Should I Upgrade to v16.6.2 - Home User (HomPro Subcription)

[sky-knight]

I just created my 3 link files to ensure my 3 configured interfaces stayed put while 16.5 went to 16.6. A reboot later I'm a little saddened to see my familiar green Untangle logo replaced with a blue Arista, end of an era.

But traffic is flowing, I too am seeing a huge upswing in CPU load that went away as soon as I shut off Intrusion Prevention. I'm going to nuke the module and start it fresh to see if that helps.

Upgrade took about 20min, not too bad for a new OS. Also cleaned up the old kernels, which was nice. This install had 7-8 of them in there.

[mikel]

Thank you so much for this valuable tip @sky-night . I have been delaying upgrading my 2 systems but since I don't use the IP app I think I will go ahead and schedule those updates.
I am correct in assuming that you only create the .link files for the interface names associated with the physical NICs and that any VLAN interfaces associated with those NICs will be OK?

[mikel]

Sorry one other question. Do you create the .link files on the system when it's running 16.5 prior to the upgrade. Or do you have to wait until after the upgrade and do it on the 16.6 system and then reboot?

Mike

[sky-knight]

I made the files in advance to ensure the physical interfaces that I have configured didn't move. Only 3 files, but there are like 8 VLAN interfaces spread over those three, don't have to worry about the VLANs.

[BerkeleyIV]

I just created my 3 link files to ensure my 3 configured interfaces stayed put while 16.5 went to 16.6. A reboot later I'm a little saddened to see my familiar green Untangle logo replaced with a blue Arista, end of an era.

But traffic is flowing, I too am seeing a huge upswing in CPU load that went away as soon as I shut off Intrusion Prevention. I'm going to nuke the module and start it fresh to see if that helps.

Upgrade took about 20min, not too bad for a new OS. Also cleaned up the old kernels, which was nice. This install had 7-8 of them in there.

What is the logic behind nuke and re-install the Intrusion Prevention module? Are different versions of the ETM apps available to test or are you just cleaning up potential cruft? Thanks...

[Kyawa]

How do I copy the files to /etc/systemd/network

[sky-knight]

What is the logic behind nuke and re-install the Intrusion Prevention module? Are different versions of the ETM apps available to test or are you just cleaning up potential cruft? Thanks...

Each module is its own server, and sometimes upgrades goof them up in various ways. So yes, cruft. And in my case the 16.6 is using a bit more CPU than 16.5 did, but it's stable and well within what I expect as normal expansion with the improvements in Surricata in the time period in question.

[zed173]

I'm kind of dumbfounded this interface re-arranging debacle isn't addressed in the upgrade. Not everyone is an expert on Debian (and this seems like kind of a FU oversight on their part but that's a separate story). If we're to treat this as an appliance, this literally shouldn't ever happen. As someone who loves Untangle and pays every year, I'm starting to feel the lack of love here....also the deafening silence of responses to the IDS CPU issue and this kind of says alot...and it makes me sad.

[hd908]

Can someone explain a novice on how to make these file changes? I finally got everything working and on reboot all the interfaces were mixed up. I see this is supposed to be resolved in 17 beta. Thanks

[donhwyo]

Where did you see info about "17 beta"? For writing the files you can use nano on the cli.

[donhwyo]

Well I found this https://forums.edge.arista.com/forum/ng-firewall/ng-firewall-general/396826-ng-firewall-version-17-beta-now-available but it comes up with a blank page. The search on this site is almost useless. I have been using a search (last visit) as the bookmark page . It never showed that post or at least I never saw it.

[hd908]

Well I found this https://forums.edge.arista.com/forum/ng-firewall/ng-firewall-general/396826-ng-firewall-version-17-beta-now-available but it comes up with a blank page. The search on this site is almost useless. I have been using a search (last visit) as the bookmark page . It never showed that post or at least I never saw it.

That is where I found it. Its a sticky and was working yesterday.

[hd908]

Where did you see info about "17 beta"? For writing the files you can use nano on the cli.

Sorry to be a pain but how to I get to the CLI and where can I learn to use nano?
Thank you

[donhwyo]

There are few ways. You can login on a monitor and keyboard connected to the hardware. Then one of the icons will be a local console. Or you can ssh from another machine like linux or mac. For windows you can install putty and ssh from that.

As for nano just enter

nano /etc/whatever

. Type what you need. To save enter control key o. To exit type control key x. Google will give more details but that should get you going.

[Loudog2]

Can someone explain a novice on how to make these file changes? I finally got everything working and on reboot all the interfaces were mixed up. I see this is supposed to be resolved in 17 beta. Thanks

Did you back everything up before the upgrade? I still haven’t upgraded because we have had something every weekend the past few weeks for my daughter’s volleyball. No time to sit and fix everything right now. If I back up before the upgrade, I should be able to download it to make everything the way it was right?