https://redmine.pfsense.org/https://redmine.pfsense.org/favicon.ico?16780521162021-07-18T02:13:39ZpfSense bugtrackerpfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=551072021-07-18T02:13:39ZAndrew McCann
<ul></ul><p>Kris Phillips wrote:</p>
<blockquote>
<p>If a device is being configured offline, if the device is unable to query DNS, the webConfigurator causes a noticeable delay between every page load. As soon as WAN is connected and have uplink connectivity the webConfigurator responds normally. There seems to be an issue where pfSense is checking DNS on every page reload for some reason.</p>
</blockquote>
<p>Kris, hope you dont mind me adding comments, but I think this is related to an issue another person and I are having, <a class="external" href="https://forum.netgate.com/topic/165102/gui-faling-to-respond-developer-comment-requested">https://forum.netgate.com/topic/165102/gui-faling-to-respond-developer-comment-requested</a>, when my ISP went down, the web interface was unusable after approx 2-4 mins, physically disconnecting the wan link and a forced reboot prevented the freeze from occurring, but if you let it freeze with WAN enabled, you could not make it responsive by disconnecting the WAN. Happy to provide any further info/logs if required.</p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=551122021-07-18T16:56:47ZMarcos M
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Feedback</i></li></ul><p>I'm not able to reproduce this on 2.5.2.</p>
<p>There are instances in which no internet/DNS connectivity will result in delayed page loads, but I would not expect that to happen for every page load. For example, see <a class="issue tracker-4 status-3 priority-4 priority-default closed" title="Todo: Make AutoConfigBackup menu entry point to the settings tab so it loads faster when there is no WA... (Resolved)" href="https://redmine.pfsense.org/issues/12093">#12093</a>. In some situations when there is no connectivity, the login page will also be delayed due to the browser trying to verify the certificate - the workaround in this case in my experience being to access the login page by IP instead of fqdn.</p>
With this in mind, if the issue can still be reproduced, check the following:
<ul>
<li>The network tools of the browser may show an issue with a specific resource.</li>
<li>Set Unbound log level to 3 and check if there are any specific domain resolution failures that correlate to the page loads.</li>
</ul> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=551302021-07-19T09:07:02ZJim Pingle
<ul></ul><p>If it's every page load then most likely it's related to authentication settings, like it's trying to check privileges against an LDAP or RADIUS server by hostname. If that is the case, then there is not much to be done there since it's attempting to properly validate that a user should be able to access the page, then falling back to local privilege checks.</p>
<p>In most cases I'd only expect this to happen on pages like the Dashboard or ARP table or something else that heavily uses DNS.</p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=551472021-07-19T19:50:45ZAndrew McCann
<ul></ul><p>Hi Jim</p>
<p>Apologies, I haven't had a chance to test yet, but just a FYI, by pfsense box is a home machine, nothing special, no Domain/LDAP/RADIUS, I will try and runs some tests this afternoon using Unbound log level 3. I will also try and ssh into the box while its locked to see if I can see anything....</p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=552242021-07-24T15:09:33ZKris Phillips
<ul></ul><p>Jim Pingle wrote in <a href="#note-3">#note-3</a>:</p>
<blockquote>
<p>If it's every page load then most likely it's related to authentication settings, like it's trying to check privileges against an LDAP or RADIUS server by hostname. If that is the case, then there is not much to be done there since it's attempting to properly validate that a user should be able to access the page, then falling back to local privilege checks.</p>
<p>In most cases I'd only expect this to happen on pages like the Dashboard or ARP table or something else that heavily uses DNS.</p>
</blockquote>
<p>Jim,</p>
<p>Is there a particular reason the Dashboard needs to be doing DNS lookups? The only component of it that I can think of that would need to do DNS would be the update check widget. I will have to test a device with no network connectivity with the dashboard update check disabled.</p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=552282021-07-24T21:13:40ZKris Phillips
<ul></ul><p>Oddly setting the WAN interface of a firewall to None for IPv4 and IPv6 causes no slowness in the webConfigurator. It seems only when physical link is lost that the issue is present.</p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=558862021-08-21T21:28:53ZKris Phillips
<ul></ul><p>Still seeing this randomly with customer firewalls. If the WAN interface is disabled or physically disconnected, the issue goes away. If it is enabled, thinks it has WAN access (gateway thinks its up) but has no route to the internet (such as a customer with double NAT) the firewall hangs for a very long time before loading to the dashboard. Disabling the update check does not appear to resolve this.</p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=559312021-08-24T12:19:03ZMarcos M
<ul></ul><p>I tried reproducing this on a lab. The gateway is online but pfSense is not able to reach any internet resources (including any DNS). The issue only exists on pages with DNS queries (e.g. update check page which times out with 504).</p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=573942021-11-13T18:42:50ZKris Phillips
<ul></ul><p>Marcos Mendoza wrote in <a href="#note-8">#note-8</a>:</p>
<blockquote>
<p>I tried reproducing this on a lab. The gateway is online but pfSense is not able to reach any internet resources (including any DNS). The issue only exists on pages with DNS queries (e.g. update check page which times out with 504).</p>
</blockquote>
