OPNsense 22.7, codenamed “Powerful Panther”, has been released and brings a new Captive Portal, improved VPN features, and numerous security updates.
Release Highlights
New Captive Portal
The Captive Portal has been completely redeveloped:
- DynFi-based new Captive Portal
- Modernized user interface
- Improved voucher management
- Flexible authentication options
- Better integration with RADIUS servers
WireGuard Improvements
WireGuard support has been further optimized:
- Updated WireGuard kernel module
- Improved configuration interface
- Optimized performance
- Extended routing options
- Better multi-tunnel management
FreeBSD Updates
- Updated FreeBSD 13.1 base
- Improved network stack
- Updated drivers
- Security patches
Firewall and Routing
- Inline IPS mode for Suricata improved
- Extended alias types
- Optimized rule processing
- Improved gateway monitoring
- Extended Multi-WAN functionality
Unbound DNS
- Updated Unbound DNS resolver
- Improved DNS-over-HTTPS support
- Extended local zone management
- Optimized cache performance
Plugin Updates
- Updated HAProxy plugin
- Improved ACME client plugin for Let’s Encrypt
- Updated Nginx plugin
- Various plugin bugfixes
Web Interface
- Modernized design with improvements
- Extended dashboard widgets
- Improved diagnostics tools
- Optimized API functionality
Migration from 22.1
The upgrade from OPNsense 22.1 to 22.7 can be performed via System > Firmware in the web interface. A prior backup of the configuration is recommended.
Conclusion
OPNsense 22.7 impresses with the new Captive Portal and WireGuard improvements. The release demonstrates the continuous development of the open-source firewall. As an experienced OPNsense integrator, we are at your side for planning and implementing your network security.
More on these topics:
More articles
Vaultwarden: Self-Hosted Password Manager for Teams
Run Vaultwarden as a self-hosted password manager: Docker deployment, reverse proxy, SMTP, 2FA enforcement, and backup strategy — the complete guide for teams.
Fail2ban: Automating Brute-Force Protection for Linux Servers
Install and configure Fail2ban: log parsing, jail.local, protecting SSH, Nginx, Postfix, and Dovecot, whitelists, email alerts, and a comparison with CrowdSec, sshguard, and CSF.
TrueNAS Dataset Encryption: ZFS Encryption in Practice
Understanding and implementing TrueNAS ZFS Encryption: dataset vs. pool encryption, passphrase vs. key file, key management, and performance impact with AES-NI.