gfwleak/tango-tfe
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,020 Commits 24 Branches 221 Tags
d7cf27a0a1efa166bc66d9c46fb38d6ff436afe7
Commit Graph

1020 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
luwenpeng
d7cf27a0a1 TSG-15204 TFE适配拦截策略user_region中删除protocol字段 v4.8.15-20230526 2023-05-26 14:46:36 +08:00
luwenpeng
8082a3f9e8 TSG-15240 对于Decrypted Traffic，TFE先执行Manipulation再执行Steering v4.8.14-20230526 2023-05-25 14:21:19 +08:00
luwenpeng
e1b16ee339 bugfix: close fd_fake_c/fd_fake_s on error 2023-05-22 16:03:06 +08:00
wangmenglan
fc2625c691 bugfix:修复packet io内存泄漏 v4.8.13-20230522 2023-05-22 15:19:29 +08:00
wangmenglan
b931a3dc58 packet io增加fieldstat状态统计 v4.8.12-20230515 2023-05-15 16:41:59 +08:00
wangmenglan
935aa7235e TFE优化解析控制报文,解决mpack只有proxy字段时,解析错误 v4.8.11-20230510 2023-05-10 20:06:54 +08:00
fengweihao
2a55a2be75 bugfix:修复管控策略Policy Hits Metrics误发送pinning_status，根据route_dir发送字节数 2023-05-10 17:51:57 +08:00
wangmenglan
542f4cbdfa TSG-14930 TFE支持发送控制报文给SAPP v4.8.10-20230509 2023-05-09 22:13:20 +08:00
fengweihao
fecc023418 适配GROUP_GROUP_RELATION表结构变更 v4.8.9-20230509 2023-05-09 17:11:13 +08:00
luwenpeng
4e1c470720 TFE Acceptor V3 不扫描Service Chaining Rule; 
tcp_passthrough执行优先级: No Intercept Rule大于Tcp Option Profile
 2023-05-09 15:39:45 +08:00
wangmenglan
ceffc9b168 TSG-14930 TFE支持发送控制报文给SAPP 2023-05-09 14:23:39 +08:00
luwenpeng
7c3b77fb2f TSG-14890 TFE输出Intercept Policy Hits Metrics v4.8.8-20230508 2023-05-08 15:32:55 +08:00
wangmenglan
5dcc85c1ee 解决编译报错 v4.8.7-20230506 2023-05-06 20:48:09 +08:00
wangmenglan
8de8ec1c5f TSG-14938 TFE支持新控制报文格式; 调整代码结构 2023-05-06 17:53:08 +08:00
wangmenglan
8a7c196c20 修改文件编码 2023-05-06 17:47:47 +08:00
wangmenglan
11a46269f1 将kni合并到tfe中 2023-05-06 17:47:38 +08:00
luwenpeng
48c303e856 增加tfe_telegraf.conf 2023-05-06 14:10:59 +08:00
luwenpeng
e729c5cee9 修改__cplusplus->__cpluscplus 2023-04-28 17:45:13 +08:00
luwenpeng
7b55524b4f bugfix: tcp_policy笔误 2023-04-28 15:06:28 +08:00
luwenpeng
ba64327e2f TSG-14898 TFE适配PXY_INTERCEPT_COMPILE，执行Intercept或No Intercept 2023-04-28 15:06:28 +08:00
fengweihao
3523e8a951 fieldstat3的metrc支持输出vsysid 2023-04-26 16:12:29 +08:00
fengweihao
b9a8a45540 优化fieldstat3句柄创建 2023-04-25 16:17:35 +08:00
fengweihao
0bb38a6969 TSG-14786 TFE输出Proxy Rule Hits Metric 2023-04-25 10:13:38 +08:00
luwenpeng
95c80c80cf BPF适配不同的编译环境 2023-04-23 19:16:28 +08:00
luwenpeng
cbf424884c cmsg适配控制报文类型, TFE_CMSG_SSL_INTERCEPT_STATE/TFE_CMSG_SSL_PINNING_STATE/TFE_CMSG_SSL_CERT_VERIFY的类型从uint64改为uint8 2023-04-23 16:55:30 +08:00
luwenpeng
2138d7f13e TFE适配MAAT4，编译表只注册一次 2023-04-23 16:35:42 +08:00
luwenpeng
97a4386bc4 TSG-14829 io_uring支持触发事件，适配mrzcpd的epoll_wait功能 2023-04-21 20:30:26 +08:00
luwenpeng
6e02f6b8ac 更新 maat json 2023-04-21 18:31:36 +08:00
luwenpeng
2ee26d758d bugfix 2023-04-21 18:31:36 +08:00
luwenpeng
1e6393b6d1 TFE处理decrypted traffic steering(service chaining rule)时支持多命中 
