Commit Graph

255 Commits

Author SHA1 Message Date
fumingwei
11c55a7ca1 bugfix:修改sapp runtime的日志级别由info改为fatal 2021-09-26 08:34:11 +00:00
lijia
54268c3fa1 TSG-7926, 开启mac_flipping且asymmetric_addr.conf没有ethernet层时, sapp反向注入数据包错误. 2021-09-25 00:15:19 +08:00
fumingwei
13df5f6b41 bugfix:修改provision.yml.d目录中有非.yml和.yaml结尾的配置文件,provision运行报错的bug 2021-09-22 15:21:48 +08:00
fumingwei
1e42442791 bugfix:修改设置hostname后,重启后hostname不生效的bug 2021-09-20 21:28:27 +08:00
fumingwei
cdabffaed4 bugfix:TSG-7836:当NPB_device为tera,provision删除inline_device_settings相关配置,tsg-os-provision执行失败问题 2021-09-20 21:10:41 +08:00
liuxueli
9ddf383c18 更新QUIC解析层,支持非标端口:8443,4433
TSG-7832: 访问https://quic.tech:8443/(h3-29),session record中没有产生quic日志
2021-09-18 18:05:36 +08:00
fumingwei
75f1aa18e9 bugfix:当npb_device为tera时,修改sapp允许接收的mac地址 2021-09-18 16:41:39 +08:00
fumingwei
8c8ed6793f bugfix:修改tsg-os因ddos配置文件编译失败问题 2021-09-18 16:13:27 +08:00
fumingwei
8dee4e6a05 feature:在provision.default.yml中新增ddos相关配置项 2021-09-18 15:33:17 +08:00
fengweihao
fd06266d82 更新tsg-ddos-sketch到v1.0.13,版本修改:修改配置文件中阈值由数组读取变为字符串读取 2021-09-18 15:08:01 +08:00
fumingwei
461812e29f bugfix:更新provision-apply-config执行提示信息和provision-apply-config对mrenv和mrzcpd的操作由restart变为start 2021-09-16 14:10:24 +08:00
“pengxuanzheng”
1d24575c81 📃 docs(TSG-7771): 更新tsg_conn_sketch.inf模板 2021-09-15 10:52:28 +00:00
fumingwei
badbed3a9a feature:调整provision.default.yml配置项 2021-09-15 14:33:35 +08:00
fumingwei
6b2bb76467 bugfix:修改sapp的tmpfiled中的d /run/sapp/alert_files/配置项 2021-09-15 14:32:35 +08:00
fumingwei
4ec65ae5ca bugfix:TSG-7758:9140环境升级配置修改问题 2021-09-15 14:32:16 +08:00
fumingwei
07b1967410 bugfix:TSG-7776:修改provision.yml文件缺少ipv6配置项导致tsg-os-provision service启动失败问题 2021-09-15 14:32:16 +08:00
fumingwei
e7a12dd826 bugfix:TSG-7773:7400环境升级后tfe未成功启动 2021-09-15 14:32:09 +08:00
fumingwei
c300a077a7 bugfix:TSG-7761:Firewall 整体内存占用过高超过内存限制导致SAPP重启 2021-09-14 17:05:33 +08:00
fengweihao
8f22f6e1ec 更新tsg-ddos-sketch,版本修改:配置文件变更 2021-09-14 08:46:54 +00:00
fumingwei
21ce1b8cb5 bugfix:TSG-7631:7400环境下当enable_policy_local_cache开启时,maat_redis listen固定端口7002 2021-09-14 15:51:47 +08:00
fumingwei
72236a02d4 bugfix:删除maat.conf中的REDIS_PORT_NUM配置项 2021-09-14 15:51:46 +08:00
fumingwei
20a5f919d4 bugfix:修改配置项cm.policy_server.port_range为cm.policy_server.port 2021-09-14 15:51:46 +08:00
fumingwei
8e1e10d3b8 bugfix:修改sudo provision-config-apply执行失败问题 2021-09-14 14:55:08 +08:00
fumingwei
31eaa7e3e2 bugfix:TSG-7759:7400 环境升级后sapp,tfe服务启动失败 2021-09-14 14:37:43 +08:00
fumingwei
7c16535ba2 bugfix:TSG-7760:9140环境自检无法启动 2021-09-14 14:35:16 +08:00
fumingwei
5fb058217c feature:将配置项device_seq更名为sequence_in_data_center,并加入device配置section 2021-09-14 06:30:27 +00:00
fumingwei
32c300c2cc bugfix:删除nic_policy_log的ipv6配置项 2021-09-14 14:12:44 +08:00
fumingwei
93a2033512 bugfix:将feature.stream_bypass_trigger_cpu_usage修改为advanced_settings.stream_bypass_trigger_cpu_usage 2021-09-14 14:10:19 +08:00
lijia