<p>I wouldn't expect a 504 to be expected behavior here. The update page should produce an "Unable to check for updates" error message, but not bomb completely.</p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=574032021-11-14T10:07:11ZMarcos M
<ul></ul><p>I agree. There are certain places in the GUI that are affected - the ACB page also being an example (see <a class="external" href="https://redmine.pfsense.org/issues/12093">https://redmine.pfsense.org/issues/12093</a>).</p>
<p>This redmine describes the issue being present on all page loads which would be a different issue.</p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=574232021-11-15T09:53:28ZViktor Gurov
<ul></ul><p>we can use <code>check_dnsavailable()</code> from <a class="issue tracker-8 status-5 priority-4 priority-default closed" title="Regression: DHCP Leases page and ARP table page fail to load if DNS is not available (Closed)" href="https://redmine.pfsense.org/issues/11512">#11512</a> to optimize this behavior<br />see also <a class="issue tracker-1 status-1 priority-4 priority-default" title="Bug: IPsec DNS inefficiency (New)" href="https://redmine.pfsense.org/issues/12335">#12335</a> and <a class="issue tracker-1 status-1 priority-4 priority-default" title="Bug: Dashboard hangs when widget needs data from a remote host which is down (New)" href="https://redmine.pfsense.org/issues/9677">#9677</a></p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=574302021-11-16T02:32:27ZViktor Gurov
<ul></ul><p>fix:<br /><a class="external" href="https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/463">https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/463</a></p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=574382021-11-16T10:45:46ZJim Pingle
<ul><li><strong>Status</strong> changed from <i>Feedback</i> to <i>Pull Request Review</i></li><li><strong>Assignee</strong> set to <i>Viktor Gurov</i></li><li><strong>Target version</strong> set to <i>2.6.0</i></li><li><strong>Plus Target Version</strong> set to <i>22.01</i></li></ul> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=574402021-11-16T11:00:11ZViktor Gurov
<ul><li><strong>Status</strong> changed from <i>Pull Request Review</i> to <i>Feedback</i></li><li><strong>% Done</strong> changed from <i>0</i> to <i>100</i></li></ul><p>Applied in changeset <a class="changeset" title="DNS check improvements for fw check and ACB. Fixes #12141" href="https://redmine.pfsense.org/projects/pfsense/repository/2/revisions/bbb3bbebbf8059e72d60dbb1721d997568ae2090">bbb3bbebbf8059e72d60dbb1721d997568ae2090</a>.</p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=574422021-11-16T11:29:22ZMarcos M
<ul></ul><p>Perhaps we should hardcode / fall back to different DNS providers; e.g. use <code>1.1.1.1</code> and <code>8.8.8.8</code> (and IPv6 counterparts) instead of just Google's DNS.</p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=576502021-12-03T12:40:14ZJim Pingle
<ul><li><strong>Subject</strong> changed from <i>Lack of DNS/Internet Connectivity Causes webConfigurator to be Painfully Slow</i> to <i>Lack of DNS or Internet connectivity causes GUI to be slow</i></li></ul><p>Updating subject for release notes.</p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=586082022-01-25T18:05:44ZMarcos M
<ul><li><strong>Status</strong> changed from <i>Feedback</i> to <i>New</i></li><li><strong>Release Notes</strong> changed from <i>Default</i> to <i>Force Exclusion</i></li></ul><p>Tested on <code>2.6.0-RELEASE</code> by blocking upstream any connection to the internet. Trying to load the dashboard took 40 to 60 seconds without DNS. Changed the General Setup settings to use remote DNS and ignore local DNS, same result.</p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=586092022-01-25T18:06:49ZMarcos M
<ul><li><strong>Target version</strong> changed from <i>2.6.0</i> to <i>CE-Next</i></li><li><strong>Plus Target Version</strong> changed from <i>22.01</i> to <i>Plus-Next</i></li><li><strong>Release Notes</strong> changed from <i>Force Exclusion</i> to <i>Default</i></li></ul> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=586772022-01-31T06:10:08ZViktor Gurov
<ul></ul><p>Marcos Mendoza wrote in <a href="#note-17">#note-17</a>:</p>
<blockquote>
<p>Tested on <code>2.6.0-RELEASE</code> by blocking upstream any connection to the internet. Trying to load the dashboard took 40 to 60 seconds without DNS. Changed the General Setup settings to use remote DNS and ignore local DNS, same result.</p>
</blockquote>
<p>Found an issue:<br /><a class="external" href="https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/590">https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/590</a></p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=589302022-02-14T09:59:04ZJim Pingle
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Pull Request Review</i></li><li><strong>Target version</strong> changed from <i>CE-Next</i> to <i>2.7.0</i></li><li><strong>Plus Target Version</strong> changed from <i>Plus-Next</i> to <i>22.05</i></li></ul> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=589422022-02-14T10:36:11ZViktor Gurov
<ul><li><strong>Status</strong> changed from <i>Pull Request Review</i> to <i>Feedback</i></li></ul><p>Merged:<br /><a class="external" href="https://github.com/pfsense/pfsense/commit/8cb0120e0207a14ca303c7258567f4df835f904b">https://github.com/pfsense/pfsense/commit/8cb0120e0207a14ca303c7258567f4df835f904b</a></p> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=611252022-05-13T05:46:29ZViktor Gurov
<ul><li><strong>Related to</strong> <i><a class="issue tracker-8 status-3 priority-3 priority-low2 closed" href="/issues/13162">Regression #13162</a>: Upgrade does not work when using only IPv6 DNS servers</i> added</li></ul> pfSense - Bug #12141: Lack of DNS or Internet connectivity causes GUI to be slowhttps://redmine.pfsense.org/issues/12141?journal_id=615822022-05-31T15:28:10ZReid Linnemann
<ul><li><strong>Status</strong> changed from <i>Feedback</i> to <i>Resolved</i></li></ul>