OPNsense 25.7.4 Released – Performance Boosts, New Features, and Fixes

The latest update to OPNsense, version 25.7.4, is now available, bringing a range of performance improvements, new features, and important bug fixes across the core system and plugins.

In this post, we’ll go through the highlights of this release — including improvements to interface handling, intrusion detection performance, and new options for Unbound, DHCP, and the system scheduler.

🎥 Watch the full breakdown video on YouTube:

🔑 Key Highlights of OPNsense 25.7.4

• Improved interface data handling and faster alias parsing

• Intrusion Detection performance improvements with virtualised grids

• New “Power Off” cron action available in scheduled tasks

• TXT record support added for Unbound host overrides

• IPv4 client-specific reservation domain names added in Kea DHCP

• UI refinements including datetime-local fields, improved form data escaping, and option group cleanups

• New Ukrainian translation

• Backend MVC clean-ups for improved stability and performance

This update focuses heavily on performance tuning and quality-of-life improvements, making the user interface more consistent and backend operations more reliable.

⚙️ Core System Changes

The system components have received numerous adjustments aimed at smoother performance:

• Updated control logic on HA status for small viewports

• Added new plugin control options for model migrations and validations

• Introduced a “Power Off” backend action for Cron scheduling

• Improved MAC vendor handling and refactored interface device retrieval

• Enhanced firewall alias parsing to improve diagnostic page performance

🔐 Security and Intrusion Detection

Intrusion detection has been optimised by virtualising grids, significantly improving responsiveness and reducing system overhead on larger rule sets.

The UI also received updates to escape form data more safely following a community-reported issue (CVE-2025-34182)