TrueNAS 26 Beta: The Key Changes for SMB Environments

On April 7, 2026, iXsystems released the first public beta of TrueNAS 26 “Halfmoon” — the first major release after the 25.10 Goldeye update and the start of a new major branch. Halfmoon brings OpenZFS 2.4, an integrated ransomware detection engine, the reworked WebShare 2.0 with full-text search, the new alert system v2 and several improvements in the hybrid pool stack.

At DATAZONE we run TrueNAS installations from the Mini in the back office to the M-series in the data center. This article focuses on a practical question: what does TrueNAS 26 mean in the daily life of a mid-sized business — and when is the beta worth testing, when is it better to wait?

What is new in Halfmoon

Instead of repeating the full release notes, here are the five points that will make the biggest difference for SMB customers over the coming months:

Area	Change in TrueNAS 26
OpenZFS	Bump to 2.4 — AnyRaid, BRT optimisations, dRAID stability
Security	Integrated ransomware detection at dataset level
Sharing	WebShare 2.0 with full-text search, preview and audit log
Monitoring	Alert system v2 — structured rules, tagging, webhook routing
Storage	Hybrid pool improvements, faster resilver, smarter special VDEV handling

Plus the usual: updated Linux kernel, new OpenZFS configuration defaults, WebUI bugfixes and better telemetry.

OpenZFS 2.4: what really arrives in daily use

The biggest under-the-hood change is the jump from OpenZFS 2.3 to 2.4. For the technical deep dive see our separate article OpenZFS 2.4: what users will actually notice — here the SMB-relevant points:

• AnyRaid: finally, pools made of mixed-size drives without waste. Anyone migrating a pool step-by-step to larger disks or running a homelab with mixed inventory benefits immediately. More on this.
• BRT (Block Reference Table): fast clones of datasets and snapshots without the classic copy-on-write overhead — relevant for VM cloning and database refresh workflows.
• dRAID stability: dRAID becomes more attractive for larger TrueNAS pools (M-series, V-series). For classic 4–12 bay NAS, RAIDZ2 remains the default recommendation.
• Resilver performance: lower pool load during resilver, smoother peaks.

Important: a pool extended once with OpenZFS 2.4 features (e.g. via AnyRaid) cannot easily be imported on an older TrueNAS version. That is standard ZFS behaviour, but worth knowing when planning a rollback path.

Ransomware detection: a realistic assessment

Halfmoon ships a ransomware detection engine that watches entropy and write patterns at the dataset level. When it spots suspicious write bursts (e.g. thousands of small files with high entropy suddenly appearing), it can:

• mark a snapshot just before the suspected encryption (“immutable checkpoint”)
• flip an SMB or NFS share to read-only
• fire an alert via email or webhook
• optionally terminate the writing session

Honest framing: this is not a full EDR product and does not replace endpoint protection on clients. It is good at stopping an encryption wave that is already running — it does not prevent malware from landing on a client device. It belongs as the last line of defence: when an endpoint is compromised and writes against the file server, you gain minutes instead of hours.

For SMBs the takeaway: ransomware detection is a useful addition to your backup strategy — not a replacement. Anyone who has cleanly implemented the 3-2-1 backup rule and immutable backups gains an additional early-warning layer with Halfmoon.

WebShare 2.0: what changed

WebShare in 25.10 worked, but felt limited: no search index, plain file list, no preview for most formats. Halfmoon replaces that with WebShare 2.0:

• Full-text search over file names and selected content types (office documents, PDF, plain-text code)
• Inline preview for PDF, images, office documents, Markdown
• Audit log: who downloaded or uploaded what, when — important for GDPR and NIS2 obligations
• Permalink stability: links survive even if the underlying dataset is renamed

The beta still has limits: search indexing runs as a background job and can take several hours on large datasets. Anyone using WebShare in real-world SMB workflows — typical for file handovers with external partners or tax advisors — should plan a dedicated indexing window.

Alert system v2

The legacy alert system was a flat list with severity levels — useful, but hard to scale. Alert system v2 in Halfmoon restructures it:

# example rule (schematic)
rule: pool_capacity_warning
match:
  pool: tank
  metric: capacity_used_percent
  operator: ">"
  threshold: 85
severity: warning
route:
  - email: ops@company.com
  - webhook: https://alertmanager.internal/api/v1/alerts
cooldown: 6h

For SMBs the important part: alerts can now be filtered per pool, dataset or service and routed to different channels — critical storage alerts to the on-call number, non-critical patch hints into a weekly report mailbox. That was missing in 25.10 and was one of the main reasons customers placed an external Zabbix or Grafana stack in front.

