pkg/pfSense_plus-v21_02_aarch64-core/meta.txz: Non-recoverable resolver failure
repository pfSense-core has no meta file, using default settings
pkg: https://repo.netgate.com/pkg/pfSense_plus-v21_02_aarch64-core/packagesite.txz: Non-recoverable resolver failure
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg: https://repo.netgate.com/pkg/pfSense_plus-v21_02_aarch64-pfSense_plus-v21_02/meta.txz: Non-recoverable resolver failure
repository pfSense has no meta file, using default settings
pkg: https://repo.netgate.com/pkg/pfSense_plus-v21_02_aarch64-pfSense_plus-v21_02/packagesite.txz: Non-recoverable resolver failure
Unable to update repository pfSense
Error updating repositories! -
That is a dns failure. Does it have a valid WAN? Can it ping netgate.com?
If you have a backup config just re-install from USB. Open a ticket to get the image and instructions: https://go.netgate.com/
Steve
