Commit Graph

56 Commits

Author SHA1 Message Date
fumingwei
93a2033512 bugfix:将feature.stream_bypass_trigger_cpu_usage修改为advanced_settings.stream_bypass_trigger_cpu_usage 2021-09-14 14:10:19 +08:00
lijia
280aee8bfe 新增tsg-os-provision配置stream_bypass_trigger_cpu_usage, 方便控制bypass触发阈值. 2021-09-14 04:09:15 +00:00
fumingwei
c05f583bf8 feature:新增advanced_settings默认配置项 2021-09-13 17:31:53 +08:00
fumingwei
b371605342 refactor:修改provision.yml.sample配置项由enable_stream_bypass_under_ddos.eanble改为feature.enable_stream_bypass_under_ddos 2021-09-13 17:31:52 +08:00
lijia
7e5d40653e 更新sapp_v4.2.50, tcpdump_mesa_v1.0.8, wangw_v.1.3.5, wire_graft_v1.3.6,
TSG-7544 - sapp inline模式icmp保活应答包seq=0错误;
TSG-7563 - 自建GRE测试环境sapp反向发送RST失败;
TSG-7440 - sapp设置流BYPASS以抵御flood攻击的影响;
TSG-7621 - sapp不支持Vxlan内层HDLC, PPP封装格式;
TSG-7542 - 在GRE协议上测试ftp协议时,sub action为rst时,ftp没有阻断;
TSG-7561 - sapp和tcpdump_mesa支持捕获bypass的包;
2021-09-09 18:31:11 +08:00
fengweihao
9399aa41c0 更新app-proto-engine到v1.0.11,版本修改:TSG-7674 未加载License时正常运行,输出状态到Nezha,删除启动失败对sapp影响 2021-09-08 18:18:34 +08:00
fumingwei
b7f30a53f2 feature:TSG-6634:新增workload.target和workload-pre.target,并设置workload.target为default.target 2021-08-20 11:29:57 +08:00
fumingwei
e6154359c9 bugfix:修改npb_device的值为direct导致vlan_flipping_map.conf vlan id渲染失败的问题 2021-08-14 16:02:09 +08:00
fengweihao
c9ec193ab6 更新tsg-ddos-sketch到v1.0.3,版本修改:修改插件名称为tsg-ddos-sketch 2021-08-12 15:26:43 +08:00
lijia
6a1d44d9ed 9140增加wannat模块. 2021-08-10 16:07:34 +08:00
fengweihao
89f0ed46a0 更新tsg-flow-record到v1.0.2,版本变动TSG-7194 重流检查工具封装,TSG-7052 功能端支持输出DoS sketch日志 2021-08-06 11:47:16 +08:00
fumingwei
fe25fc0a2c feature:TSG-7265新增provision.yml配置文件feature字段控制firewall插件的运行 2021-08-05 18:05:07 +08:00
liuxueli
37c550aada 更新:app_proto_identify,libbreakpad_mini,修复内容:
TSG-6362 - 基础协议识别插件存在误识别的现象
TSG-7216 - breakpad_mini支持从配置文件读入minidump_upload_tools

