OPNSense/tools b6b1e1aconfig/25.7 base.plist.amd64

config: rebase on top of 25.7.11
DeltaFile
+1-0config/25.7/base.plist.amd64
+1-01 files

OPNSense/core e174540src/etc/inc/plugins.inc.d radvd.inc, src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

radvd: Add Base6Interface constructor (#9615)

DeltaFile
+14-4src/etc/inc/plugins.inc.d/radvd.inc
+11-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.php
+10-0src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+1-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.xml
+36-44 files

OPNSense/core ac82437src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml, src/opnsense/mvc/app/models/OPNsense/Radvd Radvd.php

Tighten scope via validation, Base6Interface shall not be the same as interface.
DeltaFile
+11-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.php
+1-1src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+12-12 files

OPNSense/core e28c113src/etc config.xml.sample

system: adjust dhcpv6 range with isc default
DeltaFile
+2-2src/etc/config.xml.sample
+2-21 files

OPNSense/core c5ce6b6src/etc config.xml.sample, src/etc/inc interfaces.inc

interfaces: introduce idassoc6 mode #9155

We're adding a bit of technical debt here for the simple reason
to decouple the track6 mode from automatic radvd and dhcpv6 runs.

Specifically avoid the "dhcpd6track6allowoverride" flag in this
mode but keep the data the same otherwise for interoperability.
DeltaFile
+140-57src/www/interfaces.php
+4-2src/etc/inc/interfaces.inc
+2-2src/opnsense/scripts/shell/setaddr.php
+3-0src/opnsense/scripts/shell/banner.php
+1-1src/opnsense/mvc/tests/app/models/OPNsense/ACL/AclConfig/config.xml
+1-1src/etc/config.xml.sample
+151-631 files not shown
+152-647 files

OPNSense/core d3672a3src/etc/inc interfaces.inc, src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

Merge branch 'master' into dnsmasq-ipv6-defaults
DeltaFile
+0-613src/www/services_router_advertisements.php
+0-441src/www/system_advanced_network.php
+216-0src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+0-205src/opnsense/mvc/app/library/OPNsense/OpenVPN/TheGreenBow.php
+147-47src/etc/inc/interfaces.inc
+194-0src/opnsense/mvc/app/models/OPNsense/Radvd/Migrations/M1_0_0.php
+557-1,30699 files not shown
+2,510-1,724105 files

OPNSense/core fe03fe3src/etc/inc interfaces.inc

interface: POC for multi-dhcp6c support

I'm not entirely sure why we settled for a single deamon of
dhcp6c back in the day, but there are certianly downsides to
it and I don't see something that wasn't fixed in the meantime
that makes this not work.

At the moment this splits off dhcp6c only but we need to
change the daemon's print a bit to avoid complaining about
"other" devices since the situation to ignore a non-listening
interface is normal and not "ignoring" something obvious as
the INFO log message suggests.

rtsold still needs to be split to allow for HUP reload of
a single interface instead of forcing a restart of all
DHCPv6 WAN clients at the same time.
DeltaFile
+9-23src/etc/inc/interfaces.inc
+9-231 files

OPNSense/core 390a12esrc/etc/inc interfaces.inc console.inc, src/opnsense/mvc/tests/app/models/OPNsense/ACL/AclConfig config.xml

interfaces: introduce idassoc6 mode #9155

We're adding a bit of technical debt here for the simple reason
to decouple the track6 mode from automatic radvd and dhcpv6 runs.

Specifically avoid the "dhcpd6track6allowoverride" flag in this
mode but keep the data the same otherwise for interoperability.
DeltaFile
+140-57src/www/interfaces.php
+4-2src/etc/inc/interfaces.inc
+2-2src/opnsense/scripts/shell/setaddr.php
+3-0src/opnsense/scripts/shell/banner.php
+1-1src/etc/inc/console.inc
+1-1src/opnsense/mvc/tests/app/models/OPNsense/ACL/AclConfig/config.xml
+151-631 files not shown
+152-647 files

OPNSense/core 77cefc7src/etc/inc/plugins.inc.d radvd.inc, src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

Make base6 explicit in the stanza
DeltaFile
+5-4src/etc/inc/plugins.inc.d/radvd.inc
+1-1src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+6-52 files

OPNSense/core 78d68a6src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

radvd: grid_view false for now
DeltaFile
+3-0src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+3-01 files

OPNSense/core f8da6e1src/etc/inc/plugins.inc.d dhcpd.inc radvd.inc, src/opnsense/mvc/app/models/OPNsense/Base/Menu MenuSystem.php

interfaces: decouple 'track6' mode magic in radvd/dhcpv6 #9155

The code always took the shortcut to "track6-interface" but since
we want a new mode without a side effect and keep the attributes
for common code cases the same switch this to explicit mode check.
DeltaFile
+5-3src/etc/inc/plugins.inc.d/dhcpd.inc
+3-3src/www/services_dhcpv6.php
+3-3src/etc/inc/plugins.inc.d/radvd.inc
+1-1src/opnsense/mvc/app/models/OPNsense/Base/Menu/MenuSystem.php
+12-104 files

OPNSense/core 61ffcf5src/etc/inc/plugins.inc.d radvd.inc, src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

radvd: Add Base6Interface constructor
DeltaFile
+11-2src/etc/inc/plugins.inc.d/radvd.inc
+7-0src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+1-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.xml
+19-23 files

OPNSense/core d0dece8src/etc/inc interfaces.inc, src/etc/inc/plugins.inc.d dhcpd.inc radvd.inc

interfaces: introduce idassoc6 mode

We're adding a bit of technical debt here for the simple reason
to decouple the track6 mode from automatic radvd and dhcpv6 runs.

