Navigating to Buy pfSense +
-
@gisuck said in Navigating to Buy pfSense +:
I don't understand why people come to the conclusion that CE will no longer be supported and will be dropped. Or that 2.7 will be the last CE to be released. Clearly people don't understand that Netgate have a roadmap website for all of the release. CE 2.8 is nearly finished at this point.
https://redmine.pfsense.org/projects/pfsense/roadmap
Isn't it called Community Edition for a reason? Netgate is still making commits to it. What am I missing that everyone is negative about this?
For the very fact in the blog, they are referring to CE as a 'home lab or POC in order to evaluate Plus' now.
Also, because support for ended in 2022.
Also, because they have even stated more than once that CE doesn't get updated often. Quite frankly, why would you implement something that is barely updated and rely upon an outdated, unsupported model of what they want to not even bother touching? The only reason CE is getting 2.8 is because it was already planned for Plus and CE. I can 99.9% guarantee within the next year or two, CE will not even be updated and still used for evaluation, and nothing more.
edited for spelling
-
@chigh09 said in Navigating to Buy pfSense +:
I want to offer a different perspective on this because I think it’s important. Let’s imagine that we are netgate and noticed an uptick in lost income because of the misuse of our software distribution. Now I’m not saying it was right or wrong but if it were me I would shut it down as well. Should we have issued a statement before shutting it down? I think it would have been the best move, but maybe we don’t know the whole story. And maybe if there were a statement before the shutdown then there would have been a mad rush to get as many free licenses as possible (just thinking out loud). I don’t know if they really intended to lose our trust, but rather they tried to make the best decision with the time they had.
I know it’s easy to feel like the victim and wanting to stick it to them with threats and say they will never use pfsense again, but I think we are all better than this. I say we might want to give them some time to rectify this situation and see what they come up with. We all aren’t perfect and yeah, everyone and every company makes mistakes. So, we could sit here and complain about the decisions being made or we can once again come together as a community and offer constructive feedback in a civil manner to improve the longevity of this great open source software that is also profitable by both parties.
So just because you had a pain in your arm because YOU bumped it and caused the pain, should you have it removed entirely to spite your body? I mean, that's essentially what they've done here, when there are other remedies and options to make it right for everyone. Instead, they went the lazy route and just decided to amputate.
-
@Amodin Best to amputate now, reattach later (maybe).
At this point, I think what the community really needs is some form of commitment from netgate. Trust has been broken. Not easy to rebuild.
"Maybe"'s in a PR usually mean the opposite of preferred outcome. We need definites.
-
That's not even remotely.what they said.
Current pfSense CE Users
For those of you currently using pfSense CE, you will not be affected by this change. You can continue to use pfSense CE at no cost, and you will continue to receive updates and security patches as they are made available. This is the ideal solution for home labs that do not require a TAC subscription or frequent updates while experiencing a similar feature set and peace of mind that your network is protected. pfSense CE is a fantastic solution for your home lab or proof of concept (POC) project to see if pfSense Plus might be the right solution for your network security needs.
In otherwords, if you don't know if it's worthwhile to purchase a TAC Pro or Enterprise license and want to develop a proof of concept first, use the CE version since the feature sets are very similar. Also, citation on where Netgate said they are no longer developing CE. People are finding bugs in CE all the time and they are making patches for it.
-
@GPz1100 said in Navigating to Buy pfSense +:
@Amodin Best to amputate now, reattach later (maybe).
At this point, I think what the community really needs is some form of commitment from netgate. Trust has been broken. Not easy to rebuild.
"Maybe"'s in a PR usually mean the opposite of preferred outcome. We need definites.
As I've said above, the correct route would be home licensing models similar to commercial models and not replying on the "we trust you to do the right thing" model. People aren't going to do the right things, for the most part. If it's labeled as "free" they are going to do whatever they can to obtain it and get more of it. It's free after all, right?
If you need limitations in place and still make it available, you moderate it. Home licensing is very much a thing that could really be implemented, along with commercial licensing. I don't understand why this didn't happen to begin with in their production, or even at management level. Auditing of licensing should also be a thing - and it's apparent that audit is either non-existent, or they have it and it's not being used correctly (at all).
-
@gisuck said in Navigating to Buy pfSense +:
That's not even remotely.what they said.
