Commit Graph

1108 Commits

Author SHA1 Message Date
wangmenglan
d2b7d30e96 TFE增加Policy Hit Intercept的监控指标 v4.8.83-20240712 2024-07-10 15:52:44 +08:00
luwenpeng
e362d521d6 TFE增加decrypted traffic mirror的监控指标 2024-07-09 19:06:31 +08:00
luwenpeng
1ef48bfa10 将TFE最大工作线程数从128调整到256 v4.8.82-20240430 2024-04-30 10:21:20 +08:00
wangmenglan
db3d812d22 bugfix:增加异常处理 v4.8.79-20240424 2024-04-24 15:55:29 +06:30
luwenpeng
e312995e64 bugfix: HTTP Parser中LOG Error时无效的指针访问 v4.8.77-20240411 2024-04-11 18:36:10 +08:00
fengweihao
32226c9734 TSG-20185 Proxy支持IP+Port组合object
TSG-19907 修复笔误doH日志中多次发送decoded_as字段
TSG-19820 Protocol Field中Request Body/Response Body选择非运算时,无法命中策略
TSG-19540 修复Manipulation策略中Protocol选择UDP/ICMP时,选择非无法命中策略
TSG-19337 界面展示一致性,Proxy的Manipulate日志中的IP Protocol统一小写
TSG-19480 修复Metric中命中策略统计和Throughput的时机不一致,造成界面展示歧义
v4.8.73-20240328
2024-03-28 16:50:15 +08:00
wangmenglan
a2dce7672a TSG-19479 调整发送metrics的时机 v4.8.66-20240222 2024-02-22 18:05:41 +08:00
fengweihao
43a9b6474e TSG-19435 修复Manipulation以Port作为Condition时,策略无法命中 v4.8.65-20240222 2024-02-22 17:18:48 +08:00
fengweihao
cf20f2d1f9 TSG-19337 Proxy的Manipulate日志中增加P Protocol字段 2024-02-06 18:04:42 +08:00
fengweihao
2c32c20e23 TSG-18425 Proxy支持port object匹配 TSG-19090 Proxy支持Protocol Object匹配 v4.8.64-20240204 2024-02-01 16:03:49 +08:00
luwenpeng
9c9cc1de75 TSG-18972 TFE适配PXY_INTERCEPT_COMPILE字段decryption -> decryption_profile变更 2024-01-31 11:30:41 +08:00
wangmenglan
86e2eb3b99 PacketIO实时发送metrics统计 v4.8.63-20230125 2024-01-25 18:45:57 +08:00
fengweihao
45aff69d91 修复Manipulate上报metric时字节统计错误 v4.8.62-20230124 2024-01-22 18:09:48 +08:00
fengweihao
82d8d068d6 TSG-18731 Proxy的Monitor动作多次命中时,发送一条日志且Proxy Rule List中包含多条Monitor策略 2024-01-22 14:28:07 +08:00
fengweihao
589c1c28a4 TSG-18679 适配maat在使用hyperscan流式扫描时最大输入字符串长度65535 2024-01-19 14:21:30 +08:00
fengweihao
3cf47f940f TSG-16188 Manipulation实时发送命中策略的metric统计 2024-01-16 16:03:54 +08:00
fengweihao
ad21a6ac3d TSG-18596 修复Redirect-DoH策略无法命中
TSG-18558 Manipulation日志中,有字节数和包数均为0的日志存在
v4.8.61-20230115
2024-01-15 15:50:58 +08:00
wangmenglan
b1f670c05d perf:通过控制报文PACKET_CUR_DIR字段判断当前包的方向,不再默认active控制报文为C2S方向 v4.8.60-20230105 2024-01-05 15:24:24 +08:00
wangmenglan
9ce2d57082 解决编译问题 v4.8.59-20230104 2024-01-04 16:45:47 +08:00
wangmenglan
a1f2fde9dd bugfix: TSG-18316 修正获取拦截策略编译表的do_log字段 2024-01-04 15:02:52 +08:00
luwenpeng
4e35c47324 关闭Packet Log, 修正dup packet bytes v4.8.58-20230103 2024-01-03 19:48:49 +08:00
luwenpeng
6f07c2a8bf bugfix: CMSG log update flag 2024-01-03 19:48:49 +08:00
wangmenglan
dae38c5144 TSG-18200 Packet IO不再通过dir方向判断c2s/s2c 2024-01-03 19:43:51 +08:00
fengweihao
058a5e6e66 TSG-18177 Proxy删除关于FQDN Category的配置加载和扫描, Proxy适配maat_scan_group函数变更 v4.8.57-20230103 2024-01-03 17:26:20 +08:00
