As officially recommended, uninstall ALL packages (such as Suricata, pfBlockerNG, ACME, etc.) before initiating the upgrade.
| Feature | CE 2.8.0 | Plus (current) | |---------|----------|----------------| | Automatic Configuration Backup (ACB) | ✅ Free | ✅ (Enhanced SLA) | | Kernel PPPoE ( if_pppoe ) | ✅ | ✅ | | NAT64 | ✅ | ✅ | | Kea DHCP JSON config | ✅ | ✅ | | State policy enhancements | ✅ | ✅ | | Commercial support and SLA | ❌ | ✅ | | Advanced cloud integration | ❌ | ✅ | | Early access to features | ❌ | ✅ |
This release addresses several critical security issues, including multiple XSS vulnerabilities and configuration-related patches listed under pfSense-SA-25_01.webgui .
Multi-WAN networks gain a smarter state-killing mechanism. When a high-tier primary ISP recovers from an outage, the firewall optionally . This forces active connections back onto the primary link automatically, preventing metered data overages on secondary connections.
, providing better performance and driver support for newer hardware (like i226 NICs). Enhanced Gateway Recovery:
pfSense® CE 2.8.0 is a stable release that focuses on modernizing the underlying operating system and enhancing security protocols. It is designed for generic 64-bit hardware, making it suitable for a wide range of custom-built routers and appliances. Key Technical Specifications 2.8.0 (Community Edition) Architecture: (Compressed ISO image)
A modern DHCP server that supports High Availability (HA) for both IPv4 and IPv6. It allows for dynamic DNS registration without requiring a service restart, improving network stability.
The new if_pppoe driver significantly reduces CPU overhead and increases throughput for high-speed fiber connections.
: This installer image is typically downloaded as an .img.gz or .iso.gz archive which you must unpack and flash to a bootable USB drive. Why the Change?
Several formerly Plus-only features have been ported over, providing CE users with a more robust feature set.
Always refer to the official pfSense documentation or forums for the most current and detailed instructions, as processes may change with versions. Ensure you backup your configuration before performing any major updates or installations.
The boot loader has been updated to support modern hardware and improve boot reliability. The upgrade process handles this automatically in nearly all cases, but administrators with multi‑disk configurations should review the upgrade notes carefully.
