gfwleak/tsg-tsg-os-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,786 Commits 92 Branches 330 Tags
3ea1e8d6a40ba6c5ae02e2fee17276cc0465d039
Commit Graph

180 Commits

Author SHA1 Message Date
yangwei
cddc581517 ✨ feat(app_proto_identify rename): 更名为glimpse_detector，适配stellar 2023-11-21 20:10:43 +08:00
fengweihao
4ffd8266c9 更新context_based_detector到v6.0.0, 版本修改: 适配stellar,插件名变更 2023-11-21 20:10:43 +08:00
liuxueli
12478ba1ec 删除TSG-P0804和TSG-P1403相关配置项 2023-11-21 20:10:39 +08:00
fumingwei
7dcf7851d3 feature:temp commit refactor firewall config 2023-11-21 20:09:00 +08:00
linxin
954b379a52 🐞 fix:TSG-17752 2023-11-21 12:04:47 +00:00
wangmenglan
5aa986532d feature: TSG-17429 update clixon to 1.2.2 2023-11-01 19:08:32 +08:00
liuchang
53fac6bbf8 1.enable jemalloc gc thread 
2.adjust fieldstat metric output interval to 1s
 2023-10-17 10:26:49 +00:00
wangmenglan
5fe9b81614 ✨ feat(TSG-17222): Update clixon to v1.2.0, support SD config 2023-10-13 19:43:37 +08:00
linxin
013d4f8700 feature:TSG-17387:OS supports MRZCPD containerization 2023-10-13 19:32:45 +08:00
fumingwei
0d54c2fe45 feature:TSG-17228:新增sd功能 2023-10-13 09:25:22 +00:00
liuxueli
ab4bc8709e 更新firewall，适配MAAT4的子句非，删除使用旧接口 
默认开启HIT_GROUP的开关，用于输出Object Metrcis
 2023-10-09 10:14:11 +00:00
fumingwei
73154111ca feature:telegraf output替换timestamp为timestamp_ms 2023-10-09 10:12:30 +00:00
liuchang
d4282fbe49 1.fix session_flags sometimes no identify_info 
2.random looking switch for session_flags default off
 2023-09-26 09:52:01 +00:00
liuxueli
61775257c9 TSG-17093: OS默认开启stat_policy_enforcer插件 2023-09-18 13:43:01 +00:00
liuchang
74ee74ae4c 1.change get packet time function by clock_gettime 
2.add switch for each function of randomlooking
 2023-09-14 12:18:29 +00:00
fumingwei
39b1ff44d3 update libfieldstat3 to 3.0.15 2023-09-12 22:20:40 +08:00
wangmenglan
c0b4c054d7 更新TFE、SCE和packet_adapter, 修复ETH_P_8021AD协议解析 2023-09-08 08:23:17 +00:00
fumingwei
ecebc678e6 bugfix:TSG-16816:修改telegraf中metrics的kafka topic命名 2023-09-07 09:25:59 +00:00
yangyubo
2715e303c3 TSG-15739:功能端支持输出IPFIX封装的UDP报文 2023-09-03 14:15:43 +00:00
yangwei
1b7444b1d3 ✨ feat(sapp): update to sapp-4.3.23.7f030e5 
Conflicts:
	ansible/install_config/group_vars/rpm_version.yml
 2023-08-25 20:44:44 +08:00
linxin
1a5dfaa677 更改inject打包逻辑 2023-08-25 20:44:41 +08:00
linxin
290d86b095 统一工作目录名称 2023-08-25 20:44:40 +08:00
linxin
148abbd7d4 测试packet-adapter 2023-08-25 20:44:40 +08:00
linxin
f8580d24fb TSG-16748: 在os 23.08版本中注释掉stat_policy_enforcer插件 2023-08-22 10:22:45 +08:00
liuxueli
64e6d700e0 更新stat_policy_enforcer: TSG-16619: 输出statistics_rule_hits的计数 2023-08-13 13:31:43 +00:00
liuxueli
4691fd076f 更新tsg_master、firewall，修复: 
TSG-16515: 单数据包多次扫描命中结果超16个时存在非法写导致段错误
 2023-08-08 18:32:02 +08:00
luwenpeng
93969b4695 TFE适配MRZCPD的分流算法的变更；并增加分流的调试日志 2023-08-08 11:42:27 +08:00
liuxueli
75bb77a08d 更新sapp、tsg_master、firewall、statistics_metrics、libfieldstat4、libstatistics, 支持: 
TSG-16060: 支持输出命中Statistics Policy和object的Metrics
 2023-08-06 21:45:09 +08:00
liuxueli
fa3e810e8e 更新tsg_master、firewall、session_record、quic、ssl、http，修复: 
tsg_master: 规范变量的定义; 支持关闭FS的相关统计，便于valgrind/asan定位内存的相关问题
tsg_master: 增加sni长度判断，同时解析结果异常时，增加释放已申请sni内存的操作
tsg_master: 修复application metrics更新包数时可能存在内存越界
quic: 增加长度判断，修复长度异常时造成的内存非法读
http: 修复strncasecmp时未对待查找串长度保护，可能读越界的错误
session_record/firewall/ssl: Debug版本链接ASAN，用于定位问题


