Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    KEA DHCP missing "Register DHCP leases in DNS Resolver..."

    Scheduled Pinned Locked Moved DHCP and DNS
    126 Posts 41 Posters 49.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      SteveITS Galactic Empire @4o4rh
      last edited by

      @4o4rh
      https://docs.netgate.com/pfsense/en/latest/development/system-patches.html

      Also of note, since the security notes are not yet in the 23.04 release notes:
      https://forum.netgate.com/topic/187622/system-patches-package-v2-2-10_1

      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
      Upvote ๐Ÿ‘ helpful posts!

      1 Reply Last reply Reply Quote 2
      • QinnQ
        Qinn @4o4rh
        last edited by Qinn

        @4o4rh as @SteveITS already posted the answer, install system patches, then go to System -> Patches and apply them. More to read here https://www.netgate.com/blog/using-pfsense-software-system-patches .

        Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
        Firmware: Latest-stable-pfSense CE (amd64)
        Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

        4 1 Reply Last reply Reply Quote 0
        • 4
          4o4rh @Qinn
          last edited by

          @Qinn doesn't really answer the question. Where do we get a list of the patches available and what they are for?

          1 Reply Last reply Reply Quote 0
          • QinnQ
            Qinn
            last edited by Qinn

            Install this package, you see a list recommended system patches for Netgate pfSense and for each patch there is a description what it does or do. After you installed the package see this list and you can choose to apply each one of them individually (even revert most of them if you for some reason want to) or change nothing and remove the whole package, as in the link above this package is recommended by Netgate.

            Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
            Firmware: Latest-stable-pfSense CE (amd64)
            Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

            4 1 Reply Last reply Reply Quote 0
            • 4
              4o4rh @Qinn
              last edited by

              @Qinn no recommendations
              f5f53923-d540-409a-b1ba-b6aaf59c536f-image.png

              S 1 Reply Last reply Reply Quote 0
              • S
                SteveITS Galactic Empire @4o4rh
                last edited by

                @4o4rh what version are you on? 24.03 has none because their code is included.

                Typically patches appear either a few weeks/months after a release, to fix bugs, or else they dropped a bunch of them for 2.7.2/23.09 after 24.03 was released because there are security fixes they backported for 2.7:2,
                https://forum.netgate.com/topic/187622/system-patches-package-v2-2-10_1

                Patches appear after the package is updated not on their own.

                Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                Upvote ๐Ÿ‘ helpful posts!

                1 Reply Last reply Reply Quote 0
                • QinnQ
                  Qinn
                  last edited by Qinn

                  Same question here ;)

                  Btw I am on 2.7.2 CE ( as is in my signature) and use System_Patches v2.2.10_1, updated recently, say last week and as you can see patches are sane to install, as like this example https://redmine.pfsense.org/issues/14991 is target for the not released pfSense version 2.8.0

                  [2.7.2-RELEASE][root@pfSense.localdomain]/root: pkg info pfSense-pkg-System_Patches-2.2.10_1
                  pfSense-pkg-System_Patches-2.2.10_1
                  Name           : pfSense-pkg-System_Patches
                  Version        : 2.2.10_1
                  Installed on   : Wed Apr 24 10:50:01 2024 CEST
                  Origin         : sysutils/pfSense-pkg-System_Patches
                  Architecture   : FreeBSD:14:amd64
                  Prefix         : /usr/local
                  Categories     : sysutils
                  

                  Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                  Firmware: Latest-stable-pfSense CE (amd64)
                  Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                  1 Reply Last reply Reply Quote 0
                  • maphilli14M
                    maphilli14
                    last edited by

                    I somehow got burned by this too. No, I do not read release notes, I just trust that the latest and greatest firmware protects my family's network. I had some performance issues on my ISP so rebooted everything to try to fix and it took me several hours to get to a root cause. I am sad, but happy to have it all back up and running nicely. Next time I will be more leery!

                    1 Reply Last reply Reply Quote 0
                    • T
                      tagwolf
                      last edited by

                      It's been well over a year right? Still waiting. I would be very surprised if this was that hard to integrate considering half the code is already written for the DHCP half.

                      1 Reply Last reply Reply Quote 0
                      • L
                        ldaponte
                        last edited by ldaponte

                        Glad I found this thread. I was trying to figure out why DHCP leases weren't resolvable on my home network when they once were. Forgot that I had cut over to KEA DHCP days ago. Reverted to ISC DHCP and checked "Ignore Deprecation Warning" - all better now.

