gfwleak/tango-tfe
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
999 Commits 24 Branches 221 Tags
b9a8a45540e7af94cf67c133963a2a28c75ddb9f
Commit Graph

393 Commits

Author SHA1 Message Date
fengweihao
0bb38a6969 TSG-14786 TFE输出Proxy Rule Hits Metric 2023-04-25 10:13:38 +08:00
luwenpeng
cbf424884c cmsg适配控制报文类型, TFE_CMSG_SSL_INTERCEPT_STATE/TFE_CMSG_SSL_PINNING_STATE/TFE_CMSG_SSL_CERT_VERIFY的类型从uint64改为uint8 2023-04-23 16:55:30 +08:00
luwenpeng
2138d7f13e TFE适配MAAT4，编译表只注册一次 2023-04-23 16:35:42 +08:00
luwenpeng
2ee26d758d bugfix 2023-04-21 18:31:36 +08:00
luwenpeng
f421e4df54 TSG-14789 TFE扫描service chaining策略，执行Decrypted Traffic Steering 2023-04-21 18:31:36 +08:00
luwenpeng
f741c3c025 TSG-14628 TFE适配TCP Option Profile库表的变更 2023-04-21 18:31:36 +08:00
fengweihao
df39fcda90 TSG-14484 Pxoxy支持Maat4 2023-03-30 19:39:18 +08:00
luwenpeng
a2a4c32384 TSG-13204 Decrypted Traffic Steering适配第三方设备状态的切换 
-> 当第三方设备的状态从可用变为不可用时
    * 当前Stream依然按照Steering的流程处理，从eventcb中退出
    * 下一个新的Stream开始UnSteering
-> 当第三方设备的状态从不可用变为可用时
    * 当前Stream依然按照UnSteering的流程处理
    * 下一个新Stream开始Steering
 2022-12-30 15:53:19 +08:00
luwenpeng
b2c01eaa05 修改Decrypted Traffic Steering access log的输出 
* 将 FACKFD/ERR/DOWN 改为 FACKFD/ERR/CLIENT
    * 将 FACKFD/EOF/DOWN 改为 FACKFD/EOF/CLIENT
    * 将 FACKFD/ERR/UP   改为 FACKFD/ERR/SERVER
    * 将 FACKFD/EOF/UP   改为 FACKFD/EOF/SERVER
 2022-12-30 14:36:03 +08:00
luwenpeng
1e1214cf12 Decrypted Traffic Steering功能启用时仍然支持Pinning检测和Pinning Dynamic Bypass 2022-12-29 18:16:52 +08:00
luwenpeng
f2856eaa0b TSG-13196 Decrypted Traffic Steering增加FieldStat字段 
* stee_c_err
    * stee_s_err
    * stee_c_eof
    * stee_s_eof
 2022-12-29 17:24:06 +08:00
luwenpeng
cd93796cce bugfix: 修正decrypted traffic steering debug log输出的BEV_EVENT 2022-12-29 15:29:23 +08:00
luwenpeng
2a2bead767 TSG-13196 Decrypted Traffic Steering时照常统计intercept bytes 
* STAT_STREAM_INCPT_DOWN_BYTES
    * STAT_STREAM_INCPT_UP_BYTES
    * STAT_STREAM_INCPT_BYTES
 2022-12-29 14:28:53 +08:00
luwenpeng
0f542d376f TSG-13196 Decrypted Traffic Steering增加FieldStat字段 
* stee_ssl_conn
    * stee_http_conn
    * stee_c_tx_B
    * stee_s_rx_B
    * stee_s_tx_B
    * stee_c_rx_B
 2022-12-29 10:24:05 +08:00
luwenpeng
3268648414 TSG-13196 STAT_FD_CLOSE字段不统计Decrypted Traffic Steering的FD 2022-12-28 17:35:43 +08:00
luwenpeng
60d8f67f85 TSG-13171 Decrypted Traffic Steering构造的SYN/SYN ACK/ACK支持TimeStamp选项 2022-12-27 18:40:57 +08:00
luwenpeng
ee9f66a196 TSG-13175 Decrypted Traffic Steering构造的SYN/SYN ACK支持MSS选项 2022-12-27 14:12:42 +08:00
luwenpeng
fdf203b25e NF QUEUE未配置eth时，默认不绑定eth device 2022-12-26 17:09:33 +08:00
luwenpeng
dc4205c9b0 TSG-13170 Decrypted Traffic Steering构造的SYN/SYN ACK支持SACK选项 
bugfix: IPv6 ACK Packet: invalid flag
 2022-12-26 16:57:09 +08:00
luwenpeng
29a75b1d9c TSG-13157 Decrypted Traffic Steering构造的SYN/SYN ACK支持窗口扩大选项 2022-12-26 14:31:22 +08:00
luwenpeng
9d12fe7304 TSG-13114 TFE的Decrypted Traffic Steering功能支持IPv6协议 
tfe-env.service中增加Decrypted Traffic Steering的策略路由
 2022-12-23 13:56:19 +08:00
luwenpeng
4142c18ddf Decrypted Traffic Steering增加enable_steering_http和enable_steering_ssl开关，支持按照协议类型回流 2022-12-23 13:56:19 +08:00
