New upstream version 1.47.90 upstream/1.47.90

6 files changed, 839 insertions, 0 deletions

diff --git a/docs/internal/daemon.drawio b/docs/internal/daemon.drawio
new file mode 100644
index 00000000..1acb77da
--- /dev/null
+++ b/docs/internal/daemon.drawio
@@ -0,0 +1,253 @@
+<mxfile host="app.diagrams.net" modified="2023-06-12T10:17:05.292Z" agent="Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/113.0" etag="8MesaF3xUGlt9W82ADAx" version="21.3.7" type="device">
+  <diagram name="Page-1" id="k2zOC9XmYpEz0HNFKLcK">
+    <mxGraphModel dx="1551" dy="810" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1169" pageHeight="1654" math="0" shadow="0">
+      <root>
+        <mxCell id="0" />
+        <mxCell id="1" parent="0" />
+        <mxCell id="iPdrRtlw78q6A_erutjM-63" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0;exitY=0.5;exitDx=0;exitDy=0;entryX=1;entryY=0.5;entryDx=0;entryDy=0;" parent="1" source="iPdrRtlw78q6A_erutjM-1" target="iPdrRtlw78q6A_erutjM-6" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-65" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.25;entryY=0;entryDx=0;entryDy=0;" parent="1" source="iPdrRtlw78q6A_erutjM-1" target="iPdrRtlw78q6A_erutjM-56" edge="1">
+          <mxGeometry relative="1" as="geometry">
+            <mxPoint x="865" y="650" as="targetPoint" />
+          </mxGeometry>
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-67" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.75;exitY=0;exitDx=0;exitDy=0;entryX=0.5;entryY=1;entryDx=0;entryDy=0;" parent="1" source="iPdrRtlw78q6A_erutjM-1" target="iPdrRtlw78q6A_erutjM-20" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-68" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.75;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" parent="1" source="iPdrRtlw78q6A_erutjM-1" target="iPdrRtlw78q6A_erutjM-42" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-1" value="Manager" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#fff2cc;strokeColor=#d6b656;" parent="1" vertex="1">
+          <mxGeometry x="760" y="420" width="120" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-70" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.75;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" parent="1" source="iPdrRtlw78q6A_erutjM-6" target="iPdrRtlw78q6A_erutjM-45" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-77" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.25;exitY=1;exitDx=0;exitDy=0;entryX=1;entryY=0;entryDx=0;entryDy=0;" parent="1" source="iPdrRtlw78q6A_erutjM-6" edge="1">
+          <mxGeometry relative="1" as="geometry">
+            <mxPoint x="440" y="482" as="targetPoint" />
+          </mxGeometry>
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-95" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0;exitY=0.5;exitDx=0;exitDy=0;entryX=1;entryY=0.5;entryDx=0;entryDy=0;" parent="1" source="iPdrRtlw78q6A_erutjM-6" target="iPdrRtlw78q6A_erutjM-92" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="QsOSWD6k7liXDyBiQe3i-2" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=0;exitDx=0;exitDy=0;entryX=0.75;entryY=1;entryDx=0;entryDy=0;" parent="1" source="iPdrRtlw78q6A_erutjM-6" target="QsOSWD6k7liXDyBiQe3i-1" edge="1">
+          <mxGeometry relative="1" as="geometry">
+            <mxPoint x="480" y="370" as="targetPoint" />
+          </mxGeometry>
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-6" value="Settings" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="430" y="392" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-9" value="SettingsConnection" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="310" y="486" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-10" value="SettingsConnection" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="320" y="496" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-11" value="SettingsConnection" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="330" y="506" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-14" value="&lt;div&gt;Policy&lt;/div&gt;" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="601" y="280" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-15" value="Platform" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="360" y="740" width="160" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-17" value="ActiveConnection" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="830" y="280" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-18" value="ActiveConnection" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="840" y="290" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-19" value="ActiveConnection" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="850" y="300" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-20" value="ActiveConnection" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="860" y="310" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-82" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.75;exitY=1;exitDx=0;exitDy=0;entryX=0.25;entryY=0;entryDx=0;entryDy=0;" parent="1" source="xCeQDJBRfkX65UmuQ1iu-15" target="iPdrRtlw78q6A_erutjM-49" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-84" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.348;exitY=1.029;exitDx=0;exitDy=0;entryX=0.1;entryY=-0.014;entryDx=0;entryDy=0;entryPerimeter=0;exitPerimeter=0;" parent="1" source="xCeQDJBRfkX65UmuQ1iu-15" target="iPdrRtlw78q6A_erutjM-50" edge="1">
+          <mxGeometry relative="1" as="geometry">
+            <mxPoint x="1230" y="300" as="sourcePoint" />
+            <mxPoint x="1231.94" y="378" as="targetPoint" />
+          </mxGeometry>
+        </mxCell>
