更新tfe到v4.8.57, 版本修改: TSG-18177 Proxy删除关于FQDN Category的配置加载和扫描, 适配maat_scan_group函数变更

2024-01-03 18:34:04 +08:00
parent 6536b055b5
commit 4644d57c8b
3 changed files with 7 additions and 3 deletions
--- a/ansible/install_config/group_vars/rpm_version.yml
+++ b/ansible/install_config/group_vars/rpm_version.yml
@@ -70,8 +70,8 @@ sapp_rpm_version:
  sapp-pr: sapp-pr-4.3.34.10b3243

 tfe_rpm_version:
-  tfe: tfe-4.8.56.ced991b
-  tfe-pr: tfe-pr-4.8.56.ced991b
+  tfe: tfe-4.8.57.058a5e6
+  tfe-pr: tfe-pr-4.8.57.058a5e6

 tsg_app_rpm_version:
  context_based_detector: context_based_detector-6.0.2.039b5c3
--- a/ansible/roles/tfe/templates/doh.conf.j2
+++ b/ansible/roles/tfe/templates/doh.conf.j2
@@ -7,7 +7,6 @@ table_src_addr=ATTR_SOURCE_ADDR
 table_dst_addr=ATTR_DESTINATION_ADDR
 table_qname=ATTR_DOH_QNAME
 table_host=ATTR_SERVER_FQDN
-table_host_cat=ATTR_SERVER_FQDN_CAT

 [kafka]
 ENTRANCE_ID=0
--- a/ansible/roles/traffic-engine/files/helm/conf/tfe.conf
+++ b/ansible/roles/traffic-engine/files/helm/conf/tfe.conf
@@ -216,6 +216,11 @@ app_name="proxy_rule_hits"

 # for enable kni v4
 [packet_io]
+dup_packet_filter_enable=1
+dup_packet_filter_capacity=1000000
+dup_packet_filter_timeout=10
+# MESA_load_profile not support double
+#dup_packet_filter_error_rate=0.00001
 packet_io_debug=0
 packet_io_threads={{- include "traffic-engine.pktio.workerthread" . }}
 packet_io_cpu_affinity_mask={{- include "traffic-engine.pktio.cpu-affinity" . }}