pfSense Gold Subscription

Author Topic: Web interface unresponsive  (Read 13296 times)

0 Members and 1 Guest are viewing this topic.

Offline sdamron

  • Newbie
  • *
  • Posts: 13
    • View Profile
Web interface unresponsive
« on: January 26, 2012, 10:04:31 pm »
I have installed the latest 2.x version, single core i386 (P4 2.4 ghz) 2 gigs of ram and a 40 gig hard drive.  The system runs fine for between 2 and 6 hours.  I can access the web interface, then, randomly, I click on something and the web interface stops responding.  Has anyone else seen this?  The system still passes traffic as normal, but if I try to restart the web interface from the console, the console is frozen as well.

I let it set for about 2 hours after I hit the restart web configurator menu choice, but it was still frozen.  If I hard reset it, it will come up and run fsck and then start and run normal again.  I have looked all through the logs but find nothing relating to a hardware failure or interface issues.

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 14932
    • View Profile
Re: Web interface unresponsive
« Reply #1 on: January 27, 2012, 07:29:54 am »
We have had some very rare reports that certain hardware will flake out like that while watching the traffic graph like that.

Next time it happens, try this:

Code: [Select]
killall -9 php; killall -9 lighttpd; /etc/rc.restart_webgui
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline lutech

  • Newbie
  • *
  • Posts: 2
    • View Profile
Re: Web interface unresponsive
« Reply #2 on: February 01, 2012, 01:44:19 pm »
We also have this in 2.0.1 i386 on a HP DL380 G4 8GB ram 2x3.4GHz. Haven't found the pattern yet, but webGUI hangs more and more and finally becomes useless. Fine again after kill/restart for a while...

Offline anomaly0617

  • Newbie
  • *
  • Posts: 21
    • View Profile
Re: Web interface unresponsive
« Reply #3 on: February 01, 2012, 02:38:16 pm »
Just some thoughts: In many cases the WebConfigurator Lockout Rules get in the way, especially for repeated inquiries to the firewall over the WAN interface.

So, are you trying to do this over the WAN interface or the LAN interface?

If LAN, do you have your WebConfigurator Anti-Lockout option UNchecked in System -> Advanced?
If LAN, can you access the console via the console itself, or via SSH?

If WAN, you might try this, which just fixed the issues for me:

The unresponsive web interface for the backup turned out to be the WebConfigurator Lockout rule getting in my way.
I found this by access the WebGUI on the LAN and going to Status -> System Logs -> Firewall.
I looked at the blocked log entry coming from my source IP to the firewall's destination IP.
I click on the Red Block symbol on the left, and it tells you what rule blocked it (@12: WebConfigurator Lockout Rule, in my case).

To solve the issue, I removed all of my allow rules from the NAT and Rules tables allowing my external IP in to this firewall, and then I rebooted the firewall under Diagnostics -> Reboot -> Yes.

Once the firewall rebooted, I went into the rules table, created a new rule:
Protocol: TCP
Source: {MyExternalSourceIP} (I used an alias)
SourcePort: Any
Destination: WAN Address
DestinationPort: {MyAdminPort}
Gateway: Any
Queue: None
Schedule: None

And voila, I can access the firewall Admin port again from my remote office.

Good luck, and I hope this helps!
« Last Edit: February 01, 2012, 02:39:52 pm by anomaly0617 »

Offline lutech

  • Newbie
  • *
  • Posts: 2
    • View Profile
Re: Web interface unresponsive
« Reply #4 on: February 02, 2012, 08:20:43 am »
@anomaly0617 Using LAN interface,  Disable webConfigurator anti-lockout rule UNchecked. Not the same problem as you I think. This is more of a UI bug that slows the UI down. If I wait for 1-2 minutes I get a response back. Next request can be fast, and then wait antoher minute for the next. No understandable pattern. Load on the server i LOW.

Offline linco

  • Newbie
  • *
  • Posts: 7
    • View Profile
Re: Web interface unresponsive
« Reply #5 on: February 02, 2012, 11:10:05 pm »
Same problem with amd64 version on amd opteron server with 6 intel network cards igb. With 32 bit version of pfsense - no problems. What kind of network driver you have? (em, igb?). I think its network driver problem for 8.1 freebsd 64+igb.

