New Features in pfSense Plus version 22.01 and pfSense CE version 2.6.0!

[@LAWRENCESYSTEMS]

Reddit post www.reddit.com/r/PFSENSE/comments/ssabdz/pfsense_plus_version_2201_and_pfsense_ce_version/ Full Release Notes docs.netgate.com/pfsense/en/latest/releases/22-01_2-6-0.html Christian McDonald Videos: New pfSense Releases! Plus 22.01 and CE 2.6.0! kzbin.info/www/bejne/oIvTdYWZjM98pc0 pfSense Software + WireGuard Package - Project Report 011 kzbin.info/www/bejne/gWaYm4NuZcmCgq8 Netgate Blog Post www.netgate.com/blog/pfsense-plus-software-version-22.01-and-ce-2.6.0-are-now-available Upgrade Guide docs.netgate.com/pfsense/en/latest/install/upgrade-guide.html ⏱ Timestamps ⏱ 00:00 pfsense 2.6 / 22.02 01:59 Update Announcements 05:26 pfsense plus for Home Lab 07:17 Upgrade process 08:57 New Features and Changes 10:06 ZFS by Defualt 11:50 Password Hash Change SHA512 13:50 NTOPNG Update

[@davidbanner9001]

Thanks for the upload. Just came across the channel and now subbed.

[@DJRPka]

THANK YOU!!!! I could not figure out why the upgrade was failing!!!!!

[@thegreyfuzz]

Hardest part of the upgrade if you are wiping and re-installing with ZFS is to remember to take a screen capture or picture of your interface assignments BEFORE re-installing. However with 2.6 comes real VLAN labels for the 'network port' describing the VLAN and not just the interface name. As always thanks for the informative video Tom!

[@Venlaw]

Upgrade from 2.5.2 UFS to 2.6 ZFS was very simple. USB boot. Select config.xml from current boot drive. Upgrade. I was done and using ZFS. Everything working perfect.

[@jonathan.sullivan]

Have my upboat for the Reddit "What time does the Narwhals bacon 🥓" reference. Have a great day Tom.

[@davidkuznetsov2260]

I started update and opened your video, see my update failed at the same time you said zabbix 5.2 is not supported, removed those packages and everything updated without any issues Thank you!

[@mattcero1]

Every video I watch from this guy I seek out the "Subscribe" button only to find out I'm already subscribed. I'll upgrade tonight sir. TY

[@GianeshwarJamwal]

Thanks Tom, from your video I was able to figure out cause of failure in upgrade process on my Netgate device. Zabbix package causing failure which I was not able to figure out. Thanks a lot 👍

[@scottmackinnon5975]

2.6 update bricked my install. Had to rebuild and restore from backup.

[@jonharrison7160]

Been seeing complaints about pfBlockerNG and needing to apply a patch to the new pfSense release. Still trying to find out info on this.

[@alfish1]

Thanks for the upgrade tips, mine went fine!

[@wxfield]

I barely survived 2.5.2 -> 2.6.0. I'm so glad I backup my config and have everything in-place to recreate the router from scratch before I ever upgrade a pfsense release.

[@James_Knott]

I upgraded to 2.6.0 yesterday, with no problems. I run it on a Qotom mini PC with i5 CPU, 4 GB memory, 64 GB SSD & 4 Intel Gb Ethernet ports. I switched to ZFS last year, when I got the Qotom mini PC.

[@bertblankenstein3738]

The upgrade went perfectly. I backed up the configuration, but didn't need it. Worst case, I bring back the old firewall as I just turned it off and kept it in tact as I recently switched to pfsense.

[@kuro68000]

Thanks for the video. I don't know about pfSense+. I guess it depends how much attention CE continues to get, but there is a real danger it will be neglected. Once the community gets used to the corporate overlord doing a lot of the work, it can be hard to restart when the corp ditches it.

[@ecotts]

OPNsense

[@kuro68000]

@@ecotts Yes, wondering which mast to tie myself to now.

