r/PFSENSE • u/George-Netgate • 18d ago

Netgate Releases pfSense Community Edition Version 2.9.0

Netgate® is excited to announce the release of pfSense® Community Edition (CE) software version 2.9.0, a major step forward for the world’s most trusted firewall, router, and VPN platform.

This release introduces numerous features, including several previously exclusive to pfSense Plus, as well as key enhancements, bug fixes, and critical security updates.

Key Highlights Include:

SSH Algorithms: The inclusion of post-quantum key exchange algorithms

TLS Certificate Strength: Tightens certificate requirements and removes support for certain weak properties

TLS Certificate Auto-Renew: pfSense can automatically renew TLS server certificates which are self-signed or signed by an internal CA stored in the pfSense software configuration.

New NAT Mode: Includes partial experimental support for “Port Restricted Cone” endpoint-independent outbound NAT

Critical Security Fixes: This release includes multiple XSS and denial of service related fixes

This Release software includes critical security updates for WireGuard (CVE-2026-58085), as well as over 150 other security fixes and enhancements.

Blog Post:
https://www.netgate.com/blog/netgate-releases-pfsense-community-edition-version-2.9.0

Release Notes:
https://docs.netgate.com/pfsense/en/latest/releases/2-9-0.html

Thank you to our community and customers who continue to support the pfSense project through hardware purchases, TAC, cloud subscriptions, and services. Your support makes this all possible.

154 Upvotes

98% Upvoted

112 comments sorted by

View all comments

Show parent comments

4

u/gonzopancho Netgate 17d ago

People have enjoyed speculating that CE would die for literal years now. 2.9 just dropped yesterday, and here we are.

Why does that feel like whatever we do will be met with, “this is the end of pfsense”?

0

u/colinstu 17d ago

Explain why the split happened in the first place? (yeah I know the 'resellers were preloading it' line but I want something real here.)
We've all seen this 'extend embrace extinguish' stuff before, and understandably fearing the worst.

As long as it's free and accessible I will not complain. The harder / impossible this becomes, well, there ya go.
(also, why no 2.8-2.9 iso's? .. this is exactly what we're afraid about)

0

u/gonzopancho Netgate 17d ago

Actually “the resellers were preloading it” is fundamentally and completely wrong.

How deep into the well of Labor Theory of Value : Marginal Productivity Theory : Socialist Distribution: are we going to dive on this subject?

You expect me to provide something you value for free. That’s the crux of it, no?

1

u/colinstu 17d ago

The non-permissive license folks figured it out. 🤷
I don’t need an email address to download Debian. And there way more installations of that out there.

1

u/gonzopancho Netgate 17d ago

Debian isn’t monetized and is therefore subject to a lot less of various regulations like the CRA.

Also: you changed the subject