1.7 KiB
TSG.BJ环境:升级tsg v24.09后,新建策略都无法命中,旧策略能正常命中
| ID | Creation Date | Assignee | Status |
|---|---|---|---|
| OMPUB-1485 | 2024-09-27T11:30:48.000+0800 | 杨威 | 已关闭 |
tsg-os:192.168.40.62 tsg-os版本:v24.09-rc3
!image-2024-09-27-11-29-25-790.png|thumbnail! !image-2024-09-27-11-29-46-560.png|thumbnail! yangwei commented on 2024-09-27T12:08:56.598+0800:
排查过程
- 界面上下发一条新策略,策略验证可以正常命中
!image-2024-09-27-12-04-46-318.png|width=724,height=335!
!image-2024-09-27-12-04-07-177.png|width=724,height=294!
- 查看TSGX上firewal本地maat日志,策略下发后,未收到相关的更新信息
!image-2024-09-27-12-05-39-112.png|width=504,height=509!
- TSGX读取的策略来自本地redis cache,进入cm-cache-redis pod,使用redis-cli->info检查redis状态
!image-2024-09-27-12-06-43-851.png|width=688,height=148!
- 连接的redis master无误,但是master_link_status 状态为down
!image-2024-09-27-12-07-56-146.png|width=455,height=740!
zhangzhihan commented on 2024-09-27T12:51:00.213+0800:
redis端口从7102改为7002后,连接正常 !screenshot-1.png|thumbnail!
Attachments
63370/image-2024-09-27-11-29-25-790.png
63369/image-2024-09-27-11-29-46-560.png
63371/image-2024-09-27-12-03-01-345.png
63372/image-2024-09-27-12-04-07-177.png
63373/image-2024-09-27-12-04-46-318.png
63374/image-2024-09-27-12-05-39-112.png
63375/image-2024-09-27-12-06-43-851.png
63376/image-2024-09-27-12-07-56-146.png
63377/screenshot-1.png