                        1 Reply Last reply Reply Quote 1
                        • B
                          bson
                          last edited by

                          I too followed the EOL suggestion and switch - and this is a total mess. How can I back this change out, I see nothing to switch back!!!

                          How can you POSSIBLY suggest this dysfunctional nonsense as an alternative? You've had this out for what, almost a year now - and it's still totally broken.

                          CAN YOU FIX YOUR BROKEN SH*T?!

                          S cmcdonaldC 2 Replies Last reply Reply Quote 1
                          • S
                            SteveITS Galactic Empire @bson
                            last edited by

                            @bson https://docs.netgate.com/pfsense/en/latest/releases/2-7-1.html#kea-dhcp-server-feature-preview-now-available

                            "Administrators can easily switch between ISC DHCPD and Kea by navigating to System > Advanced, Networking tab and changing the new Server Backend setting in the DHCP Options section."

                            The wording in pfSense about ISC DHCP is a bit misleading but Kea is in "feature preview" a.k.a. alpha/beta/whatever.

                            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                            Upvote ๐Ÿ‘ helpful posts!

                            B 1 Reply Last reply Reply Quote 0
                            • cmcdonaldC
                              cmcdonald Netgate Developer @bson
                              last edited by

                              The current goal is to have Kea at feature parity with ISC DHCP by the end of the year, then one release with Kea being optional, another release with Kea being the default for new installs, and finally another release to completely remove ISC DHCP entirely.

                              Need help fast? https://www.netgate.com/support

                              1 Reply Last reply Reply Quote 3
                              • B
                                bson @SteveITS
                                last edited by bson

                                @SteveITS I switched it back but it still wouldn't resolve. I don't know what fixed it, perhaps DNS caches just had to expire, or my poking around in DDNS options (we don't use DDNS) fixed it. I think I enabled the DDNS host registration option without overall enabling DDNS. It's not clear if that has any effect or not, but after a while things were working again. Famous last words! Without it being at feature parity I think it's fine to as for testing feedback, but there shouldn't be a nag about it being deprecated. This suggests a need to migrate. It should also warn about a lack of feature parity, IMO.

                                B cmcdonaldC 2 Replies Last reply Reply Quote 1
                                • B
                                  bson @bson
                                  last edited by

                                  Oh, I think I know why it took a while to return to normal: the migration wipes the existing leases, and it takes a while for clients to discover this and renew. Until that happens the client identifiers aren't going to be injected into DNS.

                                  1 Reply Last reply Reply Quote 0
                                  • cmcdonaldC
                                    cmcdonald Netgate Developer @bson
                                    last edited by cmcdonald

                                    @bson said in KEA DHCP missing "Register DHCP leases in DNS Resolver...":

                                    This suggests a need to migrate. It should also warn about a lack of feature parity, IMO.

                                    That's fair. The current warning definitely has a "the sky is falling" tone to it, which it certainly isn't.

                                    Need help fast? https://www.netgate.com/support

                                    J 1 Reply Last reply Reply Quote 6
                                    • M
                                      m.d.frederiksen @NickyDoes
                                      last edited by

                                      This post is deleted!
                                      1 Reply Last reply Reply Quote 0
                                      • J
                                        jkiel @cmcdonald
                                        last edited by jkiel

                                        @cmcdonald said in KEA DHCP missing "Register DHCP leases in DNS Resolver...":

                                        That's fair. The current warning definitely has a "the sky is falling" tone to it, which it certainly isn't.

                                        This. 100% this. The warning gives the impression that one should update ASAP and gives zero indication that the replacement isn't feature complete.

                                        1 Reply Last reply Reply Quote 5
                                        • S
                                          softwareplumber
                                          last edited by

                                          Still an issue.

                                          S 1 Reply Last reply Reply Quote 0
                                          • S
                                            SteveITS Galactic Empire @softwareplumber
                                            last edited by

                                            @softwareplumber said in KEA DHCP missing "Register DHCP leases in DNS Resolver...":

                                            Still an issue.

                                            https://www.netgate.com/blog/improvements-to-kea-dhcp

                                            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                            Upvote ๐Ÿ‘ helpful posts!

                                            1 Reply Last reply Reply Quote 2
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.