firewall: policy: T4131: T4144: T4159: T4164: Fix reported firewall issues, policy-route refactor

After the a1aaf4fb9c0e4111670ef3dd491796fa35a2311f commit, only single
(latest) CHILD_SA for eac...

* Migrates all policy route references from `ipv6-route` to `route6`
* Update test config `dialu...

Migrating 1.2.8 -> 1.4-rolling-202201110811

vyos-router[970]: Waiting for NICs to settle down: ...

In order to have a consistent looking CLI we should rename this CLI node.

There is:
* access-li...

frr: T4166: move log debug setting to init function for vyos-configd

containers: T2216: bugfix host networking on image upgrade

The bug was partially fixed with this commit:
https://github.com/vyos/vyos-1x/commit/358f0b481d...

frr.py debugging is set True if the file '/tmp/vyos.frr.debug' exists;
this check needs to be ca...

Before installing a new conntrack policy into the OS Kernel, the new policy
should be verified b...

Before installing a new conntrack policy into the OS Kernel, the new policy
should be verified b...

firewall: validators: T4148: Improve validators and firewall validator usage

firewall: policy: T4149: T4155: Fix incorrect table variable, fix handling of deleted base firew...

policy: T4161: Set correct description for local-preference

T4157: Add `jinja2` to pip test requirements

Signed-off-by: Georg <[email protected]>

vrrp: T1972: Ability to set IP address on not vrrp interface

keepalived: T4150: Fix template option conntrack_sync_group

nhrp: T4152: Fix template holding-time for nhrp

Add missed 'holding-time' option for shortcut-target address

Ability to set virtual_address on not vrrp-listen interface
Add ability don't track primary vrrp...

conntrack_sync_group option not under 'vrrp' section but part of
high-avalability dictionary

firewall: zone-policy: T4133: Prevent firewall from trying to clean-up zone-policy chains

Following the update to vyos1x-config, commit 64263617, UTF-8 characters
are supported within th...

* Prevent firewall names from using the reserved VZONE prefix

op-mode: T4142: Fix for show input ifbX interfaces

Ability to see interface type "input" ifbX from op-mode

keepalived: T4109: Update configd-include.json to reflect filename change

zone-policy: T4135: Raise error when using an invalid "from" zone.

smoketest: shim: Optimise speed of `lsof` command

firewall: zone-policy: T2199: T4130: Fixes for firewall, state-policy and zone-policy

firewall: T4132: Fix for op-mode show firewall group

firewall: T4134: Fix completion help for protocols

keepalived: T4109: Add high-availability virtual-server

After firewall rewriting there is impossible to show a specific
firewall group, this commit fixes...

Add new feature, high-availability virtual-server
Change XML, python and templates
Move vrrp to r...

firewall: T4130: Fix firewall state-policy errors

Also fixes:
* Issue with multiple state-policy rules being created on firewall updates
* Prevent...

Without this option systemd startup will hit a timeout and the kill keepalived
again.

monitoring: T3872: Add a new feature service monitoring

listen-address: T4110: Ability to set IPv6 link-local addresses

Some services allows to set link-local IPv6 addresses as
listen-address. Allow it and add a valid...

* 'firewall' of https://github.com/sarthurdev/vyos-1x:
zone_policy: T3873: Implement intra-zon...

ipsec: T4126: Ability to set priorities for installed policy

Add priority for policy based IPSec VPN tunnels
If 2 tunnels have the same pair of local and remo...

Commit 566f7f24 ("snmp: T4124: migrate to get_config_dict()") changed the
internal structure to ...

dhclient: T4121: Fixed resolv.conf generation at early boot stage

In case if a CLI configuration is not available, dhclient cannot add
nameservers to a `resolv.co...

webproxy: T4116: Ability to listen on IPv6 addresses

IPv6 addresses on webproxy/SQUID where not added correctly.
They need to be added in brackets.
M...

ipsec: T4111: Fix for swanctl configuration IPV6 peers

Peer name must not contain dots and colons, otherwise
swanct can't generate correct configuration...

syslog: T4039: Add protocol23format logging for UDP

Add protocol23format for rsyslog protocol UDP
Add ability to use IPv6 addresses (bracketize_ipv6)...

As high-abalability is root node for vrrp, the path
should be changed