Merry Christmas from the pfSense team – 2.0 now beta!

December 26th, 2009 by Chris Buechler

Our Christmas gift to the community is our 2.0 release reaching the beta milestone.

What does this mean? The release is feature complete, with no new features being added, and should stay relatively stable throughout the remainder of the development process. That’s not to say it’s production ready though, most of our developers are using it in production and have been for months, but unless you have a solid understanding of the underlying system and can manually verify the configuration, 2.0 is not yet for you.

To answer the inevitable “when will it be released?” – as always, “when it’s ready”. The release will happen sometime in 2010, but as for a more specific timeline, we can’t provide one at this time.

If you have a non-critical environment where you can try it out, you can find the latest build on the snapshot server. Please report your experiences on the 2.0 board on the forum. There is additional risk with snapshots as changes are made in the source very frequently, and you may get a snapshot from a point in time that caught part but not all of certain changes.

Known Issues

The most current list of known issues can be found here. Those marked as “Feedback” are either believed to be resolved but need more testing, or need further details to be able to replicate and resolve – feel free to add comments to any of those tickets if you can test the specific scenario described. Those marked as “New” are outstanding issues. We welcome contributions, if you can provide a fix for any of the open issues. Before opening a new ticket there, please post to the 2.0 board on the forum where we can help quantify the issue. Before reporting problems, ensure you’re on the latest snapshot. At least 10-20+ changes go in most every day, 7 days a week, so it’s very possible the issue you found is already fixed in our git repository. You can see all commits here.

Important upgrade warning

You can upgrade from 1.2.x to 2.0 just as with any other release, BUT, you cannot downgrade from 2.0 to 1.2.x. And after you upgrade, your configuration will be converted to a format that is usable only on 2.0. If you do upgrade, get a backup first so you can reinstall 1.2.3 if needed. Several of the features in 2.0 were revamped to the extent that a change in configuration formatting was necessitated. Many of the rough edges of 2.0 are in the configuration upgrade code, there is less risk with a clean 2.0 install than one upgraded from 1.2.x at this time. Though that’s largely in more advanced configurations.

Proceed with caution! Expect things to be broken, this is absolutely not production-ready for most scenarios for non-developers, but development is moving along rapidly, and we would appreciate feedback from those in a position to test things (and break their network).

Note that kernel debugging is still enabled, which will reduce performance, though from a packet forwarding perspective it’s usually not noticeable.

Merry Christmas from the pfSense team!

75 Responses to “Merry Christmas from the pfSense team – 2.0 now beta!”

  1. James Says:

    Great guys! I am a little afraid, because my girlfriend needs the internet running at home ;) But I really want to upgrade my 1.2.3-Release :-( Hmm. Perhaps I’ll sleep over it ;)

  2. Edaurdo Sanchez M. Says:

    Will test it next week…!, hope it’ll be as good as previous releases ;) thanks for the great work!

  3. pfSense 2.0 en beta ahora! para esta Navidad Says:

    [...] http://blog.pfsense.org/?p=544 [...]

  4. PredatoryFern Says:

    Merry Christmas, indeed!

    Thank you so much for all your hard work!

  5. finid Says:

    Great guys, but where is the changelog. What are the new features, enhancements in 2.0?

  6. Chris Buechler Says:

    finid: we need to compile a complete list, haven’t done that yet. Some of them are covered here (2.0 was previously called 1.3):
    http://blog.pfsense.org/?tag=13-new-features

    but that’s nowhere near everything, and the descriptions on those are probably a bit out of date or incomplete. We’ll have a page up listing changes later.

  7. Kevin Bowling Says:

    Right on the tail of the excellent 1.2.3 release with NanoBSD.

    Wow, best Christmas present EVAR. It beats the pwnies we have coming in Linux kernel 2.6.33 with Noveau ;-)

  8. Juve Says:

    Thanks !!!
    Gonna set some clusters on test and give feedback.

