• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

KEA DHCP missing "Register DHCP leases in DNS Resolver..."

Scheduled Pinned Locked Moved DHCP and DNS
115 Posts 37 Posters 43.3k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J
    JonathanLee @Gertjan
    last edited by Apr 14, 2024, 6:36 PM

    @Gertjan Yes again CE starts with a different subfolder over Plus I think patches show a different root folder

    Make sure to upvote

    1 Reply Last reply Reply Quote 0
    • V
      Vollans @Gertjan
      last edited by Apr 14, 2024, 8:22 PM

      @Gertjan said in KEA DHCP missing "Register DHCP leases in DNS Resolver...":

      Plus has also ZFS file system kernel module loaded, so it can use ZFS as an option.

      As does CE. Plus has the tools for managing the ZFS system via the front end included, though, as a Plus.

      1 Reply Last reply Reply Quote 0
      • Q
        Qinn
        last edited by Apr 24, 2024, 8:53 AM

        Maybe install System_Patches, there are 2 Kea patches and 2 DNS resolver.

        Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
        Firmware: Latest-stable-pfSense CE (amd64)
        Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

        4 1 Reply Last reply Apr 26, 2024, 7:17 AM Reply Quote 1
        • 4
          4o4rh @Qinn
          last edited by Apr 26, 2024, 7:17 AM

          @Qinn how do you find these two patches

          S Q 2 Replies Last reply Apr 26, 2024, 1:15 PM Reply Quote 0
          • S
            SteveITS Galactic Empire @4o4rh
            last edited by Apr 26, 2024, 1:15 PM

            @4o4rh
            https://docs.netgate.com/pfsense/en/latest/development/system-patches.html

            Also of note, since the security notes are not yet in the 23.04 release notes:
            https://forum.netgate.com/topic/187622/system-patches-package-v2-2-10_1

            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
            Upvote 👍 helpful posts!

            1 Reply Last reply Reply Quote 2
            • Q
              Qinn @4o4rh
              last edited by Qinn Apr 27, 2024, 10:18 AM Apr 27, 2024, 9:07 AM

              @4o4rh as @SteveITS already posted the answer, install system patches, then go to System -> Patches and apply them. More to read here https://www.netgate.com/blog/using-pfsense-software-system-patches .

              Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
              Firmware: Latest-stable-pfSense CE (amd64)
              Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

              4 1 Reply Last reply Apr 27, 2024, 10:41 AM Reply Quote 0
              • 4
                4o4rh @Qinn
                last edited by Apr 27, 2024, 10:41 AM

                @Qinn doesn't really answer the question. Where do we get a list of the patches available and what they are for?

                1 Reply Last reply Reply Quote 0
                • Q
                  Qinn
                  last edited by Qinn Apr 27, 2024, 12:49 PM Apr 27, 2024, 12:45 PM

                  Install this package, you see a list recommended system patches for Netgate pfSense and for each patch there is a description what it does or do. After you installed the package see this list and you can choose to apply each one of them individually (even revert most of them if you for some reason want to) or change nothing and remove the whole package, as in the link above this package is recommended by Netgate.

                  Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                  Firmware: Latest-stable-pfSense CE (amd64)
                  Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                  4 1 Reply Last reply Apr 27, 2024, 12:50 PM Reply Quote 0
                  • 4
                    4o4rh @Qinn
                    last edited by Apr 27, 2024, 12:50 PM

                    @Qinn no recommendations
                    f5f53923-d540-409a-b1ba-b6aaf59c536f-image.png

                    S 1 Reply Last reply Apr 27, 2024, 1:10 PM Reply Quote 0
                    • S
                      SteveITS Galactic Empire @4o4rh
                      last edited by Apr 27, 2024, 1:10 PM

                      @4o4rh what version are you on? 24.03 has none because their code is included.

                      Typically patches appear either a few weeks/months after a release, to fix bugs, or else they dropped a bunch of them for 2.7.2/23.09 after 24.03 was released because there are security fixes they backported for 2.7:2,
                      https://forum.netgate.com/topic/187622/system-patches-package-v2-2-10_1

                      Patches appear after the package is updated not on their own.

                      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                      Upvote 👍 helpful posts!

                      1 Reply Last reply Reply Quote 0
                      • Q
                        Qinn
                        last edited by Qinn Apr 27, 2024, 2:16 PM Apr 27, 2024, 1:26 PM

                        Same question here ;)

                        Btw I am on 2.7.2 CE ( as is in my signature) and use System_Patches v2.2.10_1, updated recently, say last week and as you can see patches are sane to install, as like this example https://redmine.pfsense.org/issues/14991 is target for the not released pfSense version 2.8.0

                        [2.7.2-RELEASE][root@pfSense.localdomain]/root: pkg info pfSense-pkg-System_Patches-2.2.10_1
                        pfSense-pkg-System_Patches-2.2.10_1
                        Name           : pfSense-pkg-System_Patches
                        Version        : 2.2.10_1
                        Installed on   : Wed Apr 24 10:50:01 2024 CEST
                        Origin         : sysutils/pfSense-pkg-System_Patches
                        Architecture   : FreeBSD:14:amd64
                        Prefix         : /usr/local
                        Categories     : sysutils
                        

                        Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                        Firmware: Latest-stable-pfSense CE (amd64)
                        Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                        1 Reply Last reply Reply Quote 0
                        • M
                          maphilli14
                          last edited by Jun 7, 2024, 6:04 PM

                          I somehow got burned by this too. No, I do not read release notes, I just trust that the latest and greatest firmware protects my family's network. I had some performance issues on my ISP so rebooted everything to try to fix and it took me several hours to get to a root cause. I am sad, but happy to have it all back up and running nicely. Next time I will be more leery!

