(cherry picked from commit ee6a8076)

(packet capture) stream/flush output to browser, closes https://github.com/opnsense/core/issues/1116

(cherry picked from commit 6e060977)

(cherry picked from commit 73a22784)

(cherry picked from commit 23930a85)

(cherry picked from commit 9d250cd1)
(cherry picked from commit fd172c63)

(cherry picked from commit 7985db12)

(cherry picked from commit 35b96a9d)
(cherry picked from commit e0083264)
(cherry picked from commit 84b04888)

(cherry picked from commit 2e31042e)

(cherry picked from commit bd182fd5)

PPPoE wasn't removed, which led to some refactoring to find
out why.  The outcome is the same, but works a little bit
different now.  While there, make it possible to omit the
config write in case we are going to call write_config()
shortly after anyway.

This will also be necessary for the legacy VPN plugins.

(cherry picked from commit ecdcc4b7)
(cherry picked from commit 3235ee26)

(cherry picked from commit e24d1970)

(cherry picked from commit c3f34c2b)

Rules using "Interface Address" as the NAT target IP did not select the
IPv6 address when generating the rule

(cherry picked from commit 4c88ef63)

(cherry picked from commit 71f7d3c2)
(cherry picked from commit 6e0b70a8)

PR: https://forum.opnsense.org/index.php?topic=3462.0
(cherry picked from commit 3da906b6)

(model) CertificateField missing cert type in cache, closes https://github.com/opnsense/core/issues/1095

(cherry picked from commit 2dc8de2c)
(cherry picked from commit 27148ac6)

Suggested by: @andreas-p
Inspired by:  pfSense

(cherry picked from commit 79a2008b)

(cherry picked from commit b95a654c)

(config) switch default for offloading features, closes https://github.com/opnsense/core/issues/1092

(cherry picked from commit 4e662fe4)

(cherry picked from commit 4be83432)

(cherry picked from commit e7cb49b8)

(cherry picked from commit 7fe0f4c1)

(cherry picked from commit 796d3778)

(cherry picked from commit 7a610b2e)

The custom scrub rules on the normalization settings page effectively
cannot be reached since the standard interface scrub rules are listed
first.

This patch swaps that order around so that custom scrub rules get
evaluated first.

(cherry picked from commit 23ea5bcf)

(cherry picked from commit 0a71d2ea)

"index.php*" match in dashboard privileges overlays a bit
with "index.php?logout" so that we'll have to hardcode an
exception for now.  Other approaches to be taken here mid-
term are 'visibility="always"' in Menu.xml or restructure
the logout link under /ui/logout or /logout.php.

PR: https://forum.opnsense.org/index.php?topic=3431.0
(cherry picked from commit 6a089c21)

(cherry picked from commit b881dfef)
(cherry picked from commit 241b29f7)

(cherry picked from commit 155fca31)

(config/interfaces) some older configurations use <enabled/> in stead of our current standard <enabled>1</enabled>. to avoid new issues, its better to convert when only set.

(cherry picked from commit c17a834f)

Firefox and Safari are unaffected.  No harm done in deleting a
pointer to a non-existing source map.  Oh my.

(cherry picked from commit 6a1ddbf7)

(cherry picked from commit e061374a)

(cherry picked from commit ba75faeb)

(cherry picked from commit f034bccf)

Inspired by: @adschellevis

(cherry picked from commit b72bfe22)

maybe, one day, we should refactor some of the JS code... but for now this will do the trick

(cherry picked from commit 6c8c91a1)

(reporting/settings) option to flush all local netflow data. closes https://github.com/opnsense/core/issues/983

(cherry picked from commit 0c429413)

(cherry picked from commit 57f35d74)

(cherry picked from commit 2641694a)

(cherry picked from commit f9e71141)