gfwleak/tsg-tsg-os-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,450 Commits 92 Branches 330 Tags
18b26201b06afaad3bd2c2d431db3dad95fd9a67
Commit Graph

626 Commits

Author SHA1 Message Date
fumingwei
18b26201b0 P0906环境删除sapp conn_telemetry插件 2023-06-21 19:46:00 +08:00
fumingwei
10ed7b00a0 bugfix:新增控制sapp main.conf的sce,proxy,shaping sid的配置 2023-06-21 19:29:51 +08:00
fumingwei
63e9dde2cf feature:TSG-15676:helm适配session_marker配置项 2023-06-21 19:17:55 +08:00
wangmenglan
86243fc66b Clixon更新到1.0.48 调整MRZCPD配置; OS大页内存分配逻辑调整 2023-06-21 17:44:51 +08:00
fumingwei
3219739877 feature:适配新的prometheus输出 2023-06-21 08:41:27 +00:00
wangmenglan
4e4588ccf9 OS移除K3S驱逐判断 2023-06-21 16:19:33 +08:00
linxin
2dea2f5673 On branch feature-15326 
Changes to be committed:
	new file:   ansible/roles/sosreport/files/Auditd_info.py
	new file:   ansible/roles/sosreport/files/clixon.py
	new file:   ansible/roles/sosreport/files/k3s.py
	new file:   ansible/roles/sosreport/files/mrzcpd.py
	deleted:    ansible/roles/sosreport/files/tty.py
	modified:   ansible/roles/sosreport/tasks/main.yml
 2023-06-21 15:21:32 +08:00
fumingwei
10b108afdb feature:TSG-15664:OS适配授权管理 2023-06-21 04:17:42 +00:00
fengweihao
d4319a83a0 更新app-proto-engine到v3.0.1, 版本修改: 1)app_proto_engine初始化时增加flow_table_mode配置 2)优化上报路径日志输出 2023-06-21 03:33:58 +00:00
fumingwei
9987759cc2 bugfix:将k3s-airgap-images-amd64.tar从代码中获取改为从file repo中获取 2023-06-21 11:21:07 +08:00
songyanchao
5becfd7b81 🐞 fix: 修复 ofed ansible 脚本错误问题 
修复 ofed ansible 脚本错误问题
 2023-06-20 13:06:00 +00:00
fumingwei
1b28801646 feature:promethues新增component字段 2023-06-20 18:47:51 +08:00
fumingwei
8d658eddf0 bugfix:TSG-15658:更新mrzcpd-exporter的merge url 2023-06-20 18:09:34 +08:00
fumingwei
56af272084 bugfix:container image中安装python2和PrettyTable 2023-06-20 08:56:59 +00:00
songyanchao
9c160c07b3 🎈 perf(DPISDN-11): Update ofed to 5.8-2.0.3.0 
Update ofed to 5.8-2.0.3.0
 2023-06-20 04:38:43 -04:00
fumingwei
0be2737bc8 bugfix:修改ipmi和reloader的helm名字 2023-06-20 16:21:01 +08:00
fumingwei
198b3e7ba2 bugfix:TSG-14935:NetworkManager新增no-auto-default配置项 2023-06-20 15:48:40 +08:00
fumingwei
380d3bceac feature:修改cm cache prometheus收集方式 2023-06-20 14:29:17 +08:00
fumingwei
2e228cac53 bugfix:更新cm cache redis配置 2023-06-19 21:49:54 +08:00
fumingwei
e0de2f4447 bugfix:修改sce pod设备默认容器错误问题 2023-06-19 19:06:53 +08:00
wangmenglan
7a57039250 调整AMD处理器分配CPU给MRZCPD逻辑 2023-06-19 15:09:36 +08:00
wangmenglan
b283fe1dbf Clixon更新到1.0.45 
TSG-15626 Clixon支持渲染驱动rxcore配置
TSG-15582 Clixon支持cm policy local cache clixon配置项
TSG-15318 Clixon 增加non-interactive mode
 2023-06-19 07:00:01 +00:00
wangmenglan
b8e7d4972b TSG-15596 OS适配AMD处理器 2023-06-19 07:00:01 +00:00
wangmenglan
034c064e83 更新Clixon，支持配置Packet IO affinity 2023-06-19 07:00:01 +00:00
songyanchao
4fe62c5732 ✨ feat(DPISDN-9): 9140设备支持安装多平台的MRZCPD RPM 
9140设备支持安装多平台的MRZCPD RPM
 2023-06-19 07:00:01 +00:00
fumingwei
2be40c14fe feature:TSG-15583:os新增cm cache功能 2023-06-19 07:00:01 +00:00
linxin
e3c5474806 增加sosreport tty脚本插件负责执行aureport --tty收集审计信息 2023-06-16 21:19:27 +08:00
fumingwei
954152e2c3 bugfix:修改内网环境下prometheus kube-state-metrics pod找不到镜像问题 2023-06-16 15:08:22 +08:00
