gfwleak/tsg-tsg-os-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,499 Commits 92 Branches 330 Tags
3af2a592d2a45dff58254d6f22d64565f5e4cf19
Commit Graph

1499 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
liuchang
3af2a592d2 change max processed session num when polling for different priority 
check diabled rule for existed session every interval, default interval 120s
 2023-07-05 07:57:29 +00:00
songyanchao
fecfda4bcf 🐞 fix(TSG-15643): mrzcpd升级至v4.6.36 
ctrlmsg 添加 tcp keepalive 、 从mrzcpd.service中删除k3s相关依赖项
 2023-07-04 22:17:39 -04:00
liuxueli
97fa373fea 更新session record，修复: 
TSG-15760 - Security Events握手延迟不准确
TSG-15829 - Logs统计HTTP的HTTP.Response Latency (ms)与HTTP.Session Duration (ms)字段出现负值
 2023-07-04 21:04:19 +08:00
wangmenglan
cd950c722a ✨ feat(TSG-15852):Clixon cm_policy_local_cache命令支持主备切换 2023-07-04 12:02:35 +00:00
fumingwei
2480166f99 bugfix:TSG-15730:修改cm-cache redis的save配置项 2023-07-04 10:32:36 +00:00
liuxueli
8fbd4b1dab 更新sapp、ssl、tsg_master、session_record、firewall，修复： 
TSG-15591 - tsg-x和9140环境，deny-quic协议的drop after n packet设置为非0值时有阻断效果，但未产生安全日志 RESOLVED
TSG-14336 - deny ftp的策略，当Drop packet after N packet设置为64时无阻断效果
 2023-07-04 10:22:57 +00:00
liuxueli
44e06e99d8 TSGX设备firewall插件缺少TCP/UDP函数入口，修正session_record的日志文件 2023-07-04 17:53:25 +08:00
fumingwei
54f34bc716 feature:TSG-15851:新增cm-cache切换主备cm的功能 2023-07-04 08:57:41 +00:00
fumingwei
80377951be bugfix:构建chroot时使用构建容器的resolv.conf文件 2023-07-04 14:49:20 +08:00
fumingwei
bbe81ab464 bugfix:修复TSG-X rebase代码后笔误后编译失败问题 2023-07-04 12:51:05 +08:00
fumingwei
246e318a4f bugfix:修复docker-ce仓库为空的bug 2023-07-03 23:30:51 +08:00
fumingwei
0fbefc7709 refactor:mrzcpd-exporter使用固定镜像，不再使用tsg-init镜像,TSG-13281:重新构造traffic-engine升级包 2023-07-03 21:25:38 +08:00
wangmenglan
ee41b1ef23 ✨ feat(TSG-15805): OS启动时分配大页内存 2023-07-03 20:04:01 +08:00
fumingwei
9666bbc7e3 feature:在ci上编译TSG-X使用mirrors.cloud.aliyuncs.com仓库域名 2023-07-03 11:35:33 +00:00
fengweihao
39bc5d8016 更新tfe到v4.8.31, 版本修改: TSG-15781 删除策略用户自定域中的protocol字段检查 2023-07-03 18:56:47 +08:00
陆秋文
9f2e07258a TSG-15768 在OS开机、关机过程中显示TSG的Logo 2023-07-03 10:29:15 +00:00
linxin
a4c7fc8dbe TSG-15646：调整coredump磁盘使用率限制为60% 2023-07-03 10:27:59 +00:00
fumingwei
c254904d2b bugfix:修复TSG-X ci/cd的第二阶段job无法多次运行的bug 2023-06-30 11:44:13 +00:00
fumingwei
4b6c0dc8ce feature:P0906的rc和testing job打开ENABLE_LICENSE_PROTECTED开关 2023-06-30 11:41:26 +00:00
fumingwei
fd012dfbfa bugfix:TSG-15730:更新redis helm chart包 2023-06-30 11:41:26 +00:00
wangmenglan
dbcf3a45e7 Clixon更新至1.0.53 
TSG-15731: Clixon支持配置bond_mode以及bond_xmit_policy
 2023-06-30 19:37:53 +08:00
liuxueli
32776525e7 OMPUB-937: 福建项目：LUA虚拟机线程不安全，多线程执行LUA脚本导致程序重启(两个线程分别加载LUA和执行LUA) 2023-06-30 11:17:19 +00:00
luwenpeng
a844427fec TSG-15732 TSG-OS适配网络浮动许可证 
1.更新aksusbd驱动，并禁用开机自启
    2.更新环境变量HASPUSER_PREFIX的目录，并添加到hasp_monitor.service中
    3.HASPUSER_PREFIX目录下增加默认配置文件hasp_25743.ini
        * 注释 Admin License Manager Server Address（部署时按需配置）
        * 默认禁用广播
    4.hasp_monitor.server只有在TSG-X设备上执行开机自启
