114 lines
5.5 KiB
Markdown
114 lines
5.5 KiB
Markdown
# TSG.BJ环境：Intercept和Service Chain策略同时开启出现断网现象
|
||
|
||
| ID | Creation Date | Assignee | Status |
|
||
|----|----------------|----------|--------|
|
||
| OMPUB-1010 | 2023-08-23T14:15:23.000+0800 | 刘学利 | 已关闭 |
|
||
|
||
|
||
---
|
||
|
||
测试环境：信息港TSG.BJ
|
||
TSG-OS IP：192.168.40.62
|
||
TSG-OS版本：v23.07.8
|
||
|
||
描述：
|
||
当 Intercept策略 和 Service Chain策略 针对同一个测试客户端IP同时生效时，测试客户端出现断网现象。关闭 Intercept策略 或 Service Chain策略 后网络恢复正常。
|
||
经[~luwenpeng]协助排查后，发现 Firewall 用于在Proxy 与 Service Chaining 之间进行流量调度的控制报文发送的不对(只有 opening 的控制报文，没有发送active 的控制报文)
|
||
!screenshot-1.png|thumbnail!
|
||
**gitlab** commented on *2023-08-25T14:46:18.156+0800*:
|
||
|
||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tango/tsg_master/-/commit/ad13ce5481be453b00918352131ee71f55238c51] of [TSG Appliance / tsg_master|https://git.mesalab.cn/tango/tsg_master] on branch [bugfix-not-drop-ctrl-pkt-by-parse-error-OMPUB-1010|https://git.mesalab.cn/tango/tsg_master/-/tree/bugfix-not-drop-ctrl-pkt-by-parse-error-OMPUB-1010]:{quote}OMPUB-1010: 控制报文未丢弃影响获取原始包的SID，从而导致断网{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**zhangzhihan** commented on *2023-08-25T16:32:06.721+0800*:
|
||
|
||
TSG.BJ环境已修复
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2023-08-25T16:45:45.013+0800*:
|
||
|
||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tango/tsg_master/-/merge_requests/392] of [TSG Appliance / tsg_master|https://git.mesalab.cn/tango/tsg_master] on branch [bugfix-not-drop-ctrl-pkt-by-parse-error-OMPUB-1010|https://git.mesalab.cn/tango/tsg_master/-/tree/bugfix-not-drop-ctrl-pkt-by-parse-error-OMPUB-1010]:{quote}Resolve OMPUB-1010 "Bugfix not drop ctrl pkt by parse error "{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2023-08-25T18:47:29.171+0800*:
|
||
|
||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tango/tsg_master/-/commit/fc4c49379f9cab40c801dcbbf7e012a348cd89f6] of [TSG Appliance / tsg_master|https://git.mesalab.cn/tango/tsg_master] on branch [bugfix-OMPUB-1010|https://git.mesalab.cn/tango/tsg_master/-/tree/bugfix-OMPUB-1010]:{quote}OMPUB-1010: 控制报文未丢弃影响获取原始包的SID，从而导致断网{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2023-08-25T18:47:51.223+0800*:
|
||
|
||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tango/tsg_master/-/merge_requests/394] of [TSG Appliance / tsg_master|https://git.mesalab.cn/tango/tsg_master] on branch [bugfix-OMPUB-1010|https://git.mesalab.cn/tango/tsg_master/-/tree/bugfix-OMPUB-1010]:{quote}OMPUB-1010: 控制报文未丢弃影响获取原始包的SID，从而导致断网{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2023-08-25T18:52:20.584+0800*:
|
||
|
||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/1f84c4e6ecdec7451586b2fbf43f2a715609fa2f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic，修复：{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2023-08-25T18:52:53.538+0800*:
|
||
|
||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1680] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic，修复：{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2023-08-25T19:40:12.498+0800*:
|
||
|
||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/359cb7861f4bf67b1a602b37ba65f46175cb3588] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic，修复:{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2023-08-25T19:40:21.891+0800*:
|
||
|
||
[刘学利|https://git.mesalab.cn/liuxueli] mentioned this issue in [a merge request|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/merge_requests/1681] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.08-firewall-v10|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.08-firewall-v10]:{quote}更新tsg_master、firewall、quic，修复:{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
**gitlab** commented on *2023-08-25T19:41:58.952+0800*:
|
||
|
||
[付明卫|https://git.mesalab.cn/fumingwei] mentioned this issue in [a commit|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/commit/c3b62c66bde8300e198472222e0a1e4863f92b7f] of [TSG / tsg-os-buildimage|https://git.mesalab.cn/tsg/tsg-os-buildimage] on branch [update-v23.07-v11|https://git.mesalab.cn/tsg/tsg-os-buildimage/-/tree/update-v23.07-v11]:{quote}更新tsg_master、firewall、quic，修复：{quote}
|
||
|
||
|
||
|
||
---
|
||
|
||
|
||
|
||
# Attachments
|
||
|
||
Attachment: screenshot-1.png
|
||
|
||
|
||
|
||
|
||
|
||
Attachment: test.pcapng
|
||
|
||
[test.pcapng](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/43438/test.pcapng)
|
||
|
||
|
||
|