gfwleak/tsg-tsg-os-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
726 Commits 92 Branches 330 Tags
453facf7c19e05027e07e55a0e87845e7ba6f8d6
Commit Graph

82 Commits

Author SHA1 Message Date
jixinyi
4a3cadccb1 feature:TSG-9154:新增解析插件支持识别Stratum协议并提取相关字段 2022-02-08 11:15:27 +08:00
dumeijie
58513a6443 ✨ feat(TSG-9149:添加语音通信流量识别): 2022-01-13 15:16:48 +08:00
fumingwei
2522aa4461 bugfix:TSG-9391:合并多个conflist.j2.j2为一个文件 2022-01-13 14:38:43 +08:00
fumingwei
b330ef0166 bugfix:修复server相关的conflist.inf缺少deal_sock配置和sip路径错误的bug 2022-01-04 10:53:39 +08:00
fumingwei
bddbebb6f3 feature:构建server ansible安装包,适配poc设备 2021-12-30 17:38:30 +08:00
fumingwei
3ba9652efa refactor:将os stage1配置文件由原来的配置项位置命名方式抽象为HAL命名方式 2021-12-28 15:40:54 +08:00
fumingwei
6158214d02 bugfix:TSG-9094:修改因mesa_sip插件修改inf配置路径导致sapp启动失败的问题 2021-12-20 11:24:26 +08:00
lijia
36e1fdb265 TSG-9029, 修复inline模式非对称链路注入数据包vxlan地址错误BUG. 2021-12-15 11:03:54 +08:00
yangwei
66934ce6f0 ✨ feat(Firewall): 更新tsg总控，socks解析和基础协议识别插件 
tsg_master:fix TSG-8407,TSG-8583,修复L2TP/MAIL日志中的异常
app_proto_identify:fix TSG-8697,TSG-7126,修复socks,L2TP,RTP,FTPS协议识别不准的问题
deal_socks:从business层转换至protocol层，解决socks虚拟层结束顺序不一致可能导致会话记录日志结果异常的问题
 2021-12-01 16:03:51 +08:00
彭宣正
269a4becc6 🐞 fix(TSG-8685, TSG_8606, TSG-8684): update tsg_conn_sketch-3.1.12 to tsg_conn_sketch-3.1.145 2021-12-01 07:15:49 +00:00
彭宣正
b91ac22b58 🐳 chore(TSG-8664): remove SSH 2021-11-25 18:28:18 +08:00
liuxueli
47193b7326 Revert "TSG-8650: 将tsg_master挂载app_proto_identify前面，保证IP的优先级最高" 
This reverts commit c0e7fbec56.
 2021-11-25 00:51:51 +03:00
liuxueli
aec170c4f2 TSG-8650: 将tsg_master挂载app_proto_identify前面，保证IP的优先级最高 2021-11-24 14:17:06 +03:00
fumingwei
88225866a2 bugfix:TSG-8516:修改sapp,tfe service和mrzcpd的依赖关系由Requires变为Wants 2021-11-17 17:24:44 +08:00
fumingwei
c499cea8d2 feature:TSG-8379:在provision中添加开关，控制是否开启DNS会话记录/RTP会话记录/RADIUS会话记录功能 2021-11-15 12:34:02 +00:00
liuxueli
c6c9910013 更新tsg_master、app_proto_identify、tsg_conn_sketch、quic、radius、radius_collect_plug，支持或修复 
TSG-8379: 在provision中添加开关，控制是否开启DNS会话记录/RTP会话记录/RADIUS会话记录功能
TSG-8402: Security Events中Schema为Mail，L7 Protocol为FTP
TSG-8498: Radius Records中Device Group为空
TSG-8489: 一个会话被同时识别为HTTP和SSL协议时，Session Record插件(tsg_conn_record)使用已释放的内存导致SAPP重启
TSG-8488: Session Record插件(tsg_conn_record v3.1.2.79b489e)运行时找不到符号（函数声明与定义不一致）
TSG-8484: Session Record插件(tsg_conn_record)存在内存泄漏
 2021-11-15 13:53:05 +03:00
彭宣正
8535515155 📃 docs(TSG-8294,TSG-8287): update ssh-2.0.5 to ssh-2.0.6 2021-11-02 21:38:08 +08:00
luwenpeng
fc7885b44b TSG-8288 TSG-OS中修改SAPP/TFE/CertStore的Service配置文件，增加Licence存储路径的环境变量 2021-11-02 11:59:30 +03:00
fumingwei
8160ca3ace feature:新增ssh conflist.inf和necessary_plug_list.conf配置 2021-11-01 21:40:22 +08:00
fumingwei
c16992af94 feature:TSG-8027:修改配置connsketch名字为sessionrecord 2021-10-14 16:34:18 +08:00
fumingwei
3daacf1f3a bugfix:TSG-7924:删除sapp中的r2,r3 2021-10-11 08:52:32 +00:00
刘学利
1be08803e2 Update sapp_log.conf.j2；控制app_sketch_local写fatal日志 2021-09-26 11:18:33 +00:00
fumingwei
11c55a7ca1 bugfix:修改sapp runtime的日志级别由info改为fatal 2021-09-26 08:34:11 +00:00
lijia
54268c3fa1 TSG-7926, 开启mac_flipping且asymmetric_addr.conf没有ethernet层时, sapp反向注入数据包错误. 2021-09-25 00:15:19 +08:00
fumingwei
75f1aa18e9 bugfix:当npb_device为tera时,修改sapp允许接收的mac地址 2021-09-18 16:41:39 +08:00
fumingwei
6b2bb76467 bugfix:修改sapp的tmpfiled中的d /run/sapp/alert_files/配置项 2021-09-15 14:32:35 +08:00
fumingwei
93a2033512 bugfix:将feature.stream_bypass_trigger_cpu_usage修改为advanced_settings.stream_bypass_trigger_cpu_usage 2021-09-14 14:10:19 +08:00
lijia
280aee8bfe 新增tsg-os-provision配置stream_bypass_trigger_cpu_usage, 方便控制bypass触发阈值. 2021-09-14 04:09:15 +00:00
fumingwei
c05f583bf8 feature:新增advanced_settings默认配置项 2021-09-13 17:31:53 +08:00
fumingwei
b371605342 refactor:修改provision.yml.sample配置项由enable_stream_bypass_under_ddos.eanble改为feature.enable_stream_bypass_under_ddos 2021-09-13 17:31:52 +08:00
lijia
7e5d40653e 更新sapp_v4.2.50, tcpdump_mesa_v1.0.8, wangw_v.1.3.5, wire_graft_v1.3.6, 
TSG-7544 - sapp inline模式icmp保活应答包seq=0错误;
TSG-7563 - 自建GRE测试环境sapp反向发送RST失败;
TSG-7440 - sapp设置流BYPASS以抵御flood攻击的影响;
TSG-7621 - sapp不支持Vxlan内层HDLC, PPP封装格式;
TSG-7542 - 在GRE协议上测试ftp协议时，sub action为rst时，ftp没有阻断;
TSG-7561 - sapp和tcpdump_mesa支持捕获bypass的包;
 2021-09-09 18:31:11 +08:00
fengweihao
9399aa41c0 更新app-proto-engine到v1.0.11,版本修改：TSG-7674 未加载License时正常运行，输出状态到Nezha，删除启动失败对sapp影响 2021-09-08 18:18:34 +08:00
fumingwei
b7f30a53f2 feature:TSG-6634:新增workload.target和workload-pre.target,并设置workload.target为default.target 2021-08-20 11:29:57 +08:00
fumingwei
e6154359c9 bugfix:修改npb_device的值为direct导致vlan_flipping_map.conf vlan id渲染失败的问题 2021-08-14 16:02:09 +08:00
fengweihao
c9ec193ab6 更新tsg-ddos-sketch到v1.0.3,版本修改：修改插件名称为tsg-ddos-sketch 2021-08-12 15:26:43 +08:00
lijia
6a1d44d9ed 9140增加wannat模块. 2021-08-10 16:07:34 +08:00
fengweihao
89f0ed46a0 更新tsg-flow-record到v1.0.2,版本变动TSG-7194 重流检查工具封装，TSG-7052 功能端支持输出DoS sketch日志 2021-08-06 11:47:16 +08:00
fumingwei
fe25fc0a2c feature:TSG-7265新增provision.yml配置文件feature字段控制firewall插件的运行 2021-08-05 18:05:07 +08:00
liuxueli
37c550aada 更新：app_proto_identify，libbreakpad_mini，修复内容： 
TSG-6362 - 基础协议识别插件存在误识别的现象
TSG-7216 - breakpad_mini支持从配置文件读入minidump_upload_tools

