gfwleak/tsg-tsg-os-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,275 Commits 92 Branches 330 Tags
9cfcf2c9bf4972a86a3da4cba2bc79e668d86d1a
Commit Graph

61 Commits

Author SHA1 Message Date
fumingwei
fba8e630c1 feature:新增sce功能 2023-03-01 13:30:21 +00:00
fumingwei
a7dbdbcf66 feature:TSG-13617:OS支持渲染shaping master的配置 2023-02-09 09:40:29 +00:00
fumingwei
ed863618c2 feature:TSG-12553:新增容器hotfix功能 2022-12-27 17:27:49 +08:00
fengweihao
4373dce89f 更新tfe到v4.6.23, 版本修改: TSG-12637 monitor和deny动作未填写Vsysid 2022-11-15 17:42:26 +08:00
fumingwei
7b7412e6eb feature:TSG-11949:新增vsys_id配置项 2022-09-29 17:46:18 +08:00
fumingwei
572243ba66 feature:TSG-12081:修改7400和9140环境下hos token由provision提供 2022-09-23 16:18:02 +08:00
fumingwei
db01424847 bugfix:修改TSG-X-P0906环境下程序的日志输出 2022-09-15 14:28:32 +08:00
fumingwei
970654f76e feature:删除tsg-x-p0906中workload.slice配置 2022-09-02 10:23:54 +08:00
fumingwei
590666a855 bugfix:删除tsg-x-p0906环境下tsg-os-provision role 2022-09-01 18:55:09 +08:00
fumingwei
391d14d471 bugfix:删除tsg-x-p-0906环境下workload.target 2022-09-01 18:55:09 +08:00
fumingwei
1db1146f09 feature:TSG-X-0906环境下应用fatal日志输出到标准输出 2022-07-07 15:56:10 +08:00
luwenpeng
45a4e4df23 TSG-11125 K3S中创建支持多队列的TAP网卡 
* 并将网卡名称从tun_kni修正为tap0
 2022-07-04 16:31:32 +08:00
fumingwei
39d8f71268 feature:TSG-10783:构建vsys os镜像 2022-07-03 22:27:20 +08:00
fumingwei
ee99a90a51 feature:TSG-X-P0804环境下,tfe-env.service依赖mrzcpd.service 2022-04-27 11:13:36 +08:00
fumingwei
09e1e79e70 feature:TSG-10393:TSG-X_P0804环境下配置kni到tfe通讯网卡的rpm内核绑定 2022-04-27 11:13:35 +08:00
fumingwei
621c831aeb bugfix:修改用ansible yum安装时候gpg check error错误 2022-04-20 17:17:20 +08:00
luwenpeng
f07ecba532 TSG-9425 当开启Mirror Traffic且关闭Add VLAN ID时，功能端使用默认的VLAN ID 2022-01-18 11:06:13 +00:00
luwenpeng
3c48e91d9d TSG-9180 Proxy支持Traffic Mirroring Profiles 2022-01-04 10:34:05 +08:00
fumingwei
bddbebb6f3 feature:构建server ansible安装包,适配poc设备 2021-12-30 17:38:30 +08:00
fumingwei
3ba9652efa refactor:将os stage1配置文件由原来的配置项位置命名方式抽象为HAL命名方式 2021-12-28 15:40:54 +08:00
fumingwei
4084e27815 bugfix:TSG-7684:TSG-8485:修改自检实体证书的签发方有intermediate CA改为root CA 2021-12-07 10:40:36 +08:00
luwenpeng
dd1177ede0 TSG-7335 重新调整TSG-9140上CPU核心的分配 2021-11-18 10:55:45 +03:00
fumingwei
88225866a2 bugfix:TSG-8516:修改sapp,tfe service和mrzcpd的依赖关系由Requires变为Wants 2021-11-17 17:24:44 +08:00
fumingwei
56176a9bba feature:TSG-8445:provision增加enable_hos配置项 2021-11-11 18:14:53 +08:00
fengweihao
0a7df888a1 更新tfe到v4.5.24, 版本修改：TSG-8451 Proxy增加HOS非格式化日志发送开关 2021-11-11 17:42:50 +08:00
luwenpeng
ac08979f96 TSG-8331 完善TFE的Watchdog功能 2021-11-04 19:03:56 +03:00
luwenpeng
47a0306fcd 更新 tfe.conf，将 ssl_ja3_debug 修改为 ssl_debug 2021-11-04 09:00:44 +03:00
luwenpeng
fc7885b44b TSG-8288 TSG-OS中修改SAPP/TFE/CertStore的Service配置文件，增加Licence存储路径的环境变量 2021-11-02 11:59:30 +03:00
fumingwei
21ce1b8cb5 bugfix:TSG-7631:7400环境下当enable_policy_local_cache开启时，maat_redis listen固定端口7002 2021-09-14 15:51:47 +08:00
fumingwei
20a5f919d4 bugfix:修改配置项cm.policy_server.port_range为cm.policy_server.port 2021-09-14 15:51:46 +08:00
fumingwei
a4c999c849 feature:TSG-7623:更新tsg-diagnose 2021-09-13 18:14:49 +08:00
luwenpeng
8cdf74b52c TSG-7617 Proxy适配TOPIC名称变更(将PROXY-EVENT-LOG改为PROXY-EVENT)，并开启kafka加密 2021-09-02 10:04:23 +08:00
liuxueli
1b29ffcc2b 更新tsg_master、app_sketch_local、quic 
TSG-7531 - app_sketch_local在SOCKS的流量下会多次设置MAAT_SET_SCAN_LAST_REGION导致SAPP重启
TSG-7298 - QUIC解析层支持解析quic-ietf加密SNI
TSG-7510 - tsg_master提供发送payload到kafka的接口
TSG-7218 - 调整tsg-master日志级别或日志输出，输出MAAT策略回滚/同步等信息
TSG-7483: 未判断vlan的enabled，导致命中监测即回传镜像流量到第三方
 2021-08-24 14:31:28 +08:00
luwenpeng
d0004d07d4 update tfe form 4.5.11 to 4.5.12 2021-08-20 08:56:56 +00:00
fumingwei
b7f30a53f2 feature:TSG-6634:新增workload.target和workload-pre.target,并设置workload.target为default.target 2021-08-20 11:29:57 +08:00
fumingwei
4fe10d5716 bugfix:删除cache配置项 2021-08-17 16:51:31 +08:00
luwenpeng
f3a0de28d3 TSG-7335 调整TSG-9140上CPU核心的分配 2021-08-12 08:16:22 +00:00
liuxueli
37c550aada 更新：app_proto_identify，libbreakpad_mini，修复内容： 
TSG-6362 - 基础协议识别插件存在误识别的现象
TSG-7216 - breakpad_mini支持从配置文件读入minidump_upload_tools

