(cherry picked from commit da313a94)
(cherry picked from commit f2f3b0c0)

(cherry picked from commit c9b7cdfe)
(cherry picked from commit a298341d)
(cherry picked from commit f826593e)
(cherry picked from commit 6223e0b5)
(cherry picked from commit a57d0e88)

(cherry picked from commit 5eb2c986)

(cherry picked from commit 84a99758)

(cherry picked from commit 761ccab2)

(cherry picked from commit 12810d94)
(cherry picked from commit bb80ad02)

(cherry picked from commit 335b591d)
(cherry picked from commit a7134a01)

PR: https://forum.opnsense.org/index.php?topic=5213.0

(cherry picked from commit ed66e872)
(cherry picked from commit 93d68f77)

filter/port alias, allow ranges in the form of 80-100, replace with 80:100. closes https://github.com/opnsense/core/issues/1529

(cherry picked from commit 254775d4)

If a field isn't required and the user sets it with a faulty value, it would pass because it didn't know it wasn't set before user input.
There where two issues, first one, not knowing it was in init state (solved with internalFieldLoaded), next all field types should have used actionPostLoadingEvent to customize loading behaviour.

(cherry picked from commit 091b0754)

(cherry picked from commit a039ad4d)

(cherry picked from commit 72223b2d)

(cherry picked from commit 4fa4d211)

(cherry picked from commit b47c65bc)
(cherry picked from commit ec3bcbe2)

(cherry picked from commit 0e9b8f16)

(cherry picked from commit d0a94a5b)

CARP, add option "Disable preempt", move preempt to later boot stage. for https://github.com/opnsense/core/issues/1557

(cherry picked from commit 75967381)
(cherry picked from commit 4c01a935)
(cherry picked from commit f399f3fa)
(cherry picked from commit 15f48662)

(cherry picked from commit 0b89f1d0)

(cherry picked from commit bed87f3d)
(cherry picked from commit 39628cd7)

(cherry picked from commit 59249e5c)

(cherry picked from commit 82032a73)
(cherry picked from commit fae2e48f)

(cherry picked from commit 89d73f69)

(cherry picked from commit 2e096b3e)

Includes a fix by Alexander Graf for IPv6 SSL cipher configuration.

(cherry picked from commit c144e247)
(cherry picked from commit 4c472610)

(cherry picked from commit f499c3dd)

(cherry picked from commit ce8ef993)

(cherry picked from commit 760af0b6)
(cherry picked from commit 41aef105)

(cherry picked from commit b306aaae)
(cherry picked from commit 0f551f09)
(cherry picked from commit 044d519f)

(cherry picked from commit a14da189)
(cherry picked from commit 2b0cb7be)

(cherry picked from commit 42214674)
(cherry picked from commit c1f018b1)
(cherry picked from commit f3ed9ca3)

configd, templates, add sortDictList to helpers. closes https://github.com/opnsense/core/issues/1641

example usage:
{%  for item in helpers.sortDictList(OPNsense.ConfigObject, 'description') %}
    {{item.description}}
{%  endfor %}

(cherry picked from commit e4082599)

In those cases the next firmware update with a base set helps, or
running this manually:

    # opnsense-update -fb

(cherry picked from commit f7e92beb)