[@ZorgFS]

just to let you know - after yesterday's inplace upgrade from 2.5.2 HAproxy stopped working on every instance, that is HAproxy latest devel version with 2.xx backend, which I used for last several years already... service just doesn't start without any particular errors in logs... old stable, based on Haproxy 1.8, works fine after installation... Haven't found any mentions regarding that in google or Netgate...

[@ZorgFS]

also for Pfblocker NG extra manual steps required ti get it working, currently it IS NOT working after upgrade... still not fixed in release. check reddit for that

[@SM121982]

After the struggles I faced with the initial 2.5 update, I should know better than to YOLO pfSense upgrades. Thankfully, I didn't have any issues with 2.6.0.

[@tacioandrade]

Major versions I install only in 1 or two small clients for 1 or 2 weeks, and only after homologate in this place I upgrade all of my pfSenses. 2.5.0 and 2.5.1 have me a headache.

[@Alex-un5tl]

the upgrade was nice and easy and shortly upgraded to the plus version too :)

[@jorisdevaan6845]

Had to rollback to 2.5.2 traffic was completly broken on 2.6.0. Internet traffic was etrexemely slow and packcapature shows tcp packets in the wrong order.

[@stavroskois9656]

I had same slowdowns, even speedtests was cutting off before the even start. Everything was getting back to normal after disabled Traffic Shaper for Upload. (Guide followed from here from previous video for bufferbloat). It was super weird. Took sometime to figure out

[@rodneyaltamera4057]

Done updating to 2.6.0. Checking for any bugs. so far stable! Nice pfsense!

[@sviatoslavfeshchenko5084]

Dear Lawrence, would you be kind and consider creating a video on reinstalling pfsense on Netgate hardware, in order to switch from UFS to ZFS please? Should be fairly straightforward for you to do and you mentioned in your video that you have to do it anyway. It would be greatly appreciated. Many thanks.

[@waltonsteve3]

Best firewall..my needs are low but all working after my upgrade. Have deployed 100 UX6-Lites. All working great with a bit of tuning each day. Everyone can do this with a little thought.

[@ikkuranus]

If you're doing any of the at&t fiber residential gateway bypass methods, don't update from 2.5.2 as there is reports that something is breaking that.

[@dcoidua]

Thank you for the heads up, I'll hold off for now.

[@denniscarlos0829]

Already upgraded to 2.60 community edition. But intermittent connection occurred. so I switch back or downgrade to 2.5.1..

[@Margucci]

my upgrade of CE went perfectly. i would be interested in seeing a video of plus vs ce both with a feature difference as well as UI if that is a video you would be interested in making since its possible to upgrade for free for home/lab users. thanks for all the work

[@tomRX4878]

Me too. Don't see what I am gaining when I switch from CE to plus...

[@SkyNetworkSolutions]

Same here. I would love to see a vid showing the difference too.

[@jonathan.sullivan]

Also +1 for the config migration to another system via import XML file video. Suggestion: Do a straight config import on different hardware and show how to fix the nic assignment and other things and second, remove the nic info from the XML prior to export so when imported it works without the fixes in the first part.

[@ericsysmin]

My upgrade was seemless and I upgraded to the free home pfSense Plus!

[@borgdylan]

I already had plus (have a 5100 appliance). Upgrade went fine, but the middle LED doe snot light up anymore, only the green booted LED lights up. The firewall works OK and at full speed, even wireguard works great.

[@ident42]

upgrade resulted in ten kinds of weird, had to do a fresh install, glad I back my shit up.

[@PeteAUS1983]

Had an issue where Suricata flooded the var/log directory with files over 20GB causing services like DNS to fail as the disk was almost full. backed up the config and reinstalled. Running fine now

[@Cpgeekorg]

I run a headless pfsense box for my homelab (15-2500k, 4gb ram, intel quad-port nic) and I saw this video, was preparing to upgrade to the latest version and I'm SOOO glad i backed up and rebooted. upon my reboot (before upgrade), it didn't come backup... and as I don't have a console hooked up to this machine, had no idea why... had to hunt around for a vga monitor in my lab (found one in storage, hooked it up, and it looks like pfsense had (for whatever reason) had it's interfaces misconfigured and was waiting for me at the console to define interfaces properly (which I was able to do from memory as the interface configuration on this machine isn't particularly complex... if I chose to do an upgrade without the reboot, I'd be blaming it on the upgrade and jump directly to "bad update, need to reload the system" which would have been a pain.