  9. Dimitri Says:

    snapshot servers appear to be down :(

  10. Chris Buechler Says:

    ESX server that hosts the snapshots purple screened of death earlier, been back up for a while now. There is also a snapshots mirror at http://files.chi.pfsense.org/snapshots/

  11. mrguitar Says:

    My upgrade from 1.2.3 did not go smoothly. I had problems w/ the squid & lightsquid. packages. I was unable to remove or reinstall and they didn’t seem to be functioning. It might be a good idea to remove packages before the upgrade. I’ll let smarter people than me give the official word. I ended up doing a clean install – all good here.
    Thanks dev team, (also read the first 1/2 of the book this morning – nice)
    Cheers.

  12. Chris Buechler Says:

    Packages in particular warrant additional caution on upgrade, they’re less tested than the base system and some or many of them are likely broken right now.

  13. Nelson Castillo J. Says:

    Merry Christmas Excenlent pfSense team!
    and Thank you so much for all your hard work!

    Thank
    form Santo Domingo
    Dominican Republic

  14. pfSense 2.0 BETA (FreeBSD) | Operating System Blog Says:

    [...] REST of RELEASE ANNOUNCEMENT : [...]

  15. Robert Says:

    @Chris, packages now should either be for 1.2.3 Release or 2.0 Beta. Since there are no other pertinent versions anymore, can the packages be labeled for which version they were intended?

  16. Technoaddict » PfSense 2.0 Beta est disponible Says:

    [...] la version finale. Il ne s’agira que de corrections liées à la QA. Rendez-vous sur le blog pour en découvrir plus ! Tags: beta, disponible, firewall, pfsense [...]

  17. Tim Nelson Says:

    I’ll be testing the 2.0 betas shortly. Thank you for the continued quality software.

  18. Sunny Says:

    Thank you guys for your continued hard work and greatly appreciated! I will give 2.0 beta a go very shortly :) (I’m literally drooling over it ;P)

    Happy Holidays!!

  19. Mike Says:

    I just bought the book for Christmas to show my appreciation toward this awesome project. Keep up the great work!!! Can’t wait for 2.0 and beyond.

  20. conheotiensinh Says:

    Thank you very much.I tested 2.0 beta it very good for admin and configure.But some feature change configure(Please write document and I will buy It )

    Merry Christmas and Happy new Year

  21. Oliver Says:

    Great news! This is awesome team! I am not sure when I can get it on a network to play with it but I am very excited. Congrats and thank you for all of the hard work.

  22. John Says:

    Absolutely ausome!

    I’ll be trying it out later today!

    Thanks for the release!

  23. josiaslg Says:

    Hi there,
    Will have some work in IPV6 ?
    Very nice job in pfsense!. Best firewall ever!
    Best Regards, happy new year.

  24. Chris Buechler Says:

    josiaslg: re: IPv6, see http://doc.pfsense.org/index.php/Is_there_IPv6_support_available

  25. JP Says:

    Hi guys and just wanted to say I’m a long time pfsense user.

    I’m sorry if I missed it somewhere here, but does 2.0 have NAT-T support?

    Thanks!

  26. Chris Buechler Says:

    JP: Yes, but how functional IPsec in general is at the moment isn’t fully known, there are some issues with the underlying ipsec-tools that we need to get worked out.

  27. MisterVlass Says:

    Muchas Gracias amigos PFSENSE es lo mejor que he conocido hasta el momento, bueno les cuento que estoy trabajando en un proyecto muy importante, y me da gusto trabajar con una herramienta tan potente y eficaz como es PFSENSE..

    Muchas Gracias..

  28. pfSense 2.0 Beta 1 | FreeBSD - the unknown Giant Says:

    [...] Buechler has announced the availability of the first beta release of pfSense 2.0, a FreeBSD-based firewall system. Our [...]

  29. Biffen Says:

    Is it nowdays considered “safe” to update using the web interface update page?
    Planning on updating embedded nanobsd 1.2.3 to 2.0.

    Thanks for great software.

  30. Chris Buechler Says:

    Biffen: Yes. For embedded, you do have to be on 1.2.3 nanobsd before upgrading.

