OPNSense/core d4e0109src/etc/inc interfaces.inc, src/www interfaces.php

interface: POC for multi-dhcp6c support

I'm not entirely sure why we settled for a single deamon of
dhcp6c back in the day, but there are certianly downsides to
it and I don't see something that wasn't fixed in the meantime
that makes this not work.

At the moment this splits off dhcp6c only but we need to
change the daemon's print a bit to avoid complaining about
"other" devices since the situation to ignore a non-listening
interface is normal and not "ignoring" something obvious as
the INFO log message suggests.

Remove the $id bootstrapping now that every service has its
own configuration and "0" cannot overlap and add some options
relavant to #7647.  The assoc-id principle and some other options
are now implemented.

rtsold still needs to be split to allow for HUP reload of

    [2 lines not shown]
DeltaFile
+53-84src/etc/inc/interfaces.inc
+46-2src/www/interfaces.php
+99-862 files

OPNSense/core e17eb00src/etc/inc interfaces.inc, src/www interfaces.php

interface: POC for multi-dhcp6c support

I'm not entirely sure why we settled for a single deamon of
dhcp6c back in the day, but there are certianly downsides to
it and I don't see something that wasn't fixed in the meantime
that makes this not work.

At the moment this splits off dhcp6c only but we need to
change the daemon's print a bit to avoid complaining about
"other" devices since the situation to ignore a non-listening
interface is normal and not "ignoring" something obvious as
the INFO log message suggests.

Remove the $id bootstrapping now that every service has its
own configuration and "0" cannot overlap and add some options
relavant to #7647.

rtsold still needs to be split to allow for HUP reload of
a single interface instead of forcing a restart of all
DHCPv6 WAN clients at the same time.
DeltaFile
+39-66src/etc/inc/interfaces.inc
+43-2src/www/interfaces.php
+82-682 files

OPNSense/core e790033src/etc/inc interfaces.inc console.inc, src/opnsense/mvc/tests/app/models/OPNsense/ACL/AclConfig config.xml

interfaces: introduce idassoc6 mode #9155

We're adding a bit of technical debt here for the simple reason
to decouple the track6 mode from automatic radvd and dhcpv6 runs.

Specifically avoid the "dhcpd6track6allowoverride" flag in this
mode but keep the data the same otherwise for interoperability.
DeltaFile
+140-57src/www/interfaces.php
+4-2src/etc/inc/interfaces.inc
+2-2src/opnsense/scripts/shell/setaddr.php
+3-0src/opnsense/scripts/shell/banner.php
+1-1src/etc/inc/console.inc
+1-1src/opnsense/mvc/tests/app/models/OPNsense/ACL/AclConfig/config.xml
+151-631 files not shown
+152-647 files

OPNSense/core 8d0da12src/etc/inc/plugins.inc.d radvd.inc

radvd: typo in previous
DeltaFile
+1-1src/etc/inc/plugins.inc.d/radvd.inc
+1-11 files

OPNSense/core e174540src/etc/inc/plugins.inc.d radvd.inc, src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

radvd: Add Base6Interface constructor (#9615)

DeltaFile
+14-4src/etc/inc/plugins.inc.d/radvd.inc
+11-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.php
+10-0src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+1-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.xml
+36-44 files

OPNSense/core ac82437src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml, src/opnsense/mvc/app/models/OPNsense/Radvd Radvd.php

Tighten scope via validation, Base6Interface shall not be the same as interface.
DeltaFile
+11-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.php
+1-1src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+12-12 files

OPNSense/core e28c113src/etc config.xml.sample

system: adjust dhcpv6 range with isc default
DeltaFile
+2-2src/etc/config.xml.sample
+2-21 files

OPNSense/core c5ce6b6src/etc config.xml.sample, src/etc/inc interfaces.inc console.inc

interfaces: introduce idassoc6 mode #9155

We're adding a bit of technical debt here for the simple reason
to decouple the track6 mode from automatic radvd and dhcpv6 runs.