若命中intercept rule的流同时命中了多条service chaining rule
    只要有一条service chaining rule开启了decrypted traffic steering
    TFE就要执行decrypted traffic steering
 2023-04-21 18:31:36 +08:00
luwenpeng
f421e4df54 TSG-14789 TFE扫描service chaining策略，执行Decrypted Traffic Steering 2023-04-21 18:31:36 +08:00
luwenpeng
f741c3c025 TSG-14628 TFE适配TCP Option Profile库表的变更 2023-04-21 18:31:36 +08:00
luwenpeng
0a3d06eed1 TSG-14627 TFE适配Decryption Profile库表的变更 2023-04-21 18:31:36 +08:00
luwenpeng
f81209b225 CI禁用UPLOAD_SYMBOL_FILES v4.8.6-20230419 2023-04-18 19:46:07 +08:00
fengweihao
1430681184 TSG-14802 修复代理日志中common_service_category字段填写错误 v4.8.5-20230418 2023-04-18 17:52:24 +08:00
fengweihao
915dd00731 TSG-14704 用户自定义域中带有特殊字符策略无法生效 
TSG-14703 扫描ip和app_id后策略没有执行
v4.8.4-20230413 		2023-04-13 14:34:34 +08:00
fengweihao
77927208f9 适配maat_state_set_scan_district接口变更 v4.8.3-20230404 2023-04-04 19:52:39 +08:00
fengweihao
ed9a4739a1 TSG-14379 Monitor策略日志多命中情况下Vsys ID填写错误 v4.8.2-20230404 2023-04-04 16:06:40 +08:00
fengweihao
26b533cba9 bugfix:引用错误的头文件,导致CI构建失败 v4.8.1-20230403 2023-03-30 20:03:00 +08:00
fengweihao
df39fcda90 TSG-14484 Pxoxy支持Maat4 2023-03-30 19:39:18 +08:00
luwenpeng
a2a4c32384 TSG-13204 Decrypted Traffic Steering适配第三方设备状态的切换 
-> 当第三方设备的状态从可用变为不可用时
    * 当前Stream依然按照Steering的流程处理，从eventcb中退出
    * 下一个新的Stream开始UnSteering
-> 当第三方设备的状态从不可用变为可用时
    * 当前Stream依然按照UnSteering的流程处理
    * 下一个新Stream开始Steering
v4.7.02-20221230 		2022-12-30 15:53:19 +08:00
luwenpeng
b2c01eaa05 修改Decrypted Traffic Steering access log的输出 
* 将 FACKFD/ERR/DOWN 改为 FACKFD/ERR/CLIENT
    * 将 FACKFD/EOF/DOWN 改为 FACKFD/EOF/CLIENT
    * 将 FACKFD/ERR/UP   改为 FACKFD/ERR/SERVER
    * 将 FACKFD/EOF/UP   改为 FACKFD/EOF/SERVER
 2022-12-30 14:36:03 +08:00
luwenpeng
1e1214cf12 Decrypted Traffic Steering功能启用时仍然支持Pinning检测和Pinning Dynamic Bypass v4.7.01-20221229 2022-12-29 18:16:52 +08:00
luwenpeng
f2856eaa0b TSG-13196 Decrypted Traffic Steering增加FieldStat字段 
* stee_c_err
    * stee_s_err
    * stee_c_eof
    * stee_s_eof
 2022-12-29 17:24:06 +08:00
luwenpeng
cd93796cce bugfix: 修正decrypted traffic steering debug log输出的BEV_EVENT 2022-12-29 15:29:23 +08:00
luwenpeng
2a2bead767 TSG-13196 Decrypted Traffic Steering时照常统计intercept bytes 
* STAT_STREAM_INCPT_DOWN_BYTES
    * STAT_STREAM_INCPT_UP_BYTES
    * STAT_STREAM_INCPT_BYTES
 2022-12-29 14:28:53 +08:00
luwenpeng
0f542d376f TSG-13196 Decrypted Traffic Steering增加FieldStat字段 
* stee_ssl_conn
    * stee_http_conn
    * stee_c_tx_B
    * stee_s_rx_B
    * stee_s_tx_B
    * stee_c_rx_B
 2022-12-29 10:24:05 +08:00
luwenpeng
3268648414 TSG-13196 STAT_FD_CLOSE字段不统计Decrypted Traffic Steering的FD 2022-12-28 17:35:43 +08:00
luwenpeng
38cb6a56e7 bugfix: TFE-ENV 将tap0替换成TFE_DEVICE_DATA_INCOMING变量 2022-12-28 14:31:47 +08:00
luwenpeng
60d8f67f85 TSG-13171 Decrypted Traffic Steering构造的SYN/SYN ACK/ACK支持TimeStamp选项 2022-12-27 18:40:57 +08:00