  31. Le Huy Haq Says:

    Thanks and i will try beta during waiting for release version.!

  32. Jason Litka Says:

    Is there a list of new features from 1.2.3 to 2.0?

  33. Chris Buechler Says:

    Jason: see my comment above:
    we need to compile a complete list, haven’t done that yet. Some of them are covered here (2.0 was previously called 1.3):
    http://blog.pfsense.org/?tag=13-new-features

    but that’s nowhere near everything, and the descriptions on those are probably a bit out of date or incomplete. We’ll have a page up listing changes later.

  34. Jan Phillip Greimann Says:

    The new version is very nice, hope for a fast release because the workaround for filtering OpenVPN isnt good.

  35. think..? Says:

    hopefully this 2.0 will be stable release . Godspeed have a nice day …

    Thanks and ill try this beta 2.0

  36. David Haman Says:

    Anyone know where i can find the amd64 build, the mirror contains a link that is dead.

    Thanks

  37. Chris Buechler Says:

    David: Nowhere right now. We just switched to FreeBSD RELENG_8, don’t have those available yet. Check back later.

  38. Jacob B P Says:

    Hey

    Are there any date on a stable 2.0 release for a production environment?

  39. Chris Buechler Says:

    Jacob: No change from what’s noted in this post. “To answer the inevitable “when will it be released?” – as always, “when it’s ready”. The release will happen sometime in 2010, but as for a more specific timeline, we can’t provide one at this time.”

  40. Ide Says:

    Thanks guys for the good job.
    I was wondering if the good old L2TP made into pfsense 2.0

  41. Chris Buechler Says:

    Ide: yes

  42. luyo Says:

    ¡Felicitaciones! Pfsense es excelente!

  43. Nick Gorbikoff Says:

    Chris, thank you for an update.
    I was wondering if I do a clean install of 2.0 beta ( not an upgrade – so that I don’t mess up my current firewall), can I use a config gile from my older firewall for a new one? (I’m running pfSense 1.2.3 RC 3), or do I need to install pfSense 1.2.3 first, then do an in-place upgrade?

  44. Nick Gorbikoff Says:

    in previous post: gile = file. Sorry.

  45. Chris Buechler Says:

    Nick: In short, yes you can restore a 1.2.x config to 2.0, with the config upgrade caveat noted here.

    Take future questions for discussion to the forum please.

  46. Oiman Says:

    I tried the ver 2 beta, great improvement, however, the radius auth. is not working with the ipsec. I was trying to implement the “Entrust IdentityGuard” together with pfsense mobile client. Is that my configuration mistake or radius auth only works with pptp and openvpn?

  47. Chris Buechler Says:

    RADIUS only works with OpenVPN, PPTP and L2TP right now. Not sure if that will change for 2.0 release. IPsec uses the local user database for authentication.

  48. Oiman Says:

    If RADIUS works with IPsec, it will be great. There are a lot of cases need IPsec with RADIUS. While Shrewsoft VPN supports and PIX/ASA, sonicwall, juniper can do that

  49. Kostya Says:

    Is there an image for embedded 2.0 beta?

  50. Chris Buechler Says:

    Kostya: same place as all the other files, see the post.

  51. Kostya Says:

    I just found i386 and amd64 images. Which one should I use for Soekris Net5501 board (AMD Geode LX processor)?

  52. Chris Buechler Says:

    Geodes are not 64 bit, use i386. For right now you probably want 32 bit regardless of your hardware (there are some calculation bugs on 64 bit that haven’t been fixed yet – http://redmine.pfsense.org/issues/show/459).

  53. aldi kavari Says:

    extraordinary psense !
    we hope pfsense can run on mips architecture like RouterBoard mikrotik , in order to save on operational costs
    We also hope that can pfsense with interfaces compatible to usb modem

    thaks

  54. Eino Says:

    What’s the status of 3G USB modem support for 2.0?
    Will I be able to plug in my Huawei E160E and use it as primary or backup WAN?

