pfSense® Plus software version 24.03-RELEASE is here! 🥳

mwatch · Apr 24, 2024, 7:11 PM

Announcement Blog Post: https://www.netgate.com/blog/netgate-releases-pfsense-plus-software-version-24.03

Release Notes: https://docs.netgate.com/pfsense/en/latest/releases/24-03.html

Release Highlights:

Introducing Default Password Control
Enhanced Update Process Using ZFS Snapshots
Packet Data Flow Export
Gateway Recovery
State Policy Default Change
Upgraded VPN capabilities
Updated IPsec-MB kernel module
High Availability on AWS

Update (Wednesday April 24):

Devices running pfSense Plus software version 24.03 may be seeing a "24.03_1" update available which is a very minor revision made to address a missing dependency on 64-bit ARM devices (https://redmine.pfsense.org/issues/15433). The revision is kept the same on all platforms for consistency.

Upgrading to this version is safe, but not necessary at this time unless users are running on 64-bit ARM devices and want access to S.M.A.R.T. disk data (e.g. Netgate 2100 devices which have an add-on SSD).

Using the GUI or pfSense-upgrade from the console or shell to upgrade from 24.03 to 24.03_1, the device will want to reboot, but in this case that is unnecessary. However, doing so is harmless except for the minimal downtime involved in the reboot during that upgrade process.

Manually updating from the shell via pkg update; pkg upgrade will pull in the new revision and fixed dependency as needed. Run those commands from a shell prompt and confirm that the proposed changes are OK. No additional action is necessary.

Devices which have not yet upgraded to 24.03 or those installed fresh via the Online Network Installer will obtain the latest version automatically and do not require any additional action after upgrading.

johnpoz · Apr 23, 2024, 3:52 PM

@mwatch sweet... Now just have to find some time to do it.. I really just want to push the button. But I told myself when 24.03 drops is when I would switch over to install on ssd vs the emmc in my sg4860.. And its sitting on my self just waiting to get installed.

And I know if I just update I won't do it tell the next version drops ;)

NogBadTheBad · Apr 23, 2024, 5:24 PM

@johnpoz It does take a while, I was starting to get worried

login-to-view

johnpoz · Apr 23, 2024, 5:26 PM

@NogBadTheBad ah you did the same thing moved to ssd? Or just the clicked upgrade to 24.03?

NogBadTheBad · Apr 23, 2024, 5:29 PM

@johnpoz Clicked the upgrade, I've had a solid state drive in from day one.

jimp · Apr 23, 2024, 5:47 PM

@NogBadTheBad said in pfSense Plus software version 24.03-RELEASE is here! 🥳:

@johnpoz It does take a while, I was starting to get worried

The good news is, if you're using ZFS Boot Environments then from here on upgrades should be much faster and have much less downtime.

mcury · Apr 23, 2024, 6:14 PM

Already testing here, so far, so good, thanks Netgate team.

sandie · Apr 23, 2024, 9:40 PM

Just upgraded:
6100 Max - all went fine and took only few minutes.
7100 DT - all went fine, for unknown reason this took nearly 15 minutes. I started to worry significantly, but all looks good.

Interesting things:
a) for the unknown reason on 6100 Max had to do "tailscale login" - otherwise tailscale was not starting. 7100 DT had no troubles and I did not have to do "tailscale login". Both routers have non-expiring keys, so I do not understand 6100 tailscale problem :)
b) I had custom patch applied in 7100 DT (https://forum.netgate.com/topic/183961/nut-package-2-8-1-and-above/58). Reverted it before upgrading, unclicked Auto Apply (it is still uncliked), but this custom patch was re-applied for some reason (?). It had no Auto Apply - I disabled it before uprade. Anyway is it okay to keep this patch? (it was really helpfull with NUT problems)
c) In both upgraded (24.03) routers I see small glitch in Boot Environments. Icon for Diagnostics / Configuration History is missing. See picture kindly.

sandie · Apr 23, 2024, 9:43 PM

@sandie login-to-view

sandie · Apr 23, 2024, 9:57 PM

Forgot to say "well done" (and can not edit posts anymore ;)). Thanks!

markster · Apr 24, 2024, 12:42 AM

Updated Netgate-5100 and no issues.
services all started fine.

login-to-view

Great work. Thank you.

cwagz · Apr 24, 2024, 3:55 AM

@sandie - on my 6100 max Tailscale was not online after first boot up post upgrade, but is online after a single reboot.

sandie · Apr 24, 2024, 5:55 AM

@sandie
I will try to respond to myself for b) question.

b) I had custom patch applied in 7100 DT (https://forum.netgate.com/topic/183961/nut-package-2-8-1-and-above/58). Reverted it before upgrading, unclicked Auto Apply (it is still uncliked), but this custom patch was re-applied for some reason (?). It had no Auto Apply - I disabled it before uprade. Anyway is it okay to keep this patch? (it was really helpfull with NUT problems)
The patch is now incorporated into 24.03 build (applied to baseline and released as part of build) and System Patches app mistakenly thinks it was (custom) applied and allows to Revert? :) Do I understand I should ignore that and remove somehow this custom patch, because it should never be reverted by anyone?

Please confirm kindly suggested steps.

Also 23.09.1 patch for Terrapin in System Patches is no longer available and is no longer needed? (SSH upgraded?)

Lurick · Apr 24, 2024, 4:01 PM

@jimp Would this also resolve the issues with trying to fetch pfBlocker and Suricata updates to lists after upgrade before interfaces come up?

the other · Apr 24, 2024, 4:15 PM

hey there,
just run thru update process...did a reboot prior to pressing that "update" button as recommended. Kept all packets though...

It took around 8 minutes (6100 appliance), rebooted...what to say? All seems to be working fine, terrapin patch included in 24.03, ULA patch not necessary any more (reverted the old patch still showing, deleted it then...still working for ULAs in VIP, all shown on tables).
All services came online by themselves. Settings (iE for freeradius) still there and VPN with 2fa still working...

So far: great work, people! Thanx... :)

the other · Apr 24, 2024, 7:17 PM

@the-other ok, another facepalm to myself...
It is clearly stated under System / Patches NOT to revert a patch after upgrade...happy are those who can read (and understand what they are reading...).
So of course all ULAs were gone from tables...re-aplied that patch and all is well again.
Sorry for any confusion...

Cylosoft · Apr 24, 2024, 7:24 PM

24.03_1 is out now?

the other · Apr 24, 2024, 7:29 PM

@Cylosoft yeah, scroll to the very first post in this thread...it's explained there (update)... :)

Antibiotic · Apr 24, 2024, 9:31 PM

@Cylosoft Where did you get about 24.03_1 as only 24.03 out?

dennypage · Apr 24, 2024, 9:34 PM

@Antibiotic said in pfSense Plus software version 24.03-RELEASE is here! 🥳:

Where did you get about 24.03_1 as only 24.03 out?

See the announcement at the top of this thread.