gfwleak/tango-tfe
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,006 Commits 24 Branches 221 Tags
8a7c196c20dea2005085ded654f207936608c8ba
Commit Graph

1006 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
wangmenglan
8a7c196c20 修改文件编码 2023-05-06 17:47:47 +08:00
wangmenglan
11a46269f1 将kni合并到tfe中 2023-05-06 17:47:38 +08:00
luwenpeng
48c303e856 增加tfe_telegraf.conf 2023-05-06 14:10:59 +08:00
luwenpeng
e729c5cee9 修改__cplusplus->__cpluscplus 2023-04-28 17:45:13 +08:00
luwenpeng
7b55524b4f bugfix: tcp_policy笔误 2023-04-28 15:06:28 +08:00
luwenpeng
ba64327e2f TSG-14898 TFE适配PXY_INTERCEPT_COMPILE，执行Intercept或No Intercept 2023-04-28 15:06:28 +08:00
fengweihao
3523e8a951 fieldstat3的metrc支持输出vsysid 2023-04-26 16:12:29 +08:00
fengweihao
b9a8a45540 优化fieldstat3句柄创建 2023-04-25 16:17:35 +08:00
fengweihao
0bb38a6969 TSG-14786 TFE输出Proxy Rule Hits Metric 2023-04-25 10:13:38 +08:00
luwenpeng
95c80c80cf BPF适配不同的编译环境 2023-04-23 19:16:28 +08:00
luwenpeng
cbf424884c cmsg适配控制报文类型, TFE_CMSG_SSL_INTERCEPT_STATE/TFE_CMSG_SSL_PINNING_STATE/TFE_CMSG_SSL_CERT_VERIFY的类型从uint64改为uint8 2023-04-23 16:55:30 +08:00
luwenpeng
2138d7f13e TFE适配MAAT4，编译表只注册一次 2023-04-23 16:35:42 +08:00
luwenpeng
97a4386bc4 TSG-14829 io_uring支持触发事件，适配mrzcpd的epoll_wait功能 2023-04-21 20:30:26 +08:00
luwenpeng
6e02f6b8ac 更新 maat json 2023-04-21 18:31:36 +08:00
luwenpeng
2ee26d758d bugfix 2023-04-21 18:31:36 +08:00
luwenpeng
1e6393b6d1 TFE处理decrypted traffic steering(service chaining rule)时支持多命中 
若命中intercept rule的流同时命中了多条service chaining rule
    只要有一条service chaining rule开启了decrypted traffic steering
    TFE就要执行decrypted traffic steering
 2023-04-21 18:31:36 +08:00
luwenpeng
f421e4df54 TSG-14789 TFE扫描service chaining策略，执行Decrypted Traffic Steering 2023-04-21 18:31:36 +08:00
luwenpeng
f741c3c025 TSG-14628 TFE适配TCP Option Profile库表的变更 2023-04-21 18:31:36 +08:00
luwenpeng
0a3d06eed1 TSG-14627 TFE适配Decryption Profile库表的变更 2023-04-21 18:31:36 +08:00
luwenpeng
f81209b225 CI禁用UPLOAD_SYMBOL_FILES v4.8.6-20230419 2023-04-18 19:46:07 +08:00
fengweihao
1430681184 TSG-14802 修复代理日志中common_service_category字段填写错误 v4.8.5-20230418 2023-04-18 17:52:24 +08:00
fengweihao
915dd00731 TSG-14704 用户自定义域中带有特殊字符策略无法生效 
TSG-14703 扫描ip和app_id后策略没有执行
v4.8.4-20230413 		2023-04-13 14:34:34 +08:00
fengweihao
77927208f9 适配maat_state_set_scan_district接口变更 v4.8.3-20230404 2023-04-04 19:52:39 +08:00
fengweihao
ed9a4739a1 TSG-14379 Monitor策略日志多命中情况下Vsys ID填写错误 v4.8.2-20230404 2023-04-04 16:06:40 +08:00
fengweihao
26b533cba9 bugfix:引用错误的头文件,导致CI构建失败 v4.8.1-20230403 2023-03-30 20:03:00 +08:00
fengweihao
df39fcda90 TSG-14484 Pxoxy支持Maat4 2023-03-30 19:39:18 +08:00
luwenpeng
a2a4c32384 TSG-13204 Decrypted Traffic Steering适配第三方设备状态的切换 
-> 当第三方设备的状态从可用变为不可用时
    * 当前Stream依然按照Steering的流程处理，从eventcb中退出
    * 下一个新的Stream开始UnSteering
-> 当第三方设备的状态从不可用变为可用时
    * 当前Stream依然按照UnSteering的流程处理
    * 下一个新Stream开始Steering
v4.7.02-20221230 		2022-12-30 15:53:19 +08:00
luwenpeng