Current pfSense CE Users
For those of you currently using pfSense CE, you will not be affected by this change. You can continue to use pfSense CE at no cost, and you will continue to receive updates and security patches as they are made available. This is the ideal solution for home labs that do not require a TAC subscription or frequent updates while experiencing a similar feature set and peace of mind that your network is protected. pfSense CE is a fantastic solution for your home lab or proof of concept (POC) project to see if pfSense Plus might be the right solution for your network security needs.
In otherwords, if you don't know if it's worthwhile to purchase a TAC Pro or Enterprise license and want to develop a proof of concept first, use the CE version since the feature sets are very similar. Also, citation on where Netgate said they are no longer developing CE. People are finding bugs in CE all the time and they are making patches for it.
Incorrect, it's right there. You aren't even reading it. I think you should stop trying to read it in the reflection of your polished armor.
"pfSense CE is a fantastic solution for your home lab or proof of concept (POC) project to see if pfSense Plus might be the right solution for your network security needs."
What part of that did you not understand? That's exactly what they said.
-
@Amodin Please point out the error on the comment I made against that quote? My statement and their statement is exactly the same.
-
I believe I've already more than made my case in this debate, I can't be any more clear than what I have been.
Reading their own words isn't enough, me explaining it isn't enough - I don't know what else to tell you, except read it. Then read it again. Then again until you understand it.
-
@GPz1100 said in Navigating to Buy pfSense +:
@Amodin
At this point, I think what the community really needs is some form of commitment from netgate. Trust has been broken. Not easy to rebuild.True!
-
"Don't read the words at are exactly printed on their blog. Instead, use my words that I just made up because trust me bro."
I'll pass. This post has devolved into more FUD.
-
@gisuck said in Navigating to Buy pfSense +:
"Don't read the words at are exactly printed on their blog. Instead, use my words that I just made up because trust me bro."
I'll pass. This post has devolved into more FUD.
You're frankly delusional at this point. I literally, LITERALLY copied/pasted their own words from the blog YOU POSTED.
Really? Are you that brain dead that you can't read, but telling me that I made it up? LOL, my God.
I'm done speaking with you about this, you obviously don't/won't get it.
-
I asked you the point out the difference between what I stated and what they stated and you couldn't. All you said was read it and read it again after injecting an opinion that's not their. I read it a hundred times. The words on the screen didn't change. What I said and what they said are exactly the same still. Please tell me where I'm wrong.
-
@gisuck said in Navigating to Buy pfSense +:
I asked you the point out the difference between what I stated and what they stated and you couldn't. All you said was read it and read it again after injecting an opinion that's not their. I read it a hundred times. The words on the screen didn't change. What I said and what they said are exactly the same still. Please tell me where I'm wrong.
What is your angle here? Can't you just read a few days of motives as of why almost nobody who switched from CE to Plus at Netgate's hint, want to switch back to CE? Who is spreading the FUD here?
-
One problem I have is I won't be able to re-register my Plus home license if I need to rebuild on new hardware, and frankly, I don't know why, but when I initially built it I had to request a license three times before I was able to register my Plus version. This was a big concern even before they withdrew the free home Plus licenses. The registration appears a bit flaky. Also, when I log in I can see the orders but I can't see any registration details, I had expected I would see something like device <x> registered with license <y>. And given these were home/lab licenses I had expected it would say you have requested 4 of 5 maximum licenses. What do Pro and Enterprise users see in their portal - do they see the orders, and devices and licenses associated with those devices?
They should want us to keep using the Plus version as we are an ideal pool of free testers. I'd never expected, as a home Plus user, to get anything other than community support, via the Netgate forums. They have benefitted from taking an open-source product and commercialising it, and obviously added to it, they have built an offering from the hard work of countless contributors who created pfSense, and m0m0wall. I don't understand why you would throw loads of free testers under the bus.
And they should keep CE up-to-date, I understand it has the older version of openSSL, which is now defunct, and they are putting v3 into the next Plus release. There was an idea to register a credit card, to stop people who might want to abuse the free Plus licensing, but that creates a big problem for Netgate who would have to ensure these are stored very securely, if they got hacked they'd have a company-ending situation on their hands. How many licenses should a home-lab email account have? 2, 3, 4, 5? I could do with 2, maybe a max of 3 (one for testing new releases).
Please Netgate don't leave us in limbo, and please don't force us to look elsewhere.
-
@gisuck said in Navigating to Buy pfSense +:
I read it a hundred times.
Really...most of us here read it once or twice...