luwenpeng
7978e74321 TSG-13042 构造三次握手报文，通过原始套接字注入tap_client和tap_server 2022-12-23 13:56:19 +08:00
luwenpeng
42dded52ac TSG-13075 TFE的Decrypted Traffic Steering功能增加第三方设备保活检查 2022-12-23 13:56:19 +08:00
luwenpeng
c1d9a1ab0f Decrypted Traffic Steering 回流回注测试通过 2022-12-23 13:56:19 +08:00
fengweihao
6a6fa97080 bugfix: mid-cert vsys_id is kept in policy 2022-11-11 10:30:11 +08:00
fengweihao
6e4fc2a978 TSG-12300 代理日志增加Traffic Vsys id字段 2022-11-11 02:09:15 +00:00
luwenpeng
87adce7cbf TSG-12548 TFE适配拦截策略的keyring_for_untrusted字段 
* keyring拆分为keyring_for_trusted与keyring_for_untrusted
 2022-11-08 11:18:53 +08:00
fengweihao
d4dc6394ac TSG-12005 Proxy日志增加common_vsys_id字段 
TSG-12080 中间证书缓存Kafka输出Json增加vsys_id字段
 2022-09-23 15:34:50 +08:00
fengweihao
b321486e3f TSG-11849 tfe增加从环境变量中读入处理机ip 
TSG-11742 IP Libraries统一使用.分隔地理层级
TSG-10722 日志中开始时间从解析层获取
 2022-09-09 10:44:11 +08:00
luwenpeng
e0126b7d32 bugfix: 重置Server Cache的时间窗口 2022-05-12 13:48:55 +08:00
luwenpeng
e2be64b67b TSG-4030 Security Event Logs 中的 SSL.Intercept State 为 Passthrough 时，并未说明引起 Passthrough 的原因 
(当命中 tcp passthrough 时，将 ssl_intercept_status 设置为 passthrough)
 2022-01-28 13:10:26 +08:00
luwenpeng
d201968652 bugfix: TSG-8634 命中Proxy Deny策略时，触发Zero eof被误判Pinninng 
(触发Zero eof后当做protocol errors处理)
 2021-12-20 16:35:47 +08:00
luwenpeng
000ab9f991 修改debug日志: 输出服务端证书验证结果 2021-11-20 19:29:44 +03:00
luwenpeng
ad481d77d9 accept线程与kni通信默认使用v3方案(iptables+NFQ) 2021-11-20 17:22:19 +03:00
luwenpeng
755c7efacf TSG-8331 完善TFE的Watchdog功能 2021-11-04 18:04:44 +03:00
luwenpeng
cb15d3340f bugfix: TSG-8003 预防证书链投毒 
* 中间证书缓存openssl rebuild trust chain中可惜的中间证书, 不缓存服务端发送证书链中的证书
 2021-11-03 16:24:09 +03:00
luwenpeng
f764a4bae1 优化 watchdog tfe worker thread 的实现逻辑 2021-08-20 15:36:58 +08:00
fengweihao
c41a67ca2b TSG-7471 Proxy连接kafka时增加认证信息 2021-08-19 16:24:19 +08:00
luwenpeng
be8de2eaf4 TSG-7248 修改Proxy内部watchdog的处理逻辑，创建worker线程时便更新时间戳 2021-08-02 11:40:21 +08:00
luwenpeng
632a609017 将watchdog退出的函数从exit()改为abort() 2021-07-27 11:19:57 +08:00
luwenpeng
c184cf6ad6 关闭 watchdog 检测 worker thread 状态的 debug 日志; 增加 usage() 显示帮助信息 2021-04-29 11:06:11 +08:00
luwenpeng
19a3fe9217 TSG-6228 修复 ATCA 性能测试时 perf 火焰图显示 tfe_stream_addr_to_str 耗时较高的问题 2021-04-28 18:01:59 +08:00
luwenpeng
b667408617 NFQ 增加 tfe_hexdump2file() 将格式无效的 payload dump 到 stderr 2021-04-25 14:44:34 +08:00
luwenpeng
1fe60d2428 废除 tfe-kmod, tfe 直接与 kni 通信 
* 新增 enable_kni_v3=1 配置项
	* develop_build_release 分支关闭 ASAN 检测
	* 修正根据 CMSG 恢复 TCP 链接时没有正确填写 TCP 时间戳启用选项的问题
 2021-04-21 13:26:07 +08:00
luwenpeng
1c37ae746d TSG-5978 TFE 与 KNI 保活的 watchdog 线程增加对 tfe worker 线程健康状态检测的功能 2021-04-21 11:51:30 +08:00
luwenpeng
f99cfe9c1c TSG-5246 拦截状态下，使用未装根证书的 firefox 访问 twitter.com 时，功能端未检测出 Pinning 特征 2021-01-11 23:06:19 +06:00
luwenpeng
933f9e3b02 TSG-4965 功能端通过界面下发的 JA3 Fingerprint 识别 Pinning APP 和未装根证书的 APP 2021-01-06 17:28:53 +06:00
luwenpeng
5bf7f2f298 TSG-4471 将 self signed certificate in certificate chain 状态的证书判断为 invalid issuer 2020-12-14 17:06:07 +06:00
luwenpeng
012f4f6602 TFE 适配 fieldstat prometheus 2020-11-13 20:55:56 +06:00