pfSense Plus Software Version 23.01 is Now Available for Upgrades

pdavis

Kudos on an overall "smooth like butter" experience during the upgrade, guys and gals. Appreciate the work you put in on this fine product...

SteveITS

@rwurwin can you look at the upgrade log? And/or what does the console show?
There is https://redmine.pfsense.org/issues/13967 for 1100/2100.

rwurwin

@steveits how do I view the readme file

rwurwin

@steveits oops how do I get to the upgrade log

rwurwin

@steveits it went through the upgrade process > saw the green bar > restarted > now have fast flashing blue light on the green circle

SteveITS

@rwurwin https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#upgrade-log

https://docs.netgate.com/pfsense/en/latest/solutions/netgate-2100/connect-to-console.html

If you’re saying you restarted it then you didn’t wait long enough and will likely have to reinstall. Or if it’s the boot loader problem I linked.

https://docs.netgate.com/pfsense/en/latest/solutions/netgate-2100/reinstall-pfsense.html

rwurwin

@steveits thank you for the information

Gertjan

Initially, I wanted to wait until morning.
Like my favorite You-tuber always says "Let Mikey go first ...".

But hey, I've ZFS, so I prepared a 'I was here' point with a click.
Rebooted pfSense for good manners.
Checked available disk space.
Made a extra copy of the config.xml.

I upgraded using the console, option 13, as this shows what happens, my terminal sessions are logged for 'later analyses' if needed.

It was a no brainer.

*** Welcome to Netgate pfSense Plus 23.01-RELEASE (amd64) on pfSense ***

Btw : When I came home yesterday, Youtube wanted me to see this :

pfSense Plus 23.01 Release & Update Details

bingo600

I just upgraded a backup/test machine - Hystou i5 .. Protecli (clone) w. 5 x EMx netcards.
Upgraded wo. a hitch, including all packages

CPU & Mem usage seems to be the same

22.05

23.01

I only have Wan + Mgmt IF connected, so not really a good test.
But it upgraded perfectly.

/Bingo

lpfw

I would say stay away
breaks DNS resolver and pfblocker
nothing but problems
seems to randomly stop working
pcap just says server failure
nothing useful in logs or dns resolver status

have another host that won't accept IPSEC connections

bingo600

@lpfw said in pfSense Plus Software Version 23.01 is Now Available for Upgrades:

I would say stay away
breaks DNS resolver and pfblocker

Unbound seemed to work fine for me, but then i'm just forwarding to my own bind9 servers.
Don't use pfBlocker, i use pihole.

Thanx for the info though.

I'm usually not a first mover, on the new releases.
At job, that would be super bad ...
At home "it would hurt my ears" if SWMBO lost Netflix

But i actually think it was the easiest upgrade i ever had ... Not even zabbix_agent "barfed".

/Bingo

DefenderLLC

@lpfw said in pfSense Plus Software Version 23.01 is Now Available for Upgrades:

I would say stay away
breaks DNS resolver and pfblocker
nothing but problems
seems to randomly stop working
pcap just says server failure
nothing useful in logs or dns resolver status

have another host that won't accept IPSEC connections

Don't forget that after the PFblockerNG package gets updated, which it does as part of this 23.01 upgrade, you have to do a manual force reload in PFblockerNG to update your IP/DNSBL lists.

bmeeks

Upgraded an SG-5100 the day of the 23.01 release without issue. Still running just fine. The only installed optional package is the OpenVPN Client Export package.

DefenderLLC

I have noticed a significant increase in memory utilization since upgrading. On 22.05, my 6100 MAX would usually hover around 18% utilization, but on 23.01 it slowly increases to 38% or more until I reboot it.

I have a fairly simple deployment and the culprit seems to be Unbound and ntop.

HuskerDu

I was quite upset on this upgrade, based on major releases for several components... but I was wrong.

Careful planning, and it went smoothly. 3 days uptime with no issues.

FollyDude 0

After running for about 3 days on 23.01, I had to back out to 22.05. I am running on a Netgate SG-6100. 900 down/100 up Mbps PPPoE connection (UK Zen). Not a complicated configuration, only a few firewall rules.

I was having performance problems that mostly showed as slow web page loads. I thought it might be a DNS problem, but I found nothing conclusive. I spent waaay too much time troubleshooting this, so I decided to back out.

After backing out to 22.05 with a ZFS snapshot, the performance was back to normal.

Just adding my $.02

FollyDude

SteveITS

@follydude-0 Next try, or for others with a similar issue…if you have DNS Resolver set to forward, uncheck the option to use DNSSEC and see if that helps. It did here, I’ve seen a few other posts, Quad9 says it can cause false failures, and Netgate has that tidbit (to disable it) in a troubleshooting doc or other doc page I’m not finding again at the moment.

barber

Hi all,

just my experience: very poor network performance on upgraded version.

Immediately revert back to 22.05

barber

FollyDude 0

@steveits

Thanks for your input, in my case I am not using DNSSEC but DNS over SSL/TLS with Cloudflare DNS servers.

iulianteodor

I would like to know what is the most correct procedure for updating to version 23.01.
I had problems updating with 3 devices. 2 non-Netgate hardware and 1 Netagate 2100.
A. For a non-Netgate hardware and the Netagate 2100 the procedure was as follows.
1. Backup to the configuration, 2. disabled pfblocker (Keep Settings), 3. System/Update/System Update.
At the first pfsense crashed and the Netgate 2100 did not boot.

B. For the second non-Netgate hardware the procedure was as follows.
1. Backup to the configuration, 2. pfblocker enable, 3. System/Update/System Update.
Also pfsense crashed.

I still have about 4 devices to update and I don't know what I should do to avoid situations like this