-
@JonathanS said in Navigating to Buy pfSense +:
How many licenses should a home-lab email account have? 2, 3, 4, 5? I could do with 2, maybe a max of 3 (one for testing new releases).I think 5 licenses for home lab should be more than enough for testing and home use. But it needs to be set up so that we can get a new token while it invalidates the old one in case we have to reinstall or make changes to the hardware with the same netgate hardware ID.
-
Here are some news
-
@HorstZimmermann Just wiped of some sweat upon seeing...
-
@NollipfSense true
-
@HorstZimmermann said in Navigating to Buy pfSense +:
Here are some news
So current pfsense+ users will still get the boot if they are not paying 129 $/year. It doesn't change anything for me. I will wait for the release and if I cannot update, at least I have time to transition to something else. "Good deal" for the coming Black Friday.
-
@HorstZimmermann said in Navigating to Buy pfSense +:
Here are some news
Excellent..
This is in line with what was originally promised for commerical use but it is still a rug pull for home and lab.
But it's good to see that cooler heads prevailed. No doubt they did a lot of soul searching over the weekend.
My only criticism is
"*Supply chain attacks. Be wary, be safe."
Sneaking that in at the bottom when there was no evidence of any supply chain attack ever makes it look like "ok home and lab pfsense enthusiasts, for your safety you now need to pay 129 a month because some third party did something."
Not ideal and there be tons of hate here re: that angle this afternoon for sure.
At least this was done at a time where CE and plus have compatible config.xml revisions. Switching back to CE is relatively simple as evidenced by Lawrence Technology's video.
I will place 6 orders for TAC lites where there's a commerical angle to the deployment and (annoyingly) downgrade a few instances to CE.
-
For home use, $129/yr seems high. I'd consider it for a perpetual license, but for annual, some thing cheaper should be available, ie, $30/yr.
-
@GPz1100 I agree. Just shy of $11 a month seems a bit steep, but we have an option to either spend $129/ year or invest in a appliance and have it pay for itself in a few years.
-
@HorstZimmermann excellent news. I didn't do the downgrade to CE so the transition should be super smooth for me.
-
ya, i already did the downgrade back to CE. not paying $129/year to them, especially how this all unfolded.
-
@chigh09 said in Navigating to Buy pfSense +:
@GPz1100 I agree. Just shy of $11 a month seems a bit steep, but we have an option to either spend $129/ year or invest in a appliance and have it pay for itself in a few years.
If they'd publish pppoe throughput I would have purchased more netgate hardware.
I deal with ISP that do 2000/1000 fiber but it involves PPPOE. On paper a 3100 can handle wireguard etc well enough for my needs but as we know, freebsd has issues with pppoe. Needs thicc single core performance. They don't publish what the devices will achieve here. I think a 3100 might crap out well below 1000 Mbit pppoe and it's unclear if a 6100 will handle 2000 Mbit pppoe.
So people go build their own thing. We were promised commercial TAC Lite for 129. We got that now. But legit home and lab... Dad's hunting cottage Starlink ain't paying 129 a year. It's still a rug pull.
Going to have to re-flash these to CE and pray that CE will keep being maintained.
Hopefully the TAC lite sales will bring fresh motivation to do the right thing by the community.
-
I think $129 deal is ok, but I prefer it like done by proxmox -optional.
-
Does anyone understand what netgate is on about when they talk about supply chain attacks...?
"We did not set out to make a commercial fork of the pfSense project that would be weaponized against us and the community. Recent discoveries have caused us to question who is benefiting from the work we do: pfSense Plus has been illegally copied, modified *, installed, and resold on third-party hardware and in the cloud in direct violation of our terms of use." *Supply chain attacks. Be wary, be safe.
Have they discovered some kind of chinese back door or what?
And how is it fixed by paying $129 or $399..
-
@dopeytree said in Navigating to Buy pfSense +:
Does anyone understand what netgate is on about when they talk about supply chain attacks...?
"We did not set out to make a commercial fork of the pfSense project that would be weaponized against us and the community. Recent discoveries have caused us to question who is benefiting from the work we do: pfSense Plus has been illegally copied, modified *, installed, and resold on third-party hardware and in the cloud in direct violation of our terms of use." *Supply chain attacks. Be wary, be safe.
Have they discovered some kind of chinese back door or what?
And how is it fixed by paying $129 or $399..
Do you like a good story? It's like "something bad happened to us, give us 129$ for medical expenses, and after we get better you can still pay us, because why not. "
-
@chudak said in Navigating to Buy pfSense +:
I think $129 deal is ok, but I prefer it like done by proxmox -optional.