Specifically avoid the "dhcpd6track6allowoverride" flag in this
mode but keep the data the same otherwise for interoperability.
DeltaFile
+140-57src/www/interfaces.php
+4-2src/etc/inc/interfaces.inc
+2-2src/opnsense/scripts/shell/setaddr.php
+3-0src/opnsense/scripts/shell/banner.php
+1-1src/etc/config.xml.sample
+1-1src/etc/inc/console.inc
+151-631 files not shown
+152-647 files

OPNSense/core d3672a3src/etc/inc interfaces.inc, src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

Merge branch 'master' into dnsmasq-ipv6-defaults
DeltaFile
+0-613src/www/services_router_advertisements.php
+0-441src/www/system_advanced_network.php
+216-0src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+0-205src/opnsense/mvc/app/library/OPNsense/OpenVPN/TheGreenBow.php
+147-47src/etc/inc/interfaces.inc
+194-0src/opnsense/mvc/app/models/OPNsense/Radvd/Migrations/M1_0_0.php
+557-1,30699 files not shown
+2,510-1,724105 files

OPNSense/core fe03fe3src/etc/inc interfaces.inc

interface: POC for multi-dhcp6c support

I'm not entirely sure why we settled for a single deamon of
dhcp6c back in the day, but there are certianly downsides to
it and I don't see something that wasn't fixed in the meantime
that makes this not work.

At the moment this splits off dhcp6c only but we need to
change the daemon's print a bit to avoid complaining about
"other" devices since the situation to ignore a non-listening
interface is normal and not "ignoring" something obvious as
the INFO log message suggests.

rtsold still needs to be split to allow for HUP reload of
a single interface instead of forcing a restart of all
DHCPv6 WAN clients at the same time.
DeltaFile
+9-23src/etc/inc/interfaces.inc
+9-231 files

OPNSense/core 390a12esrc/etc/inc interfaces.inc console.inc, src/opnsense/mvc/tests/app/models/OPNsense/ACL/AclConfig config.xml

interfaces: introduce idassoc6 mode #9155

We're adding a bit of technical debt here for the simple reason
to decouple the track6 mode from automatic radvd and dhcpv6 runs.

Specifically avoid the "dhcpd6track6allowoverride" flag in this
mode but keep the data the same otherwise for interoperability.
DeltaFile
+140-57src/www/interfaces.php
+4-2src/etc/inc/interfaces.inc
+2-2src/opnsense/scripts/shell/setaddr.php
+3-0src/opnsense/scripts/shell/banner.php
+1-1src/etc/inc/console.inc
+1-1src/opnsense/mvc/tests/app/models/OPNsense/ACL/AclConfig/config.xml
+151-631 files not shown
+152-647 files

OPNSense/core 77cefc7src/etc/inc/plugins.inc.d radvd.inc, src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

Make base6 explicit in the stanza
DeltaFile
+5-4src/etc/inc/plugins.inc.d/radvd.inc
+1-1src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+6-52 files

OPNSense/core 78d68a6src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

radvd: grid_view false for now
DeltaFile
+3-0src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+3-01 files

OPNSense/core f8da6e1src/etc/inc/plugins.inc.d dhcpd.inc radvd.inc, src/opnsense/mvc/app/models/OPNsense/Base/Menu MenuSystem.php

interfaces: decouple 'track6' mode magic in radvd/dhcpv6 #9155

The code always took the shortcut to "track6-interface" but since
we want a new mode without a side effect and keep the attributes
for common code cases the same switch this to explicit mode check.
DeltaFile
+5-3src/etc/inc/plugins.inc.d/dhcpd.inc
+3-3src/etc/inc/plugins.inc.d/radvd.inc
+3-3src/www/services_dhcpv6.php
+1-1src/opnsense/mvc/app/models/OPNsense/Base/Menu/MenuSystem.php
+12-104 files

