Commit Graph

1039 Commits

Author SHA1 Message Date
wangmenglan
e716f21b8e TFE 在多线程模式下bpf_hash_mode配置不符合预期时,启动失败 v4.8.23-20230608 2023-06-08 17:17:10 +08:00
luwenpeng
db5530aa56 TSG-15381 TFE适配MAAT4的maat_plugin_table_get_ex_data()接口变更 2023-06-08 16:44:34 +08:00
wangmenglan
396f8426f9 Packet IO支持单向流发送日志 v4.8.22-20230606 2023-06-06 19:28:56 +08:00
wangmenglan
a97a90ac7d TFE Packet IO 创建metric句柄 v4.8.21-20230605 2023-06-05 19:24:37 +08:00
luwenpeng
cb39660a1a TSG-15328 TLS Decrypted的HTTP2流量未Steering给第三方设备
TSG-15329 命中Intercept & Decrypted Service Chaining Policy且开启tcp_passthrough的流量仍Steering给第三方设备
2023-06-05 17:37:25 +08:00
wangmenglan
409dfb7e4b 🐞 fix: 调整TFE conf 文件, 使用四元组分流; 调整metric接口调用位置 2023-06-05 17:20:19 +08:00
wangmenglan
4d26281338 TFE Packet IO支持带封装报文格式 v4.8.20-20230602 2023-06-02 19:51:45 +08:00
luwenpeng
f00ef65963 perf: throughput_metrics_inc禁用原子操作,并改为inline 2023-06-01 17:24:05 +08:00
luwenpeng
8afad45a40 perf: 优化user_data结构体的内存分配与释放 2023-06-01 16:28:52 +08:00
luwenpeng
934d796d65 feature: worker thread不再发送intercept metrics 2023-06-01 15:48:23 +08:00
luwenpeng
9395538973 perf: 查询流表时关闭addr2string 2023-06-01 14:45:50 +08:00
luwenpeng
a9df9ebe81 perf: TFE启动后关闭stderr输出 2023-06-01 11:02:46 +08:00
luwenpeng
9032f13bbf perf: 将MESA_handle_runtime_log封装为宏函数,先判断日志级别再拼接字符串 2023-06-01 10:35:17 +08:00
wangmenglan
0973d8c35a 🐞 fix(TSG-15308): 修复packet io thread启动时,intercept_policy_enforcer为空导致core v4.8.19-20230602 2023-05-31 20:17:22 +08:00
fengweihao
6574566276 bugfix:修复HTTP请求中没有HOST时,未判空导致coredump 2023-05-31 19:16:21 +08:00
luwenpeng
5af89ccc93 bugfix v4.8.18-20230530 2023-05-30 20:08:26 +08:00
wangmenglan
f32535e557 🐞 fix(TSG-15212): 修复TFE_CMSG_SSL_INTERCEPT_STATE字段设置错误; 修复msgpack默写字段为空时, 增加默认值 2023-05-30 19:40:01 +08:00
fengweihao
7769413d75 bugfix: 修复proxy_rule_hits中metric下action动作错误问题 v4.8.17-20230530 2023-05-30 15:46:34 +08:00
wangmenglan
685e4ada9a bugfix: memleak v4.8.16-20230526 2023-05-26 18:54:59 +08:00
luwenpeng
d7cf27a0a1 TSG-15204 TFE适配拦截策略user_region中删除protocol字段 v4.8.15-20230526 2023-05-26 14:46:36 +08:00
luwenpeng
8082a3f9e8 TSG-15240 对于Decrypted Traffic,TFE先执行Manipulation再执行Steering v4.8.14-20230526 2023-05-25 14:21:19 +08:00
luwenpeng
e1b16ee339 bugfix: close fd_fake_c/fd_fake_s on error 2023-05-22 16:03:06 +08:00
wangmenglan
fc2625c691 bugfix:修复packet io内存泄漏 v4.8.13-20230522 2023-05-22 15:19:29 +08:00
wangmenglan
b931a3dc58 packet io增加fieldstat状态统计 v4.8.12-20230515 2023-05-15 16:41:59 +08:00
