gfwleak/tsg-tsg-os-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
518 Commits 92 Branches 330 Tags
11c55a7ca14bb64068d2a00dd1953fdc116a0aee
Commit Graph

518 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
fumingwei
11c55a7ca1 bugfix:修改sapp runtime的日志级别由info改为fatal v21.09-rc5 2021-09-26 08:34:11 +00:00
“pengxuanzheng”
d6a27e00f4 📃 docs(TSG-7812): update hos-client-cpp-2.0.4 to 2.0.5 2021-09-26 10:16:44 +08:00
“pengxuanzheng”
238cf22df3 📃 docs(TSG-7917): update fw_http_plug-4.0.4 to 4.0.5 2021-09-26 10:15:07 +08:00
“pengxuanzheng”
4220d1a1fd 📃 docs(TSG-7919): update tsg_conn_sketch-3.0.28 to tsg_conn_sketch-3.0.29 2021-09-26 10:12:26 +08:00
lijia
54268c3fa1 TSG-7926, 开启mac_flipping且asymmetric_addr.conf没有ethernet层时, sapp反向注入数据包错误. 2021-09-25 00:15:19 +08:00
liuxueli
dfbb2e014c 更新quic解析层，修复： 
TSG-7850 - 7400环境(161)sapp程序意外关闭
v21.09-rc4 		2021-09-24 12:03:56 +08:00
fengweihao
0c497e353e 更新app-proto-engine到v2.0.12,版本修改:第三方特征库升级到1.560 v21.09-rc3 2021-09-23 14:10:50 +08:00
“pengxuanzheng”
b8468f4dd3 📃 docs(TSG-7834,TSG-7846): update tsg_conn_sketch-3.0.26 to tsg_conn_sketch-3.0.28 v21.09-rc2 2021-09-22 16:06:09 +08:00
fumingwei
13df5f6b41 bugfix:修改provision.yml.d目录中有非.yml和.yaml结尾的配置文件,provision运行报错的bug 2021-09-22 15:21:48 +08:00
fumingwei
1e42442791 bugfix:修改设置hostname后,重启后hostname不生效的bug v21.09-rc1 2021-09-20 21:28:27 +08:00
fumingwei
cdabffaed4 bugfix:TSG-7836:当NPB_device为tera,provision删除inline_device_settings相关配置,tsg-os-provision执行失败问题 2021-09-20 21:10:41 +08:00
lijia
93eeff1651 TSG-7818, ipv6环境下，安全策略http协议重定向时，产生日志，但是重定向网址没有打开. v21.09-rc0 2021-09-18 20:32:42 +08:00
liuxueli
9ddf383c18 更新QUIC解析层，支持非标端口：8443，4433 
TSG-7832: 访问https://quic.tech:8443/（h3-29），session record中没有产生quic日志
 2021-09-18 18:05:36 +08:00
fumingwei
75f1aa18e9 bugfix:当npb_device为tera时,修改sapp允许接收的mac地址 2021-09-18 16:41:39 +08:00
fumingwei
8c8ed6793f bugfix:修改tsg-os因ddos配置文件编译失败问题 2021-09-18 16:13:27 +08:00
fumingwei
8dee4e6a05 feature:在provision.default.yml中新增ddos相关配置项 2021-09-18 15:33:17 +08:00
fengweihao
fd06266d82 更新tsg-ddos-sketch到v1.0.13,版本修改：修改配置文件中阈值由数组读取变为字符串读取 2021-09-18 15:08:01 +08:00
“pengxuanzheng”
22e4b7c3f6 📃 docs(TSG-7799): update-tsg_conn_sketch-3.0.25-to-3.0.26 2021-09-17 17:48:03 +08:00
liuxueli
db2c9f3b09 更新fw_http_plug、app——proto_identify，修复： 
TSG-7810 - Security策略HTTP协议deny动作，添加request body没有阻断效果
增加是否继续识别基础协议的的逻辑，如识别出SMTP后是否继续识别基础协议
 2021-09-17 17:06:37 +08:00
“pengxuanzheng”
b6f8c334e2 📃 docs(TSG-7799,TSG-7763): update tsg_conn_sketch-3.0.24-to-3.0.25 2021-09-16 17:10:42 +08:00
fumingwei
deffce8408 bugfix:TSG-7792:7400环境升级完成后首次执行，自检不通过的用例 2021-09-16 15:14:04 +08:00
fumingwei
461812e29f bugfix:更新provision-apply-config执行提示信息和provision-apply-config对mrenv和mrzcpd的操作由restart变为start 2021-09-16 14:10:24 +08:00
lijia
6253db785c 更新sapp v4.2.54, 
TSG-7787, 解决ddos bypass的流超时被重置, coredump的问题;
TSG-7791, 方便debug, sapp启动时输出PID, TID, thread_index, PSR的对应关系;
 2021-09-16 09:53:33 +08:00
“pengxuanzheng”
1d24575c81 📃 docs(TSG-7771): 更新tsg_conn_sketch.inf模板 2021-09-15 10:52:28 +00:00
lijia
7015cc6ffe 升级sapp, tcpdump_mesa, 新增libMESA_jump_layer, 
TSG-7686, sapp不支持gtp扩展头部;
TSG-7787, 修复sapp under ddos coredump;
