Commit Graph

1497 Commits

Author SHA1 Message Date
liuxueli
97fa373fea 更新session record,修复:
TSG-15760 - Security Events握手延迟不准确
TSG-15829 - Logs统计HTTP的HTTP.Response Latency (ms)与HTTP.Session Duration (ms)字段出现负值
2023-07-04 21:04:19 +08:00
wangmenglan
cd950c722a feat(TSG-15852):Clixon cm_policy_local_cache命令支持主备切换 2023-07-04 12:02:35 +00:00
fumingwei
2480166f99 bugfix:TSG-15730:修改cm-cache redis的save配置项 2023-07-04 10:32:36 +00:00
liuxueli
8fbd4b1dab 更新sapp、ssl、tsg_master、session_record、firewall,修复:
TSG-15591 - tsg-x和9140环境,deny-quic协议的drop after n packet设置为非0值时有阻断效果,但未产生安全日志 RESOLVED
TSG-14336 - deny ftp的策略,当Drop packet after N packet设置为64时无阻断效果
2023-07-04 10:22:57 +00:00
liuxueli
44e06e99d8 TSGX设备firewall插件缺少TCP/UDP函数入口,修正session_record的日志文件 2023-07-04 17:53:25 +08:00
fumingwei
54f34bc716 feature:TSG-15851:新增cm-cache切换主备cm的功能 2023-07-04 08:57:41 +00:00
fumingwei
80377951be bugfix:构建chroot时使用构建容器的resolv.conf文件 2023-07-04 14:49:20 +08:00
fumingwei
bbe81ab464 bugfix:修复TSG-X rebase代码后笔误后编译失败问题 2023-07-04 12:51:05 +08:00
fumingwei
246e318a4f bugfix:修复docker-ce仓库为空的bug 2023-07-03 23:30:51 +08:00
fumingwei
0fbefc7709 refactor:mrzcpd-exporter使用固定镜像,不再使用tsg-init镜像,TSG-13281:重新构造traffic-engine升级包 2023-07-03 21:25:38 +08:00
wangmenglan
ee41b1ef23 feat(TSG-15805): OS启动时分配大页内存 2023-07-03 20:04:01 +08:00
fumingwei
9666bbc7e3 feature:在ci上编译TSG-X使用mirrors.cloud.aliyuncs.com仓库域名 2023-07-03 11:35:33 +00:00
fengweihao
39bc5d8016 更新tfe到v4.8.31, 版本修改: TSG-15781 删除策略用户自定域中的protocol字段检查 2023-07-03 18:56:47 +08:00
陆秋文
9f2e07258a TSG-15768 在OS开机、关机过程中显示TSG的Logo 2023-07-03 10:29:15 +00:00
linxin
a4c7fc8dbe TSG-15646:调整coredump磁盘使用率限制为60% 2023-07-03 10:27:59 +00:00
fumingwei
c254904d2b bugfix:修复TSG-X ci/cd的第二阶段job无法多次运行的bug 2023-06-30 11:44:13 +00:00
fumingwei
4b6c0dc8ce feature:P0906的rc和testing job打开ENABLE_LICENSE_PROTECTED开关 2023-06-30 11:41:26 +00:00
fumingwei
fd012dfbfa bugfix:TSG-15730:更新redis helm chart包 2023-06-30 11:41:26 +00:00
wangmenglan
dbcf3a45e7 Clixon更新至1.0.53
TSG-15731: Clixon支持配置bond_mode以及bond_xmit_policy
2023-06-30 19:37:53 +08:00
liuxueli
32776525e7 OMPUB-937: 福建项目:LUA虚拟机线程不安全,多线程执行LUA脚本导致程序重启(两个线程分别加载LUA和执行LUA) 2023-06-30 11:17:19 +00:00
luwenpeng
a844427fec TSG-15732 TSG-OS适配网络浮动许可证
1.更新aksusbd驱动,并禁用开机自启
    2.更新环境变量HASPUSER_PREFIX的目录,并添加到hasp_monitor.service中
    3.HASPUSER_PREFIX目录下增加默认配置文件hasp_25743.ini
        * 注释 Admin License Manager Server Address(部署时按需配置)
        * 默认禁用广播
    4.hasp_monitor.server只有在TSG-X设备上执行开机自启
2023-06-30 11:16:55 +00:00
liuchang
222f846c7e drop packet when delay over 2 seconds 2023-06-30 11:14:11 +00:00
liuxueli
c61e86ce9b 更新tsg_master、ssl,支持:
TSG-15162 - ssl解析层支持识别ECH
TSG-15163 - tsg_master支持将ECH识别映射为对应的APPID,并参与执行策略
2023-06-30 18:11:00 +08:00
songyanchao
a048e0ed6e 🎈 perf: mrzcpd 升级至v4.6.34 (修复 mrpdump 工具在设置bpf参数时捕包异常问题)