+        <mxCell id="xCeQDJBRfkX65UmuQ1iu-19" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.75;exitY=0;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" parent="1" source="iPdrRtlw78q6A_erutjM-30" target="xCeQDJBRfkX65UmuQ1iu-15" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-30" value="DnsManager" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="1059" y="305" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-31" value="HostnameManager" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="1059" y="353" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-32" value="&lt;div&gt;FirewalldManager&lt;/div&gt;" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="694" y="739.9999999999999" width="100" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-34" value="SleepMonitor" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="1059" y="544" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-35" value="SessionMonitor" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="1059" y="592" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-36" value="&lt;div&gt;RfkillManager&lt;/div&gt;" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="1059" y="400" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-38" value="AuthManager" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="1059" y="448" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-39" value="DbusManager" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="1059" y="496" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-69" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.925;entryY=-0.075;entryDx=0;entryDy=0;entryPerimeter=0;" parent="1" source="iPdrRtlw78q6A_erutjM-42" edge="1">
+          <mxGeometry relative="1" as="geometry">
+            <mxPoint x="889.5" y="612" as="targetPoint" />
+          </mxGeometry>
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-42" value="DeviceFactory" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="870" y="526" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-43" value="DhcpClient" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="694" y="788.54" width="100" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-44" value="&lt;div&gt;L3Cfg&lt;/div&gt;" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="585" y="741.54" width="100" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-71" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.25;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" parent="1" source="iPdrRtlw78q6A_erutjM-45" target="iPdrRtlw78q6A_erutjM-46" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-72" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=1;exitDx=0;exitDy=0;" parent="1" source="iPdrRtlw78q6A_erutjM-45" target="iPdrRtlw78q6A_erutjM-47" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-73" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.75;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" parent="1" source="iPdrRtlw78q6A_erutjM-45" target="iPdrRtlw78q6A_erutjM-48" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-45" value="SettingsPlugin" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="510" y="472" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-46" value="Keyfile" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="500" y="541" width="90" height="30" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-47" value="Ifcfg-rh" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="530" y="585" width="100" height="30" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-48" value="Ifupdown" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="566" y="630" width="100" height="30" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-49" value="DnsSystemdResolved" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="1238" y="330" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-50" value="DnsDnsmasq" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="1215" y="376" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-55" value="NDisc" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="694" y="835.54" width="100" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-56" value="&lt;div&gt;Device&lt;/div&gt;" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="750" y="610" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-57" value="&lt;div&gt;Device&lt;/div&gt;" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="760" y="620" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-80" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.1;entryY=0.5;entryDx=0;entryDy=0;entryPerimeter=0;" parent="1" source="iPdrRtlw78q6A_erutjM-58" target="iPdrRtlw78q6A_erutjM-93" edge="1">
+          <mxGeometry relative="1" as="geometry">
+            <mxPoint x="930" y="740" as="targetPoint" />
+          </mxGeometry>
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-58" value="&lt;div&gt;Device&lt;/div&gt;" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="770" y="630" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-62" value="" style="endArrow=none;html=1;rounded=0;entryX=0.25;entryY=0;entryDx=0;entryDy=0;exitX=0.5;exitY=1;exitDx=0;exitDy=0;endFill=0;startArrow=classic;startFill=1;" parent="1" source="iPdrRtlw78q6A_erutjM-14" target="iPdrRtlw78q6A_erutjM-1" edge="1">
+          <mxGeometry width="50" height="50" relative="1" as="geometry">
+            <mxPoint x="750" y="580" as="sourcePoint" />
+            <mxPoint x="800" y="530" as="targetPoint" />
+          </mxGeometry>
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-79" value="LldpListener" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="585" y="788.54" width="100" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-86" value="" style="shape=curlyBracket;whiteSpace=wrap;html=1;rounded=1;labelPosition=left;verticalLabelPosition=middle;align=right;verticalAlign=middle;" parent="1" vertex="1">
+          <mxGeometry x="1030" y="306" width="20" height="374" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-88" value="BondManager" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="585" y="835.54" width="100" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-89" value="" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="270" y="370" width="100" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-91" value="" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="280" y="380" width="100" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-92" value="NMSecretAgent" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="290" y="390" width="100" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="iPdrRtlw78q6A_erutjM-93" value="" style="shape=curlyBracket;whiteSpace=wrap;html=1;rounded=1;flipH=1;labelPosition=right;verticalLabelPosition=middle;align=left;verticalAlign=middle;rotation=-90;" parent="1" vertex="1">
