101 lines
3.9 KiB
Markdown
101 lines
3.9 KiB
Markdown
|
# 福建项目：GTP层隧道地址为IPv6时，更新GTP IPV6隧道地址时按照IPV4处理导致GTP IPV6隧道地址错误，导致5G环境安全策略日志中存在大量S-GW IP错误的现象
|
|||
|
|
|
|||
|
|
| ID | Creation Date | Assignee | Status |
|
|||
|
|
|----|----------------|----------|--------|
|
|||
|
|
| OMPUB-526 | 2022-06-15T10:15:15.000+0800 | 刘学利 | 已关闭 |
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
以移动5G一台功能端（192.168.13.5）为例，GTP中的P-GW、S-GW IP应为2409:8304:4040:5301::xxxx
|
|||
|
|
但是在实际的安全策略日志中，S-GW IP写成了4040:5301:2409:8034::xxxx
|
|||
|
|
如下图：
|
|||
|
|
!image-2022-06-15-10-13-16-119.png|thumbnail!
|
|||
|
|
|
|||
|
|
附件中是导出的日志及192.168.13.5上用tcpdump_mesa捕获的pcap包**liuxueli** commented on *2022-06-15T11:43:46.462+0800*:
|
|||
|
|
|
|||
|
|
* 读包能复现本BUG，sapp的BUG，数据包：[^http-gtp-ipv6-addr-erorr.pcap]
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**gitlab** commented on *2022-06-15T15:05:04.276+0800*:
|
|||
|
|
|
|||
|
|
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/MESA_Platform/sapp/-/commit/846204eae32769f634d914969ede76b8559663dd] of [MESA Platform / sapp|https://git.mesalab.cn/MESA_Platform/sapp] on branch [bugfix-OMPUB-526|https://git.mesalab.cn/MESA_Platform/sapp/-/tree/bugfix-OMPUB-526]:{quote}OMPUB-526: GTP层为地址IPv6时，更新GTPIPV6隧道地址时按照IPV4处理导致GTP IPV6隧道地址错误{quote}
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**gitlab** commented on *2022-06-15T15:31:32.360+0800*:
|
|||
|
|
|
|||
|
|
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/MESA_Platform/sapp/-/merge_requests/296] of [MESA Platform / sapp|https://git.mesalab.cn/MESA_Platform/sapp] on branch [bugfix-OMPUB-526|https://git.mesalab.cn/MESA_Platform/sapp/-/tree/bugfix-OMPUB-526]:{quote}OMPUB-526: GTP层为地址IPv6时，更新GTPIPV6隧道地址时按照IPV4处理导致GTP IPV6隧道地址错误; TSG-10916: 重传数据包未更新lasttime导致流提前淘汰{quote}
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**liuxueli** commented on *2022-06-15T16:42:45.761+0800*:
|
|||
|
|
|
|||
|
|
* 20222-06-15 16:36:27在福建13.5上已更新，[~yangyang] 观察日志是否还存在问题。
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**liuxueli** commented on *2022-06-16T14:22:26.334+0800*:
|
|||
|
|
|
|||
|
|
* 20222-06-16 14:20:00提供更新数据包，SAPP开启内存池，app_sketch_local降低内存使用。
|
|||
|
|
**
|
|||
|
|
{code:java}
|
|||
|
|
[root@FJYD-QZ-CD5G-SERVER-5 update_20220616]# ll
|
|||
|
|
total 1792
|
|||
|
|
-rw-r--r-- 1 root root 74016 Jun 16 13:45 app_sketch_local-4.3.6.b9388e8-1.el7.x86_64.rpm
|
|||
|
|
-rw-r--r-- 1 root root 33072 Jun 16 13:45 ftp-1.0.14.02d6a2c-1.el7.x86_64.rpm
|
|||
|
|
-rw-r--r-- 1 root root 558512 Jun 16 13:45 sapp-4.2.87.846204e-1.el7.x86_64.rpm
|
|||
|
|
-rw-r--r-- 1 root root 1153216 Jun 16 13:45 ssl-2.0.10.e8f6986-1.el7.x86_64.rpm
|
|||
|
|
-rwxrwxrwx 1 root root 420 Jun 16 13:57 update.sh
|
|||
|
|
[root@FJYD-QZ-CD5G-SERVER-5 update_20220616]# {code}
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**gitlab** commented on *2022-06-17T09:56:08.189+0800*:
|
|||
|
|
|
|||
|
|
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/57ec6f65135e526da262e981f95830f2c7546529] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-22.06-firewall-v4|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-22.06-firewall-v4]:{quote}更新sapp、quic、app_sketch_local,修复：{quote}
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**gitlab** commented on *2022-06-17T09:56:20.241+0800*:
|
|||
|
|
|
|||
|
|
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/808] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-22.06-firewall-v4|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-22.06-firewall-v4]:{quote}更新sapp、quic、app_sketch_local,修复：{quote}
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
## Attachments
|
|||
|
|
|
|||
|
|
**28781/5G_20220615_01.pcap**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**28794/http-gtp-ipv6-addr-erorr.pcap**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**28782/image-2022-06-15-10-13-16-119.png**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
**28780/securityEvents+(8).xlsx**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|