[@DavidKelly-km9mu]

COMMENT: Thanks for the update, and ongoing expertise in describing the product development thereof, for operations of networks in delivery of services, Tomz on point with Pfsense, where his enthusiasm shines through to enlighten the audience, and for me the differential of OpnSense critically.......

[@davidjorge2948]

When updating to this version I noticed the system added a new user to the router, the username was 'cyrus'. Any1 got any idea what this is?

[@hoterychannel]

There's some comments around about "lost clan", or that pfsense 'forget' where about wlan and lan interface...

[@ag100pct]

Had no issues with the upgrade (once I learned how to read). I have not done any benchmarking, but after the move my browsing seems a bit snappier than it was.

[@fastjp72]

pfSense is great, I have used it for a long time but after all of Netgates bullying & nonsense it made me move onto OPNsense which is also great without all the B.S.! I know it's a business that needs to make money but they showed there true colors the way they did it!

[@georgelza]

just realised, as you can't do a inlace upgrade of UFS to ZFS and you said, backup, do upgrade, restore, don't forget... some people might want the historical data... aka pfBlockerng, suricata logs, zabbix metrics.

[@revealsins2me]

This plus has me concerned will they start to hide features on pfsense, been using it for years amazing firewall. I have started to tinker with opnsense think may switch.

[@cinlung]

Would you recommend a home user to upgrade to plus version? Why and why not? Are there any big performance or features advantage of plus over CE? I see that pfSense is trying to combine the two versions and eventually going all commercial and closed source.

[@hoterychannel]

Hope for some page load indicator, it's annoying to guess what happens - it's doing something or just hangs... It's hard to notice on build in pages like firewall rules which processing in couple of sec at max, but can take some time, for example, when turning on ntopng or other plugin... or trying to show too many log entries

[@befru]

Thanks for the video. These videos are always helpful. I have read that a lot of people seem to be having problems so I will wait a week or 2 before I upgrade. Do you know how to keep the webpage UI logged in (at least from a specific trusted LAN IP)? I live by myself and it's extremely annoying to have to constantly log in all of the time.

[@terrancegrant1664]

Updated and no issues.

[@zer0ish84]

I had to upgrade my packages before it would let me upgrade to 2.6.....wouldn't even detect the upgrade until the packages got updated.

[@Mr.Leeroy]

Is UFS instead of default ZFS is even an option now? I'm having a problem with ZFS being the only option because I have setups where having minimal RAM footprint is preferable.

[@ChristianMcDonald]

It’s not the only option. It’s the default and where future development is focused.

[@tacioandrade]

I have the same problem. I use pfSense as a VM in most of my clients and add 8GB of RAM to pfSense is complicate in most of cases witchout upgrade of the real server. =/

[@GiorgioAresu]

@@tacioandrade I think you should be able to leave it as it is. ZFS likes to have ram but does not need that much, it will just use it if you give it to it. Plus it’s not a file server with lots of IO needs

[@Mr.Leeroy]

E.g. my auxiliary pfSense VM dedicated to VPN router&gateway for separate VLAN is using ~37% of 512MB RAM (probably fits 256MB as well). And I would like to keep it that way.

[@tacioandrade]

@@GiorgioAresu Good points! 8GB is recomended to TrueNAS/FreeNAS. I will try install witch 2GB and 4GB and test the performance. In barematal ZFS mirror is a great option, in VM, UFS works great for me.

[@BigRonRN18]

I've been waiting to see your review before I update. I heard about the release yesterday but I can't update until tomorrow night at the earliest anyway. My wife works from home and relies on our router being up for her full day of work, as she teaches via video from home. I have several packages installed and wanted to know if there would be any issues before starting. Some of my packages include WireGuard, pfBlockerNG-devel, HAProxy, ACME, and FreeRADIUS3 to name a few.

[@ChristianMcDonald]

The only package that we are tracking an issue with is zabbix-agent52. Make sure to uninstall that version prior to upgrading.

