Chrysalis: Created page with "Default behaviour on pfSense is to cycle all services if any configured gateways go offline, this can include VPN's and tunnels not just broadband connectivity. This can caus..."

2025-09-21T21:06:35Z

Created page with "Default behaviour on pfSense is to cycle all services if any configured gateways go offline, this can include VPN's and tunnels not just broadband connectivity. This can caus..."

New page

Default behaviour on pfSense is to cycle all services if any configured gateways go offline, this can include VPN's and tunnels not just broadband connectivity.

This can cause problems e.g. if your pfSense is hosting LAN services such as a NTP server or UPS daemon. Consider a scenario e.g. if you have a power cut, your WAN goes offline, pfSense then puts services into a cycle loop, which in turn drops connectivity to the UPS daemon so client machines are unaware of power status and battery level which might prevent automated safe shutdown/hibernation.

This patch changes the behaviour so services will only get cycled if a external non OpenVPN interface comes back online with a different IP address, if its a cycle keeping the existing IP, then it will not cycle all services.

This is the IPv6 version of the patch, there is also a IPv4 version.

This patch also reduces log noise from dhcp6 client renewals on the WAN connection that was added in recent builds of pfSense.

----

Paste the below code into the ''Patch Contents'' box.

Add a description such as 'Better diagnostics limiters layout' in the ''Description'' box.

Set ''Path Strip Count'' to '0'.

''Base Directory'' to '/'.

<pre>--- /etc/rc.newwanipv6 2022-01-31 19:53:42.000000000 +0000
+++ /etc/rc.newwanipv6 2023-04-18 03:15:33.061352000 +0100
@@ -62,7 +62,5 @@
}

if (!empty($reason) && ($reason != 'RENEW')) {
log_error("rc.newwanipv6: Info: starting on {$argument} due to {$reason}.");
-} else {
- log_error("rc.newwanipv6: Info: starting on {$argument}.");
}
@@ -255,11 +253,6 @@
/* reconfigure IPsec tunnels */
ipsec_force_reload($interface, 'inet6');

-/* start OpenVPN server & clients */
-if (substr($interface_real, 0, 4) != "ovpn") {
- openvpn_resync_all($interface, 'inet6');
-}
-
/* reconfigure GRE/GIF tunnels */
$gre = link_interface_to_tunnelif($interface, 'gre', 'inet6');
array_walk($gre, 'interface_gre_configure');
@@ -286,7 +279,6 @@
/* reload graphing functions */
enable_rrd_graphing();

- restart_packages();
}

unlink_if_exists("{$g['tmp_path']}/{$interface}_upstart6");

[[Category:Pfsense Patches]]

Servicecyclev6 patch281 - Revision history

Chrysalis: Created page with "Default behaviour on pfSense is to cycle all services if any configured gateways go offline, this can include VPN's and tunnels not just broadband connectivity. This can caus..."