After upgrading a virtual FreeBSD 12.2 system to 13.0-p3, traffic to services within jails (through Apache 2.4 reverse proxy) was blocked.
This is a Hyper-V virtual server and the second one that shows the same problem (the other one being a commercial VPS, hypervisor type unknown).
At first, I thought it would be a PF problem, as stopping PF solved the problem.
I looked for blocked traffic within the PF logs but couldn't find anything.
Later on, I noticed that creating a new jail (with ezjail) didn't work because the soft links weren't created.
Also, accessing the services within the jails didn't work either, wereas this isn't a problem in 12.2 jails.
As a test, I created a new physical v13 server from scratch and configured it as the upgraded one. Everything worked as it should.
Second, I created another Hyper-V virtual system (on the same host) and installed it from scratch and configured it as the upgraded one (copied /etc/rc.conf and /usr/local/etc/pf_rules containing my firewall rules and changed the IP addresses). All this worked as it should.
So I'm stuck with several v12.2 systems I would like to upgrade to v13.0, but 2 attempts failed on the same issue: services within jails are no longer accessible.
It looks like it has something to do with PF (as stopping it solves the issue) but then again it doesn't (as the same config on a freshly installed system works fine).
As setup and configuration are identical, I can't find anything that causes this.
Is there another way to find out what's going wrong here? (like some other logging I could enable to see why creating a new jail gives no errors but renders a non-working jail because the links to /basejail/* aren't created)
This is a Hyper-V virtual server and the second one that shows the same problem (the other one being a commercial VPS, hypervisor type unknown).
At first, I thought it would be a PF problem, as stopping PF solved the problem.
I looked for blocked traffic within the PF logs but couldn't find anything.
Later on, I noticed that creating a new jail (with ezjail) didn't work because the soft links weren't created.
Also, accessing the services within the jails didn't work either, wereas this isn't a problem in 12.2 jails.
As a test, I created a new physical v13 server from scratch and configured it as the upgraded one. Everything worked as it should.
Second, I created another Hyper-V virtual system (on the same host) and installed it from scratch and configured it as the upgraded one (copied /etc/rc.conf and /usr/local/etc/pf_rules containing my firewall rules and changed the IP addresses). All this worked as it should.
So I'm stuck with several v12.2 systems I would like to upgrade to v13.0, but 2 attempts failed on the same issue: services within jails are no longer accessible.
It looks like it has something to do with PF (as stopping it solves the issue) but then again it doesn't (as the same config on a freshly installed system works fine).
As setup and configuration are identical, I can't find anything that causes this.
Is there another way to find out what's going wrong here? (like some other logging I could enable to see why creating a new jail gives no errors but renders a non-working jail because the links to /basejail/* aren't created)