+          <mxGeometry x="680.38" y="620" width="20" height="217.1" as="geometry" />
+        </mxCell>
+        <mxCell id="QsOSWD6k7liXDyBiQe3i-4" style="rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.25;exitY=1;exitDx=0;exitDy=0;entryX=0.9;entryY=0;entryDx=0;entryDy=0;entryPerimeter=0;" parent="1" source="QsOSWD6k7liXDyBiQe3i-1" target="iPdrRtlw78q6A_erutjM-89" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="QsOSWD6k7liXDyBiQe3i-1" value="AgentManager" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="370" y="280" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="QsOSWD6k7liXDyBiQe3i-6" value="DeviceEthernet" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="1059" y="745" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="QsOSWD6k7liXDyBiQe3i-9" value="DeviceWiFi" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="1059" y="793" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="QsOSWD6k7liXDyBiQe3i-13" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.1;exitY=0.5;exitDx=0;exitDy=0;exitPerimeter=0;entryX=1;entryY=0.5;entryDx=0;entryDy=0;endArrow=block;endFill=0;" parent="1" source="QsOSWD6k7liXDyBiQe3i-11" target="iPdrRtlw78q6A_erutjM-58" edge="1">
+          <mxGeometry relative="1" as="geometry">
+            <Array as="points">
+              <mxPoint x="990" y="813" />
+              <mxPoint x="990" y="650" />
+            </Array>
+          </mxGeometry>
+        </mxCell>
+        <mxCell id="QsOSWD6k7liXDyBiQe3i-11" value="" style="shape=curlyBracket;whiteSpace=wrap;html=1;rounded=1;labelPosition=left;verticalLabelPosition=middle;align=right;verticalAlign=middle;" parent="1" vertex="1">
+          <mxGeometry x="1031" y="745" width="20" height="135" as="geometry" />
+        </mxCell>
+        <mxCell id="QsOSWD6k7liXDyBiQe3i-12" value="..." style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="1059" y="841" width="140" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="xCeQDJBRfkX65UmuQ1iu-1" value="" style="endArrow=classic;dashed=1;html=1;dashPattern=1 3;strokeWidth=2;rounded=0;entryX=0.1;entryY=0.5;entryDx=0;entryDy=0;entryPerimeter=0;endFill=1;" parent="1" target="iPdrRtlw78q6A_erutjM-86" edge="1">
+          <mxGeometry width="50" height="50" relative="1" as="geometry">
+            <mxPoint x="985" y="493" as="sourcePoint" />
+            <mxPoint x="820" y="530" as="targetPoint" />
+          </mxGeometry>
+        </mxCell>
+        <mxCell id="xCeQDJBRfkX65UmuQ1iu-3" value="" style="endArrow=classic;dashed=1;html=1;dashPattern=1 3;strokeWidth=2;rounded=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;endFill=1;" parent="1" target="iPdrRtlw78q6A_erutjM-15" edge="1">
+          <mxGeometry width="50" height="50" relative="1" as="geometry">
+            <mxPoint x="480" y="680" as="sourcePoint" />
+            <mxPoint x="820" y="530" as="targetPoint" />
+          </mxGeometry>
+        </mxCell>
+        <mxCell id="xCeQDJBRfkX65UmuQ1iu-5" value="DhcpDhclient" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="850" y="738.9999999999999" width="100" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="xCeQDJBRfkX65UmuQ1iu-6" value="DhcpSystemd" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="850" y="838.9999999999999" width="100" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="xCeQDJBRfkX65UmuQ1iu-7" value="DhcpNettools" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="850" y="789" width="100" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="xCeQDJBRfkX65UmuQ1iu-18" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.1;exitY=0.5;exitDx=0;exitDy=0;exitPerimeter=0;entryX=1;entryY=0.5;entryDx=0;entryDy=0;endArrow=block;endFill=0;" parent="1" source="xCeQDJBRfkX65UmuQ1iu-13" target="iPdrRtlw78q6A_erutjM-43" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="xCeQDJBRfkX65UmuQ1iu-13" value="" style="shape=curlyBracket;whiteSpace=wrap;html=1;rounded=1;labelPosition=left;verticalLabelPosition=middle;align=right;verticalAlign=middle;" parent="1" vertex="1">
+          <mxGeometry x="824" y="739" width="20" height="140" as="geometry" />
+        </mxCell>
+        <mxCell id="xCeQDJBRfkX65UmuQ1iu-15" value="DnsPlugin" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="1190" y="260" width="110" height="40" as="geometry" />
+        </mxCell>
+        <mxCell id="-SxGT6HAmeN4DeN2HHq2-1" value="Dispatcher" style="rounded=0;whiteSpace=wrap;html=1;fillColor=#dae8fc;strokeColor=#6c8ebf;" vertex="1" parent="1">
+          <mxGeometry x="1059" y="640" width="140" height="40" as="geometry" />
+        </mxCell>
+      </root>
+    </mxGraphModel>
+  </diagram>
+</mxfile>
diff --git a/docs/internal/daemon.md b/docs/internal/daemon.md
new file mode 100644
index 00000000..67cce725
--- /dev/null
+++ b/docs/internal/daemon.md
@@ -0,0 +1,169 @@
+NetworkManager daemon
+=====================
+
+The following diagram describes the main components of the
+NetworkManager daemon. Note that each component is in most cases a
+GObject and the names always start with the "NM" prefix, which has
+been omitted for clarity.
+
+![](daemon.png "")
+
+## Manager
+
+The main responsibilities of the manager are:
+
+- initialize all known device factories. A device factory contains the
+  logic detect new devices of a certain type and create the
+  corresponding object;
+
+- maintain a list of devices created by the factories;
+
+- maintain a list of active connections;
+
+- expose on D-Bus properties, methods and signal on the
+  `/org/freedesktop/NetworkManager`
+  [object](../../introspection/org.freedesktop.NetworkManager.xml).
