opnsense / core

OPNsense GUI, API and systems backend
https://opnsense.org/
BSD 2-Clause "Simplified" License
3.25k stars 726 forks source link

External static ip setup as VirtualIP accepts traffic for 30 seconds and then stops #7610

Open prasket opened 2 months ago

prasket commented 2 months ago

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

Describe the bug

When using a VirtualIP on different Subnet than original StaticIP traffic works for 30 seconds then stops.

I was given a new StaticIP from a clients ISP which is on a different subnet than the original 2 static IPs. When I setup in the IP in VirtualIP settings the OPNSense Appliance sees traffic on all ports via filterlog but then 30ish seconds later NO traffic coming in.

I go update the VirtualIP staticip to /24 or /32 (been going back and forth) and then traffic works for 30 seconds. I can keep recreating this all day long with same results.

If I add a NAT PortForwarding for https ports in the 30seconds the webapp does serve but then stops.

To Reproduce

Steps to reproduce the behavior:

  1. Go to 'Interfaces>VirtualIP'
  2. Enter in your Static IP and save, and apply
  3. Traffic works for 30ish seconds, then stops
  4. Update setting in #2 changing from /24 to /32
  5. Traffic starts coming in for 30ish seconds then stops
  6. Rinse repeate

Expected behavior

Traffic to keep flowing in after VirtualIP is setup.

Describe alternatives you considered

Only other thing I could think of would be trying PFSense or something else ewe.

Software version used and hardware type if relevant, e.g.:

OPNsense 24.4.1-amd64 FreeBSD 13.2-RELEASE-p11 OpenSSL 3.0.14 Decisio DEC695 appliance

prasket commented 2 months ago

I was just testing with a curl command, issued command it was just waiting and waiting, made a change on the VirtualIP and as soon as I hit apply, the curl command completed/returned data.

fichtner commented 2 months ago

Check dmesg.

prasket commented 2 months ago

Nothing of note regarding the VirtualIP in the dmesg buffer. When I make a change to VirtualIP nothing shows in dmesg, only boot time things. I have rebooted a few times between changes as well to see if that helps but still getting same behavior.