 2021-09-15 18:21:25 +08:00
liuxueli
34a1c8a1e6 更新http、dns、quic、fw_http_plug插件，修复： 
TSG-7767 - quic 解析层存在内存泄漏
TSG-7762 - http解析层http_host_parser函数返回已释放的指针导致tsg_master非法读
TSG-7729 - 福建环境 DNS解析层memset占用7.7% CPU，DNS 29万pps
TSG-7755 - 新疆环境：扫描关键字命中音视频内容
 2021-09-15 16:28:28 +08:00
fumingwei
badbed3a9a feature:调整provision.default.yml配置项 2021-09-15 14:33:35 +08:00
fumingwei
6b2bb76467 bugfix:修改sapp的tmpfiled中的d /run/sapp/alert_files/配置项 2021-09-15 14:32:35 +08:00
fumingwei
4ec65ae5ca bugfix:TSG-7758:9140环境升级配置修改问题 2021-09-15 14:32:16 +08:00
fumingwei
07b1967410 bugfix:TSG-7776:修改provision.yml文件缺少ipv6配置项导致tsg-os-provision service启动失败问题 2021-09-15 14:32:16 +08:00
fumingwei
e7a12dd826 bugfix:TSG-7773:7400环境升级后tfe未成功启动 2021-09-15 14:32:09 +08:00
lizhuang
2a2af77ccb bugfix:修改var,home在fstab里的挂载方式由overlay变为bind 2021-09-14 09:24:43 +00:00
fumingwei
c300a077a7 bugfix:TSG-7761:Firewall 整体内存占用过高超过内存限制导致SAPP重启 2021-09-14 17:05:33 +08:00
fengweihao
8f22f6e1ec 更新tsg-ddos-sketch,版本修改：配置文件变更 2021-09-14 08:46:54 +00:00
fumingwei
21ce1b8cb5 bugfix:TSG-7631:7400环境下当enable_policy_local_cache开启时，maat_redis listen固定端口7002 2021-09-14 15:51:47 +08:00
fumingwei
72236a02d4 bugfix:删除maat.conf中的REDIS_PORT_NUM配置项 2021-09-14 15:51:46 +08:00
fumingwei
20a5f919d4 bugfix:修改配置项cm.policy_server.port_range为cm.policy_server.port 2021-09-14 15:51:46 +08:00
fumingwei
8e1e10d3b8 bugfix:修改sudo provision-config-apply执行失败问题 2021-09-14 14:55:08 +08:00
fumingwei
31eaa7e3e2 bugfix:TSG-7759:7400 环境升级后sapp，tfe服务启动失败 2021-09-14 14:37:43 +08:00
fumingwei
7c16535ba2 bugfix:TSG-7760:9140环境自检无法启动 2021-09-14 14:35:16 +08:00
fumingwei
5fb058217c feature:将配置项device_seq更名为sequence_in_data_center,并加入device配置section 2021-09-14 06:30:27 +00:00
liuxueli
21ff0f636e 更新tsg_master、quic、ftp、app_proto_identify、tsg_conn_sketch，修复或新增： 
TSG-7690 - 功能端会话日志输出QUIC协议结果
TSG-7701 - tsg_conn_sketch hos模块启动失败
TSG-7753 - QUIC allow/deny日志中未展示SNI/VERSION/UA字段
TSG-7756 - 新疆环境 QUIC.v13.1异常存在重启
修复日志中schema_type与l7_protocol日志字段不一致
 2021-09-14 06:19:56 +00:00
fumingwei
32c300c2cc bugfix:删除nic_policy_log的ipv6配置项 2021-09-14 14:12:44 +08:00
fumingwei
93a2033512 bugfix:将feature.stream_bypass_trigger_cpu_usage修改为advanced_settings.stream_bypass_trigger_cpu_usage 2021-09-14 14:10:19 +08:00
lijia
280aee8bfe 新增tsg-os-provision配置stream_bypass_trigger_cpu_usage, 方便控制bypass触发阈值. 2021-09-14 04:09:15 +00:00
“pengxuanzheng”
fd1fbb8614 📃 docs(TSG-7690): update-tsg_conn_sketch-3.0.23.2a82212 to tsg_conn_sketch-3.0.24dd365a8 2021-09-14 10:21:48 +08:00
liuxueli
ae01c4f7d9 更新tsg_master、quic、http、fw_quic_plug、fw_http_plug,修复： 
TSG-7542 - 在GRE协议上测试ftp协议时，sub action为rst时，ftp没有阻断
TSG-7747 - QUIC解析层调整SNI/UA的默认索引值
quic: 第一个数据包尝试解析SNI，支持QUIC SNI的白名单
http: 支持URI可以不以'/'开始进行解析
fw_http_plug: 修正common_c2s_pkt_num、common_s2c_pkt_num字段名称，common_c2s_pkt_num改为common_c2s_pkt_diff、common_s2c_pkt_num改为common_s2c_pkt_diff
 2021-09-13 19:17:51 +08:00
fumingwei
a3b412367a bugfix:修改sudo tsg-diagnose-oneshot无法执行的bug 2021-09-13 18:54:03 +08:00
fengweihao
d1abe32f72 更新tfe到v4.5.14,版本修改：优化brotli压缩等级设置 2021-09-13 10:23:57 +00:00
fumingwei
a4c999c849 feature:TSG-7623:更新tsg-diagnose 2021-09-13 18:14:49 +08:00