Merry Christmas from the pfSense team – 2.0 now beta!
Our Christmas gift to the community is our 2.0 release reaching the beta milestone.
What does this mean? The release is feature complete, with no new features being added, and should stay relatively stable throughout the remainder of the development process. That’s not to say it’s production ready though, most of our developers are using it in production and have been for months, but unless you have a solid understanding of the underlying system and can manually verify the configuration, 2.0 is not yet for you.
To answer the inevitable “when will it be released?” – as always, “when it’s ready”. The release will happen sometime in 2010, but as for a more specific timeline, we can’t provide one at this time.
If you have a non-critical environment where you can try it out, you can find the latest build on the snapshot server. Please report your experiences on the 2.0 board on the forum. There is additional risk with snapshots as changes are made in the source very frequently, and you may get a snapshot from a point in time that caught part but not all of certain changes.
Known Issues
The most current list of known issues can be found here. Those marked as “Feedback” are either believed to be resolved but need more testing, or need further details to be able to replicate and resolve – feel free to add comments to any of those tickets if you can test the specific scenario described. Those marked as “New” are outstanding issues. We welcome contributions, if you can provide a fix for any of the open issues. Before opening a new ticket there, please post to the 2.0 board on the forum where we can help quantify the issue. Before reporting problems, ensure you’re on the latest snapshot. At least 10-20+ changes go in most every day, 7 days a week, so it’s very possible the issue you found is already fixed in our git repository. You can see all commits here.
Important upgrade warning
You can upgrade from 1.2.x to 2.0 just as with any other release, BUT, you cannot downgrade from 2.0 to 1.2.x. And after you upgrade, your configuration will be converted to a format that is usable only on 2.0. If you do upgrade, get a backup first so you can reinstall 1.2.3 if needed. Several of the features in 2.0 were revamped to the extent that a change in configuration formatting was necessitated. Many of the rough edges of 2.0 are in the configuration upgrade code, there is less risk with a clean 2.0 install than one upgraded from 1.2.x at this time. Though that’s largely in more advanced configurations.
Proceed with caution! Expect things to be broken, this is absolutely not production-ready for most scenarios for non-developers, but development is moving along rapidly, and we would appreciate feedback from those in a position to test things (and break their network).
Note that kernel debugging is still enabled, which will reduce performance, though from a packet forwarding perspective it’s usually not noticeable.
Merry Christmas from the pfSense team!
Tags: 2.0
December 26th, 2009 at 4:32 pm
Great guys! I am a little afraid, because my girlfriend needs the internet running at home
But I really want to upgrade my 1.2.3-Release 
Hmm. Perhaps I’ll sleep over it 
December 26th, 2009 at 6:31 pm
Will test it next week…!, hope it’ll be as good as previous releases
thanks for the great work!
December 26th, 2009 at 8:43 pm
[...] http://blog.pfsense.org/?p=544 [...]
December 26th, 2009 at 10:22 pm
Merry Christmas, indeed!
Thank you so much for all your hard work!
December 27th, 2009 at 2:37 am
Great guys, but where is the changelog. What are the new features, enhancements in 2.0?
December 27th, 2009 at 3:06 am
finid: we need to compile a complete list, haven’t done that yet. Some of them are covered here (2.0 was previously called 1.3):
http://blog.pfsense.org/?tag=13-new-features
but that’s nowhere near everything, and the descriptions on those are probably a bit out of date or incomplete. We’ll have a page up listing changes later.
December 27th, 2009 at 3:09 am
Right on the tail of the excellent 1.2.3 release with NanoBSD.
Wow, best Christmas present EVAR. It beats the pwnies we have coming in Linux kernel 2.6.33 with Noveau
December 27th, 2009 at 10:28 am
Thanks !!!
Gonna set some clusters on test and give feedback.