wangmenglan
b368984ef2 ✨ feat(TSG-15579): 调整firewall和proxy traffic_mirror相关配置 2023-06-15 13:10:29 +00:00
fumingwei
ace45fd961 bugfix:TSG-15454:更新os kni配置文件 2023-06-15 11:13:43 +08:00
fumingwei
17b917329c bugfix:修复traffic-engine中的prometheus.io/port配置错误问题 2023-06-14 10:12:31 +00:00
linxin
3b0e80bcf9 修改k3s自签证书默认有效期为5年 2023-06-12 13:19:09 +00:00
fumingwei
e9e00202c9 feature:TSG-15520:将host上的/dev/bus/usb目录映射到容器中 2023-06-12 13:09:45 +00:00
linxin
a95b8fcccf 替换k3s版本至v1.27.2+k3s1。解决provided-node-ip未正确删除问题 2023-06-12 13:08:08 +00:00
wangmenglan
8fd83e59ee 🐞 fix(TSG-15273): OS调整系统预留内存；更新TFE到4.8.26 2023-06-12 12:29:44 +00:00
luwenpeng
226db1891f 将hasp_update更改为hasp-tools; TSG-15458 基于Sentinel LDK的C API检查软锁/硬锁的授权是否有效 2023-06-12 14:33:50 +08:00
wangmenglan
e00c2c5f00 ✨ feat更新Clixon到1.0.42 
TSG-15468: 支持根据NUMA节点下CPU的个数，动态分配CPU给MRZCPD
TSG-15467: Clixon支持session_distribution_policy命令
TSG-15466: Clixon支持traffic_mirror命令
 2023-06-08 19:49:36 +08:00
liuxueli
d4dafa5535 修正配置文件(maat.conf): EFFECT_INTERVAL_MS=1000,GARBAGE_COLLECT_MS=6000,RULE_UPDATE_CHECK_INTERVAL_MS=1000 2023-06-06 11:52:43 +00:00
wangmenglan
aa852615b9 更新TFE和Clixon 
修复：TSG-15349 - TSG X环境因mrzcpd未启动导致pod无法启动
新增：TSG-15354 - 新增consul helmchart nodeName配置项
 2023-06-06 02:20:39 +00:00
liuxueli
1634c5bdd2 更新tsg_master、tsg_conn_sketch、app_sketch_local，修复或新增: 
TSG-15317 - VoIP Records中RTP原始包缺少文件下载地址
tsg_master,app_sketch_local: 增加MAAT4的输出统计
 2023-06-05 11:22:48 +00:00
linxin
f4dee3df7a 固定node name用于解决修改hostname后删除node重启服务导致pod pending 2023-06-05 14:15:42 +08:00
杨玉波
005309a438 增加Application and Protocol Metrics的telegraf配置 2023-06-02 12:32:32 +00:00
fumingwei
8250cf4da8 feature:TSG-15285:在容器中安装valgrind 2023-06-02 01:49:54 +00:00
fumingwei
124a06ba6a bugfix:修改配置文件笔误 2023-05-31 07:59:56 +08:00
liuxueli
0c00e277ab 更新tsg_master、firewall、tsg_conn_sketch插件,修复： 
TSG-15152 - Dashboard Main下Security Policy Monitor统计数量远低于Sessioin Records对应时间范围内的统计数量
TSG-15269 - monitor rdp和monitor openvpn的策略，安全日志中有对应日志，但策略详情页log count为0
TSG-14403 - 安全策略命中allow,deny,intercept动作后，流量不会再命中Service Chaining原始流量策略
TSG-15196 - 同时设置条件一样的Security-allow和Proxy-Intercept，同时命中，优先级应Allow>Intercept
TSG-14259 - Security Events命中Intercept动作后SSL.Server Side Version、SSL.Client Side Version为空
TSG-14064 - 满足Session Records产生满足条件的流量未产生Session日志
TSG-13577 - deny-rate limit动作日志中记录的包数与策略捕包包数相差很大
TSG-14402 - 有应答的DNS协议链接误识别为Asymmetric
TSG-13319 - 双方向流量错误标注Flag：Asymmetric
TSG-14616 - Security Shunt对应流量结束30分钟后无对应策略动作统计
TSG-14580 - Security策略Shunt动作生效情况下，对应流量产生Session Records日志
TSG-14773 - Allow+IP优先级低于Shunt+IP+SSL
TSG-15232 - VoIP、GTP-C日志统计vsys不准确
 2023-05-30 21:35:37 +08:00
fumingwei
6332ae6d91 bugfix:TSG-14782:使用systemd timer实现清理orphaned pods目录 2023-05-30 20:11:33 +08:00
liuxueli
328c774356 TSGX设备默认打开发送拦截日志的开关SEND_INTERCEPT_LOG=1 2023-05-26 11:35:17 +00:00
fumingwei
fa28cf5550 feature:在容器中安装perl相关工具 2023-05-22 11:27:05 +00:00
fumingwei
b2bbc899ae bugfix:修改tfe metric模板telegraf_ip配置项笔误 2023-05-22 10:23:28 +00:00
fumingwei
6de46d5277 feature:1.修改自检pod的namespace为tsg-os-system 2.修改reloader容器名字为config-reloader 2023-05-19 16:36:09 +08:00