chenzizhan
5eeac07fef
fix: TSG-16625
2023-08-23 11:27:41 +08:00
linxin
f980aa4eae
TSG-16749: fish支持kubectl命令补全
v23.08
2023-08-22 10:30:21 +08:00
linxin
f8580d24fb
TSG-16748: 在os 23.08版本中注释掉stat_policy_enforcer插件
2023-08-22 10:22:45 +08:00
贺岚风
6bd8dd0f31
Update ansible/install_config/group_vars/rpm_version.yml
2023-08-22 01:35:15 +00:00
liuxueli
2e5fca3848
更新stat_policy_enforcer, TSG-16701 - 一条流同时命中Shaping和同条件的Statistics Rule和Security Rule,命中数不一致
2023-08-21 19:30:03 +08:00
chenzizhan
fc326a6941
feat: fieldstat4 support thread-safe merge
v23.08-rc1
2023-08-21 10:40:28 +08:00
贺岚风
f2351ff615
update libstatistics
2023-08-20 12:36:08 +00:00
fumingwei
ad1a5e6c0b
feature:7400和9140配置默认不启动consul服务
2023-08-20 20:31:27 +08:00
fumingwei
37f9be9b60
bugfix:update fieldstat3 to 3.0.11
2023-08-20 20:30:22 +08:00
chenzizhan
ddd46fb7d6
feat: fieldstat4 support thread-safe merge
2023-08-18 11:23:52 +08:00
贺岚风
b7e6334338
TSG-16683:修复object metric字段错误
2023-08-17 13:07:16 +00:00
fumingwei
a3d5e765c4
bugfix:update libfieldstat3 to v3.0.10
2023-08-17 13:06:21 +00:00
wangmenglan
f2f5876be2
🐞 fix(TSG-16684): 更新TFE至4.8.34
2023-08-17 13:05:13 +00:00
liuchang
af5f45821b
1.修复流量停止之后metric中max_lanetcy还在一直发送问题
...
2.修复超过64个线程启动失败问题
2023-08-16 10:09:41 +00:00
liuxueli
f07cb3f372
更新tsg_master, 修复笔误导致shaper rule同步至stat policy enforcer
2023-08-15 17:01:21 +08:00
fumingwei
a6ffc4dbd1
feature:TSG-X node_exporter开启ethtool metric收集
2023-08-15 03:41:19 +00:00
刘学利
b5c45c730f
更新stat_policy_enforcer, libfieldstat4, 修复:
...
TSG-16637 - 无TCP Latency相关统计数据
TSG-16640 - 集成测试环境9140 sapp因stat_statistics_enforcer产生core
2023-08-14 14:18:44 +00:00
杨威
a5c5e5ce40
update libstatistics-1.0.7.2a0e912
2023-08-14 14:03:06 +00:00
liuwentan
5a1ad153df
maat v4.0.37
2023-08-13 13:33:15 +00:00
liuxueli
64e6d700e0
更新stat_policy_enforcer: TSG-16619: 输出statistics_rule_hits的计数
2023-08-13 13:31:43 +00:00
yangwei
54e4c57561
🐞 fix(libstatistics-1.0.6.996eb45):
...
Fix TSG-16595
Fix TSG-16584
2023-08-13 19:44:55 +08:00
liuwentan
f6c2422737
maat v4.0.36
2023-08-10 15:07:01 +00:00
liuxueli
76ec630e21
更新: libstatistics、statistics_metrics, 开启object statistics(包括statistics policy client_ip_object和server_ip_object)
2023-08-10 22:00:58 +08:00
liuwentan
44cac556f3
maat v4.0.35
2023-08-10 01:42:16 +00:00
liuxueli
fbee085ccf
更新: libfieldstat4、libstatistics、statistics_metrics, 修复:
...
TSG-16549: Customized Statistics统计的Application在Objects-Application无法查询到对应信息 RESOLVED
statistics_metrics: 由于性能问题,关闭object statistics(包括statistics policy client_ip_object和server_ip_object)
libstatistics: 增加cell判空的操作,避免段错误
libfieldstat4: FIX bug of reset
2023-08-09 23:32:45 +08:00
songyanchao
c33eb65d88
🐞 fix(TSG-16535): mrzcpd 升级至v4.6.42
...
mrzcpd 升级至v4.6.42
2023-08-08 12:39:53 +00:00
liuxueli
4691fd076f
更新tsg_master、firewall,修复:
...
TSG-16515: 单数据包多次扫描命中结果超16个时存在非法写导致段错误
2023-08-08 18:32:02 +08:00
luwenpeng
93969b4695
TFE适配MRZCPD的分流算法的变更;并增加分流的调试日志
2023-08-08 11:42:27 +08:00
liuxueli
75bb77a08d
更新sapp、tsg_master、firewall、statistics_metrics、libfieldstat4、libstatistics, 支持:
...