December 27th, 2009 at 12:26 pm
snapshot servers appear to be down
December 27th, 2009 at 4:29 pm
ESX server that hosts the snapshots purple screened of death earlier, been back up for a while now. There is also a snapshots mirror at http://files.chi.pfsense.org/snapshots/
December 27th, 2009 at 8:26 pm
My upgrade from 1.2.3 did not go smoothly. I had problems w/ the squid & lightsquid. packages. I was unable to remove or reinstall and they didn’t seem to be functioning. It might be a good idea to remove packages before the upgrade. I’ll let smarter people than me give the official word. I ended up doing a clean install – all good here.
Thanks dev team, (also read the first 1/2 of the book this morning – nice)
Cheers.
December 27th, 2009 at 8:28 pm
Packages in particular warrant additional caution on upgrade, they’re less tested than the base system and some or many of them are likely broken right now.
December 27th, 2009 at 10:59 pm
Merry Christmas Excenlent pfSense team!
and Thank you so much for all your hard work!
Thank
form Santo Domingo
Dominican Republic
December 28th, 2009 at 6:17 am
[...] REST of RELEASE ANNOUNCEMENT : [...]
December 28th, 2009 at 7:37 am
@Chris, packages now should either be for 1.2.3 Release or 2.0 Beta. Since there are no other pertinent versions anymore, can the packages be labeled for which version they were intended?
December 28th, 2009 at 8:50 am
[...] la version finale. Il ne s’agira que de corrections liées à la QA. Rendez-vous sur le blog pour en découvrir plus ! Tags: beta, disponible, firewall, pfsense [...]
December 28th, 2009 at 3:58 pm
I’ll be testing the 2.0 betas shortly. Thank you for the continued quality software.
December 28th, 2009 at 4:12 pm
Thank you guys for your continued hard work and greatly appreciated! I will give 2.0 beta a go very shortly
(I’m literally drooling over it ;P)
Happy Holidays!!
December 28th, 2009 at 4:23 pm
I just bought the book for Christmas to show my appreciation toward this awesome project. Keep up the great work!!! Can’t wait for 2.0 and beyond.
December 29th, 2009 at 2:42 am
Thank you very much.I tested 2.0 beta it very good for admin and configure.But some feature change configure(Please write document and I will buy It )
Merry Christmas and Happy new Year
December 29th, 2009 at 2:15 pm
Great news! This is awesome team! I am not sure when I can get it on a network to play with it but I am very excited. Congrats and thank you for all of the hard work.
December 29th, 2009 at 6:05 pm
Absolutely ausome!
I’ll be trying it out later today!
Thanks for the release!
December 30th, 2009 at 2:44 pm
Hi there,
Will have some work in IPV6 ?
Very nice job in pfsense!. Best firewall ever!
Best Regards, happy new year.
December 30th, 2009 at 2:45 pm
josiaslg: re: IPv6, see http://doc.pfsense.org/index.php/Is_there_IPv6_support_available
January 3rd, 2010 at 5:07 pm
Hi guys and just wanted to say I’m a long time pfsense user.
I’m sorry if I missed it somewhere here, but does 2.0 have NAT-T support?
Thanks!
January 3rd, 2010 at 5:10 pm
JP: Yes, but how functional IPsec in general is at the moment isn’t fully known, there are some issues with the underlying ipsec-tools that we need to get worked out.
January 4th, 2010 at 10:53 am
Muchas Gracias amigos PFSENSE es lo mejor que he conocido hasta el momento, bueno les cuento que estoy trabajando en un proyecto muy importante, y me da gusto trabajar con una herramienta tan potente y eficaz como es PFSENSE..
Muchas Gracias..
January 5th, 2010 at 9:51 am
[...] Buechler has announced the availability of the first beta release of pfSense 2.0, a FreeBSD-based firewall system. Our [...]
January 11th, 2010 at 1:54 am
Is it nowdays considered “safe” to update using the web interface update page?
Planning on updating embedded nanobsd 1.2.3 to 2.0.
Thanks for great software.
January 11th, 2010 at 2:01 am
Biffen: Yes. For embedded, you do have to be on 1.2.3 nanobsd before upgrading.
January 11th, 2010 at 11:35 am
Thanks and i will try beta during waiting for release version.!
