Issues with 2.0-RC3
-
@myjunkman, Did you upgrade to 2.0 RC3 AMD64? I'm now testing with 2.0 RC3 i386 to see if the problem is specific to 2.0 RC3 AMD64. So far I'm not experiencing the problem with i386…I need to give it some more time however.
Can you guys test something for me. Go to Status->System Logs->Settings. Enable "Show log entries in reverse order (newest entries on top)" and set "Number of log entries to show:" to 2000. Does you machine then become unresponsive? This seems to create a problem for me on both 2.0 RC3 i386 and amd64
-
Can you guys test something for me. Go to Status->System Logs->Settings. Enable "Show log entries in reverse order (newest entries on top)" and set "Number of log entries to show:" to 2000. Does you machine then become unresponsive? This seems to create a problem for me on both 2.0 RC3 i386 and amd64
Trying to show that many lines in the GUI log would probably put a bit of a burden on the log parsing functions, since it will have to read that much data into memory, run it through whichever mojo is needed for the tab you're looking at, and since you are using reverse mode, flip the log array at the end. If your system is low on CPU/RAM that isn't likely to be a fast operation.
-
Can you guys test something for me. Go to Status->System Logs->Settings. Enable "Show log entries in reverse order (newest entries on top)" and set "Number of log entries to show:" to 2000. Does you machine then become unresponsive? This seems to create a problem for me on both 2.0 RC3 i386 and amd64
Trying to show that many lines in the GUI log would probably put a bit of a burden on the log parsing functions, since it will have to read that much data into memory, run it through whichever mojo is needed for the tab you're looking at, and since you are using reverse mode, flip the log array at the end. If your system is low on CPU/RAM that isn't likely to be a fast operation.
ssh into the box and run top. After clicking accept to the 2000 line log file and reversing the order, apache should spike to 100% cpu. Also look at how much ram it starts to take up. If it starts cutting into the swap file then the system will be horribly slow. If it's a single core processor then it would be natural for the duration of parsing the log file to make the system unresponsive. I would recommend a minimum of a dual cpu/core processor if you ever plan on viewing large amounts of log files or whatever. That way the system doesn't choke your firewall/router while you are trying to view logs of that size.
-
Or just view the raw logs without the GUI parsing involved. (Obviously not as convenient…)
-
back up the log files every night to another system which can parse the files very fast ;)
(I backup the log files and config files anyways, just in case…)
-
Why back them up when you can push them off "live" with remote syslog? That way you can't lose any logs if your box dies 5 minutes before the backup job runs. :-)
-
Why back them up when you can push them off "live" with remote syslog? That way you can't lose any logs if your box dies 5 minutes before the backup job runs. :-)
I wasn't trying to overwhelm the OP person when he's trying to view virtually the entire log file from a browser :o
;D
-
Circling back around with the original issue in this thread, I'm confirming that downgrading from 2.0 RC3 amd64 to 2.0 RC3 i386 has resolved my issue with the box becoming unresponsive and not routing traffic. There seems to be a definite problem with the 2.0 RC3 amd64 at this point. How can we track down the root cause so this can be addressed with the GA release?
@hytek and others. The box I'm running this on is a 3GHz dual core with 4Gig RAM and an approved Intel NIC so it's pretty beefy. I was able to view 2000 lines of log and flip in with the same hardware in 1.2.3 without an issue.
I'm just trying to report back findings as we move closer to GA. I'd really prefer to be running the 64-bit instantiation of pfSense, so resolving that problem would be great.
-
We'd need a lot more info about the system, though it may have been some level of mbuf exhaustion or similar. Are those Intel NICs em or igb? If they are igb, they default to using four network queues which can run you out of mbufs quickly. There are sysctl tweaks to reduce that to 1, and also to raise the number of mbufs. We may have to set those by default for 2.0, it seems amd64 is more prone to hitting those.
-
It appears I've just run into the same issue… Running RC3 June 28. I'm at home and decided to check on new firewall. I could login to the webgui, but trying to access any other tabs just timed out. I could not access any of our port forwards either. Fortunately, the reboot link in the gui did load after a minute or two and I was able to reboot remotely. Everything is working now. When I did get logged on and saw the dashboard, the MBUFs didn't look any different than normal.
-
Im running 2.0-RC3 (amd64) built on Mon Jun 20 13:26:12 EDT 2011 without any trouble ( Uptime: 11 days, 09:34 ).
Running 2.0-RCx (amd64 ) since end of April, ( RC1 –> RC2, now RC3 ) on an Asus M2N32SLI with an Athlon X2 5600+ with 4Gb of Corsair XMS2 DDRII 800 Ram ( 2 x 2Gb ).
Using 4 Interfaces ( 2 WANs in Failover mode, LAN and OPT connected to a Softswitch ) the 2 onboard "nfe" + 2 "re" ( pci-e TP-link TG-3468 ) and, yes it works, even using this non recommended HW.... :D
Installed packages: BandwidthD & Siproxd
Till now im really happy with it... Thanks pfSense team!
-
I've downloaded version 2.0rc3 i386 and amd64 and noticed that none seems to be able to install in a Dell Poweredge r210 with or without raid1. The problem starts on 38% of installation, when kernel files are being copied, cdrom freezes and stops loading data, installation becomes frozen on 38% and then forever loading.. I've suspected that my internal cd drive could be the problem, so I've put a usb cdrom and tried the same process and for my surprise, pfsense installation can't automount from the correct cd device. I guess because it recognizes my internal cd and tries to mount it anyways.. So that's pretty much it. I can't install pfsense 20rc3 on my new poweredge r210 dell. At the moment I'm writing this message, I'm burning pfsense 1.2.3 to give it a try before going mad. I will be avail to clarify or try something else.
thanks
Rodrigo -
I've downloaded version 2.0rc3 i386 and amd64 and noticed that none seems to be able to install in a Dell Poweredge r210 with or without raid1. The problem starts on 38% of installation, when kernel files are being copied, cdrom freezes and stops loading data, installation becomes frozen on 38% and then forever loading.. I've suspected that my internal cd drive could be the problem, so I've put a usb cdrom and tried the same process and for my surprise, pfsense installation can't automount from the correct cd device. I guess because it recognizes my internal cd and tries to mount it anyways.. So that's pretty much it. I can't install pfsense 20rc3 on my new poweredge r210 dell. At the moment I'm writing this message, I'm burning pfsense 1.2.3 to give it a try before going mad. I will be avail to clarify or try something else.
There are already multiple threads for Dell r<x>10 issues, search the forum a bit. Try look for for r210, r310, r510, etc.</x>
-
VMWare bypasses most of these hardware issues…not much downside unless you are super concerned with the security implications of adding another operating system/hypervisor into the environment.
AND
you can create mutliple pfsense vm's to test different versions etc or have on on line as a hot backup...
-
We'd need a lot more info about the system, though it may have been some level of mbuf exhaustion or similar. Are those Intel NICs em or igb? If they are igb, they default to using four network queues which can run you out of mbufs quickly. There are sysctl tweaks to reduce that to 1, and also to raise the number of mbufs. We may have to set those by default for 2.0, it seems amd64 is more prone to hitting those.
Let me know what you need to troubleshoot. I'm running 2.0 RC3 i386 without a problem. Loading the 64 bit version reintroduces the issue. The Intel NICs are EM btw
-
Let me know what you need to troubleshoot. I'm running 2.0 RC3 i386 without a problem. Loading the 64 bit version reintroduces the issue. The Intel NICs are EM btw
At a minimum, run netstat -m periodically and watch the total/max mbuf clusters and see if it's maxing out.