luwenpeng
cbd98507a2 TSG-18285 TFE的Packet IO模块支持重复流量识别 2024-01-02 18:47:49 +08:00
luwenpeng
9d3dcce1ab 优化ATOMIC_READ:使用__atomic_load_n替换__atomic_fetch_add 2023-12-29 18:10:46 +08:00
luwenpeng
9355ec33d1 优化io_uring的热点代码 2023-12-29 18:10:46 +08:00
fengweihao
ced991b4a0 TSG-18286 Proxy支持虚拟表表名变更,删除代理本地缓存,删除tsg-http相关配置 v4.8.56-20231229 2023-12-29 14:39:03 +08:00
wangmenglan
b011a92680 perf: 控制报文标识为双向流时,校验sid、route_ctx和packet header 2023-12-29 10:57:53 +08:00
fengweihao
d3b2f231bf 适配group2group表结构调整 v4.8.55-20231227 2023-12-27 16:32:01 +08:00
fengweihao
21bbd4e1f7 TSG-18165 Manipulation日志中 Subscriber ID值为空 2023-12-26 17:13:03 +08:00
fengweihao
f69de9f4e3 TSG-18071 选择Internal作为Condition时,无法命中策略 2023-12-25 14:43:00 +08:00
luwenpeng
4f9372d966 TFE根据拦截策略编译表的do_log字段判断是否发送log_update的控制报文 v4.8.54-20231220 2023-12-20 19:01:54 +08:00
luwenpeng
8a4f672ab9 TFE适配libmaat4->libmaatframe动态库名称的变更 v4.8.53-20231220 2023-12-19 14:57:18 +08:00
fengweihao
7fcaefccad 优化kafka句柄创建和TOPIC注册 v4.8.52-20231219 2023-12-19 14:23:55 +08:00
fengweihao
40b7585ee6 修复Cmake编译问题 2023-12-18 18:39:05 +08:00
fengweihao
b3700966fd TSG-17862 Proxy支持Internal IP address和Exteral IP Address的扫描, 支持以Topic方式上传HTTP请求体/应答体 v4.8.51-20231215 2023-12-14 15:08:19 +08:00
fengweihao
b801ca9d3b TSG-17840 Proxy适配日志结构变更 v4.8.50-20231208 2023-12-08 18:12:53 +08:00
fengweihao
f1bf753679 bugfix: 适配编译表和分组表结构变更,修改本地JSON配置 v4.8.49-20231130 2023-11-29 18:30:54 +08:00
fengweihao
72f7290ccd TSG-17777 优化App ID的扫描处理逻辑, HTTP多次扫描支持非配置
TSG-17797 TFE适配虚拟表名变更
2023-11-24 15:26:23 +08:00
fengweihao
d3e49bf461 bugfix:适配maatv4.1.9关于table_info中table_type整形变量命名变更 v4.8.48-20231123 2023-11-23 16:38:19 +08:00
fengweihao
6efee0fdc8 TSG-17512 Proxy适配Maat4关于compile表特性变更 v4.8.47-20231122 2023-11-22 11:30:49 +00:00
wangmenglan
15582f5d51 控制报文log_update,增加proxy_rule_list和proxy_action字段 v4.8.46-20231121 2023-11-21 18:57:52 +08:00
luwenpeng
70dab4a183 feature: TSG-17786 TFE增加对intercept策略的排序功能 2023-11-21 17:17:26 +08:00
wangmenglan
30922a45a8 适配控制报文格式修改 v4.8.45-20231120 2023-11-20 18:29:03 +08:00
luwenpeng
a63b66fe14 bugfix: Decrypted traffic TCP handshake packet invalid direction 2023-11-20 14:52:56 +08:00
fengweihao
f4e719a78b TSG-17693 修复错误的判断,导致lua脚本执行失败 v4.8.44-20231116 2023-11-16 15:20:17 +08:00
luwenpeng
c9623b5ccd 修正Decrypted Traffic TCP hanshake Packet的TCP Option v4.8.43-20231116 2023-11-15 18:18:23 +08:00
luwenpeng
c3b887f1c5 perf: 性能优化
* io_uring使用buffer pool避免内存分配与释放
    * packet io thread与worker thread无锁访问cmsg
    * 为解密流量的fd设置默认的TTL
2023-11-14 18:54:40 +08:00
luwenpeng
2b00650d3e TCP handshake for decrypted traffic disables IP fragmentation v4.8.41-20231108 2023-11-07 17:57:52 +08:00