3.4 KiB
部署验证测试TSGv24.07时发现流量被Intercept后就断网
| ID | Creation Date | Assignee | Status |
|---|---|---|---|
| OMPUB-1427 | 2024-08-21T18:08:07.000+0800 | 杨威 | 已关闭 |
测试环境：部署验证 CM：192.168.44.115 OLAP：192.168.44.116 TSG-OS：192.168.40.83，版本v24.07.1-a1d7d78
描述： Intercepte策略生效后，访问被拦截网站出现断网现象，有拦截日志产生，Proxy Intercept Error : server-side closed。 tsg-os已hotfix： sed -ci '/[SSL]/a DETAIN_FRAG_CHELLO_NUM=2' /opt/tsg/sapp/conf/ssl/ssl_main.conf sed -ci '/[SSL]/a SSL_STAT_REFRESH_S=1' /opt/tsg/sapp/conf/ssl/ssl_main.conf !screenshot-1.png|thumbnail!
附件pcap包为测试时在192.168.40.83的firewall容器内使用tcpdump_mesa捕包，以及使用mrpdump捕的nf_0_proxy的包； 同时附上TSG.BJ环境Intercept生效时的pcap包，同样为firewall容器内使用tcpdump_mesa捕包，以及使用mrpdump捕的nf_0_proxy的包
gitlab commented on 2024-08-22T18:27:25.332+0800:
[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|de2b3bb35d] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}
gitlab commented on 2024-08-22T18:28:14.850+0800:
[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/2713] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}
gitlab commented on 2024-08-22T18:47:49.411+0800:
[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|279d97e06a] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}
gitlab commented on 2024-08-22T19:00:12.739+0800:
[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|89df3da6d5] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Update2407-fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Update2407-fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}
gitlab commented on 2024-08-22T19:00:54.041+0800:
[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/2714] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Update2407-fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Update2407-fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}
Attachments
61659/firwall_tcpdumpmesa.pcap
61660/nf_0_proxy.pcapng
61658/screenshot-1.png
61661/tsgbj_fw.pcap
61662/tsgbj_nf0proxy.pcap