Commit Graph

596 Commits

Author SHA1 Message Date
yangwei
b52287d0c7 feat(rpm_version): 更新quic及关联插件,修复ssl和masterbug
quic重构,升级至2.0.1,同步升级关联的fw_quic,tsg_master,tsg_conn_sketch,app_proto_identify
ssl修复TSG-8210
tsg_master修复TSG-8345
v21.11-rc0
2021-11-11 10:18:14 +00:00
fumingwei
56176a9bba feature:TSG-8445:provision增加enable_hos配置项 2021-11-11 18:14:53 +08:00
fengweihao
0a7df888a1 更新tfe到v4.5.24, 版本修改:TSG-8451 Proxy增加HOS非格式化日志发送开关 2021-11-11 17:42:50 +08:00
彭宣正
03c8c5c7ef 🐞 fix(TSG-8428.TSG-8433): update ssh-2.0.8 to ssh-2.0.11 2021-11-11 17:30:03 +08:00
彭宣正
417379044f 🐞 fix(TSG-8413): update fw_http_plug-4.0.10 to fw_http_plug-4.0.11 2021-11-11 17:24:55 +08:00
彭宣正
5ba920b21a 🐞 fix(TSG-8364): update tsg_conn_sketch-3.0.39 to tsg_conn_sketch-3.1.1 2021-11-11 17:22:17 +08:00
lijia
5957a4ac5d TSG-8395, 修复pkt dump重新文件路径错误, 文件最大阈值溢出错误. 2021-11-10 15:40:51 +08:00
fengweihao
0c2616d1bd 更新libMV-Sketch到v1.1.1,版本修改:修复valgrind检查工具报错问题 2021-11-10 14:12:19 +08:00
彭宣正
6240c55663 feat(TSG-8390): update fw_mail_plug-4.0.1 to fw_mail_plug-4.1.0 2021-11-09 21:14:58 +08:00
彭宣正
c2634a2df5 feat(TSG-8409): update fw_http_plug-4.0.9 to fw_http_plug-4.0.10 2021-11-09 21:12:01 +08:00
彭宣正
d341e72bcf 🐞 fix(TSG-8302,TSG-8390): update tsg_master-5.4.13 to tsg_master-5.4.14 2021-11-09 21:07:19 +08:00
彭宣正
ffd32ddf81 🐞 fix(TSG-8332,TSG-8237,TSG-8330,TSG-8390,TSG-8353,TSG-8349): update tsg_conn_sketch-3.0.37 to tsg_conn_sketch-3.0.39 2021-11-09 21:02:08 +08:00
彭宣正
903e87dfd5 🐞 fix(TSG-8330, TSG-8332): update ssh-2.0.7 to ssh-2.0.8 2021-11-09 20:56:52 +08:00
lijia
2b4c67b024 update sapp, wire_graft, MESA_jump_layer
TSG-8326 - sapp CI增加软件加壳流程;
TSG-8371 - sapp不支持超过两层vlan;
TSG-8381 - wire_graft不支持带vlan的链路信息;
TSG-8372 - MESA_jump_layer不支持三层vlan跳转.