更新TFE、CertStored的配置文件，添加上传mini_dump文件工具路径
 2021-08-04 15:03:49 +08:00
fumingwei
06bffe2143 refactor:修改sapp和certstore的minidump生成的路径 2021-07-29 13:22:52 +08:00
fumingwei
8dd23dfda9 feature:TSG-7213增加feature选项，可以选择生成minidump或传统的coredump文件 2021-07-29 13:22:51 +08:00
fumingwei
f3b508fdd6 bugfix:TSG-7210调整ZLOG_PROFILE_ERROR写入路径的位置，由/tmp改为/var/log下 2021-07-29 13:22:51 +08:00
fumingwei
544f5e43d1 feature:修改sapp的tempfile的相关配置文件 2021-07-29 13:22:50 +08:00
fumingwei
259dab34e1 feature：修改mrzcpd通过prefix选项安装 2021-07-29 13:22:50 +08:00
fumingwei
04c4c82b84 feature:修改framework相关rpm包的安装位置 2021-07-29 13:22:49 +08:00
fumingwei
eb7e7bbdea feature:修改sapp和sapp插件的安装路径 2021-07-29 13:22:48 +08:00
fumingwei
8cf59b5a8a bugfix:TSG-7107 telegraf配置优化 2021-07-29 13:22:48 +08:00
luwenpeng
4e6096aa9f bugfix: TSG-7176 Sapp/APP_SKETCH_LOCAL配置文件中日志级别设置不当 2021-07-29 13:22:46 +08:00
lijia
206deaec68 TSG-6871, TSG-7024, TSG-7110, TSG-7132, TSG-7167, TSG-7078. 2021-07-29 13:22:45 +08:00
liuxueli
9b1cb111a9 更新tsg_master tsg_conn_sketch fw_dns_plug libhos-client-cpp; 新增deal_socks。修复: 
TSG-6985 - 新疆环境libhos-client-cpp异常导致应用重启
TSG-7009 - tsg_conn_sketch计算DIFF流量导致应用重启
TSG-7028 - tsg_master处理socks流量会出现double free
 2021-07-13 17:22:14 +08:00