+
+## Policy
+
+This object implements some policy decisions that involve multiple
+connection profiles, such as:
+
+ - it determines what is the best (with lowest metric) active
+   connection with default route for IPv4 and IPv6;
+
+ - it updates the DNS configuration in the DNS manager, also according
+   to what connection has the best default route;
+
+ - it handles the activation of secondary connections when a
+   connection goes up (see property `connection.secondaries` in
+   `man nm-settings`);
+
+ - it collects IPv6 prefix delegations from active connections, to
+   distribute them on connections using IPv6 shared mode;
+
+## Settings
+
+This object handles connection profiles; each profile is represented
+as a *SettingsConnection* object and is persisted to disk using one of
+the existing *SettingsPlugin*s such as keyfile, ifcfg-rh or
+ifupdown.
+
+It also controls *SecretAgent*s; an agent is an external service that
+registers to NetworkManager as capable of handling requests for new
+secrets. For example, when a Wi-Fi connection is activated and the
+password is missing or wrong, NetworkManager asks all registered
+agents for the missing secrets and then continues with
+activation. Examples of tools that register as agents are: nmcli,
+nmtui, GNOME shell, the GTK nm-applet and the KDE network applet.
+
+## Devices and device factories
+
+As mentioned before, NetworkManager instantiates device factories to
+discover and create new devices. Those factories are internal to the
+daemon or provided by a device plugin; a plugin is a dynamic library
+(shared object) that is loaded at runtime. NetworkManager uses plugins
+for optional functionality that depend on external software. In this
+way, it is possible to install a minimal version of NetworkManager
+with a limited set of dependencies. As there is no stable API/ABI for
+those plugins, they must be built together with the daemonq and
+maintained as part of NetworkManager.
+
+Currently the following device types are provided by plugins:
+
+ - Wi-Fi (depends on wpa_supplicant)
+ - OVS (depends on openswitch)
+ - PPP (depends on pppd)
+ - Bluetooth (depends on bluez)
+ - team (depends on teamd)
+
+When a device is activated, it relies on other objects:
+
+ - *L3cfg*: controls the IP configuration (address, routes, etc) on a
+    given ifindex, and also does IPv4 ACD (address conflict detection,
+    also know as DAD - duplicate address detection);
+ - *DhcpClient*: performs DHCPv4 and DHCPv6 on the interface; the
+    object has different implementations;
+ - *NDisc*: implements IPv6 SLAAC (stateless address
+    autoconfiguration, RFC 4861 and 4862); it supports acting both as
+    a host or a router for shared IPv6 mode;
+ - *LldpListener*: when the profile enables
+    [LLDP](https://en.wikipedia.org/wiki/Link_Layer_Discovery_Protocol)
+    via the `connection.lldp` property, this object sets up a socket
+    to listen for neighbors;
+ - *FirewalldManager*: talks with [firewalld](https://firewalld.org/)
+    to set the interface in the zone specified by the
+    `connection.zone` property;
+ - *BondManager*: used to configure bond devices in a special mode
+    (balance-slb) that requires the creation of nftables rules;
+
+For more information about the implementation of devices, see [this
+document](./device.md).
+
+## Platform
+
+*Platform* communicates with kernel to query and update the
+configuration of network interfaces; it uses netlink and implements
+the crafting and parsing of netlink message by itself without relying
+on external libraries such as libnl.
+
+Platform has two subclasses, *PlatformLinux* and a *PlatformFake*. The
+former is the one that contain the actual implementation while the
+latter is only used for unit testing.
+
+Note how the platform object has an incoming dotted arrow in the
+diagram, to represent that the object is used by several other
+objects.
+
+As mentioned, the purposes of platform are:
+
+ - perform operations such as adding or removing links, addresses,
+   routes, routing rules and other kernel entities
+
+ - allow querying the current state of the kernel configuration. To do
+   so, platform listens to kernel notifications and parses them to
+   build a cache of `NMPObject`s that is always up to date.
+
+NMPObject and its subtypes are also used through the core to represent
+information about addresses, routes, etc. Thus the cache of NMPlatform
+contains the currently configured objects in the netlink API, while
+other NMPObject instances are used for other tracking purposes.
+
+For these purposes platform uses two sockets, one with protocol
+NETLINK_ROUTE for regular operations about links, addresses, routes,
+etc. and a NETLINK_GENERIC socket to configure Wireguard and MPTCP.
+
+## Other objects
+
+The diagram shows other objects on the right side:
+
+ - *DnsManager*: merges all the DNS data received by multiple
+    interfaces and updates the system configuration. Besides directly
+    writing `/etc/resolv.conf`, it supports updating
+    `systemd-resolved` and `dnsmasq` via plugins.
+ 
+ - *HostnameManager*: implements reading and updating the system
+    hostname; by default it tries to do that by talking to
+    [systemd-hostnamed](https://www.freedesktop.org/wiki/Software/systemd/hostnamed/)
+    via D-Bus; in case it's not available, the hostname manager falls
+    back to reading and writing `/etc/hostname` directly.
+
+ - *RfkillManager*: enumerates RFKill devices and controls their status. See also
+    the [related page](https://networkmanager.dev/docs/rfkill/) on the website.
+
+ - *AuthManager*: is used to authenticate the API requests received by
+    the daemon. The authentication is done via
+    [Polkit](https://www.freedesktop.org/software/polkit/docs/latest/polkit.8.html)
+ 
+ - *DbusManager*: creates a connection to the system D-Bus instance
+    and allows exporting objects
+ 
+ - *SleepMonitor*: gets notifications for sleep and wake events by
+    registering to the available subsystem provided by the distro such
+    as systemd-logind or ConsoleKit.
