August is traditionally a quiet month — but not in 2026. While many teams were on summer vacation, the major open-source projects in the server room delivered visibly: Proxmox with a solid point release, TrueNAS with improved snapshot replication and OPNsense with a stabilisation round after the 26.7 jump in July. In parallel, the German BSI and the Federal Network Agency published clarifications on NIS2 and the CER Directive that are directly relevant for many mid-market customers.
In this monthly check we summarise what actually kept us busy in customer projects during August 2026 — and what you should plan for in September.
Proxmox VE: Point Release Focused on ZFS and Backup Efficiency
After the jump to Proxmox VE 9 last year, the release cycles have calmed down. The current August point release mainly brings polished details: an updated kernel from the 6.x line, a newer ZFS version with improved ARC statistics and several UI refinements in the cluster log.
What caught our attention most in customer projects is the further refined integration with Proxmox Backup Server. Dirty bitmaps now work very reliably across mixed workloads — Windows file servers plus Linux application servers. In our environments we typically see significantly shorter backup windows than a year ago. The exact numbers depend heavily on storage type, VM size and change rate. We are happy to provide concrete figures from your own environment as part of a design engagement.
For existing customers still on older cluster versions, we now specifically recommend planning a maintenance window. The 9.x train has stabilised; the most common upgrade pitfalls — LVM-Thin, VLAN-aware bridges, Ceph Reef — are documented and understood. You can find details on our approach at Proxmox consulting.
TrueNAS SCALE: Snapshot Replication and iX Roadmap
TrueNAS SCALE 25.10 “Goldeye” has been running in production in many environments since spring. In August, iXsystems released a point release that mainly improves snapshot replication: more robust handling of interrupted sessions over slow WAN links and more detailed error messages in the web UI.
For our customers with geo-redundant setups — for example primary site Neuburg, DR site Munich — this is directly noticeable: fewer manual interventions, clearer diagnostics for failed replications. Combined with the Proxmox backup concept, this creates a clean multi-tier model:
| Tier | Technology | Purpose | RTO target |
|---|---|---|---|
| VM level | Proxmox Backup Server | Application-granular recovery | hours |
| Storage level | TrueNAS snapshot replication | Absorb site failure | minutes to hours |
| Immutable | PBS with S3 tier and object lock | Ransomware resilience | hours to days |
On the roadmap side, iXsystems hinted at first details of the upcoming major version in August. Worth mentioning: extended fusion pool management and further improved container app integration. We will communicate binding dates as soon as iX officially publishes them. If you are planning a switch, find an overview at TrueNAS.
OPNsense: Stabilisation After 26.7
July brought a larger cycle with OPNsense 26.7 — including a new Suricata version in the IDS/IPS stack and reworks in WireGuard handling. August was therefore a consolidation month: several patch releases cleaned up teething problems, particularly in interaction with HA setups based on CARP and with certain NIC drivers.
For productive SMB firewalls, we currently recommend version 26.7.3 or newer. Anyone still on 26.1 can jump ahead without issues — the upgrade paths are clean. Two points we saw repeatedly in customer projects during August:
- IDS rule sets: If you use ET Open or Abuse feeds, review the rule categories after the 26.7 update. Several categories were renamed, which can cause selective picks to “get lost”.
- DPI and Zenarmor: If you use Zenarmor as a commercial add-on, check the compatibility matrix — not every 26.7 patch version was cleared immediately.
A short command sequence for the Zenarmor compatibility check on the shell:
opnsense-version -v
pkg info | grep -i zenarmor
pkg audit -FNIS2 in Practice: BSI Clarifications
The German NIS2 implementation has finally gained momentum in 2026. In August, the BSI published a clarification paper on the topic of “essential and important entities” that is particularly helpful for mid-market companies in the borderline zone.
Two points we repeatedly picked up in conversations with existing customers during August:
- Supplier clause: If you are not directly affected but work as a supplier to an essential entity — typically: regional industrial suppliers — you still need to document verifiable security measures. Contractual requirements from clients are noticeably increasing.
- Incident reporting: The 24-hour early warning is now operationally established. If you do not yet have a documented process, set it up in September — including defined communication channels and responsibilities.
For the technical implementation, our OPNsense setup with Suricata and centralised log aggregation is a proven building block — complemented by a well-maintained backup concept with an immutable tier.
CER Directive: Practical Experience from the Summer
The EU directive on the resilience of critical entities — CER, 2022/2557 — has been transposed into German national law since late 2024. In the summer of 2026 we accompanied the first audit cycles at customers in the extended critical-infrastructure environment.
Core observation: CER reaches further than pure IT security. It is about physical resilience — access control, backup power, redundant leased lines — combined with the familiar cyber requirements from NIS2. For mid-market operators in energy, water or food supply this means: the IT department is part of a larger resilience concept, no longer a lone fighter.
Concretely useful in projects: a cleanly documented backup concept with defined RTO and RPO targets is now a standard piece of evidence in CER audits. If you want to keep the associated Linux systems under control, our Linux managed service provides the necessary support.
Outlook September 2026
What is emerging? Three topics we will actively address in September:
- Proxmox 9.x rollout for the last existing customers still on 8.4.
- TrueNAS roadmap assessment for the upcoming major version — particularly for customers planning a storage refresh in 2027.
- NIS2 readiness checks in preparation for the autumn audit wave.
In addition, we expect a larger OPNsense patch release in September and possibly a first look at the next Suricata generation.
DATAZONE Supports You
Are you planning a Proxmox upgrade, considering switching your storage system to TrueNAS or need to implement NIS2 or CER requirements concretely? We combine technical consulting, implementation and ongoing operations from a single source — practical and documented. Get in touch: contact us.