Although all our examples always use vhid as a unique key per firewall, it is possible to add the same vhid to different interfaces.
When "disable preempt" is not selected, eventually all of them will switch between master/backup at the same time anyway, so we can assume all virtual ips switch simultaneously.
If preempt is disabled, our vhid matching might not be perfect, but likely better than before.
* dashboard: IpsecTunnels.js - Adjust style and functionality of the widget to be in line with the OpenVPN widgets.
* dashboard: Make Phase 1 and 2 translations shorter.
* dashboard: Add missing translation.
* dashboard: Improved Wireguard widget, shows online offline status, styled like IPsec Widget.
* Add comments to make diff smaller.
* dashboard: IpsecLeases.js - Small style fix, add faster tick timeout, remove unused line of code, shifted dataChanged to different spot where it triggers earlier.
* Update src/opnsense/www/js/widgets/Metadata/Core.xml
Co-authored-by: Franco Fichtner <franco@lastsummer.de>
* dashboard: adjust for left header position and optimize ipsec command action
* dashboard: remove endCommandTransition to update table quicker and remove leftover debug statement
---------
Co-authored-by: Franco Fichtner <franco@lastsummer.de>
Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>
This pull request introduces a new feature to the OPNsense web interface,
allowing users to manage FreeBSD boot environments directly within OPNsense.
This integration provides an intuitive and seamless way for users to create,
manage, and switch between boot environments, enhancing system management
and recovery options.
Renamed the menu item to "Snapshots" in an attempt to explain the feature
to non-FreeBSD users.
This is a temporary solution, but a first step into cleaning up rrd stat collection.
In this first milestone, we keep using the generated script, but remove the loop and sleep construct out of it, offering the posibility to handle service control to cron. To prevent the script being written at the same time we're collecting, we always lock the script before use.
should fix: https://github.com/opnsense/core/issues/7753
The idea was opnsense-"devel" annotation, but there is a "devel" directory
in plugins and since we have "master" or "main" alias (that we want to switch
to some day even) it's better to remove this cruft.
Ideally we should really handle an array of parent hardware
devices here. In some cases IPv6 device is missed as well.
And later on the code will not check if this was a device
node for a modem so wrapping the hardware stuff into a function
for iteration is the way to go.
Take 10 seconds off. Seen today while testing other PPP changes.
Since I don't have functional PPPoE the full timeout is taken and
the log message is emitted correctly.
squid package errors may manifest during major upgrade as well making
it necessary to run the cleanup in advance and not in background mode.
It would be nicer to avoid code duplication, but that can happen the
next time something needs to be adjusted in the actual cleanup routine.
IPv6 addresses might be tentative. lighttpd will fail when trying to bind to a tentative address. This commit skips tentative IPv6 addresses for binding.
Otherwise the check will "approve" an interface that is not yet up, and subsequent
calls to fetch the gateway of that interface might fail if issued to quickly thereafter.