[@peterpain6625]

Any thoughts on the "Support on pfSense CE installations not available after 12/31/2022" on the software-types page? (system register -> "Upgrade" -> "subscription page" -> "pfSense CE" under "Support Features")

[@ChristianMcDonald]

If you have a TAC support subscription you are entitled to an upgrade to pfSense Plus.

[@JoaoSilva-gs5jb]

@@ChristianMcDonald so they're restricting commercial use to be paid?

[@ChristianMcDonald]

@@JoaoSilva-gs5jb no. Nothing has changed in regards to CE. What has changed is that Netgate will no longer support CE installations through TAC subscriptions after 12/31/2022…so upgrade to Plus, it’s included in your TAC subscription at no additional cost

[@peterpain6625]

@@ChristianMcDonald Ok. My inner paranoia read something like "so they're gonna cancel pfSense CE this year!?" at first ;)

[@tac73]

After upgrading my NETGATE SG-3100 to 22.01. I observe, the pfSense DDNS client no longer updates my IP in Google Domains. As a workaround, I installed a DDNS updater client on my workstation, which does work. Anyone else notice this? UPDATE: Netgate support advises, it's a known issue, which will be fixed in the next release. There are patches available however.

[@2_girls_1_johnson68]

Can you please do a video on how to set up ipv6 for pfsense

[@LAWRENCESYSTEMS]

I don't use IPV6

[@BigRonRN18]

I just had an idea... especially considering the idea of ZFS being the default filesystem. I am thinking of just purchasing a new "hard drive" and install pfSense 2.6.0 directly on the new drive. My hardware is a Jetway NF9HG Mini-ITX motherboard with 8GB of RAM and I'm using an mSATA SSD. These drives are relatively inexpensive and if all hell breaks lose, I can just put my old mSATA drive in.

[@tacioandrade]

And you have a pfsense backup in the local easy to setup in case of ssd failure in the future!

[@billwilliam1001]

Or usb stick works welltoo

[@tacioandrade]

I love to run pfSense on Proxmox in my clients, the speed is good, the backup and snapshots save my live more of one time in the last years and is bether to me have a pfSense in a VM on real server instead on a desktop whithout redundance of power, RAID, etc.

[@hycron1234]

I tried running pfsense on Proxmox. I went to baremetal because I couldn't get gigabit speeds, only 12mB/s, instead of 100mB/s. Another Windows 10 virtual machine on proxmox was able to get 100mB/s so I know it wasn't Proxmox or duplex issues. Tried many suggestions online to fix it. Perhaps it was the move to an Intel network card that solved it. 🤔

[@tacioandrade]

@@hycron1234 Google install pfSense Proxmox, you will find in the pfSense and Proxmox documentation how to solve this! It's a simple setup in pfSense post installation!

[@hycron1234]

@@tacioandrade - I suppose I could get a second network card and not do router-on-a-stick vlan trunking, at least then I can follow one of these guides, might narrow down the problem. 🤔 Thanks.

[@tacioandrade]

@@hycron1234 I use VLAN with 300Mb internet links and 1Gb LAN and it works perfectly! Just look at the documentation that will say you have to disable Hardware offload and that's it, PVE will run beautifully! In general, I use 1 card for LAN and other VLANs and a card for each WAN, but depending on your traffic, you can use 1 card with only VLAN for everything.

[@hycron1234]

@@tacioandrade - Hmm, yeah, I already turned off hardware offload among other things recommended on forums. I've got it setup for one card to do vlans, 3 vlans are for lan, 1 vlan is for wan, doing double NAT due to ISP modem. All going through a Netgear switch. File transfer and RTSP speeds drop only when routed through pfsense, if they are on the same subnet, speeds are gigabit (Windows 10 physical machine to Windows 10 virtual machine)*. Are you using all Intel Network cards? What specs did you go for proxmox? (wondering if it is a hardware bottleneck due to old hardware).🤔

[@tomasleguizamon7589]

Friends, good morning. After the update, my VLAN's for Wi-Fi networks stopped working. They are left without internet connectivity, the problem seems to be in the limits established for each of these VLAN's, since I removed them and it started to work. It is clearly not the idea, because these vlans are created for the guests. Has anyone had something similar happen? From already thank you very much. Greetings.

