Block private IP ranges (bogon networks) from originating traffic on your external WAN interface.
A: No. pfSense CE is only available for the x86-64 (AMD64) hardware architecture. There is no official ARM version.
: Introduces a new kernel-based PPPoE driver ( if_pppoe ) that significantly boosts throughput for multi-gigabit fiber connections by reducing CPU load.
After extraction, you will have pfsense-ce-2.8.0-release-amd64.iso . pfsense-ce-2.8.0-release-amd64.iso.gz
If you are running 2.7.x, the recommended path is to use the System > Update tool within the web GUI.
If you are running 2.7.2 or older, 2.8.0 is a critical upgrade for several reasons:
, this version introduces architectural shifts and performance improvements designed for modern networking hardware. Netgate Documentation Key New Features in 2.8.0 Kernel-based PPPoE Backend : The primary update is the introduction of the Block private IP ranges (bogon networks) from originating
Upgrading to PHP 8.3 enhances the speed of the web GUI and improves overall system security. 2. Enhanced Networking and Security
The built-in Archive Utility fails on some GZIP levels. Use The Unarchiver or terminal: gunzip file.iso.gz .
The Netgate Installer is a versatile, streamlined tool for installing 2.8.0. Installation Guide (Virtual Machine or Bare Metal) There is no official ARM version
Includes the Kea DHCP daemon as a modern replacement for the deprecated ISC DHCP, supporting High Availability (HA) and dynamic DNS registration for both IPv4 and IPv6. NAT64/DNS64 Support:
: The web GUI migrates to PHP 8.3. This produces a noticeable performance boost across the dashboard while mitigating old code vulnerabilities.
Understanding the pfSense CE 2.8.0 Release for amd64 Architecture
While the upgrade process automatically updates the bootloader in most cases, there may be edge cases where it fails—for example, if there are multiple unmirrored disks and the BIOS/EFI firmware is booting from a disk containing an older installation.
| Area | Change | Action Required | |------|--------|------------------| | | Requires 64-bit with SSE2 | Pentium 4/Athlon 64 or newer. No 32-bit. | | Packages | Many legacy packages (e.g., squid 3.x, haproxy 1.8) removed | Switch to squid 4.x or haproxy 2.4+ from the package repo before upgrade. | | Captive Portal | RADIUS accounting formats updated | Update your RADIUS server dictionaries. | | RRD Graphs | Data format changed | Old historical data will be lost; backups of /var/db/rrd are not restorable. |