+    
+ - *SessionMonitor*: tracks which users have an active session by
+    using systemd-logind, elogind or ConsoleKit.
+
+ - *Dispatcher*: takes care of spawning dispatcher scripts by talking
+    to the `nm-dispatcher` service via D-Bus.
diff --git a/docs/internal/daemon.png b/docs/internal/daemon.png
new file mode 100644
index 00000000..454c2ebc
--- /dev/null
+++ b/docs/internal/daemon.png
Binary files differdiff --git a/docs/internal/device-state-machine.drawio b/docs/internal/device-state-machine.drawio
new file mode 100644
index 00000000..bc2bbdf4
--- /dev/null
+++ b/docs/internal/device-state-machine.drawio
@@ -0,0 +1,95 @@
+<mxfile host="app.diagrams.net" modified="2023-05-30T11:46:47.954Z" agent="Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/113.0" etag="UakFyrM5T_t4qRk7XAKa" version="21.3.5" type="device">
+  <diagram name="Page-1" id="c7558073-3199-34d8-9f00-42111426c3f3">
+    <mxGraphModel dx="1274" dy="642" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="826" pageHeight="1169" background="none" math="0" shadow="0">
+      <root>
+        <mxCell id="0" />
+        <mxCell id="1" parent="0" />
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-19" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=1;entryY=0.25;entryDx=0;entryDy=0;" parent="1" source="gZJxVnoq3P2KiHfPSKmg-96" target="gZJxVnoq3P2KiHfPSKmg-103" edge="1">
+          <mxGeometry relative="1" as="geometry">
+            <Array as="points">
+              <mxPoint x="250" y="150" />
+              <mxPoint x="250" y="437" />
+            </Array>
+          </mxGeometry>
+        </mxCell>
+        <mxCell id="gZJxVnoq3P2KiHfPSKmg-96" value="FAILED" style="rounded=0;whiteSpace=wrap;html=1;strokeWidth=2;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="490" y="120" width="120" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-10" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=1;exitDx=0;exitDy=0;" parent="1" source="gZJxVnoq3P2KiHfPSKmg-97" target="gZJxVnoq3P2KiHfPSKmg-107" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="gZJxVnoq3P2KiHfPSKmg-97" value="SECONDARIES" style="rounded=0;whiteSpace=wrap;html=1;strokeWidth=2;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="640" y="490" width="120" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-9" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" parent="1" source="gZJxVnoq3P2KiHfPSKmg-98" target="gZJxVnoq3P2KiHfPSKmg-97" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="gZJxVnoq3P2KiHfPSKmg-98" value="IP_CHECK" style="rounded=0;whiteSpace=wrap;html=1;strokeWidth=2;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="640" y="385" width="120" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-6" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" parent="1" source="gZJxVnoq3P2KiHfPSKmg-99" target="gZJxVnoq3P2KiHfPSKmg-101" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="gZJxVnoq3P2KiHfPSKmg-99" value="&lt;div&gt;NEED_AUTH&lt;/div&gt;" style="rounded=0;whiteSpace=wrap;html=1;strokeWidth=2;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="340" y="385" width="120" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-8" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=1;exitDx=0;exitDy=0;" parent="1" source="gZJxVnoq3P2KiHfPSKmg-100" target="gZJxVnoq3P2KiHfPSKmg-98" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="gZJxVnoq3P2KiHfPSKmg-100" value="IP_CONFIG" style="rounded=0;whiteSpace=wrap;html=1;strokeWidth=2;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="640" y="280" width="120" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-7" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=1;exitY=0.5;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" parent="1" source="gZJxVnoq3P2KiHfPSKmg-101" target="gZJxVnoq3P2KiHfPSKmg-100" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="gZJxVnoq3P2KiHfPSKmg-101" value="CONFIG" style="rounded=0;whiteSpace=wrap;html=1;strokeWidth=2;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="340" y="490" width="120" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-5" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" parent="1" source="gZJxVnoq3P2KiHfPSKmg-102" target="gZJxVnoq3P2KiHfPSKmg-99" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="gZJxVnoq3P2KiHfPSKmg-102" value="PREPARE" style="rounded=0;whiteSpace=wrap;html=1;strokeWidth=2;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="340" y="280" width="120" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-4" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=1;exitY=0.75;exitDx=0;exitDy=0;entryX=0;entryY=0.5;entryDx=0;entryDy=0;" parent="1" source="gZJxVnoq3P2KiHfPSKmg-103" target="gZJxVnoq3P2KiHfPSKmg-102" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="gZJxVnoq3P2KiHfPSKmg-103" value="DISCONNECTED" style="rounded=0;whiteSpace=wrap;html=1;strokeWidth=2;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="80" y="422" width="120" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-3" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=1;exitDx=0;exitDy=0;" parent="1" source="gZJxVnoq3P2KiHfPSKmg-104" edge="1">
+          <mxGeometry relative="1" as="geometry">
+            <mxPoint x="140" y="419" as="targetPoint" />
+          </mxGeometry>
+        </mxCell>
