pfSense Plus Software Version 21.05.1 is Now Available
Customers running pfSense Plus, or the Factory Edition of pfSense software version 2.4.5-p1 and older, can upgrade in place automatically to pfSense Plus software version 21.05.1 as with any other previous upgrade.
This version is a maintenance release of pfSense Plus software containing several bug fixes, primarily for 32-bit ARM systems such as the Netgate 3100.
This version of pfSense Plus software includes:
Corrections for performance regression on 32-bit ARM systems
Native package builds for 32-bit ARM systems
Workaround for PHP instability on Netgate 3100
For more details, see the Release Notes and Redmine.
pfSense Plus software version 21.05.1-RELEASE updates are available now. For installation images, contact Netgate TAC.
Due to the significant nature of the changes in this upgrade, warnings and error messages are likely to occur while the upgrade is in process. In particular, errors from PHP and package updates may be observed on the console and in logs. In nearly all cases these errors are a harmless side effect of the inconsistent state of the system during the upgrade from changes in the operating system, libraries, and PHP versions. Once the upgrade completes, the system will be in a consistent state again. Only errors which persist after the upgrade are significant.
Always take a backup of the firewall configuration prior to any major change to the firewall, such as an upgrade.
Do not update packages before upgrading! Either remove all packages or do not update packages before running the upgrade.
The upgrade will take several minutes to complete. The exact time varies based on download speed, hardware speed, and other factors such as installed packages. Be patient during the upgrade and allow the firewall enough time to complete the entire process. After the update packages finish downloading it could take 10-20 minutes or more until the upgrade process ends. The firewall may reboot several times during the upgrade process. Monitor the upgrade from the firewall console for the most accurate view.
If the update check fails, or the update does not complete, run pkg install -y pfSense-upgrade to ensure that pfSense-upgrade is present.
Consult the Upgrade Guide for additional information about performing upgrades to pfSense software.
johnpoz LAYER 8 Global Moderator last edited by johnpoz
@dennis_s so there is no 21.05.1 image, its only the 21.05 image? I opened a ticket and very quickly got a response but the image they sent me was only 21.05
Or is the 21.05.1 only for the 3100 for clean install?
sg3100 upgraded Very quickly and successfully
They just provided me a download link for the 21.05.1 firmware for the SG-3100
johnpoz LAYER 8 Global Moderator last edited by
I replied to the email and they sent the correct one this time.. Just a slight mix up.. no biggy..
Two SG-3100 on 21.05. I updated one successfully.
The second one never came back online.
I will have to go onsite in the morning to see what is up.
I upgraded SG-5100 here at office and is fine.
I had to recover the SG3100 using USB.
When I was doing the update, I remember the web page closed accidentally so I went back in and restarted the process... this could have been reason why.
johnnyfive last edited by
SG-2440 ugprade took ten minutes, which was longer than I remember, but everything came back up smoothly.
Captain Kremmen last edited by
I get a certificate error when trying to update from 21.05 on my SG-1100:
Certificate verification failed for /C=US/ST=Texas/L=Austin/O=Rubicon Communications, LLC (Netgate)/CN=repo00.netgate.com
1082880000:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/local/poudriere/jails/pfSense_plus-v21_05_aarch64/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Child process pid=37884 terminated abnormally: Segmentation fault
KOM last edited by
My SG-1100 upgraded flawlessly in about 15 minutes.
Captain Kremmen last edited by
@kom Yep, mine is updating now:
Had to do a bit of digging and did a full power cycle after turning off crypto acceleration this time.
Help! I did the upgrade to 21.05.1, but it would not complete. Now NAT is not working and I consistently get an error
"There were error(s) loading the rules: /tmp/rules.debug:38: unknown protocol carp - The line in question reads : no nat proto carp"
I've tried a console reset to factory, I've tried reloading an earlier config file, nothing seems to work. The errors just stack up in the log.
I wasn't using CARP, but it seems now it's expecting it and I don't know how to fix it.
At this point, I could nuke and repave, but I'm new at this and don't know the best approach.
Thanks for the help.
Rico LAYER 8 Rebel Alliance last edited by
I'd Backup the Config, clean reinstall 21.05.1 and restore the Config.
I have an Sg5100 which updated automatically. After the update, the check for update function fails on the dashboard and I can't install or update any packages.
SteveITS Rebel Alliance last edited by
@jakisme Is the DNS Resolver started? pfBlocker for instance has an issue (my general understanding is it's a pfSense issue) that DNS stops and doesn't start again on package install. If it had been left installed during the upgrade it would have tried to reinstall itself. If so just start it.
re: updated automatically, that shouldn't be possible, but yours is the third post I've seen saying that...another one recently and one several months back, maybe for 21.02. Did the router reboot for any reason before it self upgraded, per the logs? I think that was a theory back then...
unfortunately When I attempt to upgrade or restore from a backup the system errors out. My thought was to back out of the upgrade but I can't figure out how.