geedge-jira/md/OMPUB-1427.md

# 部署验证测试TSGv24.07时发现流量被Intercept后就断网

| ID | Creation Date | Assignee | Status |
|----|----------------|----------|--------|
| OMPUB-1427 | 2024-08-21T18:08:07.000+0800 | 杨威 | 已关闭 |


---

测试环境：部署验证
CM：192.168.44.115
OLAP：192.168.44.116
TSG-OS：192.168.40.83，版本v24.07.1-a1d7d78

描述：
Intercepte策略生效后，访问被拦截网站出现断网现象，有拦截日志产生，Proxy Intercept Error : server-side closed。
tsg-os已hotfix：
sed -ci '/\[SSL\]/a DETAIN_FRAG_CHELLO_NUM=2' /opt/tsg/sapp/conf/ssl/ssl_main.conf
sed -ci '/\[SSL\]/a SSL_STAT_REFRESH_S=1' /opt/tsg/sapp/conf/ssl/ssl_main.conf
 !screenshot-1.png|thumbnail! 

附件pcap包为测试时在192.168.40.83的firewall容器内使用tcpdump_mesa捕包，以及使用mrpdump捕的nf_0_proxy的包；
同时附上TSG.BJ环境Intercept生效时的pcap包，同样为firewall容器内使用tcpdump_mesa捕包，以及使用mrpdump捕的nf_0_proxy的包

**gitlab** commented on *2024-08-22T18:27:25.332+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/de2b3bb35d908c24b4d98122db6d1b8b43244035] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}



---

**gitlab** commented on *2024-08-22T18:28:14.850+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/2713] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}



---

**gitlab** commented on *2024-08-22T18:47:49.411+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/279d97e06ace0cf285159bb93e5e8fa8944efd4d] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}



---

**gitlab** commented on *2024-08-22T19:00:12.739+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/89df3da6d5605b4112171e4b0db8aaa4e4f61800] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Update2407-fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Update2407-fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}



---

**gitlab** commented on *2024-08-22T19:00:54.041+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/2714] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Update2407-fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Update2407-fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}



---



# Attachments

Attachment: firwall_tcpdumpmesa.pcap
[firwall_tcpdumpmesa.pcap](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/61659/firwall_tcpdumpmesa.pcap)



Attachment: nf_0_proxy.pcapng
[nf_0_proxy.pcapng](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/61660/nf_0_proxy.pcapng)



Attachment: screenshot-1.png
![screenshot-1.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/61658/screenshot-1.png)



Attachment: tsgbj_fw.pcap
[tsgbj_fw.pcap](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/61661/tsgbj_fw.pcap)



Attachment: tsgbj_nf0proxy.pcap
[tsgbj_nf0proxy.pcap](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/61662/tsgbj_nf0proxy.pcap)