opnsense / core

OPNsense GUI, API and systems backend
https://opnsense.org/
BSD 2-Clause "Simplified" License
3.38k stars 760 forks source link

Web GUI binding to Virtual IPs after update #7933

Closed gitterdoneplease closed 1 month ago

gitterdoneplease commented 1 month ago

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

Describe the bug

I setup HAProxy on a virtual IP on a trusted interface. It ran for some time until I updated to 24.7.5_3-amd64. Now the Web GUI is binding to the virtual IP before HAProxy can.

To Reproduce

Steps to reproduce the behavior:

  1. Leave Web GUI on port 443
  2. Create a Virtual IP on trusted interface
  3. Set HAProxy to bind to that Virtual IP:443

Expected behavior

HAProxy should be able to bind to the Virtual IP as it should be free from the Web GUI.

Describe alternatives you considered

If I move the Web GUI to port 8443 it binds to the trusted interface's IP and the Virtual IP, but at least HAProxy can start.

Screenshots

N/A

Relevant log files

I can't get HAProxy to give me any logs. Not sure why. All I get is a failed to start in the system logs.

Additional context

The trusted interface is a VLAN (150 we'll say) and the virtual IP is in the same subnet so it's on that same interface.

Environment

OPNsense 24.7.5_3-amd64

gitterdoneplease commented 1 month ago

I'm not sure why it worked before, but using the "Deny service binding" checkbox seems to fix this issue. I misunderstood the help text. Marking as closed.