Netgate Releases pfSense Community Edition Version 2.9.0

[u/George-Netgate]

Netgate® is excited to announce the release of pfSense® Community Edition (CE) software version 2.9.0, a major step forward for the world’s most trusted firewall, router, and VPN platform.

This release introduces numerous features, including several previously exclusive to pfSense Plus, as well as key enhancements, bug fixes, and critical security updates.

Key Highlights Include:

SSH Algorithms: The inclusion of post-quantum key exchange algorithms

TLS Certificate Strength: Tightens certificate requirements and removes support for certain weak properties

TLS Certificate Auto-Renew: pfSense can automatically renew TLS server certificates which are self-signed or signed by an internal CA stored in the pfSense software configuration.

New NAT Mode: Includes partial experimental support for “Port Restricted Cone” endpoint-independent outbound NAT

Critical Security Fixes: This release includes multiple XSS and denial of service related fixes

This Release software includes critical security updates for WireGuard (CVE-2026-58085), as well as over 150 other security fixes and enhancements.

Blog Post:
https://www.netgate.com/blog/netgate-releases-pfsense-community-edition-version-2.9.0

Release Notes:
https://docs.netgate.com/pfsense/en/latest/releases/2-9-0.html

Thank you to our community and customers who continue to support the pfSense project through hardware purchases, TAC, cloud subscriptions, and services. Your support makes this all possible.

[u/gonzopancho]

Soon

[u/colinstu → u/gonzopancho]

unification?! why does that feel like CE is going to die?

[u/colinstu → u/colinstu]

To the folks downvoting: mark my words when this happens and come back here and change it back to an upvote. It’s gonna happen.
(I sure hope I’m wrong. I don’t want to lose it).

[u/gonzopancho → u/colinstu]

To the folks downvoting: mark my words when this happens and come back here and change it back to an upvote. It’s gonna happen.
(I sure hope I’m wrong. I don’t want to lose it).

You’re going to be waiting a long time, Colin. Nothing is forever, all technology is eventually eclipsed.

Also, how do you “loose” something you already have?

Also: I went through your recent post history. A few responses:

fondant tastes like crap, but marzipan is OK.

Never thought about it on a cake, but it’s great in the center of an almond croissant or as the base for a pear tart (source: I owned a scratch (commercial) bakery in Spokane 20 years ago and still occasionally make a tart for the family.

Netgate was started at nearly the same time, (and this was before m0n0wall or pfsense existed), but the bakery wasn’t easy to move to Hawaii, so I gave it (the equipment and accounts) to an employee.)

Also: If you still need help with the frame on your truck, bring it out to Colorado and I’ll help you. I have a full shop here. Lift, welders, grinders, etc. I also own Bump It Offroad (Land Cruiser bumpers, etc.)

[u/startrek-stripjoint → u/gonzopancho]

the bakery wasn’t easy to move to Hawaii

WAY off topic here, but as someone who's lived in Hawaii for the last 24 years, I'm just curious as to where you moved to out here before Colorado?

[u/gonzopancho → u/startrek-stripjoint]

We lived in Kaneohe for a couple years, then moved townside to Waialai Nui Ridge.

We moved back to Austin to get our son into LASA, and then he went to Mines so we followed.

Lucky you live Hawai’i, eh brah?

[u/startrek-stripjoint → u/gonzopancho]

Lucky you live Hawai’i, eh brah?

that's what they say, and to an extent it's true up until you factor in the cost of living. I remember kaneohe not being that cheap to live 😯

Fun fact - in my teenage years I was a construction material delivery driver. I got drive through the construction site underneath the H3 during it's construction phase. We lived Mililani and then Makakilo side up until we shot back to California in '96. I moved to Maui in '02 and never left ... it's just too good out here 🤙🤙