更新TFE、CertStored的配置文件，添加上传mini_dump文件工具路径
 2021-08-04 15:03:49 +08:00
luwenpeng
86ab77a64a TSG-7234 调整Proxy的解密流量转发的配置，以适配TSG-9140下解密流量转发需求 2021-07-29 13:23:29 +08:00
fumingwei
8dd23dfda9 feature:TSG-7213增加feature选项，可以选择生成minidump或传统的coredump文件 2021-07-29 13:22:51 +08:00
fumingwei
508363d980 bugfix:TSG-6787,修改因tfe的出telegraf_statistic的ip地址填写错误，导致界面数据不全 2021-06-30 10:15:26 +08:00
fumingwei
0185ff5683 bugfix:修改因{% endraw %}导致两个配置项合并到一行的错误 2021-06-30 10:15:22 +08:00
fumingwei
d66ba20e59 bugfix:修改由{% raw %}造成配置文件产生多余空格问题 2021-06-30 10:15:21 +08:00
fumingwei
df70363e2c bugfix:修改tsg-os-provision service 启动失败问题 2021-06-30 10:15:19 +08:00
fumingwei
a1a4446a3c refactor:provision.yml.sample变量名字都使用小写，修改变量名字ip变为address 2021-06-30 10:15:19 +08:00
fumingwei
f04a832695 refactor:增加feature.enable_policy_local_cache来取代maat_redis_city_server 2021-06-30 10:15:18 +08:00
fumingwei
9256e4be5c refactor:将pangu_pxy更名为cache 2021-06-30 10:15:15 +08:00
fumingwei
d4c94ca449 refactor:将log_kafkabrokers和firewall.hos_serverip,firewall_hos_serverport合并到OLAP中 2021-06-30 10:15:15 +08:00
fumingwei
29555f5f36 refactor:将breakpad_upload_url改名为sentry_url 2021-06-30 10:15:14 +08:00
fumingwei
24dbb991cd refactor:将maat_redis_server和dynamic_maat_redis_server配置项合并到CM.policy_server中 2021-06-30 10:15:14 +08:00