Netgate heeft versie 25.07 van pfSense Plus uitgebracht. Dit pakket is gebaseerd op het besturingssysteem FreeBSD en richt zich op router- en firewalltaken. Het is verkrijgbaar in de gratis Community Edition en een Plus-uitvoering, die voorheen als Factory Edition werd aangeboden. De Plus-uitvoering draait op de hardware die Netgate aanbiedt, als virtuele machine in AWS of Azure. In tegenstelling tot de Community Edition is het echter geen open source.
Het is in 2004 begonnen als een afsplitsing van m0n0wall vanwege verschillende visies bij de ontwikkelaars en in de loop van de jaren uitgegroeid tot een router- en firewallpakket dat in zowel kleine als zeer grote omgevingen kan worden ingezet. Voor meer informatie verwijzen we naar deze pagina. De belangrijkste verbeteringen die in deze uitgave zijn aangebracht, zijn hieronder voor je op een rijtje gezet:
Netgate NexusNetgate Nexus is the Multi-Instance Management solution for pfSense Plus, and comes production-ready in 25.07. All API endpoints have been implemented, and the GUI is now fully functional. In addition to the powerful GUI, an API toolkit has also been provided on GitHub. Netgate Nexus is now capable of controlling the pfSense Plus instance that is designated as the Controller. Licenses and entitlements for additional managed instances will be available for purchase separately. Additional information will be provided at the product launch for Netgate Nexus soon.
Auto Config BackupAuto Config Backup is a free service that encrypts your configuration each time you make a change, and uploads those configurations to Netgate’s cloud storage servers. Because these configuration files are encrypted, this provides the user a secure and convenient method of restoring known good configurations. Much of Auto Config Backup has been re-written to make it more efficient, and now includes the ability for users to enhance security by altering their Device Keys. In addition to this, the GUI has also been redesigned for greater efficiency.
New PPPoE DriverA new PPPoE backend (if_pppoe) has been introduced into this version of pfSense Plus. This new backend may be enabled in the System > Advanced > Networking menu, and enables a large performance increase over the traditional MPD-based implementation. In addition to the performance increases, users should see a dramatic decrease in CPU usage. This new PPPoE backend will become the default in future versions of pfSense Plus. Users who have multi-gigabit PPPoE WAN links are encouraged to enable this new feature and enjoy much faster WAN speeds.
Custom Login Screen MessagesUsers may now configure custom text messages that will appear as a banner on the pfSense Plus GUI login screen. This feature has been added in order to comply with corporate and government security guidelines (STIGs).
Kea DHCPv6 Prefix DelegationThis version of pfSense Plus includes a feature complete version of Kea, the successor to ISC’s deprecated DHCP. Prefix delegation allows automatically dividing and allocating a block of IPv6 addresses to networks that will live behind other routers and firewalls which reside downstream from this firewall (e.g. in the LAN, DMZ, etc). Prefix Delegation settings in Kea use a different format than the ISC DHCPv6 daemon, so Kea cannot use existing settings for Prefix Delegation; settings for Prefix Delegation in Kea must be re-created manually when switching from ISC DHCPv6 to Kea DHCPv6. Because the traditional ISC DHCP service has been deprecated by the developer, users are encouraged to switch to Kea.
NAT64This release contains full support for NAT64. NAT64 is a form of NAT that enables clients with only IPv6 addresses to reach remote hosts using IPv4 addresses. NAT64 accomplishes this by mapping IPv4 addresses into a special IPv6 prefix dedicated to this purpose. NAT64 on pfSense software is implemented across multiple areas, including NAT64 firewall rules, PREF64 in router advertisements, and DNS64 in the DNS Resolver Advanced options. There is a complete walkthrough for implementing NAT64 in the pfSense software documentation.
System AliasesThis release contains new Built-in System Aliases that allow user-created firewall rules to utilize aliases that were previously only usable by internal firewall rules. This feature also contains several new aliases with common collections of reserved and special-purpose networks, so that users do not need to define their own alias on each device for things like private networks or multicast networks.
Release NotesRelease Notes for pfSense Plus 25.07-RELEASE are available for review.