更新TFE、CertStored的配置文件,添加上传mini_dump文件工具路径
2021-08-04 15:03:49 +08:00
fumingwei
06bffe2143 refactor:修改sapp和certstore的minidump生成的路径 2021-07-29 13:22:52 +08:00
fumingwei
8dd23dfda9 feature:TSG-7213增加feature选项,可以选择生成minidump或传统的coredump文件 2021-07-29 13:22:51 +08:00
fumingwei
f3b508fdd6 bugfix:TSG-7210调整ZLOG_PROFILE_ERROR写入路径的位置,由/tmp改为/var/log下 2021-07-29 13:22:51 +08:00
fumingwei
544f5e43d1 feature:修改sapp的tempfile的相关配置文件 2021-07-29 13:22:50 +08:00
fumingwei
259dab34e1 feature:修改mrzcpd通过prefix选项安装 2021-07-29 13:22:50 +08:00
fumingwei
04c4c82b84 feature:修改framework相关rpm包的安装位置 2021-07-29 13:22:49 +08:00
fumingwei
eb7e7bbdea feature:修改sapp和sapp插件的安装路径 2021-07-29 13:22:48 +08:00
fumingwei
8cf59b5a8a bugfix:TSG-7107 telegraf配置优化 2021-07-29 13:22:48 +08:00
luwenpeng
4e6096aa9f bugfix: TSG-7176 Sapp/APP_SKETCH_LOCAL配置文件中日志级别设置不当 2021-07-29 13:22:46 +08:00
lijia
206deaec68 TSG-6871, TSG-7024, TSG-7110, TSG-7132, TSG-7167, TSG-7078. 2021-07-29 13:22:45 +08:00
liuxueli
9b1cb111a9 更新tsg_master tsg_conn_sketch fw_dns_plug libhos-client-cpp; 新增deal_socks。修复:
TSG-6985 - 新疆环境libhos-client-cpp异常导致应用重启
TSG-7009 - tsg_conn_sketch计算DIFF流量导致应用重启
TSG-7028 - tsg_master处理socks流量会出现double free
2021-07-13 17:22:14 +08:00
fumingwei
33e92ee13c bugfix:修改sapp well_known_port.conf渲染后的路径 2021-07-12 18:17:18 +08:00
fumingwei
b0b9462c8a bugfix:修复修改变量NPB_device值由tera转换为inline_device后tera_fake_promisc_setup.sh还可以运行的bug 2021-07-12 18:17:17 +08:00
fumingwei
897ab39991 bugfix:修改sapp的send_raw_pkt.conf的配置网卡在9140环境下配置错误的bug 2021-07-12 18:17:17 +08:00
lijia
2d3197c87d 增加wangw和wire_graft到conflit.inf和necessary_plug_list.conf. 2021-07-08 17:37:33 +08:00
lijia
282ccd2e55 TSG-6960,
1.修复wire_graft模块多了table键, 导致yml文件格式错误;
2.修复wannat变量引用错误;
3.修复sapp_raw_pkt.conf, 无历史状态主动发包配置错误.
2021-07-08 17:15:48 +08:00
fumingwei
459f6a9f09 bugfix:修改vlan_flipping_map.conf引用for循环变量错误 2021-07-06 15:44:42 +08:00
fumingwei
81236f67ed bugfix:增加sapp entrylist GTP配置项以解决sapp挂在gtp插件失败问题 2021-06-30 10:15:28 +08:00
Lu Qiuwen
114522d67c TSG-6790 适配MRZCPD到7400设备环境
* 升级mrzcpd到4.4.6.cea4bb9版本;
* 移除mrglobal.conf中不再使用的配置项;
* 移除vxlan_user,
  vxlan_fwd设备,调整sapp的配置项使其不再打开这两个设备。
2021-06-30 10:15:27 +08:00
lijia
85e9a783cd update sapp from v4.2.37.ead1db6 to v4.2.39.3c2b02b;
TSG-5511,
TSG-6647,
TSG-6703,
修复sapp -g参数测试breakpad mini core上传功能失效的BUG,
add sapp config file well_known_port.conf;
delete sapp asymmetric_presence_layer.conf;
2021-06-30 10:15:25 +08:00
fumingwei
0185ff5683 bugfix:修改因{% endraw %}导致两个配置项合并到一行的错误 2021-06-30 10:15:22 +08:00
fumingwei
d66ba20e59 bugfix:修改由{% raw %}造成配置文件产生多余空格问题 2021-06-30 10:15:21 +08:00
fumingwei
a1a4446a3c refactor:provision.yml.sample变量名字都使用小写,修改变量名字ip变为address 2021-06-30 10:15:19 +08:00
fumingwei
55a767b7de refactor:将vlan_flipping的内容加入到zone_group_list中 2021-06-30 10:15:16 +08:00
fumingwei
29555f5f36 refactor:将breakpad_upload_url改名为sentry_url 2021-06-30 10:15:14 +08:00
luwenpeng
f09988a104 feature TSG-6676: ATCA 内部 CPU/MEM 资源管理 2021-06-30 10:15:12 +08:00
fumingwei
6c286242a8 7400 adapt:TSG-6734增加tsg7400设备类型下对串联双臂环境的支持 2021-06-30 10:15:12 +08:00
fumingwei
bc63f96c5b 7400 adapt:在NPB是tera的情况下vlan_flipping_map.conf中的vlan ID信息读取配置文件 2021-06-30 10:15:11 +08:00
fumingwei
4b0608824c 7400 adapt:调整sapp目录结构和文件名字 2021-06-30 10:15:10 +08:00
fumingwei
d46d304d49 7400 adapt:删除冗余的templatenecessary_plug_list.conf操作 2021-06-30 10:15:07 +08:00
fumingwei
e4aa2f778d 7400 adapt:修改stage2阶段根据NPB设备类型确定的配置项的操作 2021-06-30 10:15:06 +08:00
fumingwei
1410619ca2 7400 adapt:stage1 阶段sapp的网卡、cpu affinity core从配置文件读取 2021-06-30 10:15:04 +08:00
fumingwei
550324c4f1 7400 adapt:修改sapp role用来适配tsg 7400 2021-06-30 10:14:59 +08:00
yangwei
37f46570ca 🐞 fix(sapp_log.conf.j2):
Resloves TSG-6656 调整plugin.log文件名,修复plugin.log不存在,导致zlog初始化失败的bug
2021-06-10 18:37:54 +08:00
yangwei
dc12368539 feat(zlog conf): sapp tfe certstore输出日志文件使用644权限 2021-06-08 07:34:17 +00:00
yangwei
b61b633346 🐞 fix(zlog.conf): sapp,tfe,certstore使用独立的zlog lock文件 2021-06-08 07:34:17 +00:00
fumingwei
da317aac80 为了添加sapp zlog原始日志输出,sapp service 增加Environment 配置项 2021-06-08 15:19:52 +08:00