• The login dialog does not fit in the mobile viewport.
• The breakpoints for the widgets are incorrect and result in overlapping.
• I'm running the latest version: 26.07-RELEASE - 20260807-1926.

I apparently don't have 5 reputation points

You do now - I went back and gave you on previous post, your at 7 now ;)

Came to the forum looking for this topic.

I like the idea but the dashboard is still very, very basic. The speed is indeed welcome but just about everything else, at this point, is a bit of a downgrade. I have the same bug with the traffic graph. They did seem to hit the highlights of the widgets I do use, but they don't seem to work.

I will be looking in to slowly rolling out Nexus as a controller platform, as it does seem to be decent for basic monitoring, which has been a missing checkbox.

I don't mean to be overly critical though, I do appreciate the reasoning and the modernization. I realize it's not near fully baked.

Using the new UI has several issues when attempting to create new rules:

1: Attempting to add a rule from the top does not work if you have the anti-lockout setting enabled (default). Then you will be given the error "Failed to insert rule: insert rule error - unable to find insertion point.

2: You cannot set a "tagged" value under advanced on rules in the new UI - sort of defeats the purpose of zero trust egress mode. You have to use the old UI to set the tagged value. It saves the rule and says success. There is just no tagged value and advanced tagged setting saved.

@Gcon What virtualization?

Latest version of Proxmox (KVM/Qemu) with paid subscription on dual socket hardware with 256GB RAM and Mellanox 10Gig NICs. CPUs aren't the most current but can run the x86-64-v3 CPU profile fine - AVX512 not needed by any of our software just yet.

@tkerr said in Discussion of the New GUI design:

Locking the new GUI to Netgate official hardware was not our intention (and it does work on some non-Netgate boxes), things should improve in 26.07 and future releases. We do indeed plan to replace the PHP GUI with this one, so it should be supported on all boxes.

That is welcome. The last time I bumped into some compatibility issues with virtualization was when some really old boxes could only support the x86-64-v2 spec, and one of the docker containers migrated to MongoDB 5.x which required AVX, so had to bump things up to x86-64-v3. If you are reliant on AVX512 (in x86-64-v4) for Nexus then that will be an issue, as we won't refresh hypervisors to support this for some time (I blame AI datacentres making everything unaffordable).

@keyser said in Discussion of the New GUI design:

EDIT: In fact, a good suggestion for the next release would be a focus on “modularization” for pfSense so as much as possible becomes it’s own module and can be installed/removed. Fx. If I go all in on CoreDNS, i’d like to be able to uninstall DNS Resolver and DNS forwarder. Maybe it’s also time to make KEA default and allow for 2 instances so you can run DHCP server one some interfaces, DHCP relay on other.

Wholeheartedly support this. I installed BIND on pfSense for use as a secondary for the domain we use for the Let's Encrypt certs on our internal web tools, so if everything else goes to poo, I can still reference all the internal backup & recovery tools by DNS name instead of hunting for IP addresses. A colleague recently looked in "DNS Forwarder" and "DNS Resolver" and freaked when neither was ticked.

To be frank - DNS is a mess. Looking at my pfSense box right now I have under Services: "Bind DNS Server", "DNS Forwarder" and "DNS Resolver"- so much useless clutter. To make matters worse, there are critical DNS settings in the completely separate System / General Setup.

All DNS should live in one spot. Might as well be "Services / DNS". I'd put all the general stuff in there. But then you can install a package for dnsmasq (forwarding) Unbound (resolver), BIND or some other authoritative NS, then make installing of those packages mutually exclusive, and modify the options under Services / DNS to suit.

Agree about KEA - it's well time to make that the only DHCP option and remove ISC DHCP. Force it on pfSense CE as a test bed to iron out any final kinks. That's what that version should be for. Concurrent server and relay makes sense if you're a DHCP server for say a captive portal for guest users, but relay for other interfaces.

EDIT: This menu clutter goes much deeper than DNS though. For example "Captive Portal". I did use it YEARS ago before moving to another system. Since I am not using it - and will likely never use it - can it not be uninstalled? At least hide it in the menu. Just clutter. SNMP - that's another one. Everyone should be using SNMPv3 now. v1 and v2 should be dead. If you keep up with Cybersecurity trends - you would be nodding your heads. But the built-in SNMP menu doesn't support v3... weird. So I installed the NET-SNMP package for SNMPv3 support, and yet the baked-in "SNMP" menu item is still there. It's menu madness.

