bundled with Netgate hardware, free update, free upgrade ...
pfsense+ version 24.11 release notes
24.11 New Features and Changes
This is a regularly scheduled software release including new features and bug
fixes.
General
This release includes support for High Availability in the Kea DHCP daemon.
This implementation has several advantages over the older ISC DHCP
implementation, including:
Supports HA for DHCPv4 and DHCPv6.
Simplified HA setup, all in one place on each node for each type.
Works in hot standby mode, which is more reliable.
Can synchronize lease data over the SYNC interface for security and ease of
use, and can optionally encrypt the sync data for added protection.
This release includes support for DNS Registration of DHCP client hostnames
from the Kea DHCP daemon to the Unbound DNS Resolver
DNS records are updated dynamically on-the-fly, they do not require a
resolver restart and are not disruptive.
Supports DNS Registration for DHCPv4 and DHCPv6
DNS Registration can be configured on a per-interface or global manner, with
the ability to enable or disable specific interfaces as needed.
DNS records are limited to the system domain name. DNS Registration honors
the domain name on the DHCP settings for each interface and on static
mappings.
DNS records are accurate/updated on both high availability peers
Static mappings can be registered when Kea starts (similar to ISC) or when
a static mapping client obtains a lease.
Auto Configuration Backup
DHCP (IPv4)
Added: Settings tab for global Kea DHCP server options #5080
Fixed: Kea fails to restart due to race between process termination and startup #14977
Fixed: Kea will not start with identical MAC address filters on multiple interfaces #15130
Fixed: Changes in Kea DHCP interface pools may invalidate lease database content #15328
Fixed: Kea does not send configured TFTP server name #15518
Added: Kea High Availability Support (IPv4 and IPv6) #15575
Added: Kea DNS Resolver (Unbound) Integration (IPv4 and IPv6) #15651
Fixed: IPv4 DHCP client responses may be routed unexpectedly out unrelated WANs #15702
Fixed: Hostnames for ISC DHCP leases are not removed from Unbound when switching to Kea #15750
Added: Kea DHCP lease database RAM disk support (IPv4 and IPv6) #15828
DNS Forwarder
Fixed: DNS Forwarder ignores “Use remote DNS Servers, ignore local DNS” setting #15434
Changed: Update dnsmasq to version 2.90 #15465
DNS Resolver
Fixed: Reduce disruptions when changing DNS records from DHCP leases in Unbound #5413
Changed: Update Unbound to 1.22.0 #15483
Fixed: Automatic EDNS value may be lower than expected #15704
Fixed: Unbound configuration file contains Localhost address in forwarding mode with TLS enabled #15722
Fixed: unbound-checkconf fails with python mode enabled #15723
Dashboard
Added: Improve Thermal Sensors Dashboard widget readability #13520
Fixed: Traffic Graph widget displays bandwidth usage values which are half the actual usage amount #14933
Fixed: Firewall Logs Dashboard widget update interval does not behave as expected #15373
Added: Show current boot method in System Information Dashboard widget #15422
Fixed: Incorrect icon on collapsed dashboard widgets #15439
Fixed: Dashboard widgets refresh at unintended intervals #15725
Changed: Improve Thermal Sensors Dashboard widget refresh code #15728
Fixed: Session cookie warnings #15729
Diagnostics
Fixed: Sanitize RFC 2136 Dynamic DNS update keys in status.php output #15490
Fixed: File browser on diag_edit.php does not encode directory names before display #15525
Fixed: State table entries printed on diag_dump_states.php may contain an unexpected interface #15657
Dynamic DNS
Added: Enable @ support for Azure in Dynamic DNS #10000
Added: Enable @ support for name.com in Dynamic DNS #14289
Changed: Update Dynamic DNS API URL for porkbun.com #15779
Fixed: Dynamic DNS attempts to resolve entries with disabled interfaces #15802
IPv6 Router Advertisements (radvd/rtsold)
Interfaces
Fixed: Adding MSS and MTU values on a LAGG VLAN interface breaks connectivity #14083
Fixed: PHP error when applying interface settings if the /tmp/.interfaces.apply file is present but empty #15423
Added: Use natural sorting when sorting interfaces #15437
Fixed: OpenVPN QinQ interface creation fails #15692
Fixed: Interface group members are not validated on load/save on interfaces_groups_edit.php, and are printed without encoding on interfaces_groups.php #15778
Operating System
Fixed: Kernel panic with pflow configured and active #15446
Fixed: Proxy variables in crontab contents are improperly formatted #15502
Fixed: resizewin occasionally gets fed a spurious line feed over certain serial console+client combinations #15777
Routing
Fixed: Interface-bound state policy does not handle IPsec VTI traffic as expected when filtering on enc0 interface #15430
Fixed: IPsec VTI static routes may not be added after the system boots #15449
Fixed: Saving an IPv6 gateway overrides the IPv4 gateway #15589
Fixed: Routes with IPv6 Address as Next Hop for IPv4 Destination Causes Kernel Panic #15601
Fixed: Static routes using null gateways are not installed #15669
Rules / NAT
Fixed: Per-rule byte counter values lost across a filter reload #15516
Fixed: Separator positions are incorrect when copying interface group rules #15537
Added: GUI options to change default SCTP state timeouts #15661
Fixed: Setting the Port Forward interface to an interface group selects an invalid destination #15671
User Manager / Privileges
