gfwleak/tsg-tsg-os-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,645 Commits 92 Branches 330 Tags
12e657f51675e3ac7cbc705a0cdc5f2d2f6ea577
Commit Graph

700 Commits

Author SHA1 Message Date
wangmenglan
c0b4c054d7 更新TFE、SCE和packet_adapter, 修复ETH_P_8021AD协议解析 2023-09-08 08:23:17 +00:00
fumingwei
722a60f1f6 bugfix:TSG-16985:修改7400设备telegraf_security和telegraf_proxy服务启动顺序 2023-09-08 16:22:15 +08:00
fumingwei
ecebc678e6 bugfix:TSG-16816:修改telegraf中metrics的kafka topic命名 2023-09-07 09:25:59 +00:00
yangyubo
2715e303c3 TSG-15739:功能端支持输出IPFIX封装的UDP报文 2023-09-03 14:15:43 +00:00
yangwei
1b7444b1d3 ✨ feat(sapp): update to sapp-4.3.23.7f030e5 
Conflicts:
	ansible/install_config/group_vars/rpm_version.yml
 2023-08-25 20:44:44 +08:00
linxin
11ccfac664 更新inject helm文件 2023-08-25 20:44:42 +08:00
linxin
5972c62def 删除inject deploymeng判断条件 2023-08-25 20:44:42 +08:00
linxin
225ad33267 安装脚本中增加拷贝inject helm package 2023-08-25 20:44:41 +08:00
wangmenglan
8493c90cf8 clixon 更新至1.0.63 2023-08-25 20:44:41 +08:00
linxin
7fb9fff977 修改inject helm chart name 2023-08-25 20:44:41 +08:00
linxin
1a5dfaa677 更改inject打包逻辑 2023-08-25 20:44:41 +08:00
linxin
290d86b095 统一工作目录名称 2023-08-25 20:44:40 +08:00
linxin
148abbd7d4 测试packet-adapter 2023-08-25 20:44:40 +08:00
linxin
f980aa4eae TSG-16749: fish支持kubectl命令补全 2023-08-22 10:30:21 +08:00
linxin
f8580d24fb TSG-16748: 在os 23.08版本中注释掉stat_policy_enforcer插件 2023-08-22 10:22:45 +08:00
fumingwei
ad1a5e6c0b feature:7400和9140配置默认不启动consul服务 2023-08-20 20:31:27 +08:00
fumingwei
a6ffc4dbd1 feature:TSG-X node_exporter开启ethtool metric收集 2023-08-15 03:41:19 +00:00
liuxueli
64e6d700e0 更新stat_policy_enforcer: TSG-16619: 输出statistics_rule_hits的计数 2023-08-13 13:31:43 +00:00
liuxueli
4691fd076f 更新tsg_master、firewall，修复: 
TSG-16515: 单数据包多次扫描命中结果超16个时存在非法写导致段错误
 2023-08-08 18:32:02 +08:00
luwenpeng
93969b4695 TFE适配MRZCPD的分流算法的变更；并增加分流的调试日志 2023-08-08 11:42:27 +08:00
liuxueli
75bb77a08d 更新sapp、tsg_master、firewall、statistics_metrics、libfieldstat4、libstatistics, 支持: 
TSG-16060: 支持输出命中Statistics Policy和object的Metrics
 2023-08-06 21:45:09 +08:00
liuxueli
fa3e810e8e 更新tsg_master、firewall、session_record、quic、ssl、http，修复: 
tsg_master: 规范变量的定义; 支持关闭FS的相关统计，便于valgrind/asan定位内存的相关问题
tsg_master: 增加sni长度判断，同时解析结果异常时，增加释放已申请sni内存的操作
tsg_master: 修复application metrics更新包数时可能存在内存越界
quic: 增加长度判断，修复长度异常时造成的内存非法读
http: 修复strncasecmp时未对待查找串长度保护，可能读越界的错误
session_record/firewall/ssl: Debug版本链接ASAN，用于定位问题