I would like to address the change with nexus and what now seems like builtin “packages”. Fx: the Avahi package that @dennypage used to maintain now seems to be builtin in Nexus and is no longer a package that can be uninstalled/removed.

Why not keep everything (including coreDNS and Threatgate) as packages that can be installed/upgraded individually as needed rather than “monolithing” everything inside the Nexus package?

EDIT: In fact, a good suggestion for the next release would be a focus on “modularization” for pfSense so as much as possible becomes it’s own module and can be installed/removed. Fx. If I go all in on CoreDNS, i’d like to be able to uninstall DNS Resolver and DNS forwarder. Maybe it’s also time to make KEA default and allow for 2 instances so you can run DHCP server one some interfaces, DHCP relay on other.

1. It's proven and tested layout. Sure it has issues, but it works.
2. We don't want to change too much at one time. You mentioned your muscle memory, some users know exactly how to get where they want to be. We didn't want to throw them a large visual change and a complete layout change.
3. The new GUI is very modular and much easier to change than the old one. I've always hated that the System Logs page is under Status rather than Diagnostics, and if/when we decide to change the menu around it's trivial to change the location (maybe 2 lines of code). Changing the layouts in the actual forms is a bit more complex, but still fairly trivial.

@dennypage we are doing all of the package conversions, there is nothing special that you need to do. I will get the name changed.

Packages are also coming. Because of the way PHP works, packages basically inserted themselves into the existing code and just worked. The new architecture needed some tweaking to support package configuration, but it's mostly finished now.

Are you doing all the package conversions? Or are package maintainers? If maintainers, is there any doc we can look at? Or source examples?

FWIW, I note that one of the packages I maintain, Avahi, appears to have been converted. It’s showing up in the new UI as “mDNS”. Can we change the name back to Avahi please? I’m looking to deprecate Avahi, and I don’t want to Avahi to be confused with mDNS Bridge which is intended to replace Avahi. Thanks.

I really like where this is going in terms of speed and if focus soon turns to making it more “pleasant” in screenspace and looks, this is going to be really good for pfSense

One thing - is it wise to use all ressources on starting with at one-to-one replica of the old UI? You have made some minor adjustments to keep things slightly more logical organised in 26.07s new UI, but:
Some of the changes - while keeping the same organisation as before - also leads to more mouseclicks and navigation in the windows to complete a task. Perhaps rethinking some of the layout in the individual features menu windows would be optimal at this time (since things are changing anyways)?

We hear your comments about the whitespace, and are working on some better layouts. This has been complained about internally for a while, but our priority has been function over form (setting up interfaces and firewall rules are more important than looking pretty ).

More dashboard widgets are coming! We are working on widgetizing as fast as possible, we selected some of the important widgets to get started, but they will all be here soon. Some widgets are basically the same as the status pages, but several are bespoke and require us to add to the API for support.

If you don't like the save button being hidden, it can be changed in the settings menu (toolbox view->right-side toolbox).

In 26.07, the Nexus sidebar is collapsible so it should take up a lot less room.

Packages are also coming. Because of the way PHP works, packages basically inserted themselves into the existing code and just worked. The new architecture needed some tweaking to support package configuration, but it's mostly finished now.

Locking the new GUI to Netgate official hardware was not our intention (and it does work on some non-Netgate boxes), things should improve in 26.07 and future releases. We do indeed plan to replace the PHP GUI with this one, so it should be supported on all boxes.

We are working as fast as possible to improve the new GUI. Please continue to report any bugs you may encounter and share any feedback that you have!

1: OMG the speed and response is good - MUCH MUCH faster than the old UI - very welcome

2: I have to agree on too much whitespace. The same information takes up too much space now and causes much scrooling.

3: NOT a fan of the "hidden" save button, and the fact you have to use it on all non "rules" related pages. If you make a change on something already configured, you have to remember to go to the three lines dialog and select save. It's not clearly visible when changes are made that requires saving. If you navigate away by mistake all is lost.
So on rules pages everything is saved as soon as you create/edit/delete it - everywhere else you have to click save otherwise your settings are lost.

