87 lines
1.7 KiB
Markdown
87 lines
1.7 KiB
Markdown
# TSG.BJ环境：升级tsg v24.09后，新建策略都无法命中，旧策略能正常命中
|
||
|
||
| ID | Creation Date | Assignee | Status |
|
||
|----|----------------|----------|--------|
|
||
| OMPUB-1485 | 2024-09-27T11:30:48.000+0800 | 杨威 | 已关闭 |
|
||
|
||
|
||
---
|
||
|
||
tsg-os：192.168.40.62
|
||
tsg-os版本：v24.09-rc3
|
||
|
||
!image-2024-09-27-11-29-25-790.png|thumbnail!
|
||
!image-2024-09-27-11-29-46-560.png|thumbnail! **yangwei** commented on *2024-09-27T12:08:56.598+0800*:
|
||
|
||
*排查过程*
|
||
* 界面上下发一条新策略，策略验证可以正常命中
|
||
|
||
!image-2024-09-27-12-04-46-318.png|width=724,height=335!
|
||
|
||
!image-2024-09-27-12-04-07-177.png|width=724,height=294!
|
||
* 查看TSGX上firewal本地maat日志，策略下发后，未收到相关的更新信息
|
||
|
||
!image-2024-09-27-12-05-39-112.png|width=504,height=509!
|
||
* TSGX读取的策略来自本地redis cache，进入cm-cache-redis pod，使用redis-cli->info检查redis状态
|
||
|
||
!image-2024-09-27-12-06-43-851.png|width=688,height=148!
|
||
* 连接的redis master无误，但是master_link_status 状态为down
|
||
|
||
!image-2024-09-27-12-07-56-146.png|width=455,height=740!
|
||
|
||
|
||
|
||
|
||
|
||
---
|
||
|
||
**zhangzhihan** commented on *2024-09-27T12:51:00.213+0800*:
|
||
|
||
redis端口从7102改为7002后，连接正常
|
||
!screenshot-1.png|thumbnail!
|
||
|
||
|
||
|
||
---
|
||
|
||
|
||
|
||
## Attachments
|
||
|
||
**63370/image-2024-09-27-11-29-25-790.png**
|
||
|
||
---
|
||
|
||
**63369/image-2024-09-27-11-29-46-560.png**
|
||
|
||
---
|
||
|
||
**63371/image-2024-09-27-12-03-01-345.png**
|
||
|
||
---
|
||
|
||
**63372/image-2024-09-27-12-04-07-177.png**
|
||
|
||
---
|
||
|
||
**63373/image-2024-09-27-12-04-46-318.png**
|
||
|
||
---
|
||
|
||
**63374/image-2024-09-27-12-05-39-112.png**
|
||
|
||
---
|
||
|
||
**63375/image-2024-09-27-12-06-43-851.png**
|
||
|
||
---
|
||
|
||
**63376/image-2024-09-27-12-07-56-146.png**
|
||
|
||
---
|
||
|
||
**63377/screenshot-1.png**
|
||
|
||
---
|
||
|