: Migrates dynamically toward Kea DHCP , phasing out the legacy ISC DHCP daemon. The Death of the Full Offline ISO
, this version transitions the base operating system and PHP versions, necessitating careful preparation for users upgrading from the previous 2.7.2 stable branch. Key Features and Enhancements AutoConfigBackup (ACB):
: If an update is available, you can download and apply it from this interface.
Smarter traffic recovery that optionally clears states when a more preferred gateway (like a primary fiber line) comes back online. pfsensece280releaseamd64isogz upd
The release of on May 28, 2025, represents a major architectural leap for the open-source firewall platform. This version transitions the underlying operating system to FreeBSD 15.0 and upgrades the web interface to PHP 8.3 , bringing significant performance gains and enhanced hardware support. Key Features in pfSense CE 2.8.0
Review the official Netgate blog or forum for any known issues with 2.8.0. How to Update: pfsensece280releaseamd64isogz
For additional resources and the most up‑to‑date information, refer to the official Netgate documentation at docs.netgate.com and the community forums at forum.netgate.com . : Migrates dynamically toward Kea DHCP , phasing
The most critical takeaway from the amd64 tag is the . PfSense CE 2.8.0 is the first major release to fully drop i386 architecture. If you are still running an old Alix board or a 32-bit Pentium 4, this is not your update. The team at Netgate has focused entirely on modern 64-bit CPUs, unlocking better memory management (over 4GB RAM) and enhanced security features like W^X (Write XOR Execute).
The jump from the previous CE version (2.7.2) to 2.8.0 is substantial. It’s not just a collection of bug fixes; it represents a significant shift in the software's foundation and feature set. Originally released on , this update focuses on performance, security, and bringing features previously exclusive to the pfSense Plus paid tier to the CE community.
format. This version represents a significant release for the community edition of the firewall and router software. Release Overview Smarter traffic recovery that optionally clears states when
The 2.8.0 release serves as a major security update, addressing several vulnerabilities in areas such as the captive portal, DNS resolver, and certificate manager. Users who cannot immediately upgrade to 2.8.0 can apply many of these fixes as patches on version 2.7.2 via the System Patches package . A subsequent maintenance release, 2.8.1-RELEASE , was issued on September 4, 2025
The new if_pppoe driver significantly reduces CPU overhead and increases throughput for high-speed fiber connections.
Enables seamless access for IPv6-only clients to IPv4-only resources.
| Issue | Symptoms | Workaround / Solution | |-------|----------|-----------------------| | | The system hangs while initializing hardware, often during auto‑detection of VLANs or just after interface detection. | Press Y when prompted to configure VLANs at the console, even if you do not plan to use them, to bypass the hang. Alternatively, try booting into single‑user mode and creating a verbose RC flag ( touch /verbose_rc ) to gather debug output. | | Disk selection error | The installer displays “Not Enough Disks Selected” / “Stripe: Not Enough Disks Selected” during partitioning. | Use the spacebar to highlight the drive you wish to install to; an asterisk [*] should appear next to the drive name. Only then will the installer proceed. | | WebGUI memory errors after upgrade | PHP Fatal error: Allowed memory size exhausted (often in kea2unbound ). | Increase the memory limit for PHP or reduce the number of concurrent tasks. Restarting the web interface ( System > Advanced > WebGUI ) may also help. Consider allocating more RAM to the system if possible. | | Serial console not working on older hardware | Devices with ISA‑based serial ports (e.g., APU 1, RCC‑DFF 2220, RCC‑VE 2440/4860/8860) have no console output after upgrade. | Follow the ISA Serial Console workaround . Netgate devices running pfSense Plus handle this automatically. | | Cannot see 2.8.x in update branches | The system reports “The system is on the latest version” even on 2.7.0. | Run certctl rehash in the console; this often resolves certificate issues and makes the newer branches appear. If not, review the Upgrade Guide . | | High availability / DNS issues | After upgrading, internal clients need to refresh webpages multiple times when using a CARP VIP as the gateway/DNS server. | This is a known issue (#16425) tracked in the bug tracker. Troubleshooting steps include disabling pfBlockerNG DNSBL and adjusting cache TTL settings. |