Issues after upgrade to 2.2-RC
-
I installed pfsense (dec 9th edition) this afternoon and can echo the increased GUI responsiveness and I also see a slightly lower idling temperature going down from 49C to 47C.
I hade some troubles getting it installed though, hopefully this is a correct forum section for reporting them. I have been using pfsense since the beginning of the year on an Intel DQ77KB/Xeon E3-1265Lv2/8GB/30 GB SSD in an Akasa Euler passive heatsink case over a very stable 100/100 fiber connection. My packages include squid, squidguard, suricata, nmap and I access OpenVPN remotely from iOS and OS X clients.
First I tried upgrading by manually pasting the URL provided above into the auto updater section. It installed seemingly ok and rebooted. Internet access was fine from clients but the GUI was devoid of functionality. The menus were there but nothing happened when I chose functions from the menu. The dashboard included the standard widgets but devoid of values, some empty some N/A. System logs were empty as well. I was in a hurry to get a working connection so I didn't have time to dump logs for you through ssh unfortunately.
So I chose to reinstall from scratch using the AMD64 memstick image which went fine except some glitches in the text GUI as seen below. In the partition screen about 20 empty partitions successively filled up the screen. I deleted this and left the defaults /* and swap and then it worked. After the install and reboot I chose to reassign the interfaces from shell menu in the reverse suggested order because I like avoid having the Intel AMT-NIC on the WAN side and prefer it on the LAN side. After confirmation it froze even though I waited 10 min before a reboot. Anyhow after the reboot things were fine. I ran the setup wizard and then restored my backup from 2.1.5.
Some minor issues after install:
DNS Forwarder was active but no clients could do DNS lookups. I disabled DNS Forwarder, enabled DNS resolver and things are fine now.Firewall menu: pfBlocker listed as a menu item but I haven't installed it. When clicked I get this:
(white page): ERROR: No valid package defined. (Close button)Suricata: All settings restored ok but you have to manually trigger a rule update which could come as a surprise to some perhaps.
In any case, a very nice update from 2.1.5. Speedier GUI, cooler running and also reaching a new maximum speed! Testing against www.bredbandskollen.se (Swedish independent governmental speed test server to help consumers choose internet providers and then they use the results to publish statistics for various companies and provide geographical heat maps. So you can see what speed you can get practically down to street level using some company and whatever technology, fiber, DSL, EDGE/GRPS/3G/4G etc.) I usually get 94/94 mbps but after 2.2 I reached 96/96 which I have never seen before.
All in all, thank you pfsense team for all your hard work, pf is fantastic!
If you want pics of the above setup issues, please pm me.
edits: spell checker messed up
-
Split this into its own topic so it can be followed up on easily.
The original problems you had post-upgrade seem to match what'd happen with stale browser cache on CSS and/or js, just clearing the browser cache almost certainly would have resolved that. Reinstall "fixed" that because doing so took long enough for your browser to re-fetch those files. Or at least some of them, sounds like others were still stale for the other outstanding GUI issues you were still seeing. Clear your browser cache and try again.
It sounds like the package reinstall failed for some reason, going to Diag>Backup/restore and hitting "reinstall all packages" should fix that. Or just reinstall pfblocker if all the others are fine. If you have a combination of packages that fails reinstall consistently (testing by upgrading to new snapshots probably best way to re-test that), posting info on your packages in general would help. That's likely a package reinstall scenario that's always failed at least intermittently. The Suricata issue should be brought up on the packages board separately as that has nothing to do with 2.2, and the package maintainer is more likely to see it there.
What is your DNS forwarder configuration like? It hasn't really changed, so there shouldn't be any change in behavior post-upgrade with it.
~93-94 Mbps is 100 Mb wire speed. That increasing to 96 is a fluke in the speed test app I presume.
-
Thank you for your reply,
Everything is working fine now. There was no real problem with DNS Forwarder as I found a couple of hours later that there was a massive DDOS attack using the DNS servers of my ISP TeliaSonera against Electronic Arts at the time of my installation which fooled me into believing that there was a problem with pfsense. It seems like it subsided after I switched to DNS Resolver which made me draw an incorrect conclusion. I switched back to DNS forwarder today after your mail and all is ok.
I will clear my browser cache in the future in any case of GUI abnormalities. Thank you for your other advice and I will post a Suricata feature request in the packages subsection. The line speed is still discretely faster, fluke or not :)
Thank you