4: I'm going to miss the ability to change a LOT of rules and then finally select commit.... A LOT!

I like where this is going, and I know most of the changes is really more a muscle memory training thing, so I won't comment on all the little things. But points 2-4 is more that a muscle memory thing - I think they need changing.

PS: I assume a lot of the missing dashboard widgets will be available at some time as well? Is too sparse as it is now.

Haproxy, and haproxy stats should be reversed. Stats appears under configuration and is misleading.

monitoring seems to be completely broken.

All monitors are empty, no add or delete button.

service monitoring. Only delete button available.

And since I see not supported/license errors, I don't dare to change config while running rc in general.

The new one is more or less experimental, it will take a few more releases to reach maturity, 4 sure.

The press release read very differently.

@fireodo No worries.
Actually both the new and the old are working at the same time, just on different ports.
The new one is more or less experimental, it will take a few more releases to reach maturity, 4 sure.

Thanks for the clarification.

Since this is an rc I would suggest adding a few lines of code, so when no serial is found, just use a default bogus one.

3 lines of code, maybe less.

this sort of stuff is not making the case for pfSense any better

Enshitification always gets worse, never better.

@netblues That's hilarious. Locking a gui behind drm.

This is what I get under kvm

Virtualization not supported.

I run pfSense Plus on various virtualized setups. In all my setups I know exactly what CPU I have in each hypervisor and what the CPU and NIC hardware acceleration features are ("cat /proc/cpu" etc). I baseline all my VMs to x86-64-v3 so they can be migrated to anywhere.

It feels patronising to not be told what features this new code requires from CPU, and possibly NIC. I understand that Netgate want to push their own hardware but c'mon - don't be like this.

I don't want to play Russian Roulette where a forced update to this new GUI somewhere down the line leaves my current pfSense installs inoperable, and Netgate won't even give me the info so I can research if my current gear is compatible or not. I'm currently conducting a network re-evaluation right now to see whether to continue on with pfSense, or move all sites over to UBNT UDM-Pro-Max's and UCG's, and this sort of stuff is not making the case for pfSense any better.

The speed is welcome and responsive.

The waste of space on the dashboard is unwelcome. I want to get more stuff on my dashboard, not less, and this is a lot less than even now with the old GUI. I already don't see as much of the widget information the existing GUI as I would like. It's not much of a dashboard otherwise.

The traffic graph doesn't show any traffic other than nothing. The time moves by at the bottom, but otherwise nothing. I need to be able to sort or arrange the interfaces shown on the traffic graph pane. Right now it seems to be random. Not arranged in any discernible order. The pull down(s) should be sorted alpha-numeric too. They seem random as well.

Not all the widgets I currently have on my dashboard seem to be available.

I'd like to be able to hide the side bar automatically or manually for when the dashboard is being the dashboard and I'm just monitoring the network.

On the dashboard I'd like to hide the 'items per page' controls if unneeded. They're huge and if everything is displayed there's no purpose for them being there taking up space.

On widgets like the system pane, I'd like word-wrap to be an option instead of just a horizontal scrolling region. I don't want to have to right-scroll with a mouse in each window that's got data too wide for the widget. Cumbersome.

The top-menu functions are fast and familiar in layout. I appreciate that. And the configuration pages look good, although they also have too much wasteful white-space and fonts are too big. And I've got a 27" display...they just waste too much space and then require scrolling and leaving the home keys for the mouse all the time. Cumbersome.

Clearly the dashboard page is missing a ton of widgets right now. I'd need to see more and get the space issues fixed before commenting much more.

Performance is an improvement and it looks good, but compared to how Ubiquti's GUIs look it's not even close. Sorry; I imagine a lot of work went into this, but if the intent is to compete on this feature, it's not at that level. And it's difficult to imagine this is anywhere near taking over from the old GUI in five months.

Finally, don't disable or remove the old interface when deprecated.

I'm going to go turn the new one off again for now. It's not ready for daily driving.

Frankly, I find it amazing how so many open source projects (made by people in their spare time for free) have great, intuitive, modern guis whereas the ones made by paid professional developers look like something from 10-20 years ago. This isn't a specific knock against Netgate as so many other companies are also gui-challenged.