Commit Graph

1602 Commits

Author SHA1 Message Date
chenzizhan
5eeac07fef fix: TSG-16625 2023-08-23 11:27:41 +08:00
linxin
f980aa4eae TSG-16749: fish支持kubectl命令补全 v23.08 2023-08-22 10:30:21 +08:00
linxin
f8580d24fb TSG-16748: 在os 23.08版本中注释掉stat_policy_enforcer插件 2023-08-22 10:22:45 +08:00
贺岚风
6bd8dd0f31 Update ansible/install_config/group_vars/rpm_version.yml 2023-08-22 01:35:15 +00:00
liuxueli
2e5fca3848 更新stat_policy_enforcer, TSG-16701 - 一条流同时命中Shaping和同条件的Statistics Rule和Security Rule,命中数不一致 2023-08-21 19:30:03 +08:00
chenzizhan
fc326a6941 feat: fieldstat4 support thread-safe merge v23.08-rc1 2023-08-21 10:40:28 +08:00
贺岚风
f2351ff615 update libstatistics 2023-08-20 12:36:08 +00:00
fumingwei
ad1a5e6c0b feature:7400和9140配置默认不启动consul服务 2023-08-20 20:31:27 +08:00
fumingwei
37f9be9b60 bugfix:update fieldstat3 to 3.0.11 2023-08-20 20:30:22 +08:00
chenzizhan
ddd46fb7d6 feat: fieldstat4 support thread-safe merge 2023-08-18 11:23:52 +08:00
贺岚风
b7e6334338 TSG-16683:修复object metric字段错误 2023-08-17 13:07:16 +00:00
fumingwei
a3d5e765c4 bugfix:update libfieldstat3 to v3.0.10 2023-08-17 13:06:21 +00:00
wangmenglan
f2f5876be2 🐞 fix(TSG-16684): 更新TFE至4.8.34 2023-08-17 13:05:13 +00:00
liuchang
af5f45821b 1.修复流量停止之后metric中max_lanetcy还在一直发送问题
2.修复超过64个线程启动失败问题
2023-08-16 10:09:41 +00:00
liuxueli
f07cb3f372 更新tsg_master, 修复笔误导致shaper rule同步至stat policy enforcer 2023-08-15 17:01:21 +08:00
fumingwei
a6ffc4dbd1 feature:TSG-X node_exporter开启ethtool metric收集 2023-08-15 03:41:19 +00:00
刘学利
b5c45c730f 更新stat_policy_enforcer, libfieldstat4, 修复:
TSG-16637 - 无TCP Latency相关统计数据
TSG-16640 - 集成测试环境9140 sapp因stat_statistics_enforcer产生core
2023-08-14 14:18:44 +00:00
杨威
a5c5e5ce40 update libstatistics-1.0.7.2a0e912 2023-08-14 14:03:06 +00:00
liuwentan
5a1ad153df maat v4.0.37 2023-08-13 13:33:15 +00:00
liuxueli
64e6d700e0 更新stat_policy_enforcer: TSG-16619: 输出statistics_rule_hits的计数 2023-08-13 13:31:43 +00:00
yangwei
54e4c57561 🐞 fix(libstatistics-1.0.6.996eb45):
Fix TSG-16595
Fix TSG-16584
2023-08-13 19:44:55 +08:00
liuwentan
f6c2422737 maat v4.0.36 2023-08-10 15:07:01 +00:00
liuxueli
76ec630e21 更新: libstatistics、statistics_metrics, 开启object statistics(包括statistics policy client_ip_object和server_ip_object) 2023-08-10 22:00:58 +08:00
liuwentan
44cac556f3 maat v4.0.35 2023-08-10 01:42:16 +00:00
liuxueli
fbee085ccf 更新: libfieldstat4、libstatistics、statistics_metrics, 修复:
TSG-16549: Customized Statistics统计的Application在Objects-Application无法查询到对应信息 RESOLVED
statistics_metrics: 由于性能问题,关闭object statistics(包括statistics policy client_ip_object和server_ip_object)
libstatistics: 增加cell判空的操作,避免段错误
libfieldstat4: FIX bug of reset
2023-08-09 23:32:45 +08:00
songyanchao
c33eb65d88 🐞 fix(TSG-16535): mrzcpd 升级至v4.6.42
mrzcpd 升级至v4.6.42
2023-08-08 12:39:53 +00:00
liuxueli
4691fd076f 更新tsg_master、firewall,修复:
TSG-16515: 单数据包多次扫描命中结果超16个时存在非法写导致段错误
2023-08-08 18:32:02 +08:00
luwenpeng
93969b4695 TFE适配MRZCPD的分流算法的变更;并增加分流的调试日志 2023-08-08 11:42:27 +08:00
liuxueli
75bb77a08d 更新sapp、tsg_master、firewall、statistics_metrics、libfieldstat4、libstatistics, 支持:
TSG-16060: 支持输出命中Statistics Policy和object的Metrics
2023-08-06 21:45:09 +08:00
林鑫
4cef4ea92a Revert "TSG-16020: 通过kexec进行快速内核切换跳过硬件检查加快升级流程"
This reverts commit fc5aae23fe
2023-08-04 07:14:18 +00:00
linxin
26b70eb82d TSG-16426: 修改TSG-OS默认密码,增强安全性 2023-08-03 17:34:38 +08:00
Lu Qiuwen
3902bcaf2f update mrzcpd to 4.6.39
(cherry picked from commit 166ebaf3a6)
2023-08-03 15:10:26 +08:00
liuxueli
fa3e810e8e 更新tsg_master、firewall、session_record、quic、ssl、http,修复:
tsg_master: 规范变量的定义; 支持关闭FS的相关统计,便于valgrind/asan定位内存的相关问题
tsg_master: 增加sni长度判断,同时解析结果异常时,增加释放已申请sni内存的操作
tsg_master: 修复application metrics更新包数时可能存在内存越界
quic: 增加长度判断,修复长度异常时造成的内存非法读
http: 修复strncasecmp时未对待查找串长度保护,可能读越界的错误
session_record/firewall/ssl: Debug版本链接ASAN,用于定位问题