  55. Richard Bailey Says:

    don’t see any activity since end of march, is development proceeding?

  56. Chris Buechler Says:

    Richard: there have been thousands of commits since March, you aren’t looking in the right place if you don’t see activity. Non-stop activity on rcs.pfsense.org.

  57. Fveggerby Says:

    I can see 2.0 BETA is freq updated, BUT this is VERY long in BETA.
    Any idea when 2.0 is released?

  58. Chris Buechler Says:

    Fveggerby: sometime this year. look at newer posts here.

  59. Fveggerby Says:

    Tnx Chris

  60. mynullvoid Says:

    wow it had been sometimes, i know that pfsense is not dead, …. yes I know it will be ready when it is ready. But when is the ETA of the 2.0, a slight firm date will be good

  61. Chris Buechler Says:

    mynullvoid: I don’t know how many times I have to post it. Check newer posts here for newer info, and it will be released sometime this year.

  62. Tito Zerpa Says:

    Pope
    Michelangelo when you finish the Sistine Chapel?

    Michelangelo
    When completed

    Meanwhile you are doing a good job.
    Thanks

  63. pUnKpUsTeR Says:

    @mynullvoid – let Chris do his work – and believe him – this year has a lot of day before it ends – and if its not ready at the end of the Year u should have to wait som day longe ;)d

  64. Shani Says:

    Hi guys and thanks for all your hard work. I started using pfsense from 1.2.3 beta to release and recently I have upgraded to 2.0 BETA 4 in a production environment. I simply used the web gui update feature and the firewall downloaded and came up fine. The only thing that did not came up automatically was the default gateway. Once I added and configured the default gateway, all my VPNs came up. I really liked the feature where you can see who is connected thru openvpn before it used to be a chore. I wish if you can add a feature like untangle has where you can just click to add an openvpn user or click to remove a user. The moment you add a user it lets you download the config file with certificates. Furthermore when you do not want that user simply click on remove and certificate is revoked for that user. I am planning to try the BGP session under 2.0 let see hot it goes.

  65. Chris Buechler Says:

    Shani: we already have OpenVPN user management with export.

  66. R.R. Says:

    I have implemented pfsense 5 years ago in 2 offices, these devices are still working .. thank you guys! you have done a great work!

  67. Jake Says:

    Just wanted to say – great work! been running the beta for a little while now and it is excellent :-)

    Thanks.

    Kind regards,
    Jake.

  68. t@slinux Says:

    pfsense the best of the best on the ALL the NET for ever, secula seculorum…

    THANKS to all pfsense team, from me and meny meny people I know.

  69. v2final Says:

    eagerly waiting for the v2 final! hope it comes by christmas!

  70. ผลบอล Says:

    THANKS to all pfsense team, from me and meny meny people I know.

  71. Magicool Says:

    Thank you all for the hard work! I am using pfSense at home and office. It works perfect.

    P.S. Guess what we wish for Christmas :)

  72. men Says:

    Will test it next week…!, hope it’ll be as good as previous releases thanks for the great work!

  73. xeonixc Says:

    I am waiting for it since last december, i’m so happy that its finally coming out on christmas….great job by you all filter programmers,, its the best christmas gift i’ll ever get :)

  74. yzy-oui-fi Says:

    We are running banch test of the 2.00 since december 2010 now without particular issues.

    Same device running:

    Squid Proxy (with external radius server)
    PPPoe server (with external radius server)
    Openvpn server (with external radius server)
    PPTP server (with external radius server)
    sip proxy (with external radius server)

    Great job guys! Congratulations to all devs!

  75. sbo Says:

    I have implemented pfsense 5 years ago in 2 offices, these devices are still working .. thank you guys! you have done a great work!
    mynullvoid: I don’t know how many times I have to post it. Check newer posts here for newer info, and it will be released sometime this year.

Please don’t post technical questions or off-topic comments. It is far more likely that your questions and concerns will be addressed effectively through one of our support channels.

Leave a Reply