Offline computermad

  • Newbie
  • *
  • Posts: 1
    • View Profile
Re: Web interface unresponsive
« Reply #6 on: February 26, 2012, 02:54:17 pm »
see if u hv incorrect settings on the ldap auth.
I got mine fixed after removing the inactive ldap server entries from the user auth. setting.

Offline oduesp

  • Newbie
  • *
  • Posts: 2
    • View Profile
Re: Web interface unresponsive
« Reply #7 on: March 23, 2012, 10:45:53 am »
Same thing here on 2.0.1-RELEASE-pfSense (amd64) on Dell R610 with:
4 Intel and 4 Broadcom NIC (on 2 X E5620 and 8GB RAM). When the GUI became unresponsive, the SSH daemon answer and the connection gets stuck after entering the password or immediately logs me out.
Very frustrating as it happens randomly in a time frame between 5mn to 20mn and I'm trying to create a huge amount of rules for router/firewall migration

Edit: putting the nic in promiscuous mode dont help

Edit2: The recover time is also random (2mn to TimeOut)

Edit3: nothing is suspect in the logs, at least those in /var/log
« Last Edit: March 23, 2012, 11:45:53 am by oduesp »

Offline fiftyheight

  • Newbie
  • *
  • Posts: 4
    • View Profile
Re: Web interface unresponsive
« Reply #8 on: July 20, 2012, 01:40:53 am »
hi
We've got the same here, with 2.0.1 amd64 / intel gigabit + intel quad port gigabit nics (all em driver)
In the cases, all services seems OK but webinterface no

The jimp's workaround work, but it's a quite frustrating issue

Offline tozdemirel

  • Newbie
  • *
  • Posts: 1
    • View Profile
Re: Web interface unresponsive
« Reply #9 on: July 21, 2012, 07:40:33 pm »
Hi,

I had the same problem with 4 bce and 2 em interfaces on HP DL380 G7 server. I also had boot messages about em interfaces like;
Code: [Select]
em0 Could not setup receive structures
I fixed that issue after some workaround.

With my installation /boot/loader.conf file comes with that line;
Code: [Select]
kern.ipc.nmbclusters="0"
I replaced that 0 with 655356 and issue solved...

You can get more information about that parameter and use proper value for your system.

Offline StitchTech

  • Newbie
  • *
  • Posts: 1
    • View Profile
Re: Web interface unresponsive
« Reply #10 on: August 31, 2012, 09:56:36 am »
I have the same issue and I can't make changes using the GUI because it's so unresponsive. I generally get a login prompt after a long wait when trying to connect but when I put in my username and password it usually comes back with a 503 - Service Not Available error. I'm a Linux newbie (but a CCNA so I know my way around a network) so I don't have a clue how to make the changes recommended in this thread by editing the config files. Any help would be greatly appreciated. I'm running a Dell T110 server with 500GB disk drive. I have three LANs along with the WAN all using the Dell bce ports on the two installed NIC cards.

Offline Bittone66

  • Newbie
  • *
  • Posts: 14
    • View Profile
Re: Web interface unresponsive
« Reply #11 on: March 28, 2013, 02:32:06 am »
Hello people,
same problem here: 2.0.2, AMD 64 on a Della 2950 server 1 Opteron dual core CPU, 8 GB ram, 2 broadcom + 4 intel Eth Adapter.
I'm running Squid a revrse proxy, multiple OPENVPN tunnels, FreeRADIUS 2, IPSEC VPN as server.
Bye

A.T.

Offline CDuv

  • Newbie
  • *
  • Posts: 23
    • View Profile
Re: Web interface unresponsive
« Reply #12 on: September 12, 2013, 09:42:58 am »
see if u hv incorrect settings on the ldap auth.
I got mine fixed after removing the inactive ldap server entries from the user auth. setting.
Also happens when there is DNS resolving issues with the LDAP(s) server(s) FQDN :
Quote
Sep 12 14:27:39 pfsense php: /status_services.php: ERROR! ldap_get_groups() could not bind to server MyCompany. : Can't contact LDAP server
One advice is to set an IP address in "Authentication Servers" config page (or to have complete faith into it's DNS server to respond).

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 14932
    • View Profile
Re: Web interface unresponsive
« Reply #13 on: September 12, 2013, 10:00:51 am »
One advice is to set an IP address in "Authentication Servers" config page (or to have complete faith into it's DNS server to respond).

That would work with plain LDAP, but with LDAP+SSL, a hostname is required (and it must match the hostname of the LDAP server's certificate CN also)
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!