/usr/local/etc/rc.newwanip: plugins_configure vpn (execute task : ipsec_configure_do(,wan))
/usr/local/etc/rc.linkup: plugins_configure ipsec (,lan)
I don't understand this. Is IPsec active as default on OPNsense?
I haven't configured it or even enabled it at all.
In order to avoid look-ahead in the code the individual subsystems are plugged into the core to be executed always. The functions themselves are in charge of checking that no work needs to be done an return.
In some cases that plugin system works perfectly because unless you install the plugin you don't have its code called, but for core-packaged "plugins" that are obviously always installed their code needs to be called to check even though the user never configured it.
Cheers,
Franco