                          1 Reply Last reply Reply Quote 0
                          • T
                            tagwolf
                            last edited by Jul 25, 2024, 1:30 AM

                            It's been well over a year right? Still waiting. I would be very surprised if this was that hard to integrate considering half the code is already written for the DHCP half.

                            1 Reply Last reply Reply Quote 0
                            • L
                              ldaponte
                              last edited by ldaponte Jul 26, 2024, 10:34 PM Jul 26, 2024, 10:33 PM

                              Glad I found this thread. I was trying to figure out why DHCP leases weren't resolvable on my home network when they once were. Forgot that I had cut over to KEA DHCP days ago. Reverted to ISC DHCP and checked "Ignore Deprecation Warning" - all better now.

                              1 Reply Last reply Reply Quote 1
                              • B
                                bson
                                last edited by Sep 11, 2024, 4:41 PM

                                I too followed the EOL suggestion and switch - and this is a total mess. How can I back this change out, I see nothing to switch back!!!

                                How can you POSSIBLY suggest this dysfunctional nonsense as an alternative? You've had this out for what, almost a year now - and it's still totally broken.

                                CAN YOU FIX YOUR BROKEN SH*T?!

                                S cmcdonaldC 2 Replies Last reply Sep 11, 2024, 4:53 PM Reply Quote 1
                                • S
                                  SteveITS Galactic Empire @bson
                                  last edited by Sep 11, 2024, 4:53 PM

                                  @bson https://docs.netgate.com/pfsense/en/latest/releases/2-7-1.html#kea-dhcp-server-feature-preview-now-available

                                  "Administrators can easily switch between ISC DHCPD and Kea by navigating to System > Advanced, Networking tab and changing the new Server Backend setting in the DHCP Options section."

                                  The wording in pfSense about ISC DHCP is a bit misleading but Kea is in "feature preview" a.k.a. alpha/beta/whatever.

                                  Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                  When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                  Upvote 👍 helpful posts!

                                  B 1 Reply Last reply Sep 11, 2024, 6:21 PM Reply Quote 0
                                  • cmcdonaldC
                                    cmcdonald Netgate Developer @bson
                                    last edited by Sep 11, 2024, 5:54 PM

                                    The current goal is to have Kea at feature parity with ISC DHCP by the end of the year, then one release with Kea being optional, another release with Kea being the default for new installs, and finally another release to completely remove ISC DHCP entirely.

                                    Need help fast? https://www.netgate.com/support

                                    1 Reply Last reply Reply Quote 3
                                    • B
                                      bson @SteveITS
                                      last edited by bson Sep 11, 2024, 6:21 PM Sep 11, 2024, 6:21 PM

                                      @SteveITS I switched it back but it still wouldn't resolve. I don't know what fixed it, perhaps DNS caches just had to expire, or my poking around in DDNS options (we don't use DDNS) fixed it. I think I enabled the DDNS host registration option without overall enabling DDNS. It's not clear if that has any effect or not, but after a while things were working again. Famous last words! Without it being at feature parity I think it's fine to as for testing feedback, but there shouldn't be a nag about it being deprecated. This suggests a need to migrate. It should also warn about a lack of feature parity, IMO.

                                      B cmcdonaldC 2 Replies Last reply Sep 11, 2024, 6:28 PM Reply Quote 1
                                      • B
                                        bson @bson
                                        last edited by Sep 11, 2024, 6:28 PM

                                        Oh, I think I know why it took a while to return to normal: the migration wipes the existing leases, and it takes a while for clients to discover this and renew. Until that happens the client identifiers aren't going to be injected into DNS.

                                        1 Reply Last reply Reply Quote 0
                                        • cmcdonaldC
                                          cmcdonald Netgate Developer @bson
                                          last edited by cmcdonald Sep 11, 2024, 6:33 PM Sep 11, 2024, 6:32 PM

                                          @bson said in KEA DHCP missing "Register DHCP leases in DNS Resolver...":

                                          This suggests a need to migrate. It should also warn about a lack of feature parity, IMO.

                                          That's fair. The current warning definitely has a "the sky is falling" tone to it, which it certainly isn't.

                                          Need help fast? https://www.netgate.com/support

                                          J 1 Reply Last reply Sep 24, 2024, 7:38 PM Reply Quote 6
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received