Netgate SG-1000 microFirewall

Author Topic: New 502 Bad Gateway  (Read 5866 times)

0 Members and 2 Guests are viewing this topic.

Offline BreeOge

  • Jr. Member
  • **
  • Posts: 61
  • Karma: +6/-0
    • View Profile
Re: New 502 Bad Gateway
« Reply #60 on: October 11, 2017, 09:20:04 pm »
It locked, here is the logs from the info you wanted..  This is from my heavier load box.  My low load box also crashed, I will make a new post for it.


Code: [Select]
# /usr/sbin/swapinfo -h
Device          1K-blocks     Used    Avail Capacity
/dev/gptid/d2a5a9dd-7e41-11e7-b   3684016       0B     3.5G     0%

Code: [Select]
# /usr/bin/top | /usr/bin/head -n7
last pid: 50984;  load averages:  0.07,  0.14,  0.15  up 0+23:33:41    21:18:05
134 processes: 1 running, 131 sleeping, 2 stopped

Mem: 1036M Active, 2017M Inact, 1009M Wired, 693M Buf, 3775M Free
Swap: 3598M Total, 3598M Free


Code: [Select]
/usr/bin/netstat -Ln
Current listen queue sizes (qlen/incqlen/maxqlen)
Proto Listen                           Local Address
Netgraph sockets
Type  Recv-Q Send-Q Node Address   #Hooks
ctrl       0      0 [1b31]:           0
ctrl       0      0 [1b22]:           0
ctrl       0      0 [1ad8]:           0
ctrl       0      0 [1ad2]:           0
ctrl       0      0 [14fb]:           0
ctrl       0      0 [5]:              0
unix  100/0/200                        /var/run/clamav/clamd.sock
unix  0/0/80                           /tmp/mysql.sock
unix  0/0/5                            /var/run/dpinger_WAN_DHCP~70.178.22.158~70.178.22.1.sock
unix  0/0/4                            /var/run/devd.pipe
unix  0/0/30                           /var/run/check_reload_status
unix  193/0/128                        /var/run/php-fpm.socket
unix  0/0/4                            /var/run/devd.seqpacket.pipe


Had to pastbin /usr/bin/netstat -xn

https://pastebin.com/RKzat3ue
« Last Edit: October 11, 2017, 09:37:27 pm by BreeOge »

Offline BreeOge

  • Jr. Member
  • **
  • Posts: 61
  • Karma: +6/-0
    • View Profile
Re: New 502 Bad Gateway
« Reply #61 on: October 11, 2017, 09:27:39 pm »
This is on my lower load box

Code: [Select]
# /usr/sbin/swapinfo -h
Device          1K-blocks     Used    Avail Capacity
/dev/label/swap0  33554428       0B      32G     0%


Code: [Select]
# /usr/bin/top | /usr/bin/head -n7
last pid: 31956;  load averages:  0.02,  0.07,  0.07  up 0+07:41:27    21:21:32
96 processes:  1 running, 93 sleeping, 2 stopped

Mem: 601M Active, 1095M Inact, 1002M Wired, 636M Buf, 13G Free
Swap: 32G Total, 32G Free

Code: [Select]
Current listen queue sizes (qlen/incqlen/maxqlen)
Proto Listen                           Local Address
Netgraph sockets
Type  Recv-Q Send-Q Node Address   #Hooks
ctrl       0      0 [23c]:            0
ctrl       0      0 [22b]:            0
ctrl       0      0 [1e3]:            0
ctrl       0      0 [199]:            0
ctrl       0      0 [f]:              0
ctrl       0      0 [5]:              0
unix  100/0/128                        /var/run/clamav/clamd.sock
unix  0/0/5                            /var/run/dpinger_WAN_DHCP~70.178.196.154~70.178.196.1.sock
unix  0/0/5                            /var/run/dpinger_Steve_Telephone~192.168.16.2~10.10.10.2.sock
unix  0/0/5                            /var/run/dpinger_Raymond_Telephone~192.168.16.2~10.10.12.2.sock
unix  0/0/5                            /var/run/dpinger_Kevin_Telephone~192.168.16.2~10.10.11.2.sock
unix  0/0/5                            /var/run/dpinger_Cisco_Router~192.168.16.2~192.168.16.201.sock
unix  0/0/4                            /var/run/devd.pipe
unix  0/0/30                           /var/run/check_reload_status
unix  13/0/128                         /var/run/php-fpm.socket
unix  0/0/4                            /var/run/devd.seqpacket.pipe

