2.5 Release Date vs Abandoned for TNSR Development



  • Is it normal for a build to be in development stage for almost a year?

    Just curious when 2.5 might be released or if Netgate has abandoned it for TNSR development.


  • LAYER 8 Rebel Alliance



  • Sorry, I was speaking specifically with regards to Netgate. Does it normally take more than a year of testing/development snapshots before it's officially released?


  • Rebel Alliance Developer Netgate

    There is still constant development on 2.5. It's not unusual to go years between major version releases, since 2.5 is really the HEAD/"master" branch which is where all new development goes, and we do smaller releases here and there as needed with some of the work that can be backported. Look at the gaps between 2.2.0 and 2.3.0 and 2.3.0 and 2.4.0, those were even longer.

    https://docs.netgate.com/pfsense/en/latest/releases/versions-of-pfsense-and-freebsd.html

    Also FreeBSD 12.x is not ready to be used as a base for a production release. It's getting closer, and we're actively working on that, too, but it's not as visible since the work is going straight into FreeBSD so you don't see it as commits in "pfSense".

    Saying Netgate has "abandoned" anything is just FUD.


  • LAYER 8 Moderator

    @jimp said in 2.5 Release Date vs Abandoned for TNSR Development:

    Also FreeBSD 12.x is not ready to be used as a base for a production release. It's getting closer, and we're actively working on that, too, but it's not as visible since the work is going straight into FreeBSD so you don't see it as commits in "pfSense".

    This. Also Netgate wouldn't have needed to hire devs/managers from FreeBSD upstream if they didn't plan to stick with pfSense in a longer run. Why would they when TNSR is based on Linux? Would have made more sense to hire a Redhat/Linux guy then ;) Not entirely serious though but if one likes to read something into long release cycles like 2.5, that should also be taken into account as well as all the work from Netgate employees going into upstream FreeBSD like IPsec enhancements, Wireguard Kernel work etc.

    Kudos for that!



  • Thanks. Didn't realize development went years between major builds. Explains why there is a lot of stability.

    Still haven't decided to ditch by Ubiquiti UniFi Dream Machine Pro yet for my Netgate XG-1541.

    Have a feeling the XG-1541 would be faster. Just haven't bitten the bullet yet.


  • LAYER 8 Moderator

    @ericnix said in 2.5 Release Date vs Abandoned for TNSR Development:

    Still haven't decided to ditch by Ubiquiti UniFi Dream Machine Pro yet for my Netgate XG-1541.

    I think you can't really compare them. I only had a look at the UDM (without pro) but that is seriously capped and cut back feature wise. So if you want to do anything advanced take pfSense over UDM every single day of the week ;)

    Best example that still isn't possible AFAIK (last I checked was a few weeks ago): Simply add custom DNS entries or overrides for internal services or some kind of "split-DNS". As UDM/UDM Pro are no longer running a "fully" featured Linux as base (like their Gen2 controllers for example) you can't just edit a unbound/dnsmasq config file. Really a pity.



  • Every time I see a thread like this I can't help but ask: what's wrong with the current release version?

    I think we have been conditioned to expect a new major release every year for any software. That somehow version 938 is better than 937 and your life isn't complete until you have the new thing.

    pfsense 2.4.4 was solid and secure the day it was released and it was solid and secure the day 2.4.5 was released. That's a good thing. It lasted a long time because it was good!

    The move to FreeBSd 12 is non trivial. There is a lot of history around this. The other `sense has been putting 12.x on their list for sometime now. Still not there. Will we see a 2.4.5_p2 or _p3 before 2.5? Maybe. If 2.4.5_p1 presents serious issues for your environment: document the issue, work it through and make the appropriate bug reports. You will get a LOT of help with that if you ask.

    As far as other products I haven't seen anything that gets you access to developers who will put in substantial effort to address your issue like you can get here in this forum. For free! Think about that. Maybe toss a few bucks at FreeBSD, buy a Netgate appliance or a support contract. It's really, really, inexpensive relative to what is available elsewhere.

    I'm not a fan boy. I'm just not into that kind of thing. BUT, I think you will struggle to find greener grass than you have right here.


  • LAYER 8 Rebel Alliance

    Nice write-up @jwj
    Nothing more to add, agree 100%

    -Rico


  • LAYER 8 Global Moderator

    Lets keep in mind that it's only been 2 months since the latest update in the 2.4 line as well.

    Not like they are not providing updates. While true if you look at the time between 2.0 to 2.1, and then .2 and .3 and finally .4

    It does seem like taking a bit longer.. But then again, there are some very large changes involved as well..

    You can also follow the changes via the snapshots, clearly stuff is being worked on pretty much daily.. Check the commit history if your curious..
    https://github.com/pfsense/pfsense/graphs/commit-activity

    while there are changes across the board in lots of different things with 2.5.. From operation point of view.. There are only a few things that I am looking forward to, the ability to use TLS 1.3.. which the update to openssl brings prob the only thing that stands out for my use.. Don't get me wrong there are lots and lots of changes and features - but many of them are in area's that don't directly effect my current use.. ipsec stuff for example - not using it.. Pfsense works with everything I am currently doing, so breezing over the new features and fixes in 2.5 the only one that pops out for me is the tls 1.3 stuff.. And the ECDSA keys will be nice as well in the Cert Manager. But more than happy to wait until its ready..

    It will be ready when its ready ;)



  • @Rico said in 2.5 Release Date vs Abandoned for TNSR Development:

    Nice write-up @jwj
    Nothing more to add, agree 100%

    -Rico

    I'll add this: When you come here with some concern or request and you get sorted a simple thank you would be a good thing. These people deserve that!


  • LAYER 8 Moderator

    @jwj said in 2.5 Release Date vs Abandoned for TNSR Development:

    I'll add this: When you come here with some concern or request and you get sorted a simple thank you would be a good thing. These people deserve that!

    A little thumbs up (yes, the button, that pun was intended!) and a thank you can go a LONG way to make everyone putting in effort to help, leave with a good feeling and a reason/the will to help again. Couldn't agree more. :)


Log in to reply