(cherry picked from commit 29e1910607)
 2023-08-03 15:09:50 +08:00
fumingwei
5f8d5cec28 feature:TSG-16300:适配clixon新增sapp opening_timeout和closing_timeout配置项 2023-07-24 20:14:46 +08:00
linxin
95be2f533e TSG-16295: 在provision和clixon中增加是否生成JA3指纹的开关 2023-07-24 11:45:55 +00:00
fumingwei
8a277feada bugfix:TSG-16265:新增telegraf aggregators grace和delay配置项 2023-07-19 11:19:07 +00:00
fumingwei
21c9d1ab63 feature:TSG-16271:在provision和clixon中增加开关 2023-07-19 11:18:05 +00:00
fumingwei
89bffe2be6 feature:TSG-16254:os适配clixon SSL decode certificate开关 2023-07-18 11:35:26 +00:00
liuxueli
2359b01529 更新tsg_master、app_proto_identify, 修复: 
OMPUB-961 - P19现场: TSG MASTER解析SYN/SYN_ACK占用CPU2.6%左右
OMPUB-960 - P19现场: 基础协议识别插件(app_proto_identify)占用CPU较高(15%左右)
 2023-07-14 21:08:12 +08:00
liuxueli
859e5c0607 更新: tsg_master、session_record，修复: 
TSG-15999 - 日志中的app_full_path出现异常内容
TSG-15855 - Session Records存在大量重复Session ID
发送日志时开启KAFKA压缩 COMPRESSION_TYPE="snappy"
 2023-07-13 11:03:55 +00:00
wangmenglan
d47065b2b3 bugfix: SCE更新至1.0.14 
TSG-14170: Service Function的Health Check为None时，未获取到SF状态和MAC Address
 2023-07-13 11:02:35 +00:00
liuxueli
079e9646db 更新http、session_record、firewall, 修复: 
firewall: TCP/UDP未注册FS Line ID, 使用FS-operate函数操作可能会导致重启
http,session_record: 修正输出本地日志的级别
 2023-07-12 23:43:26 +08:00
yangwei
53c8a6bc7d ✨ feat(rpm and sapp.toml update): sapp.toml & mail.so 
1、sapp.toml 默认polling_priority=100
2、update to mail-1.0.19.e982b44, Fix TSG-12082 and Fix TSG-11013
 2023-07-12 14:50:23 +08:00
liuxueli
0ad4e347b9 修正fs2_sysinfo.metrics/fs3_sysinfo.metrics的路径 2023-07-06 13:48:03 +00:00
fengweihao
f96f47b513 更新app-proto-engine，版本变更：修改OS上main.conf模板 2023-07-06 06:19:09 +00:00
liuxueli
de0d5fa9d8 修正capture_packet_plug插件的部署位置 2023-07-05 20:38:21 +08:00
fumingwei
b01f346026 feature:TSG-15905:新增os适配decoders.HTTP_GZIP和decoders.MAIL_BASE64选项 2023-07-05 12:20:28 +00:00
yangyubo
da10a7eb7a 修复tsg-15907:telegraf发送队列不足导致数据丢失 2023-07-05 20:05:02 +08:00
liuchang
3af2a592d2 change max processed session num when polling for different priority 
check diabled rule for existed session every interval, default interval 120s
 2023-07-05 07:57:29 +00:00
liuxueli
44e06e99d8 TSGX设备firewall插件缺少TCP/UDP函数入口，修正session_record的日志文件 2023-07-04 17:53:25 +08:00
fumingwei
54f34bc716 feature:TSG-15851:新增cm-cache切换主备cm的功能 2023-07-04 08:57:41 +00:00
fumingwei
0fbefc7709 refactor:mrzcpd-exporter使用固定镜像，不再使用tsg-init镜像,TSG-13281:重新构造traffic-engine升级包 2023-07-03 21:25:38 +08:00
fumingwei
fd012dfbfa bugfix:TSG-15730:更新redis helm chart包 2023-06-30 11:41:26 +00:00
fumingwei
2ae5c6aaa3 bugfix:TSG-15718:修改因sapp配置文件错误导致firewall容器启动失败问题 2023-06-28 20:52:16 +08:00