+        <mxCell id="gZJxVnoq3P2KiHfPSKmg-104" value="UNAVAILABLE" style="rounded=0;whiteSpace=wrap;html=1;strokeWidth=2;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="80" y="276" width="120" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-2" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=0;entryDx=0;entryDy=0;" parent="1" source="gZJxVnoq3P2KiHfPSKmg-105" target="gZJxVnoq3P2KiHfPSKmg-104" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="gZJxVnoq3P2KiHfPSKmg-105" value="UNMANAGED" style="rounded=0;whiteSpace=wrap;html=1;strokeWidth=2;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="80" y="129" width="120" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-12" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=1;entryDx=0;entryDy=0;" parent="1" source="gZJxVnoq3P2KiHfPSKmg-106" target="gZJxVnoq3P2KiHfPSKmg-103" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="gZJxVnoq3P2KiHfPSKmg-106" value="DEACTIVATING" style="rounded=0;whiteSpace=wrap;html=1;strokeWidth=2;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="80" y="569" width="120" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-20" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=1;entryDx=0;entryDy=0;" parent="1" source="gZJxVnoq3P2KiHfPSKmg-107" target="gZJxVnoq3P2KiHfPSKmg-106" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="gZJxVnoq3P2KiHfPSKmg-107" value="ACTIVATED" style="rounded=0;whiteSpace=wrap;html=1;strokeWidth=2;fillColor=#dae8fc;strokeColor=#6c8ebf;" parent="1" vertex="1">
+          <mxGeometry x="490" y="621" width="120" height="60" as="geometry" />
+        </mxCell>
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-15" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0.5;entryY=1;entryDx=0;entryDy=0;" parent="1" source="sYMs0qAJREgZJI4c5qmF-14" target="gZJxVnoq3P2KiHfPSKmg-96" edge="1">
+          <mxGeometry relative="1" as="geometry" />
+        </mxCell>
+        <mxCell id="sYMs0qAJREgZJI4c5qmF-14" value="Device activation" style="swimlane;whiteSpace=wrap;html=1;startSize=30;fillColor=#f5f5f5;fontColor=#333333;strokeColor=#666666;" parent="1" vertex="1">
+          <mxGeometry x="310" y="230" width="480" height="460" as="geometry" />
+        </mxCell>
+      </root>
+    </mxGraphModel>
+  </diagram>
+</mxfile>
diff --git a/docs/internal/device-state-machine.png b/docs/internal/device-state-machine.png
new file mode 100644
index 00000000..35eca6c4
--- /dev/null
+++ b/docs/internal/device-state-machine.png
Binary files differdiff --git a/docs/internal/device.md b/docs/internal/device.md
new file mode 100644
index 00000000..0042fdc5
--- /dev/null
+++ b/docs/internal/device.md
@@ -0,0 +1,322 @@
+Devices
+=======
+
+What is a device
+----------------
+
+In NetworkManager, a device represents an object that allows some sort
+of network configuration; it can be a regular Linux network interface
+(physical as Ethernet or Wi-Fi; or virtual as a bridge or a VLAN), but
+it can also be an entity that does not have a link object in the
+kernel; examples of the latter kind are modems and OVS bridges/ports.
+
+NetworkManager automatically creates device objects at runtime based
+on the device found on the system. It also creates special devices,
+called *unrealized* devices that represent potential devices,
+e.g. that don't exist yet but will exist when a given connection gets
+activated. See the section "Unrealized devices" for more details.
+
+Each device has several properties; the most important are:
+
+ - `iface`: the name of the interface.
+
+ - `ifindex`: for devices backed by a kernel link, this is the kernel
+   interface index.
+
+ - `ip_ifindex`: some devices have multiple kernel link associated. In
+   such case, `ifindex` is the index of the base link, while
+   `ip_ifindex` is the index of the link on which IP configuration
+   should be made. For example when activating a PPPoE connection, the
+   device has `ifindex` referring to the Ethernet link and
+   `ip_ifindex` to the PPP one.
+
+ - `state`: the current state of the device in the device state
+   machine, see the next sections.
+
+ - `l3cfg`: the L3Cfg instance takes care of configuring IP on one
+   ifindex.
+
+The device object also is exposed on D-Bus, with properties, methods
+and signals, see the `interface_info_device` structure.
+
+Activation
+----------
+
+To configure a device, NetworkManager needs to activate a connection
+profile on it. This happens for two reasons:
+ - it was requested by the user via the `ActivateConnection()` and
+   `AddAndActivateConnection()` API methods, which are handled by
+   functions `impl_manager_activate_connection()` and
+   `impl_manager_add_and_activate_connection()`;
+ - it is the result of an internal decision; in this case the
+   activation is handled by `nm_manager_activate_connection()`; the
+   reason can be:
+    - the connection profile is activated automatically (for example,
+      at startup) because it is configured to auto-connect;
+    - the connection profile is being activated as a dependency of
+      another profile; for example:
+      - a port profile (e.g. bridge port) always depends on the
+        corresponding controller profile (e.g. bridge);
+      - a controller profile can be configured to automatically
+        activate port profiles;
+      - during a checkpoint rollback;
+      - etc.
+
+The activation starts by first creating a `NMActiveConnection`
+object. This is a abstract type used to track the state of the
+activation on a specific device; it has two implementations:
+`NMActRequest` for regular devices and `NMVpnConnection` for VPNs.
