Commit Graph

1376 Commits

Author SHA1 Message Date
fengweihao
a56735c01f 更新certsorte到v3.0.2, 版本修改: 适配Maat4接口maat_plugin_table_get_ex_data参数变更 2023-06-08 11:28:23 +00:00
fengweihao
75bf68ade6 更新swarmkv到v3.0.6, 版本修改: TSG-15418 2023-06-08 11:27:45 +00:00
liuwentan
3659496d47 maat4.0.23 2023-06-08 16:20:38 +08:00
liuchang
fe13919e3a fix a memleak 2023-06-07 10:37:29 +00:00
fumingwei
aa803039d8 bugfix:update libfieldstat3 to 3.0.6 2023-06-06 19:58:34 +08:00
wangmenglan
4c0057ea94 更新TFE到4.8.22 2023-06-06 11:53:16 +00:00
liuxueli
d4dafa5535 修正配置文件(maat.conf): EFFECT_INTERVAL_MS=1000,GARBAGE_COLLECT_MS=6000,RULE_UPDATE_CHECK_INTERVAL_MS=1000 2023-06-06 11:52:43 +00:00
liuchang
9f488d2d82 bugfix shaping_engine coredump 2023-06-06 08:38:40 +00:00
wangmenglan
aa852615b9 更新TFE和Clixon
修复:TSG-15349 - TSG X环境因mrzcpd未启动导致pod无法启动
新增:TSG-15354 - 新增consul helmchart nodeName配置项
2023-06-06 02:20:39 +00:00
fengweihao
2503942030 更新swarmkv到v3.0.5, 版本修改: 修复btconsume命令笔误 2023-06-05 11:23:16 +00:00
liuxueli
1634c5bdd2 更新tsg_master、tsg_conn_sketch、app_sketch_local,修复或新增:
TSG-15317 - VoIP Records中RTP原始包缺少文件下载地址
tsg_master,app_sketch_local: 增加MAAT4的输出统计
2023-06-05 11:22:48 +00:00
liuchang
60bbb09f36 shaping don't calculate max latency for borrow profile 2023-06-05 11:22:11 +00:00
songyanchao
3d32a8f106 🐞 fix(TSG-15352): mrzcpd 升级至 mrzcpd-4.6.25.1b45a4c
mrzcpd 升级至 mrzcpd-4.6.25.1b45a4c
2023-06-05 11:21:46 +00:00
linxin
f4dee3df7a 固定node name用于解决修改hostname后删除node重启服务导致pod pending 2023-06-05 14:15:42 +08:00
fumingwei
dfc1a831a8 feature:TSG-15303:update libfieldstat3 to 3.0.5 2023-06-03 22:56:26 +08:00
wangmenglan
f8df0e4ea4 feat(TSG-15342): 更新clixon到1.0.39 2023-06-02 21:09:49 +08:00
luwenpeng
f92dd28e0b fix笔误 2023-06-02 20:42:40 +08:00
liuxueli
e8690db000 更新tsg_master,新增:
TSG-15307 - TSG Master流状态同步时增加同步两侧封装包头
TSG-14945 - 功能端输出Application and Protocol Metrics
2023-06-02 12:38:22 +00:00
luwenpeng
b498752286 TFE性能优化 & TSG-15341 2023-06-02 12:36:38 +00:00
liuwentan
aa125189ec maat4.0.22 2023-06-02 12:33:04 +00:00
杨玉波
005309a438 增加Application and Protocol Metrics的telegraf配置 2023-06-02 12:32:32 +00:00
liuchang
311f987bfd add feature: TSG-15243 & TSG-15244 2023-06-02 12:31:51 +00:00
songyanchao
426f552938 🎈 perf: MRZCPD升级至mrzcpd-4.6.24.1e5c394(性能优化)
MRZCPD升级至mrzcpd-4.6.24.1e5c394(性能优化)
2023-06-02 12:31:27 +00:00
liuxueli
6a8e7a4558 更新sapp、tsg_master、libMESA_handle_logger,修复:
TSG-15325 - Firewall发送的控制报文中的session id与mrbuff metadata中的session id不一致
TSG-15187 - Proxy-Intercept的策略当Filter选择Category时,无法命中策略
libMESA_handle_logger: 按C99标准进行宏展开,展开前判断level是否enable
v23.05-rc3 v23.05
2023-06-02 20:26:17 +08:00
yangwei
db32da94e3 feat(MESA_handle_logger): v2.0.9->v2.0.12
提供获取level是否开启的接口
2023-06-02 11:49:52 +00:00
wangmenglan
6c9a184ee6 🐞 fix(TSG-15308): 更新tfe到v4.8.19
修复TFE Packet IO因启动顺序导致产生core
2023-06-02 13:27:40 +08:00
fumingwei
8250cf4da8 feature:TSG-15285:在容器中安装valgrind 2023-06-02 01:49:54 +00:00
liuwentan
0f6236b103 maat4.0.20 2023-06-02 01:48:20 +00:00
luwenpeng
05df1e5c38 更新火焰图生成脚本 2023-05-31 14:38:11 +08:00
fumingwei
124a06ba6a bugfix:修改配置文件笔误 v23.05-rc2 2023-05-31 07:59:56 +08:00
liuxueli