2021-11-08 16:35:55 +08:00
彭宣正
e7a12d8c7a 🐞 fix(TSG-8327,TSG-8328,TSG-8301): update tsg_conn_sketch-3.0.36 to tsg_conn_sketch-3.0.37 2021-11-05 06:01:17 +00:00
yangwenlin
f1eccdc79d feautre:TSG-8098,新增icmpv6功能和修改不可达为管理禁止 2021-11-05 06:00:42 +00:00
luwenpeng
ac08979f96 TSG-8331 完善TFE的Watchdog功能 2021-11-04 19:03:56 +03:00
luwenpeng
47a0306fcd 更新 tfe.conf,将 ssl_ja3_debug 修改为 ssl_debug 2021-11-04 09:00:44 +03:00
luwenpeng
0a2ed82d71 bugfix: TSG-8003 预防证书链投毒 2021-11-03 18:58:29 +03:00
彭宣正
2ab97975fc feat(TSG-8237,TSG-8309): update tsg_conn_sketch-3.0.35 to tsg_conn_sketch-3.0.36 2021-11-03 19:04:51 +08:00
yangwenlin
1a33930dad feature:TSG-8098,TSG-8099,新增tamper的drop改包功能,新增icmp的drop回复icmp端口不可达功能 2021-11-03 18:35:41 +08:00
彭宣正
3cde7ae8c0 📃 docs(TSG-8304,TSG-8302,TSG-8303): update tsg_conn_sketch.inf 2021-11-03 15:11:21 +08:00
彭宣正
d16107fbfb 🐞 fix(TSG-8305): update ssh-2.0.6 to ssh-2.0.7 2021-11-03 15:09:05 +08:00
liuxueli
7bda776d5a 更新quic解析层,修复:
TSG-8261,TSG-8291: 部分QUIC RFC9000未解析出SNI/User-Agent字段
2021-11-02 21:32:39 +03:00
彭宣正
9bf7bed6c7 📃 docs(TSG-8295): update tsg_conn_sketch-3.0.34 to tsg_conn_sketch-3.0.35 2021-11-02 21:38:26 +08:00
彭宣正
625b824083 📃 docs(TSG-8296): update tsg_master-5.4.10 to tsg_master-5.4.11 2021-11-02 21:38:26 +08:00
彭宣正
8535515155 📃 docs(TSG-8294,TSG-8287): update ssh-2.0.5 to ssh-2.0.6 2021-11-02 21:38:08 +08:00
luwenpeng
7e265c408d update-tfe
TSG-8097 TFE的CI构建流程适配加壳功能
        TSG-8258 TFE构建RPM时未包含doh.conf
2021-11-02 11:59:30 +03:00
luwenpeng
fc7885b44b TSG-8288 TSG-OS中修改SAPP/TFE/CertStore的Service配置文件,增加Licence存储路径的环境变量 2021-11-02 11:59:30 +03:00
luwenpeng
7941550180 TSG-8255 TSG-OS安装aksusbds驱动,用于识别硬锁
TSG-8256 TSG-OS安装hasp_update用于获取机器指纹/设置Licence
TSG-8257 TSG-OS配置环境变量用于配置Licence存储路径
2021-11-02 11:59:30 +03:00
liuxueli
509b16b5c7 更新DNS解析层,修复:
TSG-8277 - DNS的NSEC3应答记录中salt长度为0时处理不正确导致SAPP重启
2021-11-01 22:07:33 +03:00
fumingwei
4647b82d7b bugfix:删除使用pip3安装yaml module,解决os编译失败问题 2021-11-01 15:38:26 +00:00
fumingwei
488b85d246 feature:为了同步依赖libMESA_jump_layer的v1.0.8版本,更新app_sketch_local到4.1.11版本 2021-11-01 23:14:44 +08:00
fumingwei
8160ca3ace feature:新增ssh conflist.inf和necessary_plug_list.conf配置 2021-11-01 21:40:22 +08:00
彭宣正
e22935f307 📃 docs(TSG-8100,TSG-8101,TSG-8103): update ssh,tsg_conn_sketch-3.0.33 to tsg_conn_sketch-3.0.34, tsg_master-5.4.9 to tsg_master-5.4.10 2021-11-01 21:31:37 +08:00
fengweihao