OPNSense/core 61ffcf5src/etc/inc/plugins.inc.d radvd.inc, src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

radvd: Add Base6Interface constructor
DeltaFile
+11-2src/etc/inc/plugins.inc.d/radvd.inc
+7-0src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+1-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.xml
+19-23 files

OPNSense/core d0dece8src/etc/inc interfaces.inc, src/etc/inc/plugins.inc.d dhcpd.inc radvd.inc

interfaces: introduce idassoc6 mode

We're adding a bit of technical debt here for the simple reason
to decouple the track6 mode from automatic radvd and dhcpv6 runs.

Specifically avoid the "dhcpd6track6allowoverride" flag in this
mode but keep the data the same otherwise for interoperability.
DeltaFile
+83-2src/www/interfaces.php
+5-3src/etc/inc/plugins.inc.d/dhcpd.inc
+4-2src/etc/inc/interfaces.inc
+3-3src/etc/inc/plugins.inc.d/radvd.inc
+2-2src/opnsense/scripts/shell/setaddr.php
+2-2src/www/services_dhcpv6.php
+99-145 files not shown
+106-1811 files

OPNSense/core a60c1afsrc/opnsense/mvc/app/models/OPNsense/Kea KeaDhcpv4.php, src/opnsense/mvc/app/views/OPNsense/Kea dhcpv6.volt

kea: validate that DNS is running before auto-collect #9185
DeltaFile
+18-2src/opnsense/mvc/app/models/OPNsense/Kea/KeaDhcpv4.php
+0-11src/opnsense/mvc/app/views/OPNsense/Kea/dhcpv6.volt
+18-132 files

OPNSense/core 2eefa6dsrc/etc/inc interfaces.inc

interface: POC for multi-dhcp6c support

I'm not entirely sure why we settled for a single deamon of
dhcp6c back in the day, but there are certianly downsides to
it and I don't see something that wasn't fixed in the meantime
that makes this not work.

At the moment this splits off dhcp6c only but we need to
change the daemon's print a bit to avoid complaining about
"other" devices since the situation to ignore a non-listening
interface is normal and not "ignoring" something obvious as
the INFO log message suggests.

rtsold still needs to be split to allow for HUP reload of
a single interface instead of forcing a restart of all
DHCPv6 WAN clients at the same time.
DeltaFile
+9-23src/etc/inc/interfaces.inc
+9-231 files

OPNSense/core 6f47a0asrc/etc/inc/plugins.inc.d radvd.inc, src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

radvd: support nat64prefix; closes #7487 #8289
DeltaFile
+26-2src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.php
+10-0src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+5-0src/etc/inc/plugins.inc.d/radvd.inc
+4-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.xml
+45-24 files

OPNSense/core 3621caasrc/opnsense/mvc/app/models/OPNsense/IPsec/FieldTypes IPsecProposalField.php

IPsec: expose ChaCha20-Poly1305 AEAD proposals in IKEv2 GUI (#9611)

* ipsec: add ChaCha20-Poly1305 AEAD proposals for IKEv2

* Update src/opnsense/mvc/app/models/OPNsense/IPsec/FieldTypes/IPsecProposalField.php

Apply suggested changes from code review

Co-authored-by: Franco Fichtner <franco at lastsummer.de>

* Also add "no PFS" to aes256gcm16 description in IPsecProposalField

---------

Co-authored-by: Franco Fichtner <franco at lastsummer.de>
Co-authored-by: Monviech <79600909+Monviech at users.noreply.github.com>
DeltaFile
+11-2src/opnsense/mvc/app/models/OPNsense/IPsec/FieldTypes/IPsecProposalField.php
+11-21 files

OPNSense/core 50ade96src/etc/inc interfaces.inc

interface: POC for multi-dhcp6c support

I'm not entirely sure why we settled for a single deamon of
dhcp6c back in the day, but there are certianly downsides to
it and I don't see something that wasn't fixed in the meantime
that makes this not work.

