Commit Graph

162 Commits

Author SHA1 Message Date
yangyubo
2715e303c3 TSG-15739:功能端支持输出IPFIX封装的UDP报文 2023-09-03 14:15:43 +00:00
yangwei
1b7444b1d3 feat(sapp): update to sapp-4.3.23.7f030e5
Conflicts:
	ansible/install_config/group_vars/rpm_version.yml
2023-08-25 20:44:44 +08:00
linxin
1a5dfaa677 更改inject打包逻辑 2023-08-25 20:44:41 +08:00
linxin
290d86b095 统一工作目录名称 2023-08-25 20:44:40 +08:00
linxin
148abbd7d4 测试packet-adapter 2023-08-25 20:44:40 +08:00
linxin
f8580d24fb TSG-16748: 在os 23.08版本中注释掉stat_policy_enforcer插件 2023-08-22 10:22:45 +08:00
liuxueli
64e6d700e0 更新stat_policy_enforcer: TSG-16619: 输出statistics_rule_hits的计数 2023-08-13 13:31:43 +00:00
liuxueli
4691fd076f 更新tsg_master、firewall,修复:
TSG-16515: 单数据包多次扫描命中结果超16个时存在非法写导致段错误
2023-08-08 18:32:02 +08:00
luwenpeng
93969b4695 TFE适配MRZCPD的分流算法的变更;并增加分流的调试日志 2023-08-08 11:42:27 +08:00
liuxueli
75bb77a08d 更新sapp、tsg_master、firewall、statistics_metrics、libfieldstat4、libstatistics, 支持:
TSG-16060: 支持输出命中Statistics Policy和object的Metrics
2023-08-06 21:45:09 +08:00
liuxueli
fa3e810e8e 更新tsg_master、firewall、session_record、quic、ssl、http,修复:
tsg_master: 规范变量的定义; 支持关闭FS的相关统计,便于valgrind/asan定位内存的相关问题
tsg_master: 增加sni长度判断,同时解析结果异常时,增加释放已申请sni内存的操作
tsg_master: 修复application metrics更新包数时可能存在内存越界
quic: 增加长度判断,修复长度异常时造成的内存非法读
http: 修复strncasecmp时未对待查找串长度保护,可能读越界的错误
session_record/firewall/ssl: Debug版本链接ASAN,用于定位问题