Pastbin for /usr/bin/netstat -xn


https://pastebin.com/6tEs3Fs0
« Last Edit: October 11, 2017, 09:39:05 pm by BreeOge »

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 21113
  • Karma: +1381/-25
    • View Profile
Re: New 502 Bad Gateway
« Reply #62 on: October 11, 2017, 09:37:34 pm »
Lots of port 1344, do you have squid+clamav active as well? Can you try shutting that off?

Also that netstat -x output is too big to put inline, you should attach that in a .txt file
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline BreeOge

  • Jr. Member
  • **
  • Posts: 61
  • Karma: +6/-0
    • View Profile
Re: New 502 Bad Gateway
« Reply #63 on: October 11, 2017, 09:45:12 pm »
Lots of port 1344, do you have squid+clamav active as well? Can you try shutting that off?

Also that netstat -x output is too big to put inline, you should attach that in a .txt file

I disabled squid+Clamav, when it crashes ill get ya the logs again for that as well.

Offline john_galt

  • Jr. Member
  • **
  • Posts: 38
  • Karma: +2/-0
    • View Profile
Re: New 502 Bad Gateway
« Reply #64 on: October 12, 2017, 05:34:21 am »
Hi

This morning I could not connect to the GUI nor was the serial console working. I rebooted then downloaded the system.log
It was nothing but what you see below. I only posted the last few lines before I restarted the firewall. I hope this helps.

