ISC DHCP has reached end-of-life and will be removed in a future version of pfSense

elvisimprsntr · November 19, 2023, 2:49am

BACKGROUND

I upgraded to pfSense 2.7.1 CE and happed to notice the following two new warning banners that ISC DHCP is EOL and we need to migrate Kea DHCP. Apparently the migration is not automatic or straight forward.

MIGRATION TOOLS

Unfortunately, the migration tools assume you have a traditional /etc/dhcp/dhcpd.conf file to convert and upload.

QUESTIONS

I am using:

DNS Resolver with DNSSEC and SSL/TLS with a few host overrides.
DHCP Server with a ton of static reservations.

Does this affect both DHS and DHCP, or just DHCP?
What does the new Kea DHCP settings look like?
Has anyone else gone through the migration process that can share any tips?
Will this involve exporting the config.xml and hand editing the file?
Is someone woking on a migration tool specifically for pfSense?
If I perform a clean install of 2.7.1 CE and restore a 2.7.0 CE config.xml file, will pfSense automatically migrate to Kea DHCP?
Or does one simply select the radio button and save, and it all works automagically?

Has anyone does any extensive testing with Kea DHCP?
Or should we all wait for some other poor soul(s) to be the guinea pigs?

Seems like this might be a good subject for @LTS_Tom to cover in a video.

xMAXIMUSx · November 19, 2023, 3:22am

I’m not sure what you mean. I enabled kea dhcp and it just worked for me.

elvisimprsntr · November 19, 2023, 3:28am

According to the ISC link there are Kea migration tools, but still requires manual edits.

I guess I am being overly concerned. I just don’t want to be the person who takes the whole family off the internet without knowing the implications or having a backup plan, like the FB BGP incident.

xMAXIMUSx · November 19, 2023, 3:51am

I’m not sure what to tell ya friend. I literally just select kea DHCP and saved my changes and everything just worked.

mikeys · November 19, 2023, 7:52am

Exactly the same for me, I’ve just switched over and had to do nothing extra. Reservations there, scopes there and so forth.

An item that isn’t there is advanced options like option 43 config etc. I haven’t looked very hard though atm

elvisimprsntr · November 19, 2023, 9:07am

Thanks E1. I took the plunge.

neogrid · November 19, 2023, 1:21pm

Fairly sure that Netgate has mentioned that Kea hasn’t been fully implemented as yet, hence there is a choice. Can’t recall the reason why I didn’t enable it but there was something that made choose to wait.

elvisimprsntr · November 19, 2023, 1:48pm

Apparently Kea is not feature complete yet