mrzcpd 升级至v4.6.34 (修复 mrpdump 工具在设置bpf参数时捕包异常问题)
v23.06.6
2023-06-29 12:44:15 +00:00
linxin
2580db7963 modified: ansible/roles/k3s-install/tasks/main.yml 2023-06-29 19:00:24 +08:00
linxin
21c33d832b 修复在未配置DNS时,出现解析HOST失败的问题 2023-06-29 18:45:15 +08:00
fumingwei
2ae5c6aaa3 bugfix:TSG-15718:修改因sapp配置文件错误导致firewall容器启动失败问题 v23.06.5 2023-06-28 20:52:16 +08:00
songyanchao
d6e49fd5ef 🎈 perf: MRZCPD升级至v4.6.33
MRZCPD升级至v4.6.33
2023-06-28 12:22:29 +00:00
liuwentan
3ade1804b6 maat4.0.29 2023-06-28 12:22:05 +00:00
luwenpeng
53dba15ce9 更新hasp-tools到1.0.7
* 共享内存支持无锁访问
    * hasp_monitor运行过程中独占一个授权坐席
    * hasp_monitor & hasp_policy支持SIGUSER1/SIGUSER2信号调整日志级别
    * hasp_monitor检测到授权过期后重新login尝试获取新授权
2023-06-28 14:44:52 +08:00
wangmenglan
7da946f108 Clixon更新至1.0.51
TSG-15708: OS适配session flag插件名字修改
TSG-15713: Clixon支持平滑升级
v23.06.4
2023-06-27 12:25:31 +00:00
刘学利
3cd287f168 更新sapp、tsg_master、quic、session_record: 2023-06-27 12:25:15 +00:00
songyanchao
dce2dfb204 🎈 perf(DPISDN-13): MRZCPD 升级至V4.6.23 (DPDK 升级至 21.11.4)
MRZCPD 升级至V4.6.23 (DPDK 升级至 21.11.4)
2023-06-27 03:47:18 -04:00
liuchang
04f34ba72d change plugin name from session_marker_record to session_flags 2023-06-27 06:16:41 +00:00
fumingwei
109e370fcc bugfix:TSG-15631:修复TSG-X设备发送telegraf device_id错误问题 2023-06-26 20:49:04 +08:00
liuxueli
d95f1731b2 更新tsg-master、firewall, 修复或支持:
TSG-15656 - 功能端输出MAC地址
TSG-15446 - Live Traffic Chart多个统计数据量低于同时间范围内Report对应统计
v23.06.3
2023-06-25 20:01:54 +08:00
wangmenglan
0e07448419 Clixon更新至1.0.50, 创建vsys前查询helm版本 2023-06-25 10:45:13 +00:00
liuwentan
6bd61ba941 maat4.0.28 2023-06-25 10:44:54 +00:00
songyanchao
4a5c1a4a9d 🐞 fix: 修复TSG-OS在build base image过程中安装OFED问题
修复TSG-OS在build base image过程中安装OFED问题
2023-06-25 04:56:04 -04:00
陆秋文
9168f4cd2c fix the when condition of replace action in hasp. v23.06.2 2023-06-23 01:40:33 +00:00
luwenpeng
344417dee6 hasp_monitor.service中增加WantedBy=multi-user.target 2023-06-23 00:14:28 +08:00
yangwei
0cd8d9724b 🔧 build(Update-sapp-and-session-record): sapp v4.3.11 and tsg_conn_sketch-4.1.0 v23.06.1 2023-06-22 12:10:57 +08:00
fumingwei
a053dd203f update sapp to 4.3.10 v23.06 2023-06-21 22:27:09 +08:00
fumingwei
3e6bfd5c5a feature:helm新增udp_duplicated_packet_filter配置项 2023-06-21 14:07:02 +00:00
wangmenglan
f5904a1d6d Clixon更新到1.0.49
TSG-15675 clixon增加session_marker相关配置项
增加inject_duplicated_packet_filter配置
2023-06-21 14:05:56 +00:00
luwenpeng
9ee063a409 update tools/run_flamegrah.sh 2023-06-21 21:48:06 +08:00
fumingwei
94d10adb0a bugfix:创建/var/lib/rancher/k3s/agent/images目录 2023-06-21 19:48:13 +08:00
fumingwei
18b26201b0 P0906环境删除sapp conn_telemetry插件 2023-06-21 19:46:00 +08:00
fumingwei
10ed7b00a0 bugfix:新增控制sapp main.conf的sce,proxy,shaping sid的配置 2023-06-21 19:29:51 +08:00
fumingwei
63e9dde2cf feature:TSG-15676:helm适配session_marker配置项 2023-06-21 19:17:55 +08:00