Hi there,
This week-end I've upgraded our pfSense cluster of two from 2.1 to
2.1.1.
On the slave member, all went fine excepted that it never detected that
all packages had been reinstalled : a manual reboot after a few hours
waiting solved the problem. The very same problem was noticed when
upgrading from 2.1 to 2.1.1beta a few weeks ago on this very same box
(so in doubt we didn't upgrade the master at that time).
On the master member however, it correctly detected that the packages
had been reinstalled, BUT it only reinstalled 3 out of 9.
In particular it didn't reinstall squid, squidGuard, and freeradius2,
which we very heavily use.
So I had to manually reinstall all the missing packages, and by chance
it did keep our configuration. However I had to manually go to each tab
and save again for each package, in order for the preserved
configuration to be taken into account. I noticed the problem because
despite the config being OK visually in pfSense's web UI, freeradius
still tried to connect to "ldap.yourdomain.com" or whatever similar fake
value it defaults to use.
In addition to this, we also noticed a severe drop in throughput on at
least one of our interfaces, like someone reported before, going from
around 15/20 Mbits/s to around 0.5 Mbits/s. We noticed a heavy amount of
lost packets when pinging both the master member's and the cluster's
virtual IP address on this interface from a host on the same
subnet. Pinging the slave worked flawlessly though, despite the two
machines being strictly identical.
We then moved the interface to a different network card ('bce' instead
of 'igb') and it "seems" that the problem is fixed : throughput went up
again. Could this be due to some changes to the igb driver ?
Finally, when running 'dmesg' I've noticed some very very strange
messages like this one (it really is an exact cut&paste) :
--- CUT ---
...
opt14_vip150: MASTER -> BACKUP (more frequent advertisement received)
opt6_vip110: MASTER -> BACKUP (more freoqpute1n5t _vaidvpe1r9t1i:s eMmAeSnTtoE
pRtr2 -_e>vc ieBpiA1Cv1K1Ue:P d(M)mAo
Sre
<<6> 6fr>equTeERn t- a>d vBeArCtKiUsP (emmoernet frreecqeuievnedt)
advertisement received)
lan_voipp1t0112:_ vMip1A0S5T:E RM A-S>T EBARCK U-P> (BmoAreC KfUrPe
q(umeoornpett 1 f_arvdeivqpe1u1r2et:i nsetMmA eSandTvtE Rer r-etc>ie siBe
vmA<e5eCn>id
tgb1
_
<6<<>66>)K
U>
P r(ecmeoirvee df)r
e
quent advertisement received)
vlan70: link state changed to DOWN
opt4_vip170: link state changed to DOWN
...
--- CUT ---
Not sure what to make about this... Is this important or not ???
Please advise.
Thanks in advance
--
Jérôme Alet - <[email protected]> - Direction du Système d'Information
Université de la Nouvelle-Calédonie - BPR4 - 98851 NOUMEA CEDEX
Tél : +687 290081 Fax : +687 254829
_______________________________________________
List mailing list
[email protected]
https://lists.pfsense.org/mailman/listinfo/list
