Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    KEA DHCP missing "Register DHCP leases in DNS Resolver..."

    Scheduled Pinned Locked Moved DHCP and DNS
    115 Posts 37 Posters 43.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JonathanLeeJ
      JonathanLee @Gertjan
      last edited by

      @Gertjan Yes again CE starts with a different subfolder over Plus I think patches show a different root folder

      Make sure to upvote

      1 Reply Last reply Reply Quote 0
      • V
        Vollans @Gertjan
        last edited by

        @Gertjan said in KEA DHCP missing "Register DHCP leases in DNS Resolver...":

        Plus has also ZFS file system kernel module loaded, so it can use ZFS as an option.

        As does CE. Plus has the tools for managing the ZFS system via the front end included, though, as a Plus.

        1 Reply Last reply Reply Quote 0
        • QinnQ
          Qinn
          last edited by

          Maybe install System_Patches, there are 2 Kea patches and 2 DNS resolver.

          Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
          Firmware: Latest-stable-pfSense CE (amd64)
          Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

          4 1 Reply Last reply Reply Quote 1
          • 4
            4o4rh @Qinn
            last edited by

            @Qinn how do you find these two patches

            S QinnQ 2 Replies Last reply Reply Quote 0
            • S
              SteveITS Galactic Empire @4o4rh
              last edited by

              @4o4rh
              https://docs.netgate.com/pfsense/en/latest/development/system-patches.html

              Also of note, since the security notes are not yet in the 23.04 release notes:
              https://forum.netgate.com/topic/187622/system-patches-package-v2-2-10_1

              Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
              When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
              Upvote ๐Ÿ‘ helpful posts!

              1 Reply Last reply Reply Quote 2
              • QinnQ
                Qinn @4o4rh
                last edited by Qinn

                @4o4rh as @SteveITS already posted the answer, install system patches, then go to System -> Patches and apply them. More to read here https://www.netgate.com/blog/using-pfsense-software-system-patches .

                Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                Firmware: Latest-stable-pfSense CE (amd64)
                Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                4 1 Reply Last reply Reply Quote 0
                • 4
                  4o4rh @Qinn
                  last edited by

                  @Qinn doesn't really answer the question. Where do we get a list of the patches available and what they are for?

                  1 Reply Last reply Reply Quote 0
                  • QinnQ
                    Qinn
                    last edited by Qinn

                    Install this package, you see a list recommended system patches for Netgate pfSense and for each patch there is a description what it does or do. After you installed the package see this list and you can choose to apply each one of them individually (even revert most of them if you for some reason want to) or change nothing and remove the whole package, as in the link above this package is recommended by Netgate.

                    Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                    Firmware: Latest-stable-pfSense CE (amd64)
                    Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                    4 1 Reply Last reply Reply Quote 0
                    • 4
                      4o4rh @Qinn
                      last edited by

                      @Qinn no recommendations
                      f5f53923-d540-409a-b1ba-b6aaf59c536f-image.png

                      S 1 Reply Last reply Reply Quote 0
                      • S
                        SteveITS Galactic Empire @4o4rh
                        last edited by

                        @4o4rh what version are you on? 24.03 has none because their code is included.

                        Typically patches appear either a few weeks/months after a release, to fix bugs, or else they dropped a bunch of them for 2.7.2/23.09 after 24.03 was released because there are security fixes they backported for 2.7:2,
                        https://forum.netgate.com/topic/187622/system-patches-package-v2-2-10_1

                        Patches appear after the package is updated not on their own.

                        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                        Upvote ๐Ÿ‘ helpful posts!

                        1 Reply Last reply Reply Quote 0
                        • QinnQ
                          Qinn
                          last edited by Qinn

                          Same question here ;)

                          Btw I am on 2.7.2 CE ( as is in my signature) and use System_Patches v2.2.10_1, updated recently, say last week and as you can see patches are sane to install, as like this example https://redmine.pfsense.org/issues/14991 is target for the not released pfSense version 2.8.0

                          [2.7.2-RELEASE][root@pfSense.localdomain]/root: pkg info pfSense-pkg-System_Patches-2.2.10_1
                          pfSense-pkg-System_Patches-2.2.10_1
                          Name           : pfSense-pkg-System_Patches
                          Version        : 2.2.10_1
                          Installed on   : Wed Apr 24 10:50:01 2024 CEST
                          Origin         : sysutils/pfSense-pkg-System_Patches
                          Architecture   : FreeBSD:14:amd64
                          Prefix         : /usr/local
                          Categories     : sysutils
                          

