Commit Graph

616 Commits

Author SHA1 Message Date
fumingwei
a90476ec80 bugfix:TSG-8516:修改mrapm_device和mrapm_stream service由requires mrzcpd变为wants 2021-11-18 16:38:58 +08:00
luwenpeng
dd1177ede0 TSG-7335 重新调整TSG-9140上CPU核心的分配 2021-11-18 10:55:45 +03:00
彭宣正
e6da4107e7 🐞 fix(TSG-8536): update tsg_conn_sketch-3.1.7 to tsg_conn_sketch-3.1.8 2021-11-18 14:53:35 +08:00
fumingwei
f2b7e6fc84 refactor:TSG-8535:provision新增session_distribution_policy 2021-11-18 14:45:40 +08:00
彭宣正
624e01afcd 🐞 fix(TSG-8558): update tsg_conn_sketch-3.1.6 to tsg_conn_sketch-3.1.7 2021-11-17 17:47:37 +08:00
fumingwei
88225866a2 bugfix:TSG-8516:修改sapp,tfe service和mrzcpd的依赖关系由Requires变为Wants 2021-11-17 17:24:44 +08:00
songyanchao
04afaf84df 🐞 fix(TSG-8541): 内核升级后需要重新编译i40e驱动
内核升级后需要根据升级后的内核版本重新构建i40e驱动包

https://jira.geedge.net/browse/TSG-8541
2021-11-17 00:49:43 -05:00
Lu Qiuwen
4de2d84574 更新mrzcpd到4.4.11,修正TSG-8538 v21.11-rc2 2021-11-17 01:29:31 +00:00
liuxueli
38ab8635b1 更新app_proto_identify插件,修复:
TSG-8369 - 基础协议识别插件未识别DNS协议(小部分未正确识别)
2021-11-16 22:38:28 +03:00
fumingwei
e19fdb323b feature:TSG-8535:provision新增load_balancing_distribution配置项来配置mrzcpd分流模式 2021-11-16 13:16:37 +00:00
lijia
059449fa04 升级wangw, wire_graft插件:
TSG-8381 - wire_graft不支持带vlan的链路信息;
 TSG-8508 - WANNAT没有将统计指标输出到Prometheus,请输出以便监控;
 TSG-8528 - WANNAT不支持四元组分流;
2021-11-16 20:49:36 +08:00
songyanchao
0969ce1a19 🔧 fix(TSG-8505): 内核升级为5.4.159
为解决小概率情况下iavf网卡初始化时内核崩溃问题,内核升级为5.4.159

