pfSense-pkg-Nexus
-
I tried to remove the Nexus package, and received this:
This package is vital to system operation and cannot be removed.I'm not using Nexus, and was previously able to remove it in 25.07.1 with no apparent ill effect.
Sorry if this is a stupid question: Is there something in the package that is now necessary to base pfSense operation? If so, why are those components still in a separate package rather than in the pfSense base?
-
It's necessary. We made the package visible in the package manager page to allow easy updates outside of full releases.
-
@marcosm can you be more specific? What functionality does it hinder.
-
@marcosm Up until this past month, it has been removable. I have removed it everytime, as it is completely useless to me, takes up space, very likely a security risk, and no where is there anything that state how it is even remotely vital to my system.
Please, elaborate as to why we can no longer remove it. I have zero need to control several remote boxes. It kind of sounds more like a kill switch than anything else.
-
If you are accessing pfSense using the new gui via Nexus then removing the package would break access to the firewall which is obviously... undesirable!
If you don't need to use it just don't enable it.
-
@stephenw10
Hello,I am a ‘simple user’ with only one Pfsense, so I will never need another interface to connect to my single pfsense.
My question, as a basic user, is how to ‘delete’ or rather ‘not activate’ (as you suggest) it. I do not know how to do this.
Thank you for your response and your understanding of my question as a single user of a single pfsense.
-
@SwissSteph said in pfSense-pkg-Nexus:
My question, as a basic user, is how to ‘delete’ or rather ‘not activate’ (as you suggest) it. I do not know how to do this.
It is deactivated by default, you can check under System / Advanced / Netgate(R) Nexus if it's enabled or not.
-
Thank you for your reply and the path. I checked and it is indeed ‘not enabled’.
So I wonder why it has to be installed... but anyway, I can live with it as it is
-
@SwissSteph said in pfSense-pkg-Nexus:
So I wonder why it has to be installed
It was mentioned that they made a separate package to be able to update it outside of the normal pfSense+ upgrade cycle.
Why it can't be removed I don't know, maybe a management decision, maybe there is a technical reason.
-
@patient0
On my ‘25.07.1’ I was able to uninstall it without any problems (I just did it). -
@SwissSteph said in pfSense-pkg-Nexus:
I was able to uninstall it without any problems
That is mentioned in the first post... so maybe you should read more and write less.
-
@Bob.Dig
Yes, you're right. But can you put yourself (a little) in the shoes of the rest of the world who don't speak English and are doing their best to understand? Thank you and have a great end of the year. -
Yes this is a change in 25.11 to prevent user foot shooting. It's harmless having the pkg there if you're not using it. If you are using it it really needs to not be removed!
-
@stephenw10
thank you -
Hi Stephen.
Sorry I'm a kinda broken recorder here.BUT. I red this conversation. I understand the "foot shooting" aspect here.
Yet, what I DON'T understand is 2 things here...
- If The "Nexus" is not "needed" as You state for The basic user.
Why is it still "in the system" and cannot be removed as pkg ? - If and when it is not needed, and is not enabled by default (as You state)... Why has it been installed "silently" in the first place... ??
Now Nexus and it's functionality... When someone NEEDS it, @ that level of knowledge You just don't shoot Your self in the leg anymore. You know what Youre doing and so forth.
I'm really asking again. Not being stupid here. It's just that all the answers provided by Netgate have been like talking with a politician.
WHY has Netgate provided this Nexus to my system, WHY is it sitting there, even though not enabled. You say it's not needed at basic level, thus WHY am I unable to remove it ??
I Might be wrong, but this sounds like M$. Network world / people don't buy this as "normal" user might.
All the best.
- If The "Nexus" is not "needed" as You state for The basic user.
-
@kekke The base install contains a lot of stuff, so there is likely a lot of stuff sitting on your system that you are not using. How many forms of VPNs are you using?
Setting that aside, FWIW, I’ll offer a couple thoughts. Please understand that these are only my opinions/guesses:
- Nexus will become part of the base distribution. It’s starting out life as a separate package to allow independent updates. This matches up with statements made by Netgate.
- Going out in a limb here… I believe that Nexus (Go based) will eventually replace the current php management interface.
YMMV
-
Nexus provides the framework for a back door access to the border firewall, a core security component.
To optimise security minimisation of the threat surface is appropriate.
It is thus completely different to other functional built in but not used in pfsense.
As for who may exploit back door access,
- most governments as they move away from democracy (which of course includes the USA)
- every large American IT company who believes they can “monetise” their market position
So personally I would prefer not to remote access hard coded into my firewall.
-
You can remove it at the CLI if you really want to. But as functionality starts to move to go code you will find things start to break.
Originally it was simply in the base pfSense install. We made it a pkg that's shown in the GUI so it can be updated between releases. That greatly increases the development speed.
-
@Patch said in pfSense-pkg-Nexus:
Nexus provides the framework for a back door access to the border firewall
Of course, one could make the same broad statement regarding about nginx…
-
Nexus is disabled.
when trying to upgrade the package i get this:
Confirmation Required to upgrade package pfSense-pkg-Nexus from 25.11 to 25.11.1.
×This package is vital to system operation and cannot be removed.
Privacy Policy · Cookie Policy