280aee8bfe 新增tsg-os-provision配置stream_bypass_trigger_cpu_usage, 方便控制bypass触发阈值. 2021-09-14 04:09:15 +00:00
fumingwei
a3b412367a bugfix:修改sudo tsg-diagnose-oneshot无法执行的bug 2021-09-13 18:54:03 +08:00
fumingwei
a4c999c849 feature:TSG-7623:更新tsg-diagnose 2021-09-13 18:14:49 +08:00
fumingwei
c05f583bf8 feature:新增advanced_settings默认配置项 2021-09-13 17:31:53 +08:00
fumingwei
01f9f56d53 refactor:将wannat_toroad和wannat_natgw合并到wannat配置项中 2021-09-13 17:31:53 +08:00
fumingwei
b371605342 refactor:修改provision.yml.sample配置项由enable_stream_bypass_under_ddos.eanble改为feature.enable_stream_bypass_under_ddos 2021-09-13 17:31:52 +08:00
fengweihao
63ad615cca 更新tsg-ddos-sketch到v1.0.12,版本修改:修复Udp上报问题 2021-09-13 07:03:41 +00:00
fumingwei
3a1d73991f bugfix:卸载rsyslog-kafka和librdkafka来修改自编译librdkafka安装失败问题 2021-09-13 14:11:26 +08:00
fumingwei
9a6c26e12d bugfix:增加provision.yml.d配置文件目录快照 2021-09-13 11:09:07 +08:00
fumingwei
db4be7f6f8 bugfix:增加7400通过provision-config-apply重启服务操作 2021-09-13 11:09:07 +08:00
fumingwei
56966169ed bugfix:修复9140上provision-config-apply执行后,服务启动失败问题 2021-09-13 11:09:06 +08:00
fumingwei
2248a1dc3f bugfix:删除使用workload-pre.target,使用conditionFilesExists systemd选项判断tsg-os-provision是否执行成功 2021-09-13 11:09:06 +08:00
fumingwei
0ffa8c2371 bugfix:TSG-7679:检查9140 service启动顺序对mrenv服务的影响 2021-09-13 11:09:06 +08:00
fumingwei
6fdb6cf220 bugfix:TSG-7633:9140环境下修改tsg-os-provison脚本位置,为tsg-os-provision-config-apply脚本增加可执行搜索路径 2021-09-13 11:09:06 +08:00
fumingwei
3b201023e2 feature:TSG-7616:新增tsg-os-provision provision.default.yml配置文件和provision.yml.d配置文件目录 2021-09-13 11:09:05 +08:00
fumingwei
5391701b74 bugfix:删除kakfa从公共yum源上安装的代码 2021-09-11 17:41:45 +08:00
lijia
7e5d40653e 更新sapp_v4.2.50, tcpdump_mesa_v1.0.8, wangw_v.1.3.5, wire_graft_v1.3.6,
TSG-7544 - sapp inline模式icmp保活应答包seq=0错误;
TSG-7563 - 自建GRE测试环境sapp反向发送RST失败;
TSG-7440 - sapp设置流BYPASS以抵御flood攻击的影响;
TSG-7621 - sapp不支持Vxlan内层HDLC, PPP封装格式;
TSG-7542 - 在GRE协议上测试ftp协议时,sub action为rst时,ftp没有阻断;
TSG-7561 - sapp和tcpdump_mesa支持捕获bypass的包;
2021-09-09 18:31:11 +08:00
fengweihao
9399aa41c0 更新app-proto-engine到v1.0.11,版本修改:TSG-7674 未加载License时正常运行,输出状态到Nezha,删除启动失败对sapp影响 2021-09-08 18:18:34 +08:00
fengweihao
0ad5064e9d 更新tsg-ddos-sketch到v1.0.9,版本修改:增加file_stat输出,代码优化,配置参数变更 2021-09-08 18:18:34 +08:00
liuxueli
15329aeb79 更新插件:tsg_master quic rtp tsg_conn_sketch capture_packet_plug,修复或适配功能:
TSG-7607 - firewall 适配TOPIC名称变更
TSG-7600 - 根据APP_ID_DICT中的timeout时间设置流超时时间
TSG-7626 - 新疆发现: IP归属地日志字段仅存在一级
TSG-7551 - quic解析层支持解析GQUIC 35/39 DONE
TSG-7627 - 新疆环境:解析加密QUIC SNI导致watchdog timeout
TSG-7636 - 修复QUIC解析层存在的读越界问题
TSG-7634 - QUIC解析层支持解析gquic 23/34/37/41/44的SNI
TSG-7604 - 新疆环境发现: RTP解析层将DNS数据包误识别为RTP协议
TSG-7624 - 捕包插件适配topic名称变更
TSG-7628 - 新疆环境:tsg_conn_sketch会话记录插件处理SIP流量延时较高
2021-09-07 03:38:38 +00:00
liuxueli
930856d420 TSG-7612: telegraf连接kafka需要加认证及适配topic变更 2021-09-07 03:38:38 +00:00
songyanchao
d7ee49e4c4 feat(TSG-9140): TSG-9140集成nz-talon
TSG-OS-9140集成nz-talon安装包
2021-09-03 08:03:39 +00:00