ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Security & identity · #pfsense
pfSense DNS Resolver and Forwarder support host overrides that answer local queries before upstream resolution. When an override maps a public hostname to a private address, TLS clients still validate the certificate against the requested hostname. This creates a boundary between DNS identity and certificate trust: a public certificate may fail with a name m
A pfSense CARP cluster with configuration synchronization enabled treats the primary node's config.xml as authoritative. The goal is to determine whether configuration changes made directly on a secondary or backup node survive the next XML-RPC sync cycle, or whether they are silently discarded. Behavior may differ between pfSense CE and pfSense Plus and acr