89 lines
3.4 KiB
Markdown
89 lines
3.4 KiB
Markdown
# 部署验证测试TSGv24.07时发现流量被Intercept后就断网
|
||
|
||
| ID | Creation Date | Assignee | Status |
|
||
|----|----------------|----------|--------|
|
||
| OMPUB-1427 | 2024-08-21T18:08:07.000+0800 | 杨威 | 已关闭 |
|
||
|
||
|
||
---
|
||
|
||
测试环境：部署验证
|
||
CM：192.168.44.115
|
||
OLAP：192.168.44.116
|
||
TSG-OS：192.168.40.83，版本v24.07.1-a1d7d78
|
||
|
||
描述：
|
||
Intercepte策略生效后，访问被拦截网站出现断网现象，有拦截日志产生，Proxy Intercept Error : server-side closed。
|
||
tsg-os已hotfix：
|
||
sed -ci '/\[SSL\]/a DETAIN_FRAG_CHELLO_NUM=2' /opt/tsg/sapp/conf/ssl/ssl_main.conf
|
||
sed -ci '/\[SSL\]/a SSL_STAT_REFRESH_S=1' /opt/tsg/sapp/conf/ssl/ssl_main.conf
|
||
!screenshot-1.png|thumbnail!
|
||
|
||
附件pcap包为测试时在192.168.40.83的firewall容器内使用tcpdump_mesa捕包，以及使用mrpdump捕的nf_0_proxy的包；
|
||
同时附上TSG.BJ环境Intercept生效时的pcap包，同样为firewall容器内使用tcpdump_mesa捕包，以及使用mrpdump捕的nf_0_proxy的包
|
||
|
||
**gitlab** commented on *2024-08-22T18:27:25.332+0800*:
|
||
|
||
[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/de2b3bb35d908c24b4d98122db6d1b8b43244035] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2024-08-22T18:28:14.850+0800*:
|
||
|
||
[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/2713] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2024-08-22T18:47:49.411+0800*:
|
||
|
||
[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/279d97e06ace0cf285159bb93e5e8fa8944efd4d] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2024-08-22T19:00:12.739+0800*:
|
||
|
||
[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/89df3da6d5605b4112171e4b0db8aaa4e4f61800] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Update2407-fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Update2407-fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2024-08-22T19:00:54.041+0800*:
|
||
|
||
[杨威|https://git.mesalab.cn/yangwei] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/2714] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [Update2407-fix-OMPUB-1427|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/Update2407-fix-OMPUB-1427]:{quote}🐞 fix(Fix-OMPUB-1427): upgrade ssl to v3.1.6{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
|
||
|
||
## Attachments
|
||
|
||
**61659/firwall_tcpdumpmesa.pcap**
|
||
|
||
---
|
||
|
||
**61660/nf_0_proxy.pcapng**
|
||
|
||
---
|
||
|
||
**61658/screenshot-1.png**
|
||
|
||
---
|
||
|
||
**61661/tsgbj_fw.pcap**
|
||
|
||
---
|
||
|
||
**61662/tsgbj_nf0proxy.pcap**
|
||
|
||
---
|
||
|