+
+Two important fields of an active connection object are:
+
+ - the *settings-connection*: this is a pointer to the connection
+   being activated; it points to the connection in `NMSettings` and
+   always reflects the latest changes in the profile;
+
+ - the *applied-connection*: similar to the *settings-connection*, but
+   this is a copy of the original *settings-connection* done at the
+   time the activation started. During the current activation, the
+   properties to configure are always read from this applied
+   connection because they shouldn't change even if the profile is
+   modified.
+
+Unrealized devices
+------------------
+
+We said that to start an activation we need a profile and a
+device. What happens if the device doesn't already exist because it is
+a virtual one (such as a bridge or a vlan)?
+
+This problem is currently solved in NetworkManager by having a special
+kind of devices, *unrealized* devices. Those are 'potential' devices,
+that don't exist in kernel; they are created to represent the device
+for each virtual profile. Technically speaking, a device is unrealized
+when the `real` flag is set to zero in the device private struct.
+
+When NetworkManager decides to activate a virtual profile, the
+corresponding device gets realized by calling
+`nm_device_create_and_realize()` and then the activation proceeds as
+for physical devices.
+
+Object hierarchy
+----------------
+
+In the NetworkManager code a device is a `NMDevice` object, which has
+several subclasses; each subclass represents a specific kind of device
+(`NMDeviceEthernet`, `NMDeviceWifi`, `NMDeviceBridge`, etc.), and can
+reimplement properties and methods of the superclass to customize the
+behavior (see `struct _NMDeviceClass`).
+
+To show how this is used in practice, let's look at function
+`nm_device_is_available()`, which indicates whether a device is ready
+to be activated. The function calls the virtual method `is_available()`:
+
+```C
+gboolean
+nm_device_is_available(NMDevice *self, NMDeviceCheckDevAvailableFlags flags)
+{
+    ...
+    return NM_DEVICE_GET_CLASS(self)->is_available(self, flags);
+}
+```
+
+`NMDevice` has a generic implementation of that method which performs
+generic checks:
+
+```C
+static gboolean
+is_available(NMDevice *self, NMDeviceCheckDevAvailableFlags flags)
+{
+    NMDevicePrivate *priv = NM_DEVICE_GET_PRIVATE(self);
+
+    if (priv->carrier || priv->ignore_carrier)
+        return TRUE;
+    ...
+
+    return FALSE;
+}
+```
+
+A Ethernet device needs additional checks and so it reimplements the
+method to check that the MAC address is already set:
+
+```C
+static gboolean
+is_available(NMDevice *device, NMDeviceCheckDevAvailableFlags flags)
+{
+    if (!NM_DEVICE_CLASS(nm_device_ethernet_parent_class)
+         ->is_available(device, flags))
+        return FALSE;
+
+    return !!nm_device_get_initial_hw_address(device);
+}
+```
+
+Note how the function first chains up by calling the `NMDevice`
+implementation and then it performs an additional check. This pattern
+is heavily used in NetworkManager.
+
+Device states
+-------------
+
+Each device behaves according to a state machine that looks like this:
+
+![Device state machine](device-state-machine.png "Device state machine")
+
+While the implementation of the state machine is done in different
+functions in `nm-device.c`, the core part is in `_set_state_full()`.
+
+The states are:
+
+ * UNMANAGED: this is the initial state and means that the device is
+   not managed by NetworkManager. The unmanaged state is tracked via a
+   bitmap of flags, and the device stays in this state while at least
+   one flag is set. See the section "Unmanaged flags" below for more
+   details. Once all unmanaged flags are cleared, the device is ready
+   to become UNAVAILABLE. The state transition is done in function
+   `_set_unmanaged_flags()`, which changes the states to UNMANAGED or
+   UNAVAILABLE depending on the value of the flags. Note that even if
+   it's not displayed in the diagram, the UNMANAGED state can be
+   reached by virtually every other state when a unmanaged flag
+   becomes set.
+
+ * UNAVAILABLE: the device is managed by NetworkManager, but is not
+   available for use.  Reasons may include the wireless switched off,
+   missing firmware, no ethernet carrier, missing supplicant or modem
+   manager, etc. When a device becomes available, it can transition to
+   DISCONNECTED; this decision is taken in various places by
+   scheduling a check via `nm_device_queue_recheck_available()`.
+
+ * DISCONNECTED: the device can be activated, but is currently
+   idle and not connected to a network. When entering this state from
+   a state that belongs to the activation sequence or from
+   FAILED/DEACTIVATING, a cleanup of previous configuration is
+   done. If there is an activation queued, it's started; otherwise,
+   `NMPolicy` reacts to the state change and calls
+   `nm_policy_device_recheck_auto_activate_schedule()` to check if
+   there a connection that can be auto-activated on the device.
+
+ * PREPARE: this is the first state of an activation; in this
+   state some initial operation are performed, such as changing the
+   MAC address, setting physical link properties, and anything else
+   required to connect to the requested network.
