1、将dynamic bypass 从tsg_entry.cpp 拆分出来 2、使用ja3信息代替chello信息做bypass ssl信息 3、增加获取ja3流标签，通过cmsg发送给tfe 4、增加dynamic bypass 配置文件开关

2020-09-22 18:16:19 +08:00
parent 5f3a73a096
commit 9a48841641
9 changed files with 443 additions and 1096 deletions
--- a/conf/kni/kni.conf
+++ b/conf/kni/kni.conf
@@ -75,7 +75,11 @@ print_mode = 1
 #self test Shunt rules security policy id
 [tsg_diagnose]
 enabled = 1
-security_policy_id = 3
+security_policy_id = 3,10
+
+
+[ssl_dynamic_bypass]
+enabled = 1

 #kni dynamic bypass
 [traceid2sslinfo_htable]