What opnsense/core shipped
Written by FoxPlug from the repository's own releases; not affiliated with Opnsense. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/opnsense/core; Opnsense did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 5, 2026
What shipped
- IPsec IKEv1 support was deprecated. Pull request #10925
- The 26.7.6 stable release was published. Release
- Route deletion was refactored and privilege separation was used in the general settings page. Pull request #10962
- Stale VIP addresses are now removed after an update. Pull request #10883
- DNSSEC validation was added to the DNS resolver. Pull request #10940
Why it matters
This week brings a stable release and several changes that affect how people configure the project. IKEv1 in IPsec is now deprecated, and route deletion and privilege separation were reworked. Stale VIP addresses are cleaned up after updates, and DNSSEC validation was added to the DNS resolver.
Changelog entry
- Release: 26.7.6 stable release Release
- VPN: IPsec: Deprecate IKEv1 Pull request #10925
- DNSSEC validation added Pull request #10940
- System: refactor route deletion and use priv-sep in general settings page Pull request #10962
- Interfaces: remove stale VIP address after update Pull request #10883
This week: 26.7.6 stable release, IPsec IKEv1 deprecated, route deletion refactor with priv-sep, stale VIP removal after update, and DNSSEC validation. Check the changelog for details.
This week the project published the 26.7.6 stable release. For IPsec, IKEv1 is now deprecated, so plan accordingly. Route deletion was refactored and privilege separation is used in the general settings page. Interfaces now remove stale VIP addresses after an update, and DNSSEC validation was added to the DNS resolver. These changes touch VPN, routing, interfaces, and DNS behavior, so review the release notes before upgrading.
Week of September 28, 2026
What shipped
- Release 26.7.5 is now available as a stable release. Release
- Diagnostics nginx reverse proxy buffering disabled on configd streams to improve response handling. Pull request #10818
- IPsec VPN children configuration now supports
replay_windowparameter. Pull request #10938 - PortField MVC component now preserves the first well-known service in the option list. Pull request #10947
- System installer can now run as a real user on demand. Pull request #10888
- System language strings have been tightened for clarity. Pull request #10961
Why it matters
Version 26.7.5 brings improvements to diagnostics streaming, VPN configuration flexibility, and user interface components. The changes address both infrastructure reliability and user experience in core system functions.
Changelog entry
- 26.7.5 stable release Release
- Diagnostics: disable nginx reverse proxy buffering on configd streams Pull request #10818
- VPN: IPsec: Add
replay_windowto children Pull request #10938 - MVC: PortField - keep the first well-known service in the option list Pull request #10947
- System: installer as a real user on demand Pull request #10888
- System: tighten language Pull request #10961
OPNsense 26.7.5 is out. Diagnostics improvements, IPsec replay_window support, and better PortField handling. Get it now.
OPNsense 26.7.5 stable release is available. This week's updates include improvements to nginx reverse proxy buffering for diagnostics streams, IPsec replay_window configuration for VPN children, PortField service list handling, and system installer enhancements. Updates focus on reliability and usability.
Week of September 21, 2026
What shipped
- Interfaces: toLegacy() now returns the real legacy config instead of processed output Pull request #10926
- Interfaces: pfsync interface reconfiguration skipped when peer remains unchanged Pull request #10924
- MVC: direct config saves now guarded against user-config-readonly permission Pull request #10915
- Routing: ACL patterns for gateway groups fixed Pull request #10909
- Kea: ping check settings added for subnet configuration Pull request #10903
- MVC: blank UI space addressed Pull request #10375
Why it matters
This week brings improvements to core infrastructure systems: interface configuration handling is more accurate, unnecessary pfsync reconfiguration is eliminated for efficiency, security controls around configuration edits are strengthened, and gateway routing patterns work correctly. DHCP subnet configuration gains new health checking capabilities.
Changelog entry
- Interfaces: make toLegacy() return the real legacy config Pull request #10926
- MVC: blank UI space Pull request #10375
- Interfaces: skip pfsync interface reconfiguration if peer unchanged Pull request #10924
- Mvc: guard direct config saves against user-config-readonly Pull request #10915
- Routing: fix ACL patterns for gateway groups Pull request #10909
- Kea: add ping check settings for subnet configuration Pull request #10903
Weekly digest: interface config fixes, pfsync optimization, config write protection, gateway routing corrections, and DHCP ping checks now available in the latest commits.
This week's updates to OPNsense core focus on reliability and security improvements. Interface configuration handling is more accurate, pfsync reconfiguration is optimized to skip unnecessary updates, configuration write protections are strengthened, gateway group routing is corrected, and DHCP subnet configuration gains ping check capabilities for better health monitoring.