(cherry picked from commit 29e1910607)
 2023-08-03 15:09:50 +08:00
linxin
c96a9c14d3 TSG-16401: 
为9140环境provision-config-apply增加重启telegraf相关组件
 2023-08-02 17:59:14 +08:00
fumingwei
280fdea3ca bugfix:TSG-16319:修改k3s service env文件位置 2023-07-25 20:53:24 +08:00
fumingwei
0999494140 bugfix:TSG-16319:修改k3s的service安装目录为/usr/lib/systemd/system 2023-07-25 18:57:52 +08:00
liuxueli
9935f126f9 9140/7400设备配置文件增加GENERATE_JA3_FINGERPRINT=1 2023-07-24 12:35:22 +00:00
fumingwei
5f8d5cec28 feature:TSG-16300:适配clixon新增sapp opening_timeout和closing_timeout配置项 2023-07-24 20:14:46 +08:00
wangmenglan
a63dd0414a Clixon更新至1.0.60; HAL支持修改mrglobal.conf模板中sz_data,sz_tunnel,check_buffer_leak字段 
TSG-16295: Clixon增加生成JA3指纹的开关
 2023-07-24 11:47:48 +00:00
linxin
95be2f533e TSG-16295: 在provision和clixon中增加是否生成JA3指纹的开关 2023-07-24 11:45:55 +00:00
songyanchao
e4c49d67ff 🎈 perf: Enable dropless rq 
Enable dropless rq
 2023-07-24 11:45:26 +00:00
fumingwei
8a277feada bugfix:TSG-16265:新增telegraf aggregators grace和delay配置项 2023-07-19 11:19:07 +00:00
fumingwei
21c9d1ab63 feature:TSG-16271:在provision和clixon中增加开关 2023-07-19 11:18:05 +00:00
fumingwei
43d0dab59e bugfix:修改安装PrettyTable使用清华源 2023-07-18 11:41:14 +00:00
fumingwei
89bffe2be6 feature:TSG-16254:os适配clixon SSL decode certificate开关 2023-07-18 11:35:26 +00:00
wangmenglan
27b3f65ef2 HAL调整k3s config.yaml配置, 调整系统预留内存资源 2023-07-18 16:17:00 +08:00
liuxueli
2359b01529 更新tsg_master、app_proto_identify, 修复: 
OMPUB-961 - P19现场: TSG MASTER解析SYN/SYN_ACK占用CPU2.6%左右
OMPUB-960 - P19现场: 基础协议识别插件(app_proto_identify)占用CPU较高(15%左右)
 2023-07-14 21:08:12 +08:00
wangmenglan
d0cd8e8ca8 HAL支持mrglobal.conf模板中poll_wait_throttle字段调整 2023-07-14 17:51:25 +08:00
liuxueli
859e5c0607 更新: tsg_master、session_record，修复: 
TSG-15999 - 日志中的app_full_path出现异常内容
TSG-15855 - Session Records存在大量重复Session ID
发送日志时开启KAFKA压缩 COMPRESSION_TYPE="snappy"
 2023-07-13 11:03:55 +00:00
wangmenglan
d47065b2b3 bugfix: SCE更新至1.0.14 
TSG-14170: Service Function的Health Check为None时，未获取到SF状态和MAC Address
 2023-07-13 11:02:35 +00:00
陆秋文
925b4a88eb disable the collection of mount service. 2023-07-13 07:14:57 +00:00
Lu Qiuwen
38541f4433 disable firmware upgrade at os install. 2023-07-13 12:08:39 +05:00
liuxueli
079e9646db 更新http、session_record、firewall, 修复: 
firewall: TCP/UDP未注册FS Line ID, 使用FS-operate函数操作可能会导致重启
http,session_record: 修正输出本地日志的级别
 2023-07-12 23:43:26 +08:00
yangwei
53c8a6bc7d ✨ feat(rpm and sapp.toml update): sapp.toml & mail.so 
1、sapp.toml 默认polling_priority=100
2、update to mail-1.0.19.e982b44, Fix TSG-12082 and Fix TSG-11013
 2023-07-12 14:50:23 +08:00
wangmenglan
aae891e082 ✨ feat(TSG-15994): GRUB新增isolcpus启动参数 2023-07-07 07:02:27 +00:00
fumingwei
a7950fdf04 feature:TSG-X os新增prometheus systemd exporter 2023-07-06 13:51:45 +00:00
liuxueli
0ad4e347b9 修正fs2_sysinfo.metrics/fs3_sysinfo.metrics的路径 2023-07-06 13:48:03 +00:00
fumingwei
f7727d6f3b bugfix:TSG-15730:增大pod probe时间 2023-07-06 13:40:20 +00:00
fengweihao
f96f47b513 更新app-proto-engine，版本变更：修改OS上main.conf模板 2023-07-06 06:19:09 +00:00
liuxueli
de0d5fa9d8 修正capture_packet_plug插件的部署位置 2023-07-05 20:38:21 +08:00
fumingwei
b01f346026 feature:TSG-15905:新增os适配decoders.HTTP_GZIP和decoders.MAIL_BASE64选项 2023-07-05 12:20:28 +00:00