v2.7.0 Fixes & Features #823

jaredhendrickson13 · 2026-01-18T03:57:39Z

Important

If you have not already seen the announcement for this release, please take some time to read through it to better understand the changes made in this release and how they may affect your integrations.

New

Implements new object caching and indexing system to improve performance on instances with large configuration sets
Implements new query caching feature system to reduce the performance impact of redundant queries
Implements REST API package logging facilities and configurable logging levels
Implements basic logging for security-related events
Adds the /api/v2/status/logs/packages/restapi endpoint for reading REST API logs
Implements support for queries on child objects. Resolves Request new static mapping queries #587 .
Adds new in query filter for filtering for values that are within a given array or string
Adds new /api/v2/diagnostics/ping endpoint Add POST /api/v2/diagnostics/ping endpoint #820
Adds framed_ip_address and framed_ip_netmask fields to FreeRADIUSUser Framed-IP-Address / Framed-IP-Netmask support and make motp_enable optional #767

Changes

Makes FreeRADIUSUser's motp_enable field optional Framed-IP-Address / Framed-IP-Netmask support and make motp_enable optional #767
Adds no support warning for users installing the package on 32-bit systems
Implements sane integer maximums
UserGroup's member field now supports up to 2048 entries.
Enforces explicit DHCP server creations via POST /api/v2/services/dhcp_server instead of implicit initialization during PATCH requests. (Breaking change!)

Fixes

Fixes an issue that caused timeouts when interacting with user group's with many (1000+) members. Fixes 504 error while updating group #779.
Fixes an issue that prevented system scoped user groups from being updating. Fixes Could not add user to "admins" group #822.
Fixes an issue where the PortForward disabled value was not retained on associated firewall rules

- framed_ip_address/framed_ip_netmask added to support Framed-IP-Address / Framed-IP-Netmask attributes

…cation

…oads

…to next_minor

…rents

Model indexing isn't practical here because the cache isn't retained between requests. It makes more sense to cache logical queries instead of basic indexing.

…alues are within an array or string

This commit implements model and query caching/indexing that will help reduce the number of objects that need to be reloaded unnecessarily. This should provide a big performance improvement for instances with large pfSense configurations.

…to next_minor

…update

Adds a new diagnostic endpoint to run ping from pfSense. Features: - Required `host` parameter (IP or hostname) - Optional `count` parameter (1-10, default 3) - Optional `source_address` parameter - Returns ping output and result code Co-authored-by: novastate <novastate@users.noreply.github.com>

This commit ensures that Model's with internal_callables are not cached by default. This is primarily because these Models often fetch real-time data, not stored config data. This change also allows for these models to override this default.

…i into next_minor

…in 10 seconds

vitspec99 and others added 30 commits December 6, 2025 10:37

- motp_enable optional now (#767)

2879a22

- framed_ip_address/framed_ip_netmask added to support Framed-IP-Address / Framed-IP-Netmask attributes

perf: setup simple caching for model classes

720a38c

perf: clear object cache after any change

362009e

perf(ForeignModelField): index in-scope model objects

96f5e6f

perf(ForeignModelField): adjust foreign model indexing

85cddb6

style: run prettier on changed files

91044c5

refactor: clear object cache on config modification, not model modifi…

15b8fd6

…cation

refactor: completely clear object cache on config change

01a0968

revert: revert ForeignModelField changes

63c2a09

chore: use Model::set_config instead of config_set_path

bfe0f2e

fix: clear model object cache after test teardown

772cdf6

refactor: clear model cache on api crud methods

0d74bad

style: run prettier on changed files

ab1ceeb

test: clean up restapi settings tests

c3a60d4

fix: clear model object cache after package install

391a4ee

fix: exclude model's with parents from caching

2e22e67

refactor: support queries on child models

4ae5c92

style: run prettier on changed files

17022aa

fix: only load each parent model object once

35bac8a

fix: allow endpoints for child models to be many enabled

3cf3733

refactor: prevent child model caching from clobbering from internal l…

c33f888

…oads

style: run prettier on changed files

af2d0e1

feat: implement model caching and indexing

2a62c8a

Merge branch 'master' of github.com:jaredhendrickson13/pfsense-api in…

74bbdf4

…to next_minor

test: ensure read_all() for child models contains objects from all pa…

d6805c7

…rents

style: run prettier on changed files

e2effed

refactor: remove model indexing

f46a205

Model indexing isn't practical here because the cache isn't retained between requests. It makes more sense to cache logical queries instead of basic indexing.

feat(QueryFilter): add query filter for finding objects whose field v…

fe83725

…alues are within an array or string

docs: add docs page on security hardening

1d15ead

jaredhendrickson13 and others added 29 commits January 3, 2026 12:00

docs: adjust warning about 32-bit hardware in documentation

51d5efc

Merge branch 'master' of github.com:jaredhendrickson13/pfsense-api in…

b4c35a4

…to next_minor

docs: remove arch specific mention from 32-bit warning

6fbc476

chore: typo/whitespace corrections

5e8000d

fix(PortForward): set disabled value during associated rule creation/…

a45a75a

…update

perf: allow Model classes to be marked as ModelCache exempt

3bfb6b1

feat: allow configurable log levels

5ab8e56

refactor: use string representation for log levels

80e4950

style: run prettier on changed files

62ca4fe

refactor: remove redundant log_error method from Dispatcher class

6aff549

Merge branch 'next_minor' of github.com:jaredhendrickson13/pfsense-ap…

3ba673f

…i into next_minor

chore: only check log level once

e1cfc50

feat: add log_level field to RESTAPI Settings form page

747d61b

refactor: deprecate old log_error method

c7f0b52

style: run prettier on changed files

d10b325

feat: log security related events

70029c8

style: run prettier on changed files

5918c74

feat(UserGroup): allow updating groups with system scope #822

79340d8

feat: add model, endpoint and tests for REST API logs

a7751d6

test: adjust UserGroup model creation during tests

2aae2bd

test: fix case sensitivity in UserGroup query

d061af4

test: load system exact UserGroup by id

6ed5ecf

fix(ForeignModelField): use index to find matches not queries

869934e

chore(UserGroup): bump 'member' items maximum to 2048

4021b0f

test(UserGroup): ensure we can update and read large user groups with…

7e06fd1

…in 10 seconds

style: run prettier on changed files

fa7b489

fix: re-add unique constraint to RoutingGatewayStatus model

4194563

jaredhendrickson13 merged commit df1dbc2 into master Jan 18, 2026
29 of 30 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

v2.7.0 Fixes & Features #823

v2.7.0 Fixes & Features #823

Uh oh!

jaredhendrickson13 commented Jan 18, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

v2.7.0 Fixes & Features #823

v2.7.0 Fixes & Features #823

Uh oh!

Conversation

jaredhendrickson13 commented Jan 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

New

Changes

Fixes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

jaredhendrickson13 commented Jan 18, 2026 •

edited

Loading