0c00e277ab 更新tsg_master、firewall、tsg_conn_sketch插件,修复:
TSG-15152 - Dashboard Main下Security Policy Monitor统计数量远低于Sessioin Records对应时间范围内的统计数量
TSG-15269 - monitor rdp和monitor openvpn的策略,安全日志中有对应日志,但策略详情页log count为0
TSG-14403 - 安全策略命中allow,deny,intercept动作后,流量不会再命中Service Chaining原始流量策略
TSG-15196 - 同时设置条件一样的Security-allow和Proxy-Intercept,同时命中,优先级应Allow>Intercept
TSG-14259 - Security Events命中Intercept动作后SSL.Server Side Version、SSL.Client Side Version为空
TSG-14064 - 满足Session Records产生满足条件的流量未产生Session日志
TSG-13577 - deny-rate limit动作日志中记录的包数与策略捕包包数相差很大
TSG-14402 - 有应答的DNS协议链接误识别为Asymmetric
TSG-13319 - 双方向流量错误标注Flag:Asymmetric
TSG-14616 - Security Shunt对应流量结束30分钟后无对应策略动作统计
TSG-14580 - Security策略Shunt动作生效情况下,对应流量产生Session Records日志
TSG-14773 - Allow+IP优先级低于Shunt+IP+SSL
TSG-15232 - VoIP、GTP-C日志统计vsys不准确
2023-05-30 21:35:37 +08:00
fumingwei
dde335f387 bugfix:TSG-15212:update kni to 5.1.5 2023-05-30 20:29:48 +08:00
wangmenglan
29c7f27219 🐞 fix(TSG-15212): 更新tfe到v4.8.18 2023-05-30 20:24:45 +08:00
fumingwei
6332ae6d91 bugfix:TSG-14782:使用systemd timer实现清理orphaned pods目录 2023-05-30 20:11:33 +08:00
fengweihao
d447f3aea8 更新tfe到v4.8.17, 版本修改: 修复TSG-15298 proxy_rule_hits中metric下action动作错误问题 2023-05-30 16:50:01 +08:00
fengweihao
ef3005ce3f 更新libswarmkv到v3.0.4, 版本修改: TSG-15166 swarmkv通过priority查询session排队数量存在负值 2023-05-30 10:20:29 +08:00
luwenpeng
49fdba9464 update sce and tfe v23.05-rc1 2023-05-26 11:52:47 +00:00
fumingwei
f1ace314bd bugfix:TSG-15130:TSG-15212:update kni to 5.1.4 2023-05-26 19:48:58 +08:00
fumingwei
0053d62144 bugfix:修改设置metric invisible输出file显示错误问题 2023-05-26 19:44:20 +08:00
fumingwei
ec558debda feature:update coredump-tools to 1.0.10 2023-05-26 11:39:01 +00:00
liuxueli
328c774356 TSGX设备默认打开发送拦截日志的开关SEND_INTERCEPT_LOG=1 2023-05-26 11:35:17 +00:00
liuxueli
7215efe5ee 更新sapp、tsg_master、tsg_conn_sketch; 修复:
TSG-15227 - 7400,9140环境,sapp因单向流测试拦截产生core
TSG-15228 - 9140环境,sapp因dtls.so产生core
TSG-15229 - 9140环境,sapp因tsg_ddos_sketch/tsg_ddos_sketch.so产生core
TSG-15236 - 9140环境,sapp因capture_packet_plug.so产生core
TSG-15235 - 7400环境出现Down告警,sapp未写入core
TSG-15093 - 自定义Signatures引用Intervals类的属性,流量不命中功能端
TSG-15130 - Policy_id=1的策略,7400&9140环境上的流量在SecurityEvents和ProxyEvents里都产生了日志
TSG-15212 - Proxy-Intercept策略命中后产生的日志中Intercept Status字段始终是passthrough,应为Intercept
tsg_conn_sketch: 移除分支测试相关编译选项,gitem对齐cacheline,提高性能

TSG-15187 - Proxy-Intercept的策略当Filter选择Category时,无法命中策略 RESOLVED
2023-05-26 18:38:23 +08:00
fumingwei
10b915e298 feature: update coredump-tools to 1.0.9 2023-05-26 10:09:34 +08:00
fumingwei
2fafbe896e feature:更新coredump-tool,增加minidump debug的功能 2023-05-23 18:53:21 +08:00
liuwentan
5f9c46f3d7 maat4.0.19 2023-05-23 18:33:26 +08:00
fumingwei
0e89e07741 feature:通过cgo调用动态库实现minidump生成 v23.05-rc0 2023-05-22 20:20:15 +08:00
fumingwei
fa28cf5550 feature:在容器中安装perl相关工具 2023-05-22 11:27:05 +00:00
yangwei
f4ad02f4e9 🐞 fix(sapp & session flag): 更新sapp至4.3.3,session marker至2.1.3 2023-05-22 18:54:09 +08:00
fumingwei
4a508c75e1 bugfix:TSG-13281:修复生成traffic-engine压缩目录错误问题 2023-05-22 10:23:28 +00:00
fumingwei
b2bbc899ae bugfix:修改tfe metric模板telegraf_ip配置项笔误 2023-05-22 10:23:28 +00:00