# TSG.BJ环境：Intercept和Service Chain策略同时开启出现断网现象 | ID | Creation Date | Assignee | Status | |----|----------------|----------|--------| | OMPUB-1010 | 2023-08-23T14:15:23.000+0800 | 刘学利 | 已关闭 | --- 测试环境：信息港TSG.BJ TSG-OS IP：192.168.40.62 TSG-OS版本：v23.07.8 描述： 当 Intercept策略 和 Service Chain策略 针对同一个测试客户端IP同时生效时，测试客户端出现断网现象。关闭 Intercept策略 或 Service Chain策略 后网络恢复正常。 经[~luwenpeng]协助排查后，发现 Firewall 用于在Proxy 与 Service Chaining 之间进行流量调度的控制报文发送的不对(只有 opening 的控制报文，没有发送active 的控制报文) !screenshot-1.png|thumbnail! **gitlab** commented on *2023-08-25T14:46:18.156+0800*: [刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tango/tsg_master/-/commit/ad13ce5481be453b00918352131ee71f55238c51] of [TSG Appliance / tsg_master|https://git.mesalab.cn/tango/tsg_master] on branch [bugfix-not-drop-ctrl-pkt-by-parse-error-OMPUB-1010|https://git.mesalab.cn/tango/tsg_master/-/tree/bugfix-not-drop-ctrl-pkt-by-parse-error-OMPUB-1010]:{quote}OMPUB-1010: 控制报文未丢弃影响获取原始包的SID，从而导致断网{quote} --- **zhangzhihan** commented on *2023-08-25T16:32:06.721+0800*: TSG.BJ环境已修复 --- **gitlab** commented on *2023-08-25T16:45:45.013+0800*: [刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tango/tsg_master/-/merge_requests/392] of [TSG Appliance / tsg_master|https://git.mesalab.cn/tango/tsg_master] on branch [bugfix-not-drop-ctrl-pkt-by-parse-error-OMPUB-1010|https://git.mesalab.cn/tango/tsg_master/-/tree/bugfix-not-drop-ctrl-pkt-by-parse-error-OMPUB-1010]:{quote}Resolve OMPUB-1010 "Bugfix not drop ctrl pkt by parse error "{quote} --- **gitlab** commented on *2023-08-25T18:47:29.171+0800*: [刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tango/tsg_master/-/commit/fc4c49379f9cab40c801dcbbf7e012a348cd89f6] of [TSG Appliance / tsg_master|https://git.mesalab.cn/tango/tsg_master] on branch [bugfix-OMPUB-1010|https://git.mesalab.cn/tango/tsg_master/-/tree/bugfix-OMPUB-1010]:{quote}OMPUB-1010: 控制报文未丢弃影响获取原始包的SID，从而导致断网{quote} --- **gitlab** commented on *2023-08-25T18:47:51.223+0800*: [刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tango/tsg_master/-/merge_requests/394] of [TSG Appliance / tsg_master|https://git.mesalab.cn/tango/tsg_master] on branch [bugfix-OMPUB-1010|https://git.mesalab.cn/tango/tsg_master/-/tree/bugfix-OMPUB-1010]:{quote}OMPUB-1010: 控制报文未丢弃影响获取原始包的SID，从而导致断网{quote} --- **gitlab** commented on *2023-08-25T18:52:20.584+0800*: [刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/1f84c4e6ecdec7451586b2fbf43f2a715609fa2f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic，修复：{quote} --- **gitlab** commented on *2023-08-25T18:52:53.538+0800*: [刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1680] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic，修复：{quote} --- **gitlab** commented on *2023-08-25T19:40:12.498+0800*: [刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/359cb7861f4bf67b1a602b37ba65f46175cb3588] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic，修复:{quote} --- **gitlab** commented on *2023-08-25T19:40:21.891+0800*: [刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1681] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic，修复:{quote} --- **gitlab** commented on *2023-08-25T19:41:58.952+0800*: [付明卫|https://git.mesalab.cn/fumingwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/c3b62c66bde8300e198472222e0a1e4863f92b7f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic，修复：{quote} --- # Attachments Attachment: screenshot-1.png ![screenshot-1.png](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/43431/screenshot-1.png) Attachment: test.pcapng [test.pcapng](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/43438/test.pcapng)