4b101c2087 更新app-proto-engine到v2.1.1,版本修改:第三方库升级版本1.570.0.22 2021-11-01 15:24:56 +08:00
liuxueli
ff0c0f7c79 更新tsg_master、app_sketch_local、dns,修复或新增:
TSG-8158 - app_sketch_local支持ssl.analysis.no_sni作为识别APP的条件之一
TSG-8160 - app_sketch_local增加统计esni的链接计数
TSG-8084 - 功能端适配subscribe ID即时性更新
TSG-8269 - 命中监测策略镜像流量至第三方,当默认vlan_id=0时不再封装vlan头
TSG-8088 - 功能端解析NSEC类型DNS应答导致段错误
TSG-8152 - DNS解析层支持解析qtype=HTTPS的数据包
2021-11-01 09:25:24 +03:00
lijia
5cc02ca814 更新sapp和MESA_jump_layer:
TSG-8236 - MESA_jump_layer_greedy跳转到UDP层BUG;
TSG-7651 - 插件加载状态通过field_stat输出;
TSG-7949 - sapp频繁输出的重复告警日志改成field stat统计;
TSG-8118 - sapp解析配置文件etc/well_known_port.conf错误;
TSG-8200 - sapp支持输出project, bridge统计计数;
TSG-8253 - SAPPv4.2.57在transparent模式下无法正常启动运行;
TSG-8262 - SAPPv4.2.58版本双臂(transparent)模式下Internal/External方向填写部分错误;
2021-11-01 12:59:13 +08:00
fumingwei
650ae3094e bugfix:修改因nz-talon更新rpm后service名字由nz-promtail变为promtail导致os编译失败问题 v21.10.1 2021-10-29 17:03:55 +08:00
Lu Qiuwen
b2e77aee12 update nz-talon from 21.07 to 21.10.2. 2021-10-29 08:00:58 +00:00
liuxueli
1d1ccb10f9 更新tsg_master、http、ssl插件,修复:
TSG-8203 - 新疆环境:tsg_master调用MESA_net_jump_to_layer函数返回TCP头为空导致SAPP重启
TSG-8201 - 新疆环境:HTTP解析层http_host_parser函数异常导致SAPP重启
TSG-8210 - 新疆环境:SSL解析层解析handshake异常导致SAPP重启
2021-10-29 13:37:40 +08:00
liuxueli
6706267ac8 更新libmaatframe,修复:
https://jira.geedge.net/browse/TSG-8174
v21.10
2021-10-25 09:38:13 +00:00
pengxuanzheng
42e7e11f75 📃 docs(TSG-8143, TSG-8204): update fw_http_plug-4.0.8 to fw_http_plug-4.0.9 2021-10-25 17:05:38 +08:00
pengxuanzheng
122aa42e88 📃 docs(TSG-8143, TSG-8204): update tsg_conn_sketch-3.0.32 to tsg_conn_sketch-3.0.33 2021-10-25 17:02:55 +08:00
pengxuanzheng
d8df7ba0a8 (TSG-8143, TSG-8204): update libhos-client-cpp-2.0.7 to libhos-client-cpp-3.0.2 2021-10-25 16:59:00 +08:00
songyanchao
b7f7ffc8c7 🎈 perf(TSG-9140): 修改默认Vlanid为1025
修改默认vlan_id_for_mac为1025
v21.10-rc4
2021-10-22 03:27:59 -04:00
fengweihao
cb9d67ec7a 更新tsg-ddos-sketch到v1.2.1,版本修改:TSG-8022 修改ddos上报统计字节为iplen长度 v21.10-rc3 2021-10-21 17:17:37 +08:00
“pengxuanzheng”
5d22300e70 📃 docs(TSG-8108): update tsg_conn_sketch-3.0.31 to tsg_conn_sketch-3.0.32 2021-10-21 09:58:08 +08:00
liuxueli
673f7fe7ac 修复安装rpm包名称错误,导致编译OS不通过 v21.10-rc2 2021-10-20 19:42:53 +08:00
liuxueli
2c6047c76c 更新dns、libmaatfame,修复:
TSG-8065:HTTP Signatures自定义Header,部分字段无法命中
TSG-8088:功能端解析NSEC类型DNS应答导致段错误
2021-10-20 17:59:28 +08:00