https://jira.geedge.net/browse/TSG-8505
2021-11-16 12:32:52 +00:00
liuxueli
f0731f2bd3 更新app_proto_idnetify插件,修复:
TSG-8534 - MAIL解析层识别与基础协议识别插件(app_proto_identify)识别结果不一致
2021-11-16 14:08:34 +03:00
彭宣正
33766c47e8 🐞 fix(TSG-8328): update tsg_conn_sketch-3.1.5 to tsg_conn_sketch-3.1.6 2021-11-16 18:02:11 +08:00
彭宣正
8b5b6c75b8 🐞 fix(TSG-8520): update tsg_conn_sketch-3.1.4 to tsg_conn_sketch-3.1.5 2021-11-16 17:17:18 +08:00
liuxueli
36bb5738a3 更新基础协议识别插件app_proto_identify,修复:
TSG-8407 - Security Events 以及 Session Records中存在Schema Type 为MAIL,L7 Prococol为UNCATEGORIZED的情况
TSG-8483 - Session Record中SMTP链接日志的L7 Potocol为FTP(非标端口26)
v21.11-rc1
2021-11-15 22:46:34 +03:00
彭宣正
a2a834a84b (TSG-8500, TSG-8502): update ssh-2.0.11 to ssh-2.0.12, tsg_conn_sketch-3.1.3 to tsg_conn_sketch-3.1.4 2021-11-15 21:27:44 +08:00
fumingwei
c499cea8d2 feature:TSG-8379:在provision中添加开关,控制是否开启DNS会话记录/RTP会话记录/RADIUS会话记录功能 2021-11-15 12:34:02 +00:00
fengweihao
889756b71e 更新tfe到v4.5.25, 版本修改:TSG-8451 common_stream_trace_id修改为字符串 2021-11-15 19:31:44 +08:00
liuxueli
c6c9910013 更新tsg_master、app_proto_identify、tsg_conn_sketch、quic、radius、radius_collect_plug,支持或修复
TSG-8379: 在provision中添加开关,控制是否开启DNS会话记录/RTP会话记录/RADIUS会话记录功能
TSG-8402: Security Events中Schema为Mail,L7 Protocol为FTP
TSG-8498: Radius Records中Device Group为空
TSG-8489: 一个会话被同时识别为HTTP和SSL协议时,Session Record插件(tsg_conn_record)使用已释放的内存导致SAPP重启
TSG-8488: Session Record插件(tsg_conn_record v3.1.2.79b489e)运行时找不到符号(函数声明与定义不一致)
TSG-8484: Session Record插件(tsg_conn_record)存在内存泄漏
2021-11-15 13:53:05 +03:00
yangwei
b52287d0c7 feat(rpm_version): 更新quic及关联插件,修复ssl和masterbug
quic重构,升级至2.0.1,同步升级关联的fw_quic,tsg_master,tsg_conn_sketch,app_proto_identify
ssl修复TSG-8210
tsg_master修复TSG-8345
v21.11-rc0
2021-11-11 10:18:14 +00:00
fumingwei
56176a9bba feature:TSG-8445:provision增加enable_hos配置项 2021-11-11 18:14:53 +08:00
fengweihao
0a7df888a1 更新tfe到v4.5.24, 版本修改:TSG-8451 Proxy增加HOS非格式化日志发送开关 2021-11-11 17:42:50 +08:00
彭宣正
03c8c5c7ef 🐞 fix(TSG-8428.TSG-8433): update ssh-2.0.8 to ssh-2.0.11 2021-11-11 17:30:03 +08:00
彭宣正
417379044f 🐞 fix(TSG-8413): update fw_http_plug-4.0.10 to fw_http_plug-4.0.11 2021-11-11 17:24:55 +08:00
彭宣正
5ba920b21a 🐞 fix(TSG-8364): update tsg_conn_sketch-3.0.39 to tsg_conn_sketch-3.1.1 2021-11-11 17:22:17 +08:00
lijia
5957a4ac5d TSG-8395, 修复pkt dump重新文件路径错误, 文件最大阈值溢出错误. 2021-11-10 15:40:51 +08:00
fengweihao
0c2616d1bd 更新libMV-Sketch到v1.1.1,版本修改:修复valgrind检查工具报错问题 2021-11-10 14:12:19 +08:00
彭宣正
6240c55663 feat(TSG-8390): update fw_mail_plug-4.0.1 to fw_mail_plug-4.1.0 2021-11-09 21:14:58 +08:00
彭宣正
c2634a2df5 feat(TSG-8409): update fw_http_plug-4.0.9 to fw_http_plug-4.0.10 2021-11-09 21:12:01 +08:00
彭宣正
d341e72bcf 🐞 fix(TSG-8302,TSG-8390): update tsg_master-5.4.13 to tsg_master-5.4.14 2021-11-09 21:07:19 +08:00
彭宣正
ffd32ddf81 🐞 fix(TSG-8332,TSG-8237,TSG-8330,TSG-8390,TSG-8353,TSG-8349): update tsg_conn_sketch-3.0.37 to tsg_conn_sketch-3.0.39 2021-11-09 21:02:08 +08:00
彭宣正
903e87dfd5 🐞 fix(TSG-8330, TSG-8332): update ssh-2.0.7 to ssh-2.0.8 2021-11-09 20:56:52 +08:00
lijia
2b4c67b024 update sapp, wire_graft, MESA_jump_layer
TSG-8326 - sapp CI增加软件加壳流程;
TSG-8371 - sapp不支持超过两层vlan;
TSG-8381 - wire_graft不支持带vlan的链路信息;
TSG-8372 - MESA_jump_layer不支持三层vlan跳转.
2021-11-08 16:35:55 +08:00
彭宣正
e7a12d8c7a 🐞 fix(TSG-8327,TSG-8328,TSG-8301): update tsg_conn_sketch-3.0.36 to tsg_conn_sketch-3.0.37 2021-11-05 06:01:17 +00:00
yangwenlin
f1eccdc79d feautre:TSG-8098,新增icmpv6功能和修改不可达为管理禁止 2021-11-05 06:00:42 +00:00
luwenpeng
ac08979f96 TSG-8331 完善TFE的Watchdog功能 2021-11-04 19:03:56 +03:00
luwenpeng
47a0306fcd 更新 tfe.conf,将 ssl_ja3_debug 修改为 ssl_debug 2021-11-04 09:00:44 +03:00
luwenpeng
0a2ed82d71 bugfix: TSG-8003 预防证书链投毒 2021-11-03 18:58:29 +03:00
彭宣正
2ab97975fc feat(TSG-8237,TSG-8309): update tsg_conn_sketch-3.0.35 to tsg_conn_sketch-3.0.36 2021-11-03 19:04:51 +08:00
yangwenlin
1a33930dad feature:TSG-8098,TSG-8099,新增tamper的drop改包功能,新增icmp的drop回复icmp端口不可达功能 2021-11-03 18:35:41 +08:00
彭宣正
3cde7ae8c0 📃 docs(TSG-8304,TSG-8302,TSG-8303): update tsg_conn_sketch.inf 2021-11-03 15:11:21 +08:00
彭宣正
d16107fbfb 🐞 fix(TSG-8305): update ssh-2.0.6 to ssh-2.0.7 2021-11-03 15:09:05 +08:00
liuxueli
7bda776d5a 更新quic解析层,修复:
TSG-8261,TSG-8291: 部分QUIC RFC9000未解析出SNI/User-Agent字段
2021-11-02 21:32:39 +03:00
彭宣正
9bf7bed6c7 📃 docs(TSG-8295): update tsg_conn_sketch-3.0.34 to tsg_conn_sketch-3.0.35 2021-11-02 21:38:26 +08:00
彭宣正
625b824083 📃 docs(TSG-8296): update tsg_master-5.4.10 to tsg_master-5.4.11 2021-11-02 21:38:26 +08:00
彭宣正
8535515155 📃 docs(TSG-8294,TSG-8287): update ssh-2.0.5 to ssh-2.0.6 2021-11-02 21:38:08 +08:00
luwenpeng
7e265c408d update-tfe
TSG-8097 TFE的CI构建流程适配加壳功能
        TSG-8258 TFE构建RPM时未包含doh.conf
2021-11-02 11:59:30 +03:00
luwenpeng
fc7885b44b TSG-8288 TSG-OS中修改SAPP/TFE/CertStore的Service配置文件,增加Licence存储路径的环境变量 2021-11-02 11:59:30 +03:00
luwenpeng
7941550180 TSG-8255 TSG-OS安装aksusbds驱动,用于识别硬锁
TSG-8256 TSG-OS安装hasp_update用于获取机器指纹/设置Licence
TSG-8257 TSG-OS配置环境变量用于配置Licence存储路径
2021-11-02 11:59:30 +03:00