(cherry picked from commit c9e04ae0)
(cherry picked from commit 720acc9e)

(cherry picked from commit f55a12b4)

(cherry picked from commit aaa0ddaf)

(cherry picked from commit 53fe7bc4)

(cherry picked from commit c43eaff4)

(cherry picked from commit c1141f4d)
(cherry picked from commit 1b21ad91)

(cherry picked from commit 58010a4c)

(cherry picked from commit e86885cb)
(cherry picked from commit 57bb583c)
(cherry picked from commit b2362628)

Omit the console changes, we are not prepared for improving
the translation there.

(cherry picked from commit 6411baea)

(cherry picked from commit 8b191e82)

(cherry picked from commit 3973a6ce)

(cherry picked from commit 7bf1343b)

(cherry picked from commit da3b10c6)

(cherry picked from commit 4725b679)

(cherry picked from commit 0cdad62a)

(cherry picked from commit c00e8eb0)

(cherry picked from commit c68ca487)

(cherry picked from commit ee6a8076)

(packet capture) stream/flush output to browser, closes https://github.com/opnsense/core/issues/1116

(cherry picked from commit 6e060977)

(cherry picked from commit 73a22784)

(cherry picked from commit 23930a85)

(cherry picked from commit 9d250cd1)
(cherry picked from commit fd172c63)

(cherry picked from commit 7985db12)

(cherry picked from commit 35b96a9d)
(cherry picked from commit e0083264)
(cherry picked from commit 84b04888)

(cherry picked from commit 2e31042e)

(cherry picked from commit bd182fd5)

PPPoE wasn't removed, which led to some refactoring to find
out why.  The outcome is the same, but works a little bit
different now.  While there, make it possible to omit the
config write in case we are going to call write_config()
shortly after anyway.

This will also be necessary for the legacy VPN plugins.

(cherry picked from commit ecdcc4b7)
(cherry picked from commit 3235ee26)

(cherry picked from commit e24d1970)

(cherry picked from commit c3f34c2b)

Rules using "Interface Address" as the NAT target IP did not select the
IPv6 address when generating the rule

(cherry picked from commit 4c88ef63)

(cherry picked from commit 71f7d3c2)
(cherry picked from commit 6e0b70a8)

PR: https://forum.opnsense.org/index.php?topic=3462.0
(cherry picked from commit 3da906b6)

(model) CertificateField missing cert type in cache, closes https://github.com/opnsense/core/issues/1095

(cherry picked from commit 2dc8de2c)
(cherry picked from commit 27148ac6)

Suggested by: @andreas-p
Inspired by:  pfSense

(cherry picked from commit 79a2008b)

(cherry picked from commit b95a654c)

(config) switch default for offloading features, closes https://github.com/opnsense/core/issues/1092

(cherry picked from commit 4e662fe4)

(cherry picked from commit 4be83432)

(cherry picked from commit e7cb49b8)

(cherry picked from commit 7fe0f4c1)

(cherry picked from commit 796d3778)