Hybrid pool improvements

Anyone running hybrid pools (HDD bulk + SSD special VDEV + SSD SLOG) knows the problem: special VDEV usage was historically hard to steer. Halfmoon brings:

• better observability: per dataset you see what share lives on special VDEV vs. bulk
• adaptive special VDEV sizing: WebUI suggests a size based on actual metadata load
• migration helper: switch a dataset from bulk-only to hybrid without a full re-copy

For customers with classic SLOG and special VDEV setups this is a clear comfort gain. The performance benefit itself (random read latency on small files) still requires correct pool planning — Halfmoon makes management easier, not the storage class logic magical.

What Halfmoon does not solve

Honestly: there are areas where TrueNAS 26 changes nothing.

• Active Directory complexity: AD integration is still a setup topic with the usual pitfalls (Kerberos time sync, DNS reverse zones). See TrueNAS and Active Directory.
• App stack: the app environment in TrueNAS remains best-effort — for production container workloads we still recommend Proxmox VE or dedicated hosts. TrueNAS stays our storage recommendation, not the hypervisor.
• VMware integration: NFS VAAI is still supported, but Halfmoon clearly prioritises Proxmox and the official TrueNAS Proxmox plugin.

When the beta test is worth it

Beta software does not belong in production — that rule holds for TrueNAS just like any other storage system. But beta testing is valuable in these scenarios:

Worth testing:

• A dedicated test bench or secondary system not in the recovery path
• Preparation for a later hardware refresh: validating Halfmoon behaviour with planned new drives
• Evaluating ransomware detection and WebShare 2.0 against realistic workload patterns (not synthetic load)
• Testing backup replication from production into a Halfmoon beta receiver — saves migration risk later

Not worth it:

• Production primary systems — the final 26.0 typically follows two to three months after beta
• Systems under enterprise support — beta versions are explicitly outside the iX enterprise SLA
• Planned pool expansion with AnyRaid in production — wait for the enterprise release

When to wait for the final 26 enterprise release

For the majority of our SMB customers the answer is simple: wait for the final 26 enterprise release. Halfmoon beta runs as community edition; the enterprise variant with full iX support guarantee usually follows several months after the first beta. With TrueNAS 25.10 (“Goldeye”) that was roughly three to four months between beta and enterprise release.

In concrete terms for our advisory:

• TrueNAS Mini, R20, R30: wait for final 26, plan migration in Q3/Q4 2026
• TrueNAS H/M-series under enterprise support: strictly wait for 26 enterprise — no switch before
• Existing 25.10 installation runs stable: no pressure to upgrade, 25.10 stays maintained in parallel
• New installation in the next 4–6 weeks: start with 25.10 Goldeye, 26 will be a later in-place update

Upgrade path and preparation

Anyone who wants to walk the later 25.10 → 26 upgrade path cleanly can prepare now:

1. Update the system to 25.10.1 or newer — the latest bugfixes on the 25.10 branch are the basis for the upgrade path
2. Check pool health: zpool status -v, regular scrub confirmed, no outstanding CKSUM errors
3. Document replication targets: for multi-site or backup replication the target must speak the same or newer ZFS version
4. Evaluate the app stack: anyone using TrueNAS apps in production should expect an app migration step — 25.10 → 26 is not always 1:1

DATAZONE recommendation

Halfmoon is a solid major release with real value adds — OpenZFS 2.4 alone justifies the upgrade in the medium term. But: we do not recommend that SMB customers switch to the beta in production right now. The natural moment is the final 26 enterprise release, expected in summer/early autumn 2026.

Customers who are planning a hardware refresh, pool expansion or migration from Synology/QNAP in parallel should align the schedule to the final 26 — the ZFS upgrade to the new feature level then lands in the initial installation, saving a separate migration step.

Sources and related articles

• TrueNAS Release Notes Hub (truenas.com) — official source for Halfmoon beta release notes
• OpenZFS 2.4 release notes (github.com/openzfs) — OpenZFS 2.4 feature set
• Our TrueNAS 25.10 Goldeye article — previous release for comparison
• 3-2-1 backup rule for SMBs — matching backup strategy
• Immutable backups against ransomware — how WORM snapshots complement detection
• TrueNAS configurator — model selection for new installations

If you want to discuss a concrete migration or upgrade plan: we offer an initial consultation — vendor-neutral, based on your real workload and not on marketing slides.