 2023-06-30 11:16:55 +00:00
liuchang
222f846c7e drop packet when delay over 2 seconds 2023-06-30 11:14:11 +00:00
liuxueli
c61e86ce9b 更新tsg_master、ssl,支持： 
TSG-15162 - ssl解析层支持识别ECH
TSG-15163 - tsg_master支持将ECH识别映射为对应的APPID，并参与执行策略
 2023-06-30 18:11:00 +08:00
songyanchao
a048e0ed6e 🎈 perf: mrzcpd 升级至v4.6.34 （修复 mrpdump 工具在设置bpf参数时捕包异常问题） 
mrzcpd 升级至v4.6.34 （修复 mrpdump 工具在设置bpf参数时捕包异常问题）
v23.06.6 		2023-06-29 12:44:15 +00:00
linxin
2580db7963 modified: ansible/roles/k3s-install/tasks/main.yml 2023-06-29 19:00:24 +08:00
linxin
21c33d832b 修复在未配置DNS时，出现解析HOST失败的问题 2023-06-29 18:45:15 +08:00
fumingwei
2ae5c6aaa3 bugfix:TSG-15718:修改因sapp配置文件错误导致firewall容器启动失败问题 v23.06.5 2023-06-28 20:52:16 +08:00
songyanchao
d6e49fd5ef 🎈 perf: MRZCPD升级至v4.6.33 
MRZCPD升级至v4.6.33
 2023-06-28 12:22:29 +00:00
liuwentan
3ade1804b6 maat4.0.29 2023-06-28 12:22:05 +00:00
luwenpeng
53dba15ce9 更新hasp-tools到1.0.7 
* 共享内存支持无锁访问
    * hasp_monitor运行过程中独占一个授权坐席
    * hasp_monitor & hasp_policy支持SIGUSER1/SIGUSER2信号调整日志级别
    * hasp_monitor检测到授权过期后重新login尝试获取新授权
 2023-06-28 14:44:52 +08:00
wangmenglan
7da946f108 Clixon更新至1.0.51 
TSG-15708: OS适配session flag插件名字修改
TSG-15713: Clixon支持平滑升级
v23.06.4 		2023-06-27 12:25:31 +00:00
刘学利
3cd287f168 更新sapp、tsg_master、quic、session_record: 2023-06-27 12:25:15 +00:00
songyanchao
dce2dfb204 🎈 perf(DPISDN-13): MRZCPD 升级至V4.6.23 (DPDK 升级至 21.11.4) 
MRZCPD 升级至V4.6.23 (DPDK 升级至 21.11.4)
 2023-06-27 03:47:18 -04:00
liuchang
04f34ba72d change plugin name from session_marker_record to session_flags 2023-06-27 06:16:41 +00:00
fumingwei
109e370fcc bugfix:TSG-15631:修复TSG-X设备发送telegraf device_id错误问题 2023-06-26 20:49:04 +08:00
liuxueli
d95f1731b2 更新tsg-master、firewall, 修复或支持: 
TSG-15656 - 功能端输出MAC地址
TSG-15446 - Live Traffic Chart多个统计数据量低于同时间范围内Report对应统计
v23.06.3 		2023-06-25 20:01:54 +08:00
wangmenglan
0e07448419 Clixon更新至1.0.50, 创建vsys前查询helm版本 2023-06-25 10:45:13 +00:00
liuwentan
6bd61ba941 maat4.0.28 2023-06-25 10:44:54 +00:00
songyanchao
4a5c1a4a9d 🐞 fix: 修复TSG-OS在build base image过程中安装OFED问题 
修复TSG-OS在build base image过程中安装OFED问题
 2023-06-25 04:56:04 -04:00
陆秋文
9168f4cd2c fix the when condition of replace action in hasp. v23.06.2 2023-06-23 01:40:33 +00:00
luwenpeng
344417dee6 hasp_monitor.service中增加WantedBy=multi-user.target 2023-06-23 00:14:28 +08:00
yangwei
0cd8d9724b 🔧 build(Update-sapp-and-session-record): sapp v4.3.11 and tsg_conn_sketch-4.1.0 v23.06.1 2023-06-22 12:10:57 +08:00
fumingwei
a053dd203f update sapp to 4.3.10 v23.06 2023-06-21 22:27:09 +08:00
fumingwei
3e6bfd5c5a feature:helm新增udp_duplicated_packet_filter配置项 2023-06-21 14:07:02 +00:00
wangmenglan
f5904a1d6d Clixon更新到1.0.49 
TSG-15675 clixon增加session_marker相关配置项
增加inject_duplicated_packet_filter配置
 2023-06-21 14:05:56 +00:00
luwenpeng
9ee063a409 update tools/run_flamegrah.sh 2023-06-21 21:48:06 +08:00
fumingwei
94d10adb0a bugfix:创建/var/lib/rancher/k3s/agent/images目录 2023-06-21 19:48:13 +08:00
fumingwei
18b26201b0 P0906环境删除sapp conn_telemetry插件 2023-06-21 19:46:00 +08:00