At the moment this splits off dhcp6c only but we need to
change the daemon's print a bit to avoid complaining about
"other" devices since the situation to ignore a non-listening
interface is normal and not "ignoring" something obvious as
the INFO log message suggests.

rtsold still needs to be split to allow for HUP reload of
a single interface instead of forcing a restart of all
DHCPv6 WAN clients at the same time.
DeltaFile
+9-23src/etc/inc/interfaces.inc
+9-231 files

OPNSense/core e1cc266src/etc/inc/plugins.inc.d radvd.inc, src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

router advertisements: migrate to MVC/API (#9603)

Migrate router advertisements to its own space. Although
the data shifts around a bit the end result should be equivalent.

Of note is that we currently do not have visibility for automatic
interface tracking when not disabled, but they can be disabled
manually by adding the interface configuration and unchecking
the service enable.

Co-authored-by: Monviech <gitacc at pischem.com>
DeltaFile
+0-613src/www/services_router_advertisements.php
+206-0src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+194-0src/opnsense/mvc/app/models/OPNsense/Radvd/Migrations/M1_0_0.php
+85-85src/etc/inc/plugins.inc.d/radvd.inc
+120-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.xml
+99-0src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.php
+704-69816 files not shown
+1,122-72322 files

OPNSense/core 3aedef8src/www services_dhcpv6.php

isc-dhcpv6: no loner operates ramode
DeltaFile
+0-4src/www/services_dhcpv6.php
+0-41 files

OPNSense/core b5e6193src/etc/inc/plugins.inc.d radvd.inc dhcpd.inc, src/opnsense/mvc/app/models/OPNsense/Radvd/Migrations M1_0_0.php

radvd: forgot one spot where we wanted to disable automatic tracking

This also means we should not migrate empty nodes that existed because
they were not disabled or DHCPv6 was enabled there once.
DeltaFile
+13-10src/opnsense/mvc/app/models/OPNsense/Radvd/Migrations/M1_0_0.php
+11-11src/etc/inc/plugins.inc.d/radvd.inc
+5-5src/etc/inc/plugins.inc.d/dhcpd.inc
+29-263 files

OPNSense/core 2fa135bsrc/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

radvd: fix labels and grid default
DeltaFile
+5-2src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+5-21 files

OPNSense/core 984ff82src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms dialogEntry.xml

radvd: shuffle form around
DeltaFile
+76-74src/opnsense/mvc/app/controllers/OPNsense/Radvd/forms/dialogEntry.xml
+76-741 files

OPNSense/core 9978c37src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes IntegerField.php, src/opnsense/mvc/app/models/OPNsense/Radvd Radvd.php

radvd: only validate extras when ramax is valid

Otherwise the calculations will tell us numbers that are not
correct.
DeltaFile
+18-0src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/IntegerField.php
+9-1src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.php
+27-12 files

OPNSense/core c7336afsrc/etc/inc/plugins.inc.d radvd.inc

radvd: use configtest debug level

In practice this doesn't really matter.   I don't see any debug
messages in my installation.  Normal logging should go through
and this is also very sparse.
DeltaFile
+1-1src/etc/inc/plugins.inc.d/radvd.inc
+1-11 files

OPNSense/core f1323f6src/opnsense/service/conf/actions.d actions_filter.conf

Update src/opnsense/service/conf/actions.d/actions_filter.conf
DeltaFile
+0-1src/opnsense/service/conf/actions.d/actions_filter.conf
+0-11 files

OPNSense/core 5219572src/opnsense/mvc/app/models/OPNsense/Radvd Radvd.xml Radvd.php

Fix some typos in validation messages of Radvd.xml and Radvd.php
DeltaFile
+5-5src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.xml
+1-1src/opnsense/mvc/app/models/OPNsense/Radvd/Radvd.php
+6-62 files