Services: Kea DHCPv6: improve kea_prefix_watcher.py accuracy via both interface and mac address key(#10685)
Resolve the lease subnet-id to its configured interface and key Hostwatch or
NDP lookups by interface and MAC.
Hostwatch or NDP may report the same MAC on multiple interfaces, for example
on a bridge and its member. Previously the last matching MAC entry could
select the wrong interface and cause route installation to fail.
The link-local address and scope still come from Hostwatch or NDP. Multiple
LLAs for the same interface/MAC remain last-match-wins, as any observed LLA for
an interface/MAC key should be an eligible next hop target.
Add options to dhcrelay for circuit_id and remote_id (#10563)
* Add options to dhcrelay for circuit_id and remote_id
* Make circuit_id and remote_id text fields. Don't apply circuit_id on dhcrelay6
* Refactor to use isEmpty instead of empty(getValue) in dhcrelay. Change fields to StrictTextField
ui: tabulator: Add _showMaximized() modal, minor improvements
move html generation to javascript library, align model a bit differently and always stretch to page height to remove distractions while reading.
includes some smaller fixes for missing tooltips and "hanging" tooltips as well.
theme: opnsense-auto - prevent "blinking" by hiding the contents while loading. closes https://github.com/opnsense/core/pull/10377
Move theme.js slightly up in the loading order, although technically, the visibility:hidden should do the trick anyway when still rendering <head/>
themes: opnsense-auto - add tokenize2.css in standard theme to ensure selection in automatic theme. closes https://github.com/opnsense/core/issues/10545
If a themed file is not available in the standard theme, the dark one won't be able to replace it.
Firewall: Rules: Add max-pkt-rate (Rate limiting) (#10629)
* Firewall: Filter: Add max-pkt-rate
* Move dialog options, they dont fit with the stateful firewall options
* Give it an own Rate limiting header, it doesnt semantically fit anywhere else
Interfaces: Virtual IPs: Settings - make sure validations are triggered when no subnet is specified and prevent adding todo entries in that case, closes https://github.com/opnsense/core/pull/10302
