Kea DHCP stops working

cmcdonald

I believe we now have a fix for this. Keep an eye out for a public beta of 24.11 very soon.

zkhcohen

@cmcdonald Is there any intent to release this in the Community Edition? It's now been over a year since the last major version release, and the issues are stacking up. It's starting to feel like the project is stagnating.

Gertjan

@zkhcohen said in Kea DHCP stops working:

and the issues are stacking up ...

This thread, this issue, only exists in 24.03.
It concerns KEA, the 'new' DHCP server/client that is going to replace ISC DHCP in the future. The latter is used in 2.7.2 and is working very well - I'm using it also in 24.03.

Right now, no one really wants 'new versions' as most of us try to deal with 24H2 and its 'new things' that no one was asking for, but we still got (to debug) it ...

zkhcohen

@Gertjan I can personally confirm that this issue is present in CE 2.7.2 with the same symptoms.

I'm not sure how you can claim that no one "wants a new version" when there are numerous threads off and on this forum asking for exactly that.

Gertjan

@zkhcohen said in Kea DHCP stops working:

issue is present in CE 2.7.2 with the same symptoms.

Aha, so 2.7.2 has also the KEA !? I stand corrected.
I really had the impression that only pfSense Plus (24.03) had this test-drive KEA addition.

Easy way out then : keep the 30+ years tested an proved "DHCP ISC" and the issue will be gone.

datpif

I see this is still ongoing. I found a workaround via watchdog service. The script does a cleanup before attempting to restart the sevice

list itemmake sure you install the watchdog service in pfsense.
list Add the kea dhcp 4 service.
Shell into pfsense and change to /usr/local/etc/rc.d
list Create a backup of kea service script. cp kea kea.old
list edit the kea file and replace contents with script below

#!/bin/sh

# PROVIDE: kea
# REQUIRE: NETWORK netif routing    
# KEYWORD: shutdown

. /etc/rc.subr

name=kea
desc="Kea DHCP Server"
rcvar=kea_enable

load_rc_config $name

kea_enable=${kea_enable:-"NO"}

command="/usr/local/sbin/keactrl"
required_files="/usr/local/etc/${name}/keactrl.conf"

# Add cleanup function
cleanup_kea() {
    # Clean up stale lock files
    rm -f /tmp/kea4-ctrl-socket.lock
    # Kill any zombie processes
    pkill -9 kea-dhcp4
    # Wait for processes to die
    sleep 2
}

# Modify start command to include cleanup
start_cmd() {
    cleanup_kea
    ${command} start
    logger -t kea-watchdog "Kea DHCP4 started with cleanup"
}

# Modify stop command to include cleanup
stop_cmd() {
    ${command} stop
    cleanup_kea
    logger -t kea-watchdog "Kea DHCP4 stopped with cleanup"
}

status_cmd="$command status"
reload_cmd="$command reload"
extra_commands="reload"

run_rc_command "$1"

Watchdog should auto restart the service

datpif

@datpif Actually just found watchdog starts a different service . so the simplest fix i found was to edit

/etc/inc/service-utils.inc
search for case 'kea-dhcp4':
and add

                case 'kea-dhcp4':
                      exec("rm -f /tmp/kea4-ctrl-socket.lock");

noisyjohn

@datpif yeap! clever. I knew this problem /tmp/kea4-ctrl-socket.lock"". But this automation is grate. Thanks for this. But it is still a work around, not a fix. I wander if anyone in KEA will take care of this.
However I'm gona say goodby to KEA. The reason:
KEA does not register the DHCP clients in dns resolver, so my local net (5 pcs) never works as I want. I have read somewhere that it' does it automaticaly, but it does not. And there is no option "register dhcp clients" as the older ISC DHCP does.

stephenw10

It does in 24.11.

Gerry555

Any sign if this issue is road mapped to be been corrected?
This issue is still occurring on the latest version 24.11

DHCP just stops. It will restart successfully when I login and manually restart the stopped service.
Has now occurred number times.

Gertjan

@Gerry555 said in Kea DHCP stops working:

Any sign if this issue is road mapped to be been corrected?

2.8.0 is in the works ...

@Gerry555 said in Kea DHCP stops working:

This issue is still occurring on the latest version 24.11

Maybe ?
I'm using 24.11.
I switched to KEA DHCPv4 and DHCPv6, on 4 LAN's, the day 24.11 came out - 3 months now ?
I use many DHCP MAC/DUID 'static' leases.
With "host name into DNS registration" (one 1 decade old problem solved !!)
Kea, for me, is rock solid. I can go on holiday for 10 days, come back, and find everything up and running (company router - lost of leases as it is a hotel with a captive portal).
Kea didn't crash or something like that.

And I didn't made live easy on myself, I added 'manually' this ISC DHCP Dynamic DNS feature and Kea DHCP? and still no problem what so ever.

I'm using a 4100 - maybe that helps

stephenw10

What are you running it on? There does appear to be an upstream issue on armv7 that we have yet to pin down. Currently, since there is no fix, advice is to revert to ISC if you're using a 3100.

Gerry555

Thanks @stephenw10 . Much appreciate the response.

Yes - I am using a 3100. I have switched back to ISC.

onnastick

I have a 3100 running 24.11 since it came out. I switched over to KEA as well just because I thought that's what the advice was, since ISC is deprecated.

However, ever since I made these changes, I have noticed that from time to time, devices stop being able to receive IP assignments. I don't see anything that seems particularly helpful in the system log (though I admit I am only looking at the DHCP log). I haven't tried manually restarting the service, but usually just a power cycle fixes it until it breaks again. Sometimes this is what I have to do if I am not there and am providing remote support to someone less technical.

Based on @stephenw10's advice above I have just reverted to ISC and will plan to leave it this way for a while in the hopes it will stop periodically breaking.

stephenw10

@onnastick said in Kea DHCP stops working:

I switched over to KEA as well just because I thought that's what the advice was, since ISC is deprecated.

It was at release. And still is for any other hardware. However this upstream bug has since been discovered in armv7. I'm running it here and haven't yet found any full workaround.

Patch

@Gertjan said in Kea DHCP stops working:

2.8.0 is in the works ...

LOL
The pubic access to daily build has been blocked since late 2023
pfsense Community v2.8 is a vaporware product which currently contains the majority of the pfsense redmine changes for the over 16 months through to July 2025

Don't hold your breath waiting for it to materialise.

MacUsers

I just experienced the very same issue with Kea, running v24.11 on 8200. The newly added device was getting an IP from the dynamic pool but wasn't able to receive the IP from the static mapping. I restarted Kea service for few times, removed the lock file etc. but nothing worked, until I restartd the box. So, the issue seems to be well present in the latest version as well.

stephenw10

So you set a static mapping for a device that had a current dynamic lease but it failed to pull that until pfSense was restarted?

MacUsers

@stephenw10,
yes, exactly. And the strange thing was, that auto-assigned address wasn't being displayed under Status > DHCP Leases. The only way I could see what IP has been assigned was on the device itself.

stephenw10

Are you sure the client was requesting a new lease? Or actually pulling one?