Code: [Select]
Oct 12 05:43:40 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:40 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:40 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:40 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:40 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:40 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:40 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:40 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:40 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:40 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:40 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:41 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:41 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:41 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:41 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:41 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:41 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:41 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:41 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:41 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:41 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:41 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:41 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:42 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:42 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:42 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:42 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:42 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:42 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:42 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:42 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:42 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:42 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:42 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:42 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:43 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:43 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:43 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:43 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:43 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:43 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:43 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:43 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:43 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:43 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:43 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:43 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:44 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:44 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:44 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:44 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:44 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:44 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:44 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:44 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:44 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:44 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:44 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:44 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:45 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:45 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:45 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:45 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:45 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:45 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:45 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:45 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:45 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:45 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:45 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:43:45 pfSense check_reload_status: Could not connect to /var/run/php-fpm.socket
Oct 12 05:44:37 pfSense syslogd: kernel boot file is /boot/kernel/kernel
Oct 12 05:44:37 pfSense kernel: Copyright (c) 1992-2017 The FreeBSD Project.
Oct 12 05:44:37 pfSense kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
Oct 12 05:44:37 pfSense kernel: The Regents of the University of California. All rights reserved.
Oct 12 05:44:37 pfSense kernel: FreeBSD is a registered trademark of The FreeBSD Foundation.
Oct 12 05:44:37 pfSense kernel: FreeBSD 11.1-RELEASE-p1 #82 r313908+d77c47fe50c(RELENG_2_4_0): Mon Oct  9 18:04:16 CDT 2017
Oct 12 05:44:37 pfSense kernel: root@buildbot2.netgate.com:/builder/ce-240/tmp/obj/builder/ce-240/tmp/FreeBSD-src/sys/pfSense amd64
Oct 12 05:44:37 pfSense kernel: FreeBSD clang version 4.0.0 (tags/RELEASE_400/final 297347) (based on LLVM 4.0.0)
Oct 12 05:44:37 pfSense kernel: VT(efifb): resolution 800x600
Oct 12 05:44:37 pfSense kernel: CPU: Intel(R) Core(TM) i5-5250U CPU @ 1.60GHz (1596.34-MHz K8-class CPU)
Oct 12 05:44:37 pfSense kernel: Origin="GenuineIntel"  Id=0x306d4  Family=0x6  Model=0x3d  Stepping=4
Oct 12 05:44:37 pfSense kernel: Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
Oct 12 05:44:37 pfSense kernel: Features2=0x7ffafbbf<SSE3,PCLMULQDQ,DTES64,MON,DS_CPL,VMX,EST,TM2,SSSE3,SDBG,FMA,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,TSCDLT,AESNI,XSAVE,OSXSAVE,AVX,F16C,RDRAND>
Oct 12 05:44:37 pfSense kernel: AMD Features=0x2c100800<SYSCALL,NX,Page1GB,RDTSCP,LM>
Oct 12 05:44:37 pfSense kernel: AMD Features2=0x121<LAHF,ABM,Prefetch>
Oct 12 05:44:37 pfSense kernel: Structured Extended Features=0x21c27ab<FSGSBASE,TSCADJ,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,NFPUSG,RDSEED,ADX,SMAP,PROCTRACE>
Oct 12 05:44:37 pfSense kernel: XSAVE Features=0x1<XSAVEOPT>
Oct 12 05:44:37 pfSense kernel: VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID
Oct 12 05:44:37 pfSense kernel: TSC: P-state invariant, performance statistics
Oct 12 05:44:37 pfSense kernel: real memory  = 8589934592 (8192 MB)
Oct 12 05:44:37 pfSense kernel: avail memory = 8168407040 (7790 MB)
Oct 12 05:44:37 pfSense kernel: Event timer "LAPIC" quality 600
Oct 12 05:44:37 pfSense kernel: ACPI APIC Table: <ALASKA A M I >
Oct 12 05:44:37 pfSense kernel: FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
Oct 12 05:44:37 pfSense kernel: FreeBSD/SMP: 1 package(s) x 2 core(s) x 2 hardware threads
Oct 12 05:44:37 pfSense kernel: random: unblocking device.
Oct 12 05:44:37 pfSense kernel: WARNING: Bogus Interrupt Polarity. Assume CONFORMS
Oct 12 05:44:37 pfSense kernel: WARNING: Bogus Interrupt Polarity. Assume CONFORMS
Oct 12 05:44:37 pfSense kernel: ioapic0 <Version 2.0> irqs 0-39 on motherboard
Oct 12 05:44:37 pfSense kernel: SMP: AP CPU #1 Launched!
Oct 12 05:44:37 pfSense kernel: SMP: AP CPU #3 Launched!
Oct 12 05:44:37 pfSense kernel: SMP: AP CPU #2 Launched!
Oct 12 05:44:37 pfSense kernel: Timecounter "TSC" frequency 1596341116 Hz quality 1000
Oct 12 05:44:37 pfSense kernel: random: entropy device external interface
Oct 12 05:44:37 pfSense kernel: wlan: mac acl policy registered
Oct 12 05:44:37 pfSense kernel: kbd1 at kbdmux0
Oct 12 05:44:37 pfSense kernel: netmap: loaded module
Oct 12 05:44:37 pfSense kernel: module_register_init: MOD_LOAD (vesa, 0xffffffff81158310, 0) error 19
Oct 12 05:44:37 pfSense kernel: random: registering fast source Intel Secure Key RNG
Oct 12 05:44:37 pfSense kernel: random: fast provider: "Intel Secure Key RNG"
Oct 12 05:44:37 pfSense kernel: nexus0
Oct 12 05:44:37 pfSense kernel: cryptosoft0: <software crypto> on motherboard
Oct 12 05:44:37 pfSense kernel: padlock0: No ACE support.
Oct 12 05:44:37 pfSense kernel: acpi0: <ALASKA A M I > on motherboard
Oct 12 05:44:37 pfSense kernel: acpi0: Power Button (fixed)
Oct 12 05:44:37 pfSense kernel: cpu0: <ACPI CPU> on acpi0
Oct 12 05:44:37 pfSense kernel: cpu1: <ACPI CPU> on acpi0
Oct 12 05:44:37 pfSense kernel: cpu2: <ACPI CPU> on acpi0
Oct 12 05:44:37 pfSense kernel: cpu3: <ACPI CPU> on acpi0

After scrolling through all 6,000 lines of the system.log file I see several of these lines they appear to be at 1 minute intervals

Code: [Select]
Oct 12 05:43:10 pfSense kernel: sonewconn: pcb 0xfffff80008c430f0: Listen queue overflow: 193 already in queue awaiting acceptance (708 occurrences)
Some Googling returned this https://redmine.pfsense.org/issues/6406
« Last Edit: October 12, 2017, 07:33:10 am by john_galt »
Doug