January 19th, 2010 at 9:59 am
Is there a list of new features from 1.2.3 to 2.0?
January 19th, 2010 at 1:52 pm
Jason: see my comment above:
we need to compile a complete list, haven’t done that yet. Some of them are covered here (2.0 was previously called 1.3):
http://blog.pfsense.org/?tag=13-new-features
but that’s nowhere near everything, and the descriptions on those are probably a bit out of date or incomplete. We’ll have a page up listing changes later.
January 21st, 2010 at 3:19 am
The new version is very nice, hope for a fast release because the workaround for filtering OpenVPN isnt good.
February 1st, 2010 at 9:35 am
hopefully this 2.0 will be stable release . Godspeed have a nice day …
Thanks and ill try this beta 2.0
February 3rd, 2010 at 12:41 pm
Anyone know where i can find the amd64 build, the mirror contains a link that is dead.
Thanks
February 3rd, 2010 at 1:03 pm
David: Nowhere right now. We just switched to FreeBSD RELENG_8, don’t have those available yet. Check back later.
February 25th, 2010 at 3:27 pm
Hey
Are there any date on a stable 2.0 release for a production environment?
February 25th, 2010 at 9:57 pm
Jacob: No change from what’s noted in this post. “To answer the inevitable “when will it be released?” – as always, “when it’s ready”. The release will happen sometime in 2010, but as for a more specific timeline, we can’t provide one at this time.”
March 2nd, 2010 at 6:45 am
Thanks guys for the good job.
I was wondering if the good old L2TP made into pfsense 2.0
March 2nd, 2010 at 2:14 pm
Ide: yes
March 17th, 2010 at 1:08 pm
¡Felicitaciones! Pfsense es excelente!
March 23rd, 2010 at 11:39 am
Chris, thank you for an update.
I was wondering if I do a clean install of 2.0 beta ( not an upgrade – so that I don’t mess up my current firewall), can I use a config gile from my older firewall for a new one? (I’m running pfSense 1.2.3 RC 3), or do I need to install pfSense 1.2.3 first, then do an in-place upgrade?
March 23rd, 2010 at 11:39 am
in previous post: gile = file. Sorry.
March 25th, 2010 at 12:22 am
Nick: In short, yes you can restore a 1.2.x config to 2.0, with the config upgrade caveat noted here.
Take future questions for discussion to the forum please.
April 10th, 2010 at 12:32 am
I tried the ver 2 beta, great improvement, however, the radius auth. is not working with the ipsec. I was trying to implement the “Entrust IdentityGuard” together with pfsense mobile client. Is that my configuration mistake or radius auth only works with pptp and openvpn?
April 10th, 2010 at 4:34 pm
RADIUS only works with OpenVPN, PPTP and L2TP right now. Not sure if that will change for 2.0 release. IPsec uses the local user database for authentication.
April 19th, 2010 at 5:44 pm
If RADIUS works with IPsec, it will be great. There are a lot of cases need IPsec with RADIUS. While Shrewsoft VPN supports and PIX/ASA, sonicwall, juniper can do that
April 29th, 2010 at 9:43 pm
Is there an image for embedded 2.0 beta?
April 29th, 2010 at 9:47 pm
Kostya: same place as all the other files, see the post.
April 29th, 2010 at 10:19 pm
I just found i386 and amd64 images. Which one should I use for Soekris Net5501 board (AMD Geode LX processor)?
April 29th, 2010 at 10:47 pm
Geodes are not 64 bit, use i386. For right now you probably want 32 bit regardless of your hardware (there are some calculation bugs on 64 bit that haven’t been fixed yet – http://redmine.pfsense.org/issues/show/459).
April 30th, 2010 at 7:29 pm
extraordinary psense !
we hope pfsense can run on mips architecture like RouterBoard mikrotik , in order to save on operational costs
We also hope that can pfsense with interfaces compatible to usb modem
thaks
June 8th, 2010 at 9:11 am
What’s the status of 3G USB modem support for 2.0?
