Commit Graph

78 Commits

Author SHA1 Message Date
fengweihao
e470463e09 tfe v4.8. 64 => dev-24.02 2024-02-04 10:56:54 +00:00
fengweihao
4644d57c8b 更新tfe到v4.8.57, 版本修改: TSG-18177 Proxy删除关于FQDN Category的配置加载和扫描, 适配maat_scan_group函数变更 2024-01-03 18:34:04 +08:00
fumingwei
a2383edcf0 feature:TSG-18248:删除hos_server配置项及其相关代码 2023-12-29 17:04:47 +08:00
fengweihao
e39874493e 更新tfe到v4.8.56, 版本修改: TSG-18286 Proxy支持虚拟表表名变更,删除代理本地缓存,删除tsg-http相关配置 2023-12-29 08:48:20 +00:00
fengweihao
5a3e9fcf2e 更新tfe到v4.8.52, 版本修改: 优化kafka句柄创建和TOPIC注册 2023-12-19 15:43:49 +08:00
fengweihao
b22d48f6b3 更新tfe到v4.8.51, 版本修改: TSG-17862 Proxy支持Internal IP address和Exteral IP Address的扫描 2023-12-15 09:21:20 +00:00
fengweihao
e38d40fda3 更新tfe到v4.8.49, 版本修改: TSG-17797 TFE适配虚拟表名变更 TSG-17777 优化app id扫描,多次扫描支持非 2023-11-30 10:05:10 +00:00
fumingwei
e058996dd1 refactor:delete P1403,P0804 refer config 2023-11-21 20:10:41 +08:00
liuxueli
12478ba1ec 删除TSG-P0804和TSG-P1403相关配置项 2023-11-21 20:10:39 +08:00
fumingwei
39b1ff44d3 update libfieldstat3 to 3.0.15 2023-09-12 22:20:40 +08:00
luwenpeng
93969b4695 TFE适配MRZCPD的分流算法的变更;并增加分流的调试日志 2023-08-08 11:42:27 +08:00
luwenpeng
a844427fec TSG-15732 TSG-OS适配网络浮动许可证
1.更新aksusbd驱动,并禁用开机自启
    2.更新环境变量HASPUSER_PREFIX的目录,并添加到hasp_monitor.service中
    3.HASPUSER_PREFIX目录下增加默认配置文件hasp_25743.ini
        * 注释 Admin License Manager Server Address(部署时按需配置)
        * 默认禁用广播
    4.hasp_monitor.server只有在TSG-X设备上执行开机自启
2023-06-30 11:16:55 +00:00
fumingwei
b2bbc899ae bugfix:修改tfe metric模板telegraf_ip配置项笔误 2023-05-22 10:23:28 +00:00
fumingwei
47c8f458d5 feature:修改tfe发送metric的telegraf端口为8900 2023-05-16 17:14:15 +08:00
wangmenglan
a7551d1015 🐞 fix(TSG-15050): TFE 配置增加proxy_hits字段; TFE packet io增加fieldstat状态统计 2023-05-15 11:09:15 +00:00
fumingwei
08c5858c11 feature:新增TSG-X环境下traffic_steering配置项 2023-05-06 18:40:12 +08:00
fumingwei
25470c8405 feature:TSG-14933:TSG-OS增加汇聚TFE Metrics的telegraf 2023-05-06 08:41:12 +00:00
fumingwei
fba8e630c1 feature:新增sce功能 2023-03-01 13:30:21 +00:00
fumingwei
a7dbdbcf66 feature:TSG-13617:OS支持渲染shaping master的配置 2023-02-09 09:40:29 +00:00
fumingwei
ed863618c2 feature:TSG-12553:新增容器hotfix功能 2022-12-27 17:27:49 +08:00
fengweihao
4373dce89f 更新tfe到v4.6.23, 版本修改: TSG-12637 monitor和deny动作未填写Vsysid 2022-11-15 17:42:26 +08:00
fumingwei
7b7412e6eb feature:TSG-11949:新增vsys_id配置项 2022-09-29 17:46:18 +08:00
fumingwei
572243ba66 feature:TSG-12081:修改7400和9140环境下hos token由provision提供 2022-09-23 16:18:02 +08:00
fumingwei
db01424847 bugfix:修改TSG-X-P0906环境下程序的日志输出 2022-09-15 14:28:32 +08:00
fumingwei
970654f76e feature:删除tsg-x-p0906中workload.slice配置 2022-09-02 10:23:54 +08:00
fumingwei