b2c01eaa05 修改Decrypted Traffic Steering access log的输出 
* 将 FACKFD/ERR/DOWN 改为 FACKFD/ERR/CLIENT
    * 将 FACKFD/EOF/DOWN 改为 FACKFD/EOF/CLIENT
    * 将 FACKFD/ERR/UP   改为 FACKFD/ERR/SERVER
    * 将 FACKFD/EOF/UP   改为 FACKFD/EOF/SERVER
 2022-12-30 14:36:03 +08:00
luwenpeng
1e1214cf12 Decrypted Traffic Steering功能启用时仍然支持Pinning检测和Pinning Dynamic Bypass v4.7.01-20221229 2022-12-29 18:16:52 +08:00
luwenpeng
f2856eaa0b TSG-13196 Decrypted Traffic Steering增加FieldStat字段 
* stee_c_err
    * stee_s_err
    * stee_c_eof
    * stee_s_eof
 2022-12-29 17:24:06 +08:00
luwenpeng
cd93796cce bugfix: 修正decrypted traffic steering debug log输出的BEV_EVENT 2022-12-29 15:29:23 +08:00
luwenpeng
2a2bead767 TSG-13196 Decrypted Traffic Steering时照常统计intercept bytes 
* STAT_STREAM_INCPT_DOWN_BYTES
    * STAT_STREAM_INCPT_UP_BYTES
    * STAT_STREAM_INCPT_BYTES
 2022-12-29 14:28:53 +08:00
luwenpeng
0f542d376f TSG-13196 Decrypted Traffic Steering增加FieldStat字段 
* stee_ssl_conn
    * stee_http_conn
    * stee_c_tx_B
    * stee_s_rx_B
    * stee_s_tx_B
    * stee_c_rx_B
 2022-12-29 10:24:05 +08:00
luwenpeng
3268648414 TSG-13196 STAT_FD_CLOSE字段不统计Decrypted Traffic Steering的FD 2022-12-28 17:35:43 +08:00
luwenpeng
38cb6a56e7 bugfix: TFE-ENV 将tap0替换成TFE_DEVICE_DATA_INCOMING变量 2022-12-28 14:31:47 +08:00
luwenpeng
60d8f67f85 TSG-13171 Decrypted Traffic Steering构造的SYN/SYN ACK/ACK支持TimeStamp选项 2022-12-27 18:40:57 +08:00
luwenpeng
ee9f66a196 TSG-13175 Decrypted Traffic Steering构造的SYN/SYN ACK支持MSS选项 2022-12-27 14:12:42 +08:00
luwenpeng
fdf203b25e NF QUEUE未配置eth时，默认不绑定eth device 2022-12-26 17:09:33 +08:00
luwenpeng
dc4205c9b0 TSG-13170 Decrypted Traffic Steering构造的SYN/SYN ACK支持SACK选项 
bugfix: IPv6 ACK Packet: invalid flag
 2022-12-26 16:57:09 +08:00
luwenpeng
29a75b1d9c TSG-13157 Decrypted Traffic Steering构造的SYN/SYN ACK支持窗口扩大选项 2022-12-26 14:31:22 +08:00
luwenpeng
da468bbf67 TSG-13155 Decrypted Traffic Steering Policy Route创建VETH适配TFE与3rd party middlebox部署在同一台机器的情况 2022-12-26 10:48:55 +08:00
luwenpeng
340af20739 为了向前兼容，发布版本中默认禁用Decrypted Traffic Steering Policy Route 2022-12-23 13:58:44 +08:00
luwenpeng
9d12fe7304 TSG-13114 TFE的Decrypted Traffic Steering功能支持IPv6协议 
tfe-env.service中增加Decrypted Traffic Steering的策略路由
 2022-12-23 13:56:19 +08:00
luwenpeng
4142c18ddf Decrypted Traffic Steering增加enable_steering_http和enable_steering_ssl开关，支持按照协议类型回流 2022-12-23 13:56:19 +08:00
luwenpeng
7978e74321 TSG-13042 构造三次握手报文，通过原始套接字注入tap_client和tap_server 2022-12-23 13:56:19 +08:00
luwenpeng
42dded52ac TSG-13075 TFE的Decrypted Traffic Steering功能增加第三方设备保活检查 2022-12-23 13:56:19 +08:00
luwenpeng
c1d9a1ab0f Decrypted Traffic Steering 回流回注测试通过 2022-12-23 13:56:19 +08:00
fengweihao
2ee2307265 TSG-12671 lua脚本在删除host时，导致日志http.host字段乱码 v4.6.25-20221202 2022-12-02 10:29:42 +08:00
fengweihao
6481bce4b4 TSG-12513 修复monitor动作，只配置ip时产生重复日志 2022-11-28 16:27:08 +08:00
fengweihao
5654924f00 bugfix:删除Allow用户自定义判断,获取用户自定义域 v4.6.24-20221116 2022-11-16 12:48:11 +08:00