Services: Kea DHCPv4: Add a simple shared_networks option to subnets (#11115)
Subnets can now select an interface, subnets with the same interface will be put into a shared network.
This means its not decided by the interface IP of the receiving interface anymore, but by a mandatory client-classes membership
which is decided by matching a single DHCP option of the users choice as the gatekeeper to the subnet.
This way, multiple subnets can be served from the same interface.
dashboard: certificate widget: change floor to ceil so that certificates with less than a day left are not expired (#11161)
(cherry picked from commit 3c004aeffb9f077f82ae15a6c31f971f8441f373)
Firewall: Rules - fix decoration magic in searchRuleAction(), partly reverts https://github.com/opnsense/core/commit/c96610594dc770023047441d3657989f6ea9b7ad
Initial the meta fields where added in https://github.com/opnsense/core/pull/9121 because of missing tooltips, but because the $filter_funct_rs method already parsed the data, it was a convenience to place it inside the block (so we only need to loop through the set once).
Given the loop is much cheaper than the filter action added later, we better move this out of there and only return that data to the user for the output he actually receives (after filtering).
(cherry picked from commit ea38a1b1e91ee9a71c1ab5e5a0f401b094ce09a2)
system: invalidate sysctl cache on apply; closes #11109
As mentioned in 41ab7fb9f57 this fixes the glaring issue of the
sysctl cache being stuck while trying to avoid reloads during
normal operation. The performance hit is solely in the apply
path with is already slow, but now at least syncs up with the
system each time which also means there is no more boot race.
Move the cache to the configd end, which is a more flexible
alternative nowadays. We may want to support an indefinite
cache TTL, but that's not for the scope here.
(cherry picked from commit dffa9086c7245265eebd28e119fac8ddbdd8b478)
(cherry picked from commit 50105e67ed9ea901d79442804e573bbaf9d9b03b)
firewall: DNAT - decorate rules after filtering
Decorating only the returned rows avoids unnecessary presentation metadata work.
(cherry picked from commit dfb125bd16d8472bc0314b0b3168b44551c41f25)
firewall: SNAT - decorate rules after filtering
Decorating only the returned rows avoids unnecessary presentation metadata work.
(cherry picked from commit 502d1c763d1269ff80abde5453b7dffb789558d5)
Firewall: Rules - fix query performance issue caused by earlier commit (#11061)
* Firewall: Rules - fix query performance issue caused by https://github.com/opnsense/core/commit/18533b4c60c27253f8c2ebbdfd9bc11d6450da1d
Always showing automatic rules has quite some performance impact, since we need to initialize the plugin system, we can't really speedup that part of the process.
This commit changes the view to show the currently active rules instead of calculating how it would look like after apply, in order to reach that state, we flush the non-mvc rules to /tmp/rules_internal.json which the list_non_mvc_rules.php can use to render the automatic (and legacy) rules quickly.
* Firewall: Rules - minor change in previous, move writing metadata to after successful apply
* pass origin into two other spots, remove cache_ttl as the work has already been done
---------
Co-authored-by: Monviech <gitacc at pischem.com>
(cherry picked from commit 889bcde615073cc17190dccff5ff4881291ada86)