                          Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                          Firmware: Latest-stable-pfSense CE (amd64)
                          Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                          1 Reply Last reply Reply Quote 0
                          • maphilli14M
                            maphilli14
                            last edited by

                            I somehow got burned by this too. No, I do not read release notes, I just trust that the latest and greatest firmware protects my family's network. I had some performance issues on my ISP so rebooted everything to try to fix and it took me several hours to get to a root cause. I am sad, but happy to have it all back up and running nicely. Next time I will be more leery!

                            1 Reply Last reply Reply Quote 0
                            • T
                              tagwolf
                              last edited by

                              It's been well over a year right? Still waiting. I would be very surprised if this was that hard to integrate considering half the code is already written for the DHCP half.

                              1 Reply Last reply Reply Quote 0
                              • L
                                ldaponte
                                last edited by ldaponte

                                Glad I found this thread. I was trying to figure out why DHCP leases weren't resolvable on my home network when they once were. Forgot that I had cut over to KEA DHCP days ago. Reverted to ISC DHCP and checked "Ignore Deprecation Warning" - all better now.

                                1 Reply Last reply Reply Quote 1
                                • B
                                  bson
                                  last edited by

                                  I too followed the EOL suggestion and switch - and this is a total mess. How can I back this change out, I see nothing to switch back!!!

                                  How can you POSSIBLY suggest this dysfunctional nonsense as an alternative? You've had this out for what, almost a year now - and it's still totally broken.

                                  CAN YOU FIX YOUR BROKEN SH*T?!

                                  S cmcdonaldC 2 Replies Last reply Reply Quote 1
                                  • S
                                    SteveITS Galactic Empire @bson
                                    last edited by

                                    @bson https://docs.netgate.com/pfsense/en/latest/releases/2-7-1.html#kea-dhcp-server-feature-preview-now-available

                                    "Administrators can easily switch between ISC DHCPD and Kea by navigating to System > Advanced, Networking tab and changing the new Server Backend setting in the DHCP Options section."

                                    The wording in pfSense about ISC DHCP is a bit misleading but Kea is in "feature preview" a.k.a. alpha/beta/whatever.

                                    Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                    When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                    Upvote ๐Ÿ‘ helpful posts!

                                    B 1 Reply Last reply Reply Quote 0
                                    • cmcdonaldC
                                      cmcdonald Netgate Developer @bson
                                      last edited by

                                      The current goal is to have Kea at feature parity with ISC DHCP by the end of the year, then one release with Kea being optional, another release with Kea being the default for new installs, and finally another release to completely remove ISC DHCP entirely.

                                      Need help fast? https://www.netgate.com/support

                                      1 Reply Last reply Reply Quote 3
                                      • B
                                        bson @SteveITS
                                        last edited by bson

                                        @SteveITS I switched it back but it still wouldn't resolve. I don't know what fixed it, perhaps DNS caches just had to expire, or my poking around in DDNS options (we don't use DDNS) fixed it. I think I enabled the DDNS host registration option without overall enabling DDNS. It's not clear if that has any effect or not, but after a while things were working again. Famous last words! Without it being at feature parity I think it's fine to as for testing feedback, but there shouldn't be a nag about it being deprecated. This suggests a need to migrate. It should also warn about a lack of feature parity, IMO.

                                        B cmcdonaldC 2 Replies Last reply Reply Quote 1
                                        • B
                                          bson @bson
                                          last edited by

                                          Oh, I think I know why it took a while to return to normal: the migration wipes the existing leases, and it takes a while for clients to discover this and renew. Until that happens the client identifiers aren't going to be injected into DNS.

                                          1 Reply Last reply Reply Quote 0
                                          • cmcdonaldC
                                            cmcdonald Netgate Developer @bson
                                            last edited by cmcdonald

                                            @bson said in KEA DHCP missing "Register DHCP leases in DNS Resolver...":

                                            This suggests a need to migrate. It should also warn about a lack of feature parity, IMO.

                                            That's fair. The current warning definitely has a "the sky is falling" tone to it, which it certainly isn't.

                                            Need help fast? https://www.netgate.com/support

                                            J 1 Reply Last reply Reply Quote 6
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.