Version 2.7.2 relied on the venerable ISC DHCP server, which, while reliable, is beginning to show its age. pfSense CE 2.8.0 completes the transition to , a modern, high‑performance DHCP server developed by the Internet Systems Consortium (ISC). Kea brings a host of capabilities that were previously unavailable:
The 2.8.0 release addresses several high-priority security advisories within the webGUI, including:
This software distribution introduces several structural enhancements, incorporating capabilities that were previously restricted to proprietary pfSense Plus licenses: Feature Metric Older Branches (e.g., CE 2.7.2) pfSense CE 2.8.0 Platform Impact on Network FreeBSD 14.0 FreeBSD 15.0 Broader hardware support and stability. PHP Version PHP 8.3 Faster GUI execution and rendering. DHCP Architecture ISC DHCP (Deprecated) Kea DHCP Natively Faster lease allocations and modern API integrations. PPPoE Multi-threading Single-threaded driver New Optimized PPPoE Driver Removes throughput caps on high-speed fiber lines. Feature Set Standard CE Features Plus-Feature Migrations Advanced functionality without licensing fees. Advanced Kea DHCP Integration pfsensece280releaseamd64isogz better
Despite its technical advantages, deployment changes in the 2.8.0 generation introduced new friction points for administrators:
Security in 2.8.0 is tighter by default. The has shifted from "Floating" to "Interface Bound". This means states are strictly tied to the interface they originated on, preventing various types of traffic spoofing and enhancing overall system integrity. Download pfSense Community Edition Version 2
" to enhance security. While safer, it may require manual adjustment if you use complex setups like Multi-WAN policy routing or IPsec VTI. Amd64 Architecture
: It is now built on FreeBSD 15.0 (up from FreeBSD 14 in early development), providing better hardware support and stability. PHP Version PHP 8
backend significantly reduces CPU usage and boosts performance for multi-gigabit PPPoE WAN links. Modernized OS & PHP : It moves the base system to FreeBSD 15-CURRENT and upgrades the PHP interpreter to
: Get-FileHash .\pfSense-CE-2.8.0-RELEASE-amd64.iso Linux/macOS : sha256sum pfSense-CE-2.8.0-RELEASE-amd64.iso Step 3: Create Bootable Media
Let’s break it down.