The Netgate Installer is a versatile, streamlined tool for installing 2.8.0. Installation Guide (Virtual Machine or Bare Metal)
: Select your preferred language layout (default is US Test).
This version officially introduces the ability to use , the modern replacement for the traditional ISC DHCP server. Kea offers better performance, faster lease times, and improved management capabilities. 4. Advanced Networking Features
If you are currently running pfSense 2.7.2, the update process is simplified via the GUI: Navigate to . Select the "2.8.0" branch. Click Confirm . pfsense-ce-2.8.0-release-amd64.iso.gz
Whether you're a seasoned network administrator or just starting out, pfSense CE 2.8.0 is an excellent choice for your network security and management needs. So, download the pfsense-ce-2.8.0-release-amd64.iso.gz image today and experience the power and flexibility of pfSense CE for yourself.
The default State Policy changed from "Floating" to " Interface Bound " to increase security, though this may require configuration adjustments for some Multi-WAN or High Availability setups.
If you are deploying pfSense as a virtual appliance in Proxmox VE, VMware ESXi, or Hyper-V: The Netgate Installer is a versatile, streamlined tool
This article provides a deep dive into the release, its features, the installation process using the .iso.gz file, and why this specific image matters for your network infrastructure.
: This new backend is currently disabled by default and lags behind in functionality, lacking support for features like MLPPP. It will become the default in future releases. To enable it manually, navigate to System > Advanced on the Networking tab.
: Identify the interface connected to your internet modem (e.g., vtnet0 , igb0 , or em0 ). Kea offers better performance, faster lease times, and
Caution: Because this tracks a "Current" branch (not "Stable" or "Release"), some very old legacy NICs (e.g., older Realtek 8169 or certain Broadcom Tigon3 chips) may experience regressions. Test your hardware before deploying in production.
If you are performing a fresh installation, the process is straightforward:
