gfwleak/tango-tfe
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,181 Commits 24 Branches 221 Tags
2e69e0edd8d2574952fd5fe779f9604cb7ed6ead
Commit Graph

438 Commits

Author SHA1 Message Date
luwenpeng
2e69e0edd8 TSG-23335 TFE适配AArch64架构 2024-11-15 18:40:04 +08:00
luwenpeng
3d99178958 TSG-23378 TFE移除平台层的FieldStat2，为适配AArch64做准备 2024-11-13 17:17:13 +08:00
luwenpeng
89a4a16713 bugfix: downstream connected success set is_app_not_pinning 2024-10-17 18:40:01 +08:00
fengweihao
48cba684fe TSG-22707 Adaptation of DB indicates changes, fixes self-check process testing issues 2024-10-16 16:16:44 +08:00
luwenpeng
8e38bbcf48 TSG-22752 Delete SSL Fingerprints, use is_app_not_pinning to determine Certificate Not Installed or Certificate Pinning 2024-10-15 16:18:34 +08:00
luwenpeng
5d3ee62d23 fix compile errors for adapting maat 2024-09-26 14:39:21 +08:00
luwenpeng
a571c85b47 feature (adapt maat): keyring type changed from int to uuid_string when using RPC with cerstore 2024-09-25 17:58:25 +08:00
luwenpeng
3617db7201 feature(adapt maat): PXY_PROFILE_DECRYPTION adapt uuid 2024-09-25 16:08:00 +08:00
luwenpeng
4ef367ac41 feature(adapt maat): PXY_SSL_FINGERPRINT adapt uuid 2024-09-25 10:46:57 +08:00
fengweihao
83f51432b1 TSG-21854 TFE使用fieldstat4序列化Manipulation Policy的metric并输出到kafka 2024-07-26 16:50:51 +08:00
wangmenglan
a59b939033 TSG-21855 使用fieldstat4序列化Intercept Policy的metric并输出到kafka 2024-07-25 11:57:23 +08:00
fengweihao
dc1ec1dbb3 TSG-21854 TFE使用fieldstat4序列化Manipulation Policy的metric并输出到kafka 2024-07-22 17:22:45 +08:00
luwenpeng
2045d517ca feature： TSG-21853 Refactoring TFE Kafka infrastructure 2024-07-19 18:57:57 +08:00
fengweihao
88a7a8c5c4 TSG-21787 Proxy初始化kafka topic时增加client.id参数 
TSG-21730 Proxy优化Manipulation日志中host和fqdn字段的格式
 2024-07-12 11:13:56 +08:00
fengweihao
ad21a6ac3d TSG-18596 修复Redirect-DoH策略无法命中 
TSG-18558 Manipulation日志中，有字节数和包数均为0的日志存在
 2024-01-15 15:50:58 +08:00
luwenpeng
6f07c2a8bf bugfix: CMSG log update flag 2024-01-03 19:48:49 +08:00
luwenpeng
cbd98507a2 TSG-18285 TFE的Packet IO模块支持重复流量识别 2024-01-02 18:47:49 +08:00
fengweihao
ced991b4a0 TSG-18286 Proxy支持虚拟表表名变更，删除代理本地缓存，删除tsg-http相关配置 2023-12-29 14:39:03 +08:00
fengweihao
7fcaefccad 优化kafka句柄创建和TOPIC注册 2023-12-19 14:23:55 +08:00
fengweihao
b3700966fd TSG-17862 Proxy支持Internal IP address和Exteral IP Address的扫描, 支持以Topic方式上传HTTP请求体/应答体 2023-12-14 15:08:19 +08:00
luwenpeng
c3b887f1c5 perf: 性能优化 
* io_uring使用buffer pool避免内存分配与释放
    * packet io thread与worker thread无锁访问cmsg
    * 为解密流量的fd设置默认的TTL
 2023-11-14 18:54:40 +08:00
fengweihao
80f4909fe3 修复Keeper构建的http保活请求格式错误 2023-08-09 10:14:30 +08:00
luwenpeng
bc39cd0706 TFE适配MRZCPD的分流算法的变更；并增加分流的调试日志 2023-08-08 10:55:42 +08:00
fengweihao
2451bd795c TSG-16056 修复deny动作，修复tsg_lua多线程调用问题和tfe编译告警 2023-07-11 16:28:52 +08:00
luwenpeng
db5530aa56 TSG-15381 TFE适配MAAT4的maat_plugin_table_get_ex_data()接口变更 2023-06-08 16:44:34 +08:00
wangmenglan
a97a90ac7d TFE Packet IO 创建metric句柄 2023-06-05 19:24:37 +08:00
luwenpeng
cb39660a1a TSG-15328 TLS Decrypted的HTTP2流量未Steering给第三方设备 
TSG-15329 命中Intercept & Decrypted Service Chaining Policy且开启tcp_passthrough的流量仍Steering给第三方设备
 2023-06-05 17:37:25 +08:00
wangmenglan
409dfb7e4b 🐞 fix: 调整TFE conf 文件, 使用四元组分流; 调整metric接口调用位置 2023-06-05 17:20:19 +08:00
luwenpeng
934d796d65 feature: worker thread不再发送intercept metrics 2023-06-01 15:48:23 +08:00
luwenpeng
a9df9ebe81 perf: TFE启动后关闭stderr输出 2023-06-01 11:02:46 +08:00
wangmenglan
0973d8c35a 🐞 fix(TSG-15308): 修复packet io thread启动时，intercept_policy_enforcer为空导致core 2023-05-31 20:17:22 +08:00
luwenpeng
5af89ccc93 bugfix 2023-05-30 20:08:26 +08:00
wangmenglan
f32535e557 🐞 fix(TSG-15212): 修复TFE_CMSG_SSL_INTERCEPT_STATE字段设置错误; 修复msgpack默写字段为空时, 增加默认值 2023-05-30 19:40:01 +08:00
luwenpeng
8082a3f9e8 TSG-15240 对于Decrypted Traffic，TFE先执行Manipulation再执行Steering 2023-05-25 14:21:19 +08:00
luwenpeng
e1b16ee339 bugfix: close fd_fake_c/fd_fake_s on error 2023-05-22 16:03:06 +08:00
wangmenglan
fc2625c691 bugfix:修复packet io内存泄漏 2023-05-22 15:19:29 +08:00
wangmenglan
b931a3dc58 packet io增加fieldstat状态统计 2023-05-15 16:41:59 +08:00
wangmenglan
542f4cbdfa TSG-14930 TFE支持发送控制报文给SAPP 2023-05-09 22:13:20 +08:00
luwenpeng
4e1c470720 TFE Acceptor V3 不扫描Service Chaining Rule; 
tcp_passthrough执行优先级: No Intercept Rule大于Tcp Option Profile
 2023-05-09 15:39:45 +08:00
wangmenglan
ceffc9b168 TSG-14930 TFE支持发送控制报文给SAPP 2023-05-09 14:23:39 +08:00
luwenpeng
7c3b77fb2f TSG-14890 TFE输出Intercept Policy Hits Metrics 2023-05-08 15:32:55 +08:00
wangmenglan
5dcc85c1ee 解决编译报错 2023-05-06 20:48:09 +08:00
wangmenglan
8de8ec1c5f TSG-14938 TFE支持新控制报文格式; 调整代码结构 2023-05-06 17:53:08 +08:00
wangmenglan
8a7c196c20 修改文件编码 2023-05-06 17:47:47 +08:00
wangmenglan
11a46269f1 将kni合并到tfe中 2023-05-06 17:47:38 +08:00
fengweihao
0bb38a6969 TSG-14786 TFE输出Proxy Rule Hits Metric 2023-04-25 10:13:38 +08:00
luwenpeng
cbf424884c cmsg适配控制报文类型, TFE_CMSG_SSL_INTERCEPT_STATE/TFE_CMSG_SSL_PINNING_STATE/TFE_CMSG_SSL_CERT_VERIFY的类型从uint64改为uint8 2023-04-23 16:55:30 +08:00
luwenpeng
2138d7f13e TFE适配MAAT4，编译表只注册一次 2023-04-23 16:35:42 +08:00
luwenpeng
2ee26d758d bugfix 2023-04-21 18:31:36 +08:00
luwenpeng
f421e4df54 TSG-14789 TFE扫描service chaining策略，执行Decrypted Traffic Steering 2023-04-21 18:31:36 +08:00