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 21113
  • Karma: +1381/-25
    • View Profile
Re: New 502 Bad Gateway
« Reply #65 on: October 12, 2017, 08:09:38 am »
After scrolling through all 6,000 lines of the system.log file I see several of these lines they appear to be at 1 minute intervals

Code: [Select]
Oct 12 05:43:10 pfSense kernel: sonewconn: pcb 0xfffff80008c430f0: Listen queue overflow: 193 already in queue awaiting acceptance (708 occurrences)

For that, check the current value of kern.ipc.soacceptqueue  (run "sysctl kern.ipc.soacceptqueue"). It's probably at the default of 128. Set that to 1024 or higher (e.g. 4096), make a tunable for that under System > Advanced, Tunables tab.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline john_galt

  • Jr. Member
  • **
  • Posts: 38
  • Karma: +2/-0
    • View Profile
Re: New 502 Bad Gateway
« Reply #66 on: October 12, 2017, 08:22:40 am »
jimp


Indeed it was set to 128. I added the tunable and set it to 4096 and applied. I'm doing this via openVPN connection. Do I need to reboot it?


Doug
Doug

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 21113
  • Karma: +1381/-25
    • View Profile
Re: New 502 Bad Gateway
« Reply #67 on: October 12, 2017, 08:23:37 am »
No need to reboot, that is one that can be changed at run-time.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline john_galt

  • Jr. Member
  • **
  • Posts: 38
  • Karma: +2/-0
    • View Profile
Re: New 502 Bad Gateway
« Reply #68 on: October 12, 2017, 08:26:17 am »
Okay. Will keep an eye on it and thanks.
Doug

Offline seanr22a

  • Newbie
  • *
  • Posts: 15
  • Karma: +0/-0
    • View Profile
Re: New 502 Bad Gateway
« Reply #69 on: October 12, 2017, 09:21:32 am »
Now the SG-2440 boxes stopped working as well  :( it lasted 6 days before I got 502 error.  Now all of them are back running 2.3.4p1 and  XMLRPC Sync is working as well. I will wait for the final release before I give 2.4 a new try.

Offline MaxPF

  • Full Member
  • ***
  • Posts: 256
  • Karma: +1/-0
    • View Profile
Re: New 502 Bad Gateway
« Reply #70 on: October 12, 2017, 11:53:13 am »
Same thing here this morning. I had to force a reboot. I also increased sysctl kern.ipc.soacceptqueue to 4096 as suggested. While I was at it, I updated to latest build and it now says 2.4 RELEASE.

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 21113
  • Karma: +1381/-25
    • View Profile
Re: New 502 Bad Gateway
« Reply #71 on: October 12, 2017, 12:08:57 pm »
For anyone still seeing the problem after updating to 2.4.0-RELEASE, please gather the info I asked for in https://forum.pfsense.org/index.php?topic=137103.msg753994#msg753994 before rebooting the firewall and also supply a full list of installed packages that are running.

pfBlocker is mentioned a lot, but at least in the output shown so far, squid+clamav appeared to be more likely at fault.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline BreeOge

  • Jr. Member
  • **
  • Posts: 61
  • Karma: +6/-0
    • View Profile
Re: New 502 Bad Gateway
« Reply #72 on: October 12, 2017, 12:35:47 pm »
Lots of port 1344, do you have squid+clamav active as well? Can you try shutting that off?

Also that netstat -x output is too big to put inline, you should attach that in a .txt file

Locked up again, without squid+clamav installed..

Code: [Select]
# /usr/sbin/swapinfo -h
Device          1K-blocks     Used    Avail Capacity
/dev/label/swap0  33554428       0B      32G     0%
#

Code: [Select]
# /usr/bin/top | /usr/bin/head -n7
last pid: 44796;  load averages:  0.10,  0.13,  0.12  up 0+14:58:53    12:32:05
88 processes:  1 running, 85 sleeping, 2 stopped

Mem: 475M Active, 827M Inact, 1187M Wired, 832M Buf, 13G Free
Swap: 32G Total, 32G Free