590666a855 bugfix:删除tsg-x-p0906环境下tsg-os-provision role 2022-09-01 18:55:09 +08:00
fumingwei
391d14d471 bugfix:删除tsg-x-p-0906环境下workload.target 2022-09-01 18:55:09 +08:00
fumingwei
1db1146f09 feature:TSG-X-0906环境下应用fatal日志输出到标准输出 2022-07-07 15:56:10 +08:00
luwenpeng
45a4e4df23 TSG-11125 K3S中创建支持多队列的TAP网卡
* 并将网卡名称从tun_kni修正为tap0
2022-07-04 16:31:32 +08:00
fumingwei
39d8f71268 feature:TSG-10783:构建vsys os镜像 2022-07-03 22:27:20 +08:00
fumingwei
ee99a90a51 feature:TSG-X-P0804环境下,tfe-env.service依赖mrzcpd.service 2022-04-27 11:13:36 +08:00
fumingwei
09e1e79e70 feature:TSG-10393:TSG-X_P0804环境下配置kni到tfe通讯网卡的rpm内核绑定 2022-04-27 11:13:35 +08:00
fumingwei
621c831aeb bugfix:修改用ansible yum安装时候gpg check error错误 2022-04-20 17:17:20 +08:00
luwenpeng
f07ecba532 TSG-9425 当开启Mirror Traffic且关闭Add VLAN ID时,功能端使用默认的VLAN ID 2022-01-18 11:06:13 +00:00
luwenpeng
3c48e91d9d TSG-9180 Proxy支持Traffic Mirroring Profiles 2022-01-04 10:34:05 +08:00
fumingwei
bddbebb6f3 feature:构建server ansible安装包,适配poc设备 2021-12-30 17:38:30 +08:00
fumingwei
3ba9652efa refactor:将os stage1配置文件由原来的配置项位置命名方式抽象为HAL命名方式 2021-12-28 15:40:54 +08:00
fumingwei
4084e27815 bugfix:TSG-7684:TSG-8485:修改自检实体证书的签发方有intermediate CA改为root CA 2021-12-07 10:40:36 +08:00
luwenpeng
dd1177ede0 TSG-7335 重新调整TSG-9140上CPU核心的分配 2021-11-18 10:55:45 +03:00
fumingwei
88225866a2 bugfix:TSG-8516:修改sapp,tfe service和mrzcpd的依赖关系由Requires变为Wants 2021-11-17 17:24:44 +08:00
fumingwei
56176a9bba feature:TSG-8445:provision增加enable_hos配置项 2021-11-11 18:14:53 +08:00
fengweihao
0a7df888a1 更新tfe到v4.5.24, 版本修改:TSG-8451 Proxy增加HOS非格式化日志发送开关 2021-11-11 17:42:50 +08:00
luwenpeng
ac08979f96 TSG-8331 完善TFE的Watchdog功能 2021-11-04 19:03:56 +03:00
luwenpeng
47a0306fcd 更新 tfe.conf,将 ssl_ja3_debug 修改为 ssl_debug 2021-11-04 09:00:44 +03:00
luwenpeng
fc7885b44b TSG-8288 TSG-OS中修改SAPP/TFE/CertStore的Service配置文件,增加Licence存储路径的环境变量 2021-11-02 11:59:30 +03:00
fumingwei
21ce1b8cb5 bugfix:TSG-7631:7400环境下当enable_policy_local_cache开启时,maat_redis listen固定端口7002 2021-09-14 15:51:47 +08:00
fumingwei
20a5f919d4 bugfix:修改配置项cm.policy_server.port_range为cm.policy_server.port 2021-09-14 15:51:46 +08:00
fumingwei
a4c999c849 feature:TSG-7623:更新tsg-diagnose 2021-09-13 18:14:49 +08:00
luwenpeng
8cdf74b52c TSG-7617 Proxy适配TOPIC名称变更(将PROXY-EVENT-LOG改为PROXY-EVENT),并开启kafka加密 2021-09-02 10:04:23 +08:00
liuxueli
1b29ffcc2b 更新tsg_master、app_sketch_local、quic
TSG-7531 - app_sketch_local在SOCKS的流量下会多次设置MAAT_SET_SCAN_LAST_REGION导致SAPP重启
TSG-7298 - QUIC解析层支持解析quic-ietf加密SNI
TSG-7510 - tsg_master提供发送payload到kafka的接口
TSG-7218 - 调整tsg-master日志级别或日志输出,输出MAAT策略回滚/同步等信息
TSG-7483: 未判断vlan的enabled,导致命中监测即回传镜像流量到第三方
2021-08-24 14:31:28 +08:00