Specifically avoid the "dhcpd6track6allowoverride" flag in this
mode but keep the data the same otherwise for interoperability.
DeltaFile
+83-2src/www/interfaces.php
+5-3src/etc/inc/plugins.inc.d/dhcpd.inc
+3-3src/etc/inc/plugins.inc.d/radvd.inc
+4-2src/etc/inc/interfaces.inc
+2-2src/www/services_dhcpv6.php
+2-2src/opnsense/scripts/shell/setaddr.php
+99-145 files not shown
+106-1811 files

OPNSense/plugins af86f32net/frr pkg-descr, net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms dialogEditBGPNeighbor.xml

net/frr: Changelog for v1.50 (#5133)

* net/frr: Changelog for v1.50

* Fix a helptext to be more generic and one string.

* Remove private AS should be advanced
DeltaFile
+7-5net/frr/pkg-descr
+2-2net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms/dialogEditBGPNeighbor.xml
+9-72 files

OPNSense/plugins f394bdcnet/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms dialogEditBGPNeighbor.xml

Remove private AS should be advanced
DeltaFile
+1-0net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms/dialogEditBGPNeighbor.xml
+1-01 files

OPNSense/plugins 4fdc141net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms dialogEditBGPNeighbor.xml

Fix a helptext to be more generic and one string.
DeltaFile
+1-2net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms/dialogEditBGPNeighbor.xml
+1-21 files

OPNSense/src 98ad277sys/net/altq altq.h

altq(4): Fix a typo in a source code comment

- s/backet/bucket/

(cherry picked from commit 1df4d82bd17ebd7449a6b58c32b65a12269ca068)
DeltaFile
+1-1sys/net/altq/altq.h
+1-11 files

OPNSense/plugins baf64e8net/frr pkg-descr

net/frr: Changelog for v1.50
DeltaFile
+7-5net/frr/pkg-descr
+7-51 files

OPNSense/plugins 2ffb9c4net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms dialogEditBGPNeighbor.xml, net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga BGP.xml

net/frr: Add capability support for BGP neighbors (#5128)

* net/frr: Add capability support for BGP neighbors

I've recently tried to use OPNsense in an environment where the use of link-local addresses is required.
Since the link-local capability is not available, I was not able to use OPNsense then.

Obviously, there are some other with the same problem:

  * [os-frr] wrong interface for IPv6 link-local used to connect to neighbor #4962
  * https://forum.opnsense.org/index.php?topic=36088.0

So, I'd like to offer support for BGP capabilities.

* net/frr: Improve help string for BGP Capabilities as suggested by @Monviech

* net/frr: Fix typo as found by @Monviech

* net/frr: Remove not needed attribute as suggested by @Monviech

    [5 lines not shown]
DeltaFile
+10-0net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms/dialogEditBGPNeighbor.xml
+9-0net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga/BGP.xml
+5-0net/frr/src/opnsense/service/templates/OPNsense/Quagga/bgpd.conf
+24-03 files

OPNSense/plugins d31618enet/frr/src/opnsense/service/conf/actions.d actions_quagga.conf

net/frr: Add CARP event handler to restart command (#5132)

DeltaFile
+1-1net/frr/src/opnsense/service/conf/actions.d/actions_quagga.conf
+1-11 files

OPNSense/plugins ea48c14net/frr pkg-descr Makefile, net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms dialogEditBGPNeighbor.xml

net/frr: Add BGP remove-private-AS to neighbors (#5090)

* net/frr: Add BGP remove-private-AS to neighbors

* net/frr: Simplify implementation of BGP remove-private-AS for neighbors

* Apply suggestion from @Monviech

---------

Co-authored-by: Monviech <79600909+Monviech at users.noreply.github.com>
DeltaFile
+10-0net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms/dialogEditBGPNeighbor.xml
+8-0net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga/BGP.xml
+4-0net/frr/pkg-descr
+1-2net/frr/Makefile
+3-0net/frr/src/opnsense/service/templates/OPNsense/Quagga/bgpd.conf
+26-25 files

OPNSense/plugins 7085ae8net/frr/src/opnsense/service/conf/actions.d actions_quagga.conf

net/frr: Add CARP event handler to restart command
DeltaFile
+1-1net/frr/src/opnsense/service/conf/actions.d/actions_quagga.conf
+1-11 files