(cherry picked from commit 29e1910607)
2023-08-03 15:09:50 +08:00
fumingwei
5f8d5cec28 feature:TSG-16300:适配clixon新增sapp opening_timeout和closing_timeout配置项 2023-07-24 20:14:46 +08:00
linxin
95be2f533e TSG-16295: 在provision和clixon中增加是否生成JA3指纹的开关 2023-07-24 11:45:55 +00:00
fumingwei
8a277feada bugfix:TSG-16265:新增telegraf aggregators grace和delay配置项 2023-07-19 11:19:07 +00:00
fumingwei
21c9d1ab63 feature:TSG-16271:在provision和clixon中增加开关 2023-07-19 11:18:05 +00:00
fumingwei
89bffe2be6 feature:TSG-16254:os适配clixon SSL decode certificate开关 2023-07-18 11:35:26 +00:00
liuxueli
2359b01529 更新tsg_master、app_proto_identify, 修复:
OMPUB-961 - P19现场: TSG MASTER解析SYN/SYN_ACK占用CPU2.6%左右
OMPUB-960 - P19现场: 基础协议识别插件(app_proto_identify)占用CPU较高(15%左右)
2023-07-14 21:08:12 +08:00
liuxueli
859e5c0607 更新: tsg_master、session_record,修复:
TSG-15999 - 日志中的app_full_path出现异常内容
TSG-15855 - Session Records存在大量重复Session ID
发送日志时开启KAFKA压缩 COMPRESSION_TYPE="snappy"
2023-07-13 11:03:55 +00:00
wangmenglan
d47065b2b3 bugfix: SCE更新至1.0.14
TSG-14170: Service Function的Health Check为None时,未获取到SF状态和MAC Address
2023-07-13 11:02:35 +00:00
liuxueli
079e9646db 更新http、session_record、firewall, 修复:
firewall: TCP/UDP未注册FS Line ID, 使用FS-operate函数操作可能会导致重启
http,session_record: 修正输出本地日志的级别
2023-07-12 23:43:26 +08:00
yangwei
53c8a6bc7d feat(rpm and sapp.toml update): sapp.toml & mail.so
1、sapp.toml 默认polling_priority=100
2、update to mail-1.0.19.e982b44, Fix TSG-12082 and Fix TSG-11013
2023-07-12 14:50:23 +08:00
liuxueli
0ad4e347b9 修正fs2_sysinfo.metrics/fs3_sysinfo.metrics的路径 2023-07-06 13:48:03 +00:00
fengweihao
f96f47b513 更新app-proto-engine,版本变更:修改OS上main.conf模板 2023-07-06 06:19:09 +00:00
liuxueli
de0d5fa9d8 修正capture_packet_plug插件的部署位置 2023-07-05 20:38:21 +08:00
fumingwei
b01f346026 feature:TSG-15905:新增os适配decoders.HTTP_GZIP和decoders.MAIL_BASE64选项 2023-07-05 12:20:28 +00:00
yangyubo
da10a7eb7a 修复tsg-15907:telegraf发送队列不足导致数据丢失 2023-07-05 20:05:02 +08:00
liuchang
3af2a592d2 change max processed session num when polling for different priority
check diabled rule for existed session every interval, default interval 120s
2023-07-05 07:57:29 +00:00
liuxueli
44e06e99d8 TSGX设备firewall插件缺少TCP/UDP函数入口,修正session_record的日志文件 2023-07-04 17:53:25 +08:00
fumingwei
54f34bc716 feature:TSG-15851:新增cm-cache切换主备cm的功能 2023-07-04 08:57:41 +00:00
fumingwei
0fbefc7709 refactor:mrzcpd-exporter使用固定镜像,不再使用tsg-init镜像,TSG-13281:重新构造traffic-engine升级包 2023-07-03 21:25:38 +08:00
fumingwei
fd012dfbfa bugfix:TSG-15730:更新redis helm chart包 2023-06-30 11:41:26 +00:00
fumingwei
2ae5c6aaa3 bugfix:TSG-15718:修改因sapp配置文件错误导致firewall容器启动失败问题 2023-06-28 20:52:16 +08:00
刘学利
3cd287f168 更新sapp、tsg_master、quic、session_record: 2023-06-27 12:25:15 +00:00
liuchang
04f34ba72d change plugin name from session_marker_record to session_flags 2023-06-27 06:16:41 +00:00
fumingwei
109e370fcc bugfix:TSG-15631:修复TSG-X设备发送telegraf device_id错误问题 2023-06-26 20:49:04 +08:00
fumingwei
3e6bfd5c5a feature:helm新增udp_duplicated_packet_filter配置项 2023-06-21 14:07:02 +00:00
fumingwei
18b26201b0 P0906环境删除sapp conn_telemetry插件 2023-06-21 19:46:00 +08:00
fumingwei
10ed7b00a0 bugfix:新增控制sapp main.conf的sce,proxy,shaping sid的配置 2023-06-21 19:29:51 +08:00
fumingwei
63e9dde2cf feature:TSG-15676:helm适配session_marker配置项 2023-06-21 19:17:55 +08:00
fumingwei
10b108afdb feature:TSG-15664:OS适配授权管理 2023-06-21 04:17:42 +00:00
fumingwei
1b28801646 feature:promethues新增component字段 2023-06-20 18:47:51 +08:00
fumingwei
0be2737bc8 bugfix:修改ipmi和reloader的helm名字 2023-06-20 16:21:01 +08:00
fumingwei
380d3bceac feature:修改cm cache prometheus收集方式 2023-06-20 14:29:17 +08:00
fumingwei
2e228cac53 bugfix:更新cm cache redis配置 2023-06-19 21:49:54 +08:00
fumingwei
e0de2f4447 bugfix:修改sce pod设备默认容器错误问题 2023-06-19 19:06:53 +08:00
wangmenglan
b283fe1dbf Clixon更新到1.0.45
TSG-15626 Clixon支持渲染驱动rxcore配置
TSG-15582 Clixon支持cm policy local cache clixon配置项
TSG-15318 Clixon 增加non-interactive mode
2023-06-19 07:00:01 +00:00
wangmenglan
034c064e83 更新Clixon,支持配置Packet IO affinity 2023-06-19 07:00:01 +00:00
fumingwei
2be40c14fe feature:TSG-15583:os新增cm cache功能 2023-06-19 07:00:01 +00:00
wangmenglan
b368984ef2 feat(TSG-15579): 调整firewall和proxy traffic_mirror相关配置 2023-06-15 13:10:29 +00:00
fumingwei
17b917329c bugfix:修复traffic-engine中的prometheus.io/port配置错误问题 2023-06-14 10:12:31 +00:00