Will I be able to plug in my Huawei E160E and use it as primary or backup WAN?
July 14th, 2010 at 9:09 am
don’t see any activity since end of march, is development proceeding?
July 14th, 2010 at 11:03 am
Richard: there have been thousands of commits since March, you aren’t looking in the right place if you don’t see activity. Non-stop activity on rcs.pfsense.org.
August 27th, 2010 at 11:37 am
I can see 2.0 BETA is freq updated, BUT this is VERY long in BETA.
Any idea when 2.0 is released?
August 27th, 2010 at 11:59 am
Fveggerby: sometime this year. look at newer posts here.
August 27th, 2010 at 12:16 pm
Tnx Chris
September 23rd, 2010 at 6:04 am
wow it had been sometimes, i know that pfsense is not dead, …. yes I know it will be ready when it is ready. But when is the ETA of the 2.0, a slight firm date will be good
September 23rd, 2010 at 1:30 pm
mynullvoid: I don’t know how many times I have to post it. Check newer posts here for newer info, and it will be released sometime this year.
October 4th, 2010 at 8:16 am
Pope
Michelangelo when you finish the Sistine Chapel?
Michelangelo
When completed
Meanwhile you are doing a good job.
Thanks
October 4th, 2010 at 12:05 pm
@mynullvoid – let Chris do his work – and believe him – this year has a lot of day before it ends – and if its not ready at the end of the Year u should have to wait som day longe
d
October 5th, 2010 at 6:31 pm
Hi guys and thanks for all your hard work. I started using pfsense from 1.2.3 beta to release and recently I have upgraded to 2.0 BETA 4 in a production environment. I simply used the web gui update feature and the firewall downloaded and came up fine. The only thing that did not came up automatically was the default gateway. Once I added and configured the default gateway, all my VPNs came up. I really liked the feature where you can see who is connected thru openvpn before it used to be a chore. I wish if you can add a feature like untangle has where you can just click to add an openvpn user or click to remove a user. The moment you add a user it lets you download the config file with certificates. Furthermore when you do not want that user simply click on remove and certificate is revoked for that user. I am planning to try the BGP session under 2.0 let see hot it goes.
October 13th, 2010 at 3:08 am
Shani: we already have OpenVPN user management with export.
October 13th, 2010 at 4:36 pm
I have implemented pfsense 5 years ago in 2 offices, these devices are still working .. thank you guys! you have done a great work!
October 13th, 2010 at 11:20 pm
Just wanted to say – great work! been running the beta for a little while now and it is excellent
Thanks.
Kind regards,
Jake.
October 18th, 2010 at 1:05 am
pfsense the best of the best on the ALL the NET for ever, secula seculorum…
THANKS to all pfsense team, from me and meny meny people I know.
November 4th, 2010 at 1:38 pm
eagerly waiting for the v2 final! hope it comes by christmas!
November 23rd, 2010 at 12:14 am
THANKS to all pfsense team, from me and meny meny people I know.
November 26th, 2010 at 8:18 pm
Thank you all for the hard work! I am using pfSense at home and office. It works perfect.
P.S. Guess what we wish for Christmas
December 5th, 2010 at 2:31 am
Will test it next week…!, hope it’ll be as good as previous releases thanks for the great work!
December 14th, 2010 at 6:01 pm
I am waiting for it since last december, i’m so happy that its finally coming out on christmas….great job by you all filter programmers,, its the best christmas gift i’ll ever get
February 21st, 2011 at 7:11 pm
We are running banch test of the 2.00 since december 2010 now without particular issues.
Same device running:
Squid Proxy (with external radius server)
PPPoe server (with external radius server)
Openvpn server (with external radius server)
PPTP server (with external radius server)
sip proxy (with external radius server)
Great job guys! Congratulations to all devs!
June 15th, 2011 at 2:40 am
I have implemented pfsense 5 years ago in 2 offices, these devices are still working .. thank you guys! you have done a great work!
mynullvoid: I don’t know how many times I have to post it. Check newer posts here for newer info, and it will be released sometime this year.