ProxMox user here myself. I don't mind the $129 per year which is fine for home use. But as a home lab where I constantly rebuild servers and testing them how is it that going to work? I would need more licenses to test. Guess I'll stick with CE for that scenario.
-
Please note that existing Home+Lab users who choose not to purchase a TAC Lite subscription will not receive updates when they are released.
So the new approach is set in stone. Those of us using an existing Home or Lab instance to help with the dev/beta testing will receive no further updates. Please smile while we kick you in the teeth.
Or we have the option of:
If you're already using pfSense CE or pfSense Plus Home+Lab and wish to upgrade to a TAC Lite subscription, you can make the purchase through the Netgate Store. [$129 per annum]
Yep, they would like to bill us for dev/beta testing of their product for $129, every single year from now.
Along the way we also got 'trust me bro' future-casting whilst ignoring that they have deliberately voided the licence conditions on my latest (ie about 2 weeks ago, for the price of $0.00) active pfSense+ subscription.
Netgate terms and conditions that apply to this sale can be found here and cannot be superseded by any other terms.
So about those terms and conditions that cannot be superseded by any other terms?
It is a heck of a way to treat a paying customer - cancelling the terms of their current subscription that they use solely to support the product and ask them to pay an additional $129.00 for a subscription they thought they already had.
Madness. We now know the answer to this:
They are crazy enough to do it.
️
-
-
What happens about beta testing?
Do you still pay $129 a year to join a beta tester club?
Usually beta testers get some kind of reward in exchange for bug reporting. -
For me personally i am ok with $129 per year.
I am a home user and have a Sophos UTM425 appliance that i have pfsense installed, i do not change or test any hardware, just use it to secure my home.
For a lab and test environment i can understand the frustration
-
@GPz1100 said in Navigating to Buy pfSense +:
@RobbieTT Nothing is set in stone, and only NG knows the true motives behind all of this.
I held an optimistic view too but this latest statement is post-weekend and any remorseful thinking time.
Yep, I fell for it.
️
-
@HorstZimmermann said in Navigating to Buy pfSense +:
For a lab and test environment i can understand the frustration
It is, (IMHO) also for a modest Home-User by far to much (129$/y) ...
(Maybe a special offer to Forum/Community/Redmine - User would be a walk able way ... I think) -
@RobbieTT We all fall for it
-
Something like Mikrotik licensing will fly better with the community.
License Levels
After installation RouterOS runs in trial mode. You have 24 hours to register for Level1 (Free demo) or purchase a Level 4,5 or 6 license and paste a valid key.
Level 3 is a wireless station (client or CPE) only license. For x86 PCs, Level3 is not available for purchase individually.
Level 2 was a transitional license from old legacy (pre 2.8) license format. These licenses are not available any more, if you have this kind of license, it will work, but to upgrade it - you will have to purchase a new license.
The difference between license levels is shown in the table below.
Price no key registration required not for sale $45 $95 $250
Wireless AP mode (PtMP) 24h trial - no yes yes yes
PPPoE tunnels 24h trial 1 200 200 500 unlimited
PPTP tunnels 24h trial 1 200 200 500 unlimited
L2TP tunnels 24h trial 1 200 200 500 unlimited
OVPN tunnels 24h trial 1 200 200 unlimited unlimited
EoIP tunnels 24h trial 1 unlimited unlimited unlimited unlimited
VLAN interfaces 24h trial 1 unlimited unlimited unlimited unlimited
Queue rules 24h trial 1 unlimited unlimited unlimited unlimited
HotSpot active users 24h trial 1 1 200 500 unlimited
User manager active sessions 24h trial 1 10 20 50 Unlimited
Bonding interfaces 24h trial 1 unlimited unlimited unlimited unlimitedAll Licenses:
never expire (a running and licensed router can be used indefinitely)
can use unlimited number of interfaces
are for one installation each
offer unlimited software upgrades (exception - demo license does not allow ROS version upgrade (started from 7.8)) -
So really, nothing has changed except the price of how much it would cost.
CE will only be updated for users this go round, and it will gradually be put into the ground.
I think @RobbieTT said it best above.
"Madness."
Good luck everyone, I hope you are satisfied with this decision. I am off to find a new solution.
o7
-
Hah, shame on me for test driving 23.09 beta, now I won't get 23.09 full version and can't downgrade to CE either due to mismatched config versions.
I guess I'll either need to revert to an old config, or rebuild everything from scratch in opnsense.