# 部署验证测试TSGv24.07时发现流量被Intercept后就断网

| ID | Creation Date | Assignee | Status |
|----|----------------|----------|--------|
| OMPUB-1427 | 2024-08-21T18:08:07.000+0800 | 杨威 | 已关闭 |


---

测试环境：部署验证
CM：192.168.44.115
OLAP：192.168.44.116
TSG-OS：192.168.40.83，版本v24.07.1-a1d7d78

描述：
Intercepte策略生效后，访问被拦截网站出现断网现象，有拦截日志产生，Proxy Intercept Error : server-side closed。
tsg-os已hotfix：
sed -ci '/\[SSL\]/a DETAIN_FRAG_CHELLO_NUM=2' /opt/tsg/sapp/conf/ssl/ssl_main.conf
sed -ci '/\[SSL\]/a SSL_STAT_REFRESH_S=1' /opt/tsg/sapp/conf/ssl/ssl_main.conf
 !screenshot-1.png|thumbnail! 

附件pcap包为测试时在192.168.40.83的firewall容器内使用tcpdump_mesa捕包，以及使用mrpdump捕的nf_0_proxy的包；
同时附上TSG.BJ环境Intercept生效时的pcap包，同样为firewall容器内使用tcpdump_mesa捕包，以及使用mrpdump捕的nf_0_proxy的包

**gitlab** commented on *2024-08-22T18:27:25.332+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/de2b3bb35d908c24b4d98122db6d1b8b43244035] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}



---

**gitlab** commented on *2024-08-22T18:28:14.850+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/2713] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}



---

**gitlab** commented on *2024-08-22T18:47:49.411+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/279d97e06ace0cf285159bb93e5e8fa8944efd4d] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}



---

**gitlab** commented on *2024-08-22T19:00:12.739+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/89df3da6d5605b4112171e4b0db8aaa4e4f61800] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Update2407-fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Update2407-fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}



---

**gitlab** commented on *2024-08-22T19:00:54.041+0800*:

[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/2714] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Update2407-fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Update2407-fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}



---



## Attachments

**61659/firwall_tcpdumpmesa.pcap**

---

**61660/nf_0_proxy.pcapng**

---

**61658/screenshot-1.png**

---

**61661/tsgbj_fw.pcap**

---

**61662/tsgbj_nf0proxy.pcap**

---