TSG-16060: 支持输出命中Statistics Policy和object的Metrics
2023-08-06 21:45:09 +08:00
林鑫
4cef4ea92a
Revert "TSG-16020: 通过kexec进行快速内核切换跳过硬件检查加快升级流程"
...
This reverts commit fc5aae23fe
2023-08-04 07:14:18 +00:00
linxin
26b70eb82d
TSG-16426: 修改TSG-OS默认密码,增强安全性
2023-08-03 17:34:38 +08:00
Lu Qiuwen
3902bcaf2f
update mrzcpd to 4.6.39
...
(cherry picked from commit 166ebaf3a6 )
2023-08-03 15:10:26 +08:00
liuxueli
fa3e810e8e
更新tsg_master、firewall、session_record、quic、ssl、http,修复:
...
tsg_master: 规范变量的定义; 支持关闭FS的相关统计,便于valgrind/asan定位内存的相关问题
tsg_master: 增加sni长度判断,同时解析结果异常时,增加释放已申请sni内存的操作
tsg_master: 修复application metrics更新包数时可能存在内存越界
quic: 增加长度判断,修复长度异常时造成的内存非法读
http: 修复strncasecmp时未对待查找串长度保护,可能读越界的错误
session_record/firewall/ssl: Debug版本链接ASAN,用于定位问题
(cherry picked from commit 29e1910607 )
2023-08-03 15:09:50 +08:00
yangwei
ea223f7ac1
🐞 fix(sapp-pr-4.3.20.73cf957): update to sapp-pr-4.3.20.73cf957
...
(cherry picked from commit c6d3e860ff )
2023-08-03 15:07:32 +08:00
yangwei
40e701e9f3
🐞 fix(sapp rpm update): 更新至sapp-pr-4.3.19.1c9045b
...
1、修复读包模式结束时,线程同步可能造成内存泄露的问题
2、修复4.3.17更新引入的流表满时的边界判断条件,可能导致启动后持续高新建流时导致段错误
3、调整进程退出时的输出格式,方便展示进度
(cherry picked from commit a6a52a2ec0 )
2023-08-03 15:04:40 +08:00
linxin
c96a9c14d3
TSG-16401:
...
为9140环境provision-config-apply增加重启telegraf相关组件
2023-08-02 17:59:14 +08:00
linxin
fc5aae23fe
TSG-16020: 通过kexec进行快速内核切换跳过硬件检查加快升级流程
v23.08-rc0
2023-07-28 08:19:18 +00:00
liuchang
e68336b2be
session flags add feature random looking
2023-07-28 03:51:06 +00:00
luwenpeng
f139884eef
TSG-16291 更新SCE适配库表变更
2023-07-26 16:35:37 +08:00
liuxueli
4195728f23
更新tsg_master, application metrics更新包数时存在内存越界
v23.07.8
2023-07-25 12:59:59 +00:00
fumingwei
280fdea3ca
bugfix:TSG-16319:修改k3s service env文件位置
2023-07-25 20:53:24 +08:00
fumingwei
0999494140
bugfix:TSG-16319:修改k3s的service安装目录为/usr/lib/systemd/system
2023-07-25 18:57:52 +08:00
fumingwei
5693f753bb
bugfix:TSG-16286:在安装os的过程中删除/data/var/lib/cni目录
2023-07-25 16:06:10 +08:00
liuxueli
9935f126f9
9140/7400设备配置文件增加GENERATE_JA3_FINGERPRINT=1
v23.07.7
2023-07-24 12:35:22 +00:00
yangwei
e3bd565a2e
🐞 fix(rpm update): update maat4 and spp
...
sapp
1、更新检测到死锁触发退出条件,并增加相关日志
2、调整默认tcp timeout值,tcp data timeout 180s, opening timeout 60s, closing timeout 30s
maat4
[BUGFIX]false hit 0.0.0.0
[BUGFIX]scan miss for same filter referenced by one compile: TSG-15339
2023-07-24 20:32:32 +08:00
wangmenglan
5dfc68827f
Clixon更新至1.0.61
...
TSG-16300: clixon新增TCP的opening timeout和closing timeout参数
2023-07-24 12:20:19 +00:00
fumingwei
5f8d5cec28
feature:TSG-16300:适配clixon新增sapp opening_timeout和closing_timeout配置项
2023-07-24 20:14:46 +08:00
wangmenglan
a63dd0414a
Clixon更新至1.0.60; HAL支持修改mrglobal.conf模板中sz_data,sz_tunnel,check_buffer_leak字段
...
TSG-16295: Clixon增加生成JA3指纹的开关
2023-07-24 11:47:48 +00:00
liuxueli
01d6fd3903
更新tsg_master, 支持不依赖ssl解析层生成ja3_fingerprint,增加是否生成ja3_fingerprint的开关, GENERATE_JA3_FINGERPRINT=1
2023-07-24 11:47:12 +00:00
linxin
95be2f533e
TSG-16295: 在provision和clixon中增加是否生成JA3指纹的开关
2023-07-24 11:45:55 +00:00