wangmenglan
935aa7235e TFE优化解析控制报文,解决mpack只有proxy字段时,解析错误 v4.8.11-20230510 2023-05-10 20:06:54 +08:00
fengweihao
2a55a2be75 bugfix:修复管控策略Policy Hits Metrics误发送pinning_status,根据route_dir发送字节数 2023-05-10 17:51:57 +08:00
wangmenglan
542f4cbdfa TSG-14930 TFE支持发送控制报文给SAPP v4.8.10-20230509 2023-05-09 22:13:20 +08:00
fengweihao
fecc023418 适配GROUP_GROUP_RELATION表结构变更 v4.8.9-20230509 2023-05-09 17:11:13 +08:00
luwenpeng
4e1c470720 TFE Acceptor V3 不扫描Service Chaining Rule;
tcp_passthrough执行优先级: No Intercept Rule大于Tcp Option Profile
2023-05-09 15:39:45 +08:00
wangmenglan
ceffc9b168 TSG-14930 TFE支持发送控制报文给SAPP 2023-05-09 14:23:39 +08:00
luwenpeng
7c3b77fb2f TSG-14890 TFE输出Intercept Policy Hits Metrics v4.8.8-20230508 2023-05-08 15:32:55 +08:00
wangmenglan
5dcc85c1ee 解决编译报错 v4.8.7-20230506 2023-05-06 20:48:09 +08:00
wangmenglan
8de8ec1c5f TSG-14938 TFE支持新控制报文格式; 调整代码结构 2023-05-06 17:53:08 +08:00
wangmenglan
8a7c196c20 修改文件编码 2023-05-06 17:47:47 +08:00
wangmenglan
11a46269f1 将kni合并到tfe中 2023-05-06 17:47:38 +08:00
luwenpeng
48c303e856 增加tfe_telegraf.conf 2023-05-06 14:10:59 +08:00
luwenpeng
e729c5cee9 修改__cplusplus->__cpluscplus 2023-04-28 17:45:13 +08:00
luwenpeng
7b55524b4f bugfix: tcp_policy笔误 2023-04-28 15:06:28 +08:00
luwenpeng
ba64327e2f TSG-14898 TFE适配PXY_INTERCEPT_COMPILE,执行Intercept或No Intercept 2023-04-28 15:06:28 +08:00
fengweihao
3523e8a951 fieldstat3的metrc支持输出vsysid 2023-04-26 16:12:29 +08:00
fengweihao
b9a8a45540 优化fieldstat3句柄创建 2023-04-25 16:17:35 +08:00
fengweihao
0bb38a6969 TSG-14786 TFE输出Proxy Rule Hits Metric 2023-04-25 10:13:38 +08:00
luwenpeng
95c80c80cf BPF适配不同的编译环境 2023-04-23 19:16:28 +08:00
luwenpeng
cbf424884c cmsg适配控制报文类型, TFE_CMSG_SSL_INTERCEPT_STATE/TFE_CMSG_SSL_PINNING_STATE/TFE_CMSG_SSL_CERT_VERIFY的类型从uint64改为uint8 2023-04-23 16:55:30 +08:00
luwenpeng
2138d7f13e TFE适配MAAT4,编译表只注册一次 2023-04-23 16:35:42 +08:00
luwenpeng
97a4386bc4 TSG-14829 io_uring支持触发事件,适配mrzcpd的epoll_wait功能 2023-04-21 20:30:26 +08:00
luwenpeng
6e02f6b8ac 更新 maat json 2023-04-21 18:31:36 +08:00
luwenpeng
2ee26d758d bugfix 2023-04-21 18:31:36 +08:00
luwenpeng
1e6393b6d1 TFE处理decrypted traffic steering(service chaining rule)时支持多命中
若命中intercept rule的流同时命中了多条service chaining rule
    只要有一条service chaining rule开启了decrypted traffic steering
    TFE就要执行decrypted traffic steering
2023-04-21 18:31:36 +08:00
luwenpeng
f421e4df54 TSG-14789 TFE扫描service chaining策略,执行Decrypted Traffic Steering 2023-04-21 18:31:36 +08:00