[@НиколайМорозов-ш5р]

Limiters don't working on pf2.6.0

[@YeOldeTraveller]

If planning to do a rebuild to get ZFS, would you suggest upgrading to 2.6.0, backing up again, and then doing the rebuild. Or would you suggest taking the backup and just going straight to the 2.6.0 rebuild?

[@ChristianMcDonald]

Doesn’t matter, either way your config.xml will be upgraded in the same way using the same code path

[@James_Knott]

When I switched to ZFS last year, it was because I had to get a new computer, after the old one died. I just copied the config.xml file and adjusted the interfaces to reflect the new hardware.

[@chezowaterson5761]

Hi looking for a recommended firewall for bandwidth control for social media streaming service applications and website

[@LAWRENCESYSTEMS]

Untangle firewall has more advanced features for that.

[@DH22013]

i got a question. How is pfsense compared to sophos utm? Is it worth to change for ips?

[@LAWRENCESYSTEMS]

Not sure, have not used Sophos but a few of my friends that have like pfsense better so I don't plan on switching.

[@therealb888]

Anyway to use the pfsense theme in the thumbnail ?

[@LAWRENCESYSTEMS]

pfsense has a dark theme docs.netgate.com/pfsense/en/latest/config/general.html

[@GeoffSeeley]

On my 2.5.2 install, both Zabbix 5.2 and 5.4 are available so it sounds like 5.2 is likely removed in 2.6.0. I had already switched to the 5.4 agent as I build the latest Zabbix server from source (5.4.10). Hope they have synced the 5.4 packages with the latest 5.4.10 code base. Thanks!

[@ChristianMcDonald]

I will check!

[@dperv27]

Great video! Upgrading this weekend. I do need some assistance. I've been assigned a 44. /27 IP block for Ham Radio. I've set the network up on a DMZ. I would like to surf/allow public access to these IP addresses. (Not masquerade) . How can I configure pfsense ?

[@LAWRENCESYSTEMS]

They have a write up here on that docs.netgate.com/pfsense/en/latest/recipes/route-public-ip-addresses.html

[@ideaforsale3781]

pfsense 2.6.0 internet access blocked i upgrade my ofsense 2.5.2 to 2.6.0 now i cant access to internet please guide me

[@johnthoithi5052]

Good Work Lawrence Your Videos Really Inspire Me. I Have A Question Is It Possible For SOPHOS Firewall To Be Intergrated With Netgate Esp 6100 (Like The Way Active Directory Is Configured) Reason The Client Wants To Use 2FA OTP That Comes With FreeRADIUS

[@LAWRENCESYSTEMS]

I can't think of any good ways to integrate them

[@Kevern70]

re: UFS to ZFS; is this possible on the Netgate Appliances? Reinstall?

[@ChristianMcDonald]

Backup and reinstall is the way

[@gh8447]

Good timing... I just noticed my Netgate 6100 was flashing an orange light indicating an update was available. I wish more devices had this feature!

[@mikejakubik]

Netgate support has gone down the hill, it was a different team / system last year. We have Pro support and all they do is point you to open source docs. If I wanted to do everything myself I would have build my own router HW and used the Open Source version or even just FreeBSD.

[@logicawe]

My CE to 22.01 update broke aprwatch package and several others on 2100

[@stephenfosu2386]

Hi Tom My failover stopped working after upgrading to Pfsense 2.6. I have two ISPs configured as failover, tier 1 and tier 2. When my default ISP goes down, it does not switch to the second ISP, but in 2.5.2 it works perfectly. Therefore, I've rolled back to 2.5.2. Please, what's the problem and how can I solve it? Thank you

[@LAWRENCESYSTEMS]

I suggest posting in their forums.

[@stephenfosu2386]

@@LAWRENCESYSTEMS Thanks, Tom. Another issue is that when I enable the captive portal, I can't ping any sites.