OPNSense/core a60c1afsrc/opnsense/mvc/app/models/OPNsense/Kea KeaDhcpv4.php, src/opnsense/mvc/app/views/OPNsense/Kea dhcpv6.volt

kea: validate that DNS is running before auto-collect #9185
DeltaFile
+18-2src/opnsense/mvc/app/models/OPNsense/Kea/KeaDhcpv4.php
+0-11src/opnsense/mvc/app/views/OPNsense/Kea/dhcpv6.volt
+18-132 files

OPNSense/core 2eefa6dsrc/etc/inc interfaces.inc

interface: POC for multi-dhcp6c support

I'm not entirely sure why we settled for a single deamon of
dhcp6c back in the day, but there are certianly downsides to
it and I don't see something that wasn't fixed in the meantime
that makes this not work.

At the moment this splits off dhcp6c only but we need to
change the daemon's print a bit to avoid complaining about
"other" devices since the situation to ignore a non-listening
interface is normal and not "ignoring" something obvious as
the INFO log message suggests.

rtsold still needs to be split to allow for HUP reload of
a single interface instead of forcing a restart of all
DHCPv6 WAN clients at the same time.
DeltaFile
+9-23src/etc/inc/interfaces.inc
+9-231 files

OPNSense/core 6f47a0asrc/etc/inc/plugins.inc.d radvd.inc, src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

radvd: support nat64prefix; closes #7487 #8289
DeltaFile
+26-2src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.php
+10-0src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+5-0src/etc/inc/plugins.inc.d/radvd.inc
+4-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.xml
+45-24 files

OPNSense/core 3621caasrc/opnsense/mvc/app/models/OPNsense/IPsec/FieldTypes IPsecProposalField.php

IPsec: expose ChaCha20-Poly1305 AEAD proposals in IKEv2 GUI (#9611)

* ipsec: add ChaCha20-Poly1305 AEAD proposals for IKEv2

* Update src/opnsense/mvc/app/models/OPNsense/IPsec/FieldTypes/IPsecProposalField.php

Apply suggested changes from code review

Co-authored-by: Franco Fichtner <franco at lastsummer.de>

* Also add "no PFS" to aes256gcm16 description in IPsecProposalField

---------

Co-authored-by: Franco Fichtner <franco at lastsummer.de>
Co-authored-by: Monviech <79600909+Monviech at users.noreply.github.com>
DeltaFile
+11-2src/opnsense/mvc/app/models/OPNsense/IPsec/FieldTypes/IPsecProposalField.php
+11-21 files

OPNSense/core 50ade96src/etc/inc interfaces.inc

interface: POC for multi-dhcp6c support

I'm not entirely sure why we settled for a single deamon of
dhcp6c back in the day, but there are certianly downsides to
it and I don't see something that wasn't fixed in the meantime
that makes this not work.

At the moment this splits off dhcp6c only but we need to
change the daemon's print a bit to avoid complaining about
"other" devices since the situation to ignore a non-listening
interface is normal and not "ignoring" something obvious as
the INFO log message suggests.

rtsold still needs to be split to allow for HUP reload of
a single interface instead of forcing a restart of all
DHCPv6 WAN clients at the same time.
DeltaFile
+9-23src/etc/inc/interfaces.inc
+9-231 files

OPNSense/core e1cc266src/etc/inc/plugins.inc.d radvd.inc, src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

router advertisements: migrate to MVC/API (#9603)

Migrate router advertisements to its own space. Although
the data shifts around a bit the end result should be equivalent.

Of note is that we currently do not have visibility for automatic
interface tracking when not disabled, but they can be disabled
manually by adding the interface configuration and unchecking
the service enable.

Co-authored-by: Monviech <gitacc at pischem.com>
DeltaFile
+0-613src/www/services_router_advertisements.php
+206-0src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+194-0src/opnsense/mvc/app/models/OPNsense/Radvd/Migrations/M1_0_0.php
+85-85src/etc/inc/plugins.inc.d/radvd.inc
+120-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.xml
+99-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.php
+704-69816 files not shown
+1,122-72322 files

OPNSense/core 3aedef8src/www services_dhcpv6.php

isc-dhcpv6: no loner operates ramode
DeltaFile
+0-4src/www/services_dhcpv6.php
+0-41 files

OPNSense/core b5e6193src/etc/inc/plugins.inc.d radvd.inc dhcpd.inc, src/opnsense/mvc/app/models/OPNsense/Radvd/Migrations M1_0_0.php

radvd: forgot one spot where we wanted to disable automatic tracking

This also means we should not migrate empty nodes that existed because
they were not disabled or DHCPv6 was enabled there once.
DeltaFile
+13-10src/opnsense/mvc/app/models/OPNsense/Radvd/Migrations/M1_0_0.php
+11-11src/etc/inc/plugins.inc.d/radvd.inc
+5-5src/etc/inc/plugins.inc.d/dhcpd.inc
+29-263 files