+
+   This state is entered via
+   `nm_device_activate_schedule_stage1_device_prepare()`. When
+   finished, `nm_device_activate_schedule_stage2_device_config()` is
+   used to transition to the CONFIG state. Those functions are
+   re-entrant, in the sense that when a device is in a given state and
+   needs that an operation completes (or a condition becomes true), it
+   can wait and then invoke the same function again; in that way it
+   re-enters the same state, where all the conditions are evaluated
+   again and if possible the device will transition to the next state.
+
+ * CONFIG: the device is connecting to the requested network.
+   This may include operations like associating with the Wi-Fi AP,
+   dialing the modem, connecting to the remote Bluetooth device, etc.
+
+ * NEED_AUTH: the device requires more information to continue
+   connecting to the requested network.  This includes secrets like
+   WiFi passphrases, login passwords, PIN codes, etc.
+
+ * IP_CONFIG: this state is entered via
+  `nm_device_activate_schedule_stage3_ip_config()`, and is where IP
+  addresses and routes are assigned to the device. Function
+  `_dev_ip_state_check()` checks that the configuration is terminated
+  according the connection configuration; if so, it moves the device
+  to state IP_CHECK.
+
+ * IP_CHECK: in this state, NetworkManager waits that the gateway
+   can be pinged successfully if the property
+   `connection.gateway-ping-timeout` is set. By default this step is a
+   no op since the property is unset. After the optional ping, the
+   dispatcher `pre-up` event is emitted, and the device goes to
+   SECONDARIES.
+
+ * SECONDARIES: connections have a `connection.secondaries` property
+   that specifies a list of UUID of connections of type VPN that can
+   be activated automatically when the connection goes up. If there
+   are any secondaries, they are activated in this stage; note that
+   since this operation involves other devices, it is done in
+   `NMPolicy`, upon the emission of the state change signal handled in
+   `nm-policy.c:device_state_changed()`. After any secondaries are
+   activated, the devices transitions to state ACTIVATED.
+
+ * ACTIVATED: the device has a network connection. Upon entering this
+   state the device emits the `up` dispatcher event. The device
+   remains is this state until the connection is deactivated or until
+   it fails.
+
+ * DEACTIVATING: a disconnection from the current network
+   connection was requested, and the device is cleaning up resources
+   used for that connection. In this state the `pre-down` dispatcher
+   event is emitted. When finished, the devices goes again to
+   DISCONNECTED and the `down` dispatch event is fired.
+
+ * FAILED: the device failed to connect to the requested network
+   and is cleaning up the connection request. This state can be
+   reached from any state belonging to the activation. When the
+   cleanup is done, the device goes to DISCONNECTED. If the device was
+   previously activated, the `down` dispatcher event is emitted.
+
+Unmanaged devices
+-----------------
+
+Each device has a mask of flags representing reasons why the device is
+unmanaged; when at least of of those flags is set, the device goes to
+state UNMANAGED. When all flags are cleared, the device moves to state
+UNAVAILABLE. The unmanaged flags are currently:
+
+  - SLEEPING: the system is suspended, or networking is disabled
+
+  - QUITTING: NetworkManager is shutting down.
+
+  - PLATFORM_INIT: NetworkManager is waiting for udev to announce
+    the device. Note that NetworkManager can't touch the device until
+    then because udev might perform operations on it (such as renaming
+    or changing the MAC). Unrealized devices (see later) have this
+    flag set.
+
+  - USER_EXPLICIT: when unmanaged by explicit user decision
+      (e.g. via a D-Bus command).
+
+  - USER_SETTINGS: when unmanaged by user decision via the
+    settings plugin (for example `keyfile.unmanaged-devices` or
+    ifcfg-rh's `NM_CONTROLLED=no`). Although this is
+    user-configuration it cannot be overruled and is
+    authoritative. That is because users may depend on dropping a
+    ifcfg-rh file to ensure the device is unmanaged.
+
+  - USER_CONF: when unmanaged by user decision via the
+    NetworkManager.conf ("unmanaged" in the [device]
+    section). Contrary to USER_SETTINGS, this can be overwritten via
+    D-Bus.
+
+  - BY_DEFAULT: this flag is no longer used.
+
+  - USER_UDEV: unmanaged via a udev rule.
+
+  - EXTERNAL_DOWN: unmanaged because the interface was not created by
+    NetworkManager and is currently down.
+
+Note that the unmanaged flags are tracked via two variables
+`unmanaged_mask` and `unmanaged_flags`; in this way each flag is in
+practice a tri-state variable with possible values TRUE (unmanaged),
+FALSE (managed) and UNSET.
+
+External devices and sys-iface-state
+------------------------------------
+
+Even if a device is managed, that doesn't mean that NetworkManager is
+actively configuring it. When a device is created externally (for
+example via `ip link`) and has an IP configuration, NetworkManager
+creates a in-memory connection representing the configuration
+parameters on the interface such as IP addresses, routes, DNS, etc.;
+the connection appears as active but NetworkManager doesn't actually
+touch the interface. The external status is tracked in the
+`sys-iface-state` member, which can have the following values:
+
+ - EXTERNAL: the interface is not touched by NM.
+ - ASSUME: this value is deprecated; it used to mean that NM should manage the device without fully reconfiguring it. Now, the interface is either managed on external.
+ - MANAGED: the interface is fully managed.
+ - REMOVED: the link was removed externally.