gfwleak/tsg-tsg-os-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update: firewall-3.3.4.624df14

Browse Source
This commit is contained in:
liuxueli
2024-07-08 05:16:00 +00:00
committed by 付明卫
parent 70daa9cccd
commit 0f1dec9456
3 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ansible/install_config/group_vars/rpm_version.yml
View File

@@ -3,7 +3,7 @@ certstore_rpm_version:
firewall_rpm_version: firewall_rpm_version:
conn_telemetry: conn_telemetry-1.0.3.4ef6df6 conn_telemetry: conn_telemetry-1.0.3.4ef6df6
firewall: firewall-3.3.2.c1104bf firewall: firewall-3.3.4.624df14
glimpse_detector: glimpse_detector-3.1.1.6b887d8 glimpse_detector: glimpse_detector-3.1.1.6b887d8
qdpi_detector: qdpi_detector-5.0.0.75424a0 qdpi_detector: qdpi_detector-5.0.0.75424a0
dos_protector: dos_protector-2.0.1.434f8b6 dos_protector: dos_protector-2.0.1.434f8b6

2
ansible/roles/firewall/templates/main.conf.j2.j2
View File

@@ -54,6 +54,8 @@ DEVICE_SEQ_IN_DATA_CENTER={{ session_id_generator.snowflake_worker_id_offset }}
GENERATE_JA3_FINGERPRINT=1 GENERATE_JA3_FINGERPRINT=1
PERIODIC_SCAN_INTERVAL_MS=120000 PERIODIC_SCAN_INTERVAL_MS=120000
APPSKETCH_SWITCH=1
[FIREWALL] [FIREWALL]
# hijack, replace # hijack, replace
DNS_RESPONSE_MODE=replace DNS_RESPONSE_MODE=replace

6
ansible/roles/traffic-engine/files/helm/conf/main.conf
View File

@@ -45,6 +45,12 @@ PERIODIC_SCAN_INTERVAL_MS=120000
OSFP_DB_JSON_PATH=tsgconf/firewall_osfp_db.json OSFP_DB_JSON_PATH=tsgconf/firewall_osfp_db.json
L7_PROTOCOL_FILE=./tsgconf/firewall_l7_protocol.conf L7_PROTOCOL_FILE=./tsgconf/firewall_l7_protocol.conf
{{ if and (eq .Values.appsketch.context_based_detector .Values.define_enable_val_yes) (eq .Values.appsketch.enable .Values.define_enable_val_yes) }}
APPSKETCH_SWITCH=1
{{- else }}
APPSKETCH_SWITCH=0
{{- end }}
[FIREWALL] [FIREWALL]
# hijack, replace # hijack, replace
DNS_RESPONSE_MODE=replace DNS_RESPONSE_MODE=replace