<![CDATA[FW hangs]]>I have a virtual machine running pfsense for about a year. up until a few days ago it was very stable using version 2.3
a few days ago I upgraded to version 3, today the FW was stuck in a most bizarre way:
I could login to the web ui, one of the four cpu cores was at 100% non stop for over 30 minutes, both the WAN and LAN addresses of the FW responded to ping but other VM's behind the FW NAT where not ping-able or reachable
I did a restart of the VM running pfsense and it was all resolved

Is there anything I can look for in the logs for the reason? Even if the logs are useless now, any instructions on how to find the reason before the reset in the logs would be helpful

Thanks

]]>https://forum.netgate.com/topic/99709/fw-hangsRSS for NodeThu, 16 Apr 2026 05:24:44 GMTWed, 11 May 2016 02:46:59 GMT60<![CDATA[Reply to FW hangs on Wed, 11 May 2016 04:36:19 GMT]]>Sorry. My mistake (too many nights of little sleep) :-)
2.3-RELEASE (amd64)
built on Mon Apr 11 18:10:34 CDT 2016
FreeBSD 10.3-RELEASE

]]>https://forum.netgate.com/post/623807https://forum.netgate.com/post/623807Wed, 11 May 2016 04:36:19 GMT<![CDATA[Reply to FW hangs on Wed, 11 May 2016 04:34:32 GMT]]>There is no version 3. :) You're running 2.3(.0) I'm sure.

]]>https://forum.netgate.com/post/623806https://forum.netgate.com/post/623806Wed, 11 May 2016 04:34:32 GMT<![CDATA[Reply to FW hangs on Wed, 11 May 2016 04:33:22 GMT]]>I'm using version 3 so the issue is probably there as well
Thanks

]]>https://forum.netgate.com/post/623805https://forum.netgate.com/post/623805Wed, 11 May 2016 04:33:22 GMT<![CDATA[Reply to FW hangs on Wed, 11 May 2016 04:32:04 GMT]]>The failure modes can vary in that case, it often would trigger CARP failover, but not necessarily.

If you reduce your VM to a single vCPU, it won't happen.

We've identified a fix and should have it merged into 2.3.1 in the next day or so.

]]>https://forum.netgate.com/post/623804https://forum.netgate.com/post/623804Wed, 11 May 2016 04:32:04 GMT<![CDATA[Reply to FW hangs on Wed, 11 May 2016 04:29:17 GMT]]>cmb, Thank for the quick response. I am using IPSec so this is probably the same (description fits in symptoms to what I saw)

Except for waiting for the bug to be fixed, is there a way to ensure my FW keeps running so that customers are not affected? will high availability detect this machine as a failed one?

]]>https://forum.netgate.com/post/623802https://forum.netgate.com/post/623802Wed, 11 May 2016 04:29:17 GMT<![CDATA[Reply to FW hangs on Wed, 11 May 2016 03:48:01 GMT]]>Using IPsec? If so, that's this. https://redmine.pfsense.org/issues/6296

]]>https://forum.netgate.com/post/623798https://forum.netgate.com/post/623798Wed, 11 May 2016 03:48:01 GMT