[@M3PH11]

1:05 I dunno about anyone else, my box has a R5 3400G, 16GB of ram and samsung 970 SSD. It really doesn't care. 11:32 It took me an hour from the first reboot to the last and i had an issue where the system would boot off the ssd and then switch to the usb stick until i removed it (stupid BSD Bootloader).

[@nickstat6630]

I wish suricata was as easy as the rest of this I have been working on pfsense for months I started with ipfire but I like the open VPN config better

[@ricardoquintero3450]

Dear friend the memory use goes up to 81% and the swap is damaged, and I increased the ram memory to 8gb, the pfsense version is 2.5 I await your comments, greetings from Panama city.

[@Alex-un5tl]

noticed that as well with upgrade to ver 2.6.0 Ce and 22.01, just do a reboot and memory consumption will normailse. if you have heigh memory consumption on ver 2.5 after os runs for a while, it's related to vpn ipsec bug -do reboot and upgraded to 2.6

[@ricardoquintero3450]

@@Alex-un5tl friend I did the update to 2.6 and everything returned to normal, the memory consumption dropped 8%, thank you very much for your help

[@natedavisshow9068]

Still waiting for an API ...

[@afallingtree9114]

i still think OPNsense > PFsense for most everyday homelab setups

[@kwinzman]

It seems like removing bcrypt as a default is a straight downgrade for the sake of bureaucracy.

[@eastcoastmodz5195]

I finally just built a PFSense router... Xeon 10 core 20 thread, X99 m-atx motherboard, 16Gb DDR4 non-ECC memory, Adata 512Gb S7 Nvme m.2, Single 10g SFP+ nic, Dual 10g SFP+ nic and single 1Gb Eithernet port (motherboard). Works great but I have to get a VPN installed. Tried PrivateVPN but it just didn't work?? Will try a different VPN later.

[@dpskipper]

sounds like you need a more powerful cpu

[@pepeshopping]

Ahhhh yes zabbix. I called it back then…

[@josevalenzuela3680]

Hey man, thank you so much for the directions. You may not be aware, but you make us "noobs" look like wizards in front of most people, LOL. I upgraded to 2.6.0 yesterday, and it all worked perfect. Only it never gave me the option to upgrade to Pro. After watching this video, I decided to backup, reinstall with ZFS, and restore. Also perfect. Everything is running as expected. However, I still don't get the option to upgrade to 22.01 from 2.6.0. In "System Update" I only see the branches for stable, development snapshot and rolling back to 2.5.2, same as in the "Update Settings" tab. I did get the email form Netgate with the activation key. Am I missing something? I even tried "pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade", and rebooted, just in case, to no avail.

[@josevalenzuela3680]

Never mind. As usual, I was an idiot and didn't read the part where I needed to register my activation key in my CE version. It's already updating. Sorry about that.

[@mikemurray2875]

East Coast Modz 30 minutes ago I finally just built a PFSense router... Xeon 10 core 20 thread, X99 m-atx motherboard, 16Gb DDR4 non-ECC memory, Adata 512Gb S7 Nvme m.2, Single 10g SFP+ nic, Dual 10g SFP+ nic and single 1Gb Eithernet port (motherboard). Works great but I have to get a VPN installed. Tried PrivateVPN but it just didn't work?? Will try a different VPN later. Dude you can run PFSense on a dual core with 4 gigs of ram and 4 gigs of hd space. Are you trying to route the internet all by yourself LOL Just upgraded one of my PF boxes... 185 or so steps :-)

[@DodgeHooker641]

FYI, Your mic audio for when you're looking at your main computer monitor sounds kinda like you're talking out of a tin can...

[@udirt]

Watching curiously, would like to buy plus for customers with Dell VEP4600 that has QAT. So far the support options for Plus were useless for the case "i'm using something much better stuff than Netgate sells"

[@fing_az]

Someone wake me up when upnp is fixed :)

[@boby828]

NSFW_LAN.... LOL!

[@ryanisflying]

Lets be honest here…. Most of us on here commenting are just concerned if Netgate, our ISP, work, government, or worst of all…. THE WIFE, can now track our porn hub activity if we “upgrade” to plus for “free”! 😅😂🤣😏

[@TechySpeaking]

First