当 Intercept策略 和 Service Chain策略 针对同一个测试客户端IP同时生效时,测试客户端出现断网现象。关闭 Intercept策略 或 Service Chain策略 后网络恢复正常。
经[~luwenpeng]协助排查后,发现 Firewall 用于在Proxy 与 Service Chaining 之间进行流量调度的控制报文发送的不对(只有 opening 的控制报文,没有发送active 的控制报文)
!screenshot-1.png|thumbnail!
**gitlab** commented on *2023-08-25T14:46:18.156+0800*:
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tango/tsg_master/-/commit/ad13ce5481be453b00918352131ee71f55238c51] of [TSG Appliance / tsg_master|https://git.mesalab.cn/tango/tsg_master] on branch [bugfix-not-drop-ctrl-pkt-by-parse-error-OMPUB-1010|https://git.mesalab.cn/tango/tsg_master/-/tree/bugfix-not-drop-ctrl-pkt-by-parse-error-OMPUB-1010]:{quote}OMPUB-1010: 控制报文未丢弃影响获取原始包的SID,从而导致断网{quote}
---
**zhangzhihan** commented on *2023-08-25T16:32:06.721+0800*:
TSG.BJ环境已修复
---
**gitlab** commented on *2023-08-25T16:45:45.013+0800*:
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tango/tsg_master/-/merge_requests/392] of [TSG Appliance / tsg_master|https://git.mesalab.cn/tango/tsg_master] on branch [bugfix-not-drop-ctrl-pkt-by-parse-error-OMPUB-1010|https://git.mesalab.cn/tango/tsg_master/-/tree/bugfix-not-drop-ctrl-pkt-by-parse-error-OMPUB-1010]:{quote}Resolve OMPUB-1010 "Bugfix not drop ctrl pkt by parse error "{quote}
---
**gitlab** commented on *2023-08-25T18:47:29.171+0800*:
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tango/tsg_master/-/commit/fc4c49379f9cab40c801dcbbf7e012a348cd89f6] of [TSG Appliance / tsg_master|https://git.mesalab.cn/tango/tsg_master] on branch [bugfix-OMPUB-1010|https://git.mesalab.cn/tango/tsg_master/-/tree/bugfix-OMPUB-1010]:{quote}OMPUB-1010: 控制报文未丢弃影响获取原始包的SID,从而导致断网{quote}
---
**gitlab** commented on *2023-08-25T18:47:51.223+0800*:
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tango/tsg_master/-/merge_requests/394] of [TSG Appliance / tsg_master|https://git.mesalab.cn/tango/tsg_master] on branch [bugfix-OMPUB-1010|https://git.mesalab.cn/tango/tsg_master/-/tree/bugfix-OMPUB-1010]:{quote}OMPUB-1010: 控制报文未丢弃影响获取原始包的SID,从而导致断网{quote}
---
**gitlab** commented on *2023-08-25T18:52:20.584+0800*:
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/1f84c4e6ecdec7451586b2fbf43f2a715609fa2f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic,修复:{quote}
---
**gitlab** commented on *2023-08-25T18:52:53.538+0800*:
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1680] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic,修复:{quote}
---
**gitlab** commented on *2023-08-25T19:40:12.498+0800*:
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/359cb7861f4bf67b1a602b37ba65f46175cb3588] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic,修复:{quote}
---
**gitlab** commented on *2023-08-25T19:40:21.891+0800*:
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1681] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic,修复:{quote}
---
**gitlab** commented on *2023-08-25T19:41:58.952+0800*:
[付明卫|https://git.mesalab.cn/fumingwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/c3b62c66bde8300e198472222e0a1e4863f92b7f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic,修复:{quote}