(cherry picked from commit 29e1910607)
2023-08-03 15:09:50 +08:00
yangwei
ea223f7ac1 🐞 fix(sapp-pr-4.3.20.73cf957): update to sapp-pr-4.3.20.73cf957
(cherry picked from commit c6d3e860ff)
2023-08-03 15:07:32 +08:00
yangwei
40e701e9f3 🐞 fix(sapp rpm update): 更新至sapp-pr-4.3.19.1c9045b
1、修复读包模式结束时,线程同步可能造成内存泄露的问题
2、修复4.3.17更新引入的流表满时的边界判断条件,可能导致启动后持续高新建流时导致段错误
3、调整进程退出时的输出格式,方便展示进度


(cherry picked from commit a6a52a2ec0)
2023-08-03 15:04:40 +08:00
linxin
c96a9c14d3 TSG-16401:
为9140环境provision-config-apply增加重启telegraf相关组件
2023-08-02 17:59:14 +08:00
linxin
fc5aae23fe TSG-16020: 通过kexec进行快速内核切换跳过硬件检查加快升级流程 v23.08-rc0 2023-07-28 08:19:18 +00:00
liuchang
e68336b2be session flags add feature random looking 2023-07-28 03:51:06 +00:00
luwenpeng
f139884eef TSG-16291 更新SCE适配库表变更 2023-07-26 16:35:37 +08:00
liuxueli
4195728f23 更新tsg_master, application metrics更新包数时存在内存越界 v23.07.8 2023-07-25 12:59:59 +00:00
fumingwei
280fdea3ca bugfix:TSG-16319:修改k3s service env文件位置 2023-07-25 20:53:24 +08:00
fumingwei
0999494140 bugfix:TSG-16319:修改k3s的service安装目录为/usr/lib/systemd/system 2023-07-25 18:57:52 +08:00
fumingwei
5693f753bb bugfix:TSG-16286:在安装os的过程中删除/data/var/lib/cni目录 2023-07-25 16:06:10 +08:00
liuxueli
9935f126f9 9140/7400设备配置文件增加GENERATE_JA3_FINGERPRINT=1 v23.07.7 2023-07-24 12:35:22 +00:00
yangwei
e3bd565a2e 🐞 fix(rpm update): update maat4 and spp
sapp
1、更新检测到死锁触发退出条件,并增加相关日志
2、调整默认tcp timeout值,tcp data timeout 180s, opening timeout 60s, closing timeout 30s

maat4
[BUGFIX]false hit 0.0.0.0
[BUGFIX]scan miss for same filter referenced by one compile: TSG-15339
2023-07-24 20:32:32 +08:00
wangmenglan
5dfc68827f Clixon更新至1.0.61
TSG-16300: clixon新增TCP的opening timeout和closing timeout参数
2023-07-24 12:20:19 +00:00
fumingwei
5f8d5cec28 feature:TSG-16300:适配clixon新增sapp opening_timeout和closing_timeout配置项 2023-07-24 20:14:46 +08:00
wangmenglan
a63dd0414a Clixon更新至1.0.60; HAL支持修改mrglobal.conf模板中sz_data,sz_tunnel,check_buffer_leak字段
TSG-16295: Clixon增加生成JA3指纹的开关
2023-07-24 11:47:48 +00:00
liuxueli
01d6fd3903 更新tsg_master, 支持不依赖ssl解析层生成ja3_fingerprint,增加是否生成ja3_fingerprint的开关, GENERATE_JA3_FINGERPRINT=1 2023-07-24 11:47:12 +00:00
linxin
95be2f533e TSG-16295: 在provision和clixon中增加是否生成JA3指纹的开关 2023-07-24 11:45:55 +00:00