Code: [Select]
# /usr/bin/netstat -Ln
Current listen queue sizes (qlen/incqlen/maxqlen)
Proto Listen                           Local Address
Netgraph sockets
Type  Recv-Q Send-Q Node Address   #Hooks
ctrl       0      0 [46b]:            0
ctrl       0      0 [468]:            0
ctrl       0      0 [44b]:            0
ctrl       0      0 [443]:            0
ctrl       0      0 [3f9]:            0
ctrl       0      0 [3b0]:            0
ctrl       0      0 [367]:            0
ctrl       0      0 [31e]:            0
ctrl       0      0 [2d5]:            0
ctrl       0      0 [28c]:            0
ctrl       0      0 [243]:            0
ctrl       0      0 [1fb]:            0
ctrl       0      0 [1b0]:            0
ctrl       0      0 [11]:             0
ctrl       0      0 [5]:              0
unix  0/0/5                            /var/run/dpinger_WAN_DHCP~70.178.196.154~70.178.196.1.sock
unix  0/0/5                            /var/run/dpinger_Steve_Telephone~192.168.16.2~10.10.10.2.sock
unix  0/0/5                            /var/run/dpinger_Raymond_Telephone~192.168.16.2~10.10.12.2.sock
unix  0/0/5                            /var/run/dpinger_Kevin_Telephone~192.168.16.2~10.10.11.2.sock
unix  0/0/5                            /var/run/dpinger_Cisco_Router~192.168.16.2~192.168.16.201.sock
unix  0/0/4                            /var/run/devd.pipe
unix  0/0/30                           /var/run/check_reload_status
unix  193/0/128                        /var/run/php-fpm.socket
unix  0/0/4                            /var/run/devd.seqpacket.pipe


pastbin /usr/bin/netstat -xn

https://pastebin.com/ZFujW9Kp

Offline pyrodex

  • Jr. Member
  • **
  • Posts: 30
  • Karma: +0/-0
    • View Profile
Re: New 502 Bad Gateway
« Reply #73 on: October 12, 2017, 12:42:47 pm »
For anyone still seeing the problem after updating to 2.4.0-RELEASE, please gather the info I asked for in https://forum.pfsense.org/index.php?topic=137103.msg753994#msg753994 before rebooting the firewall and also supply a full list of installed packages that are running.

pfBlocker is mentioned a lot, but at least in the output shown so far, squid+clamav appeared to be more likely at fault.

I have never run squid+clamav and experienced it with only pfBlocker. I removed it the other day to restore usability and haven't had a lockup since.

Offline BreeOge

  • Jr. Member
  • **
  • Posts: 61
  • Karma: +6/-0
    • View Profile
Re: New 502 Bad Gateway
« Reply #74 on: October 12, 2017, 12:49:20 pm »
Here is the logs from another system, i removed the Squid+Clamav as well on this system. it locked up as well


Code: [Select]
# /usr/sbin/swapinfo -h
Device          1K-blocks     Used    Avail Capacity
/dev/gptid/d2a5a9dd-7e41-11e7-b   3684016       0B     3.5G     0%
Code: [Select]
# /usr/bin/top | /usr/bin/head -n7
last pid: 33447;  load averages:  0.08,  0.10,  0.08  up 0+12:43:35    12:46:18
113 processes: 1 running, 110 sleeping, 2 stopped

Mem: 689M Active, 1655M Inact, 945M Wired, 650M Buf, 4548M Free
Swap: 3598M Total, 3598M Free

Code: [Select]
# /usr/bin/netstat -Ln
Current listen queue sizes (qlen/incqlen/maxqlen)
Proto Listen                           Local Address
Netgraph sockets
Type  Recv-Q Send-Q Node Address   #Hooks
ctrl       0      0 [ea1]:            0
ctrl       0      0 [e92]:            0
ctrl       0      0 [e73]:            0
ctrl       0      0 [e6b]:            0
ctrl       0      0 [e66]:            0
ctrl       0      0 [e]:              0
ctrl       0      0 [5]:              0
unix  0/0/80                           /tmp/mysql.sock
unix  0/0/5                            /var/run/dpinger_WAN_DHCP~70.178.22.158~70.178.22.1.sock
unix  0/0/4                            /var/run/devd.pipe
unix  0/0/30                           /var/run/check_reload_status
unix  193/0/128                        /var/run/php-fpm.socket
unix  0/0/4                            /var/run/devd.seqpacket.pipe

/usr/bin/netstat -xn = See file attached.