7a72674 datastorage/ubus: rework kicking algorithm

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8b41e959d0ec6e2046c9e652eb6bf061034082f1)

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

This adds support for the child SA to be rekeyed through the byte/packet
threshold. The default is blank (which disables the byte/packet thresholds).

Signed-off-by: Joel Low <joel@joelsplace.sg>
(cherry picked from commit 5c8af06c94)

* add new oisd nsfw source (XL)
* change korean source name (again)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7c66d054bf)

Signed-off-by: Derek Yerger <derek@altdevs.net>
Signed-off-by: Joel Low <joel@joelsplace.sg>
(cherry picked from commit 51203cae24)

- Removed an upstreamed patch
- Move logs to /var/log in accordance with FHS 3.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ff8f25cb98)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fc090f1eeb)
[Removed wrong cherry-pick info]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8f6bf937ca)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 74d7af61fe)

46539ae policy: abort kick process for missing candidate
408bbca policy: don't kick clients immediatly
444b233 policy: only send preferred candidate with transition request

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit dcd33d5da67bb5247667cc3e1fa7d8a6b4669621)

The first stable release in the 0.4.7.x series.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0b50456514)

Signed-off-by: Mister Benjamin <144dbspl@gmail.com>

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cf81132418)

which requires libiptext library from iptables

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 7408185c1d)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f6b1169c20)

Changelogs: https://github.com/fatedier/frp/releases

Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit e2f8ac23f6)

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit f30da8c572)

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 17e78a9790)

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 67c0a17fee)

Removed statik which was deprecated by the project.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f5401ff6dc)

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

(cherry picked from commit 5f6dcc013d)
(cherry picked from commit cbcc4c08df)

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
(cherry picked from commit 0aaea23c07)
(cherry picked from commit da524a4d08)

Fixes:
- CVE-2022-24765

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c77f4f9e1d)

Fixes https://github.com/stangri/source.openwrt.melmac.net/issues/155.
Background: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cb3b47be43)

Upstream sent patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e35467459b)

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit b45d39c142)

f88ac23 local-node: periodically send link-measurement requests
4473c6e measurement: add missing timeout-reset
6d3314c local-node: handle received link-measurement reports
7df969f measurement: generalize measurement handling
bb61f2a local-node: enable link-measurement capability
4458b6f usteer: expose STA link measurement capability

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 0248058f6ba0ab1aad8a6c816354486067e5e521)

Remove Go 1.18 patch as upstream source has updated go dependencies

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ff6946e73e)

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit 4165f7c7dd)

Fixed typo error: `AUTORELESE` > `AUTORELEASE`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b6a86a2b63)

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ddb4ccfeaf)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 74bf9cc71c)

* add new 'hblock' compilation source (XL, see https://hblock.molinero.dev for reference)
* print runtime/date information in ISO-8601 standard format
* minor cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 51a5ec6069)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 51208c9514)

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit eed4277d5c)

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 209bcc649a)

The forecast plugin does not require the iptables binary, it uses
libiptc instead.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 6e132e74fd)

The connmark plugin does not require the iptables binary, it uses
libiptc instead.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 6cb15df69a)

Let's move the iptables IPsec dependencies out of the strongswan package
and into the plugin package that actually depends on it,
strongswan-mod-updown. As the default updown script calls the iptables
binary, also add a dependency on the iptables-legacy package.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 93fbbcbfee)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a1f86641d2)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f3a1d2ed1f)

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit f8c8348f32)
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Enable AUTORELEASE in a separate commit so that the next commit can be
reverted without having to manually re-introduce it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit cf1e146858)
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

This reverts commit 3ffd540b04.

This does not work with the kmod currently in tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 99dfcbd2fb)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ed260f3b98)

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 87c611abf8)

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f8fa16f40d)

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2bf3d9a777)