pfSense Plus 24.11-BETA is here!

mwatch

This release brings several major features that our users have requested, along with over 70 other improvements and bug fixes. Major features include:

Kea DHCP Enhancements, including support for High Availability, as well as increased integration into Unbound. Among other things, this allows for DHCP client registration in the Unbound DNS Resolver and smoother updating of Unbound.
Multi-instance Management Early Look
System Aliases in Custom Rules
NTP Authentication

Blog Post: https://www.netgate.com/blog/netgate-releases-beta-of-pfsense-plus-software-version-24-11
Release Notes: https://docs.netgate.com/pfsense/en/latest/releases/24-11.html

juanzelli

My 4100 has survived almost one hour on it so far

mcury

@juanzelli said in pfSense Plus 24.11-BETA is here!:

My 4100 has survived almost one hour on it so far

I'll try it tonight, nothing like a BE to recover things in case it goes south..

patient0

Just updated my DEC740 10 minutes ago and it's still working :) ... and my KEA-DHCP crash issue seems solved.

chpalmer

So far so good on my Watchguard M400..

mcury

Installed today, so far so good on my SG-4100.
Nice to see that one of my aliases was automatically renamed due to a reserved keyword, wireguard.
Most smooth update so far.

GeorgeCZ58

Tested on spare XG7100. Unfortunately latency bug started in 23.01 for 7100 model is still not resolved.

mcury

There is something weird with the ZFS widget.

[24.11-BETA][root@pfSense.home.arpa]/root: cat /boot/loader.conf.local
hint.mmcsd.0.disabled="1"
[24.11-BETA][root@pfSense.home.arpa]/root: zpool status pfSense
  pool: pfSense
 state: ONLINE
  scan: scrub repaired 0B in 00:00:03 with 0 errors on Sat Sep 28 12:51:30 2024
config:

        NAME        STATE     READ WRITE CKSUM
        pfSense     ONLINE       0     0     0
          nda0p4    ONLINE       0     0     0

errors: No known data errors

cmcdonald

pkg info | grep zfs

can you post the output from that command?

mcury

@cmcdonald said in pfSense Plus 24.11-BETA is here!:

pkg info | grep zfs

sure, follows bellow:

[24.11-BETA][root@pfSense.home.arpa]/root: pkg info | grep zfs
py311-libzfs-1.1.2023020700_1  Python libzfs bindings
[24.11-BETA][root@pfSense.home.arpa]/root:

cmcdonald

@mcury said in pfSense Plus 24.11-BETA is here!:

py311-libzfs-1.1.2023020700_1

Can you do pkg install -fy py311-libzfs

what version were you upgrading from to 24.11-BETA ?

mcury

@cmcdonald said in pfSense Plus 24.11-BETA is here!:

Can you do pkg install -fy py311-libzfs

Just did, closed and added the widget again but the problem persists.

[24.11-BETA][root@pfSense.home.arpa]/root: pkg install -fy py311-libzfs
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The following 1 package(s) will be affected (of 0 checked):

Installed packages to be REINSTALLED:
        py311-libzfs-1.1.2023020700_1 [pfSense]

Number of packages to be reinstalled: 1
[1/1] Reinstalling py311-libzfs-1.1.2023020700_1...
[1/1] Extracting py311-libzfs-1.1.2023020700_1: 100%

what version were you upgrading from to 24.11-BETA ?

24.03

cmcdonald

@mcury replicated and fixed for next build. thanks!

dk4dk4

@cmcdonald
I also noticed this ZFS widget issue after upgrade 24.03 -> 24.11-BETA:

pkg info | grep zfs
py311-libzfs-1.1.2023020700_1 Python libzfs bindings

zpool status
  pool: pfSense
 state: ONLINE
status: Some supported and requested features are not enabled on the pool.
        The pool can still be used, but some features are unavailable.
action: Enable all features using 'zpool upgrade'. Once this is done,
        the pool may no longer be accessible by software that does not support
        the features. See zpool-features(7) for details.
config:

        NAME        STATE     READ WRITE CKSUM
        pfSense     ONLINE       0     0     0
          ada0p4    ONLINE       0     0     0

stephenw10

Yup that is fixed. It will be in the next public build.

rle

I make extensive use of ISC DHCP DNS Resolver -> section Host Overrides, in which various local services have a parent domain of:

business.com (e.g. s3.business.com)
family.com (e.g. nextcloud.family.com)
others simply to the default home domain (e.g. static DHCP nodes).

The business and family domains are of course redacted in this example. The original domains are however owned by me. I use this feature mainly, amongst others, in combination with HAProxy.

It is still unclear (or I'm not sure up until now) if the host overrides feature is fully supported by Kea within this 24.11-BETA release?

stephenw10

You mean registering dhcp leases in the Resolver? That does work with Kea in 24.11.

I'm not really sure how that relates to host overrides though?

SteveITS

@rle said in pfSense Plus 24.11-BETA is here!:

use of ISC DHCP DNS Resolver

I think you've confused DHCP Server with DNS Resolver, which are different things.

rle

Thanks for the replies. Appreciated!

I'm referring to this page/link with the displayed message:

which I interpret as valid for this whole page. Therefore my question earlier regarding the subsection on this page titled Host Overrides. I myself find it unclear what parts exactly are related to 'ISC DHCP'.

rle

Redacted example of the Host Overrides: