Commit Graph

631 Commits

Author SHA1 Message Date
liuxueli
c0e7fbec56 TSG-8650: 将tsg_master挂载app_proto_identify前面,保证IP的优先级最高 v21.11-rc5 2021-11-24 11:25:25 +00:00
fengweihao
8b61ce3199 更新app-proto-engine到v2.1.2,版本修改:TSG-8680 wireguard 无法阻断问题 2021-11-24 19:17:14 +08:00
彭宣正
7b8217c54a 🐞 fix(TSG-8675): update tsg_conn_sketch-3.1.10 to tsg_conn_sketch-3.1.11 2021-11-24 17:55:22 +08:00
彭宣正
4fa15cb9a9 📃 docs(TSG-8399 update tsgconf/main.conf): 2021-11-24 17:44:16 +08:00
yangwei
fb799e4ba1 🐞 fix(mail): Reslove TSG-8655
升级mail解析插件至v1.0.15
2021-11-24 17:28:00 +08:00
lijia
a57240f44d TSG-8668, 修复IP分片重组后的大包校验和错误问题. 2021-11-24 17:27:56 +08:00
彭宣正
c6b7cea18c 📃 docs(TSG-8399,TSG-8606): update tsg_conn_sketch-3.1.9 to tsg_conn_sketch-3.1.10 2021-11-24 08:43:36 +00:00
liuxueli
066c124a32 更新dns、fw_http_plug插件,修复:
TSG-8630: 修复DNS解析RRSIG应答记录异常导致SAPP重启的问题
TSG-8628: 修复HTTP解析层回调业务层字段时长度为负值导致SAPP重启的问题
2021-11-23 21:58:21 +03:00
lijia
9fb2ebf0e8 TSG-8528, wannat支持四元组分流. v21.11-rc4 2021-11-22 17:05:41 +08:00
fumingwei
c48f82c1a7 feature:TSG-8617:在provision中添加开关,控制是否开启GTP-C会话记录功能 2021-11-22 14:44:30 +08:00
liuxueli
7dc18131be 更新tsg_master、radius_collect_plug、gtp_signalling_plug,修复:
TSG-8577 - 功能端对L2TP隧道流量输出的tunnels字段缺失外层四元组
TSG-8529 - 亦庄POC:限速值小于1Mbps限速失效
TSG-8607 - Session Records中GTP-U的源、目的端口被错误的填写为网络序
TSG-8585 - E现场Radius日志中存在Frame IP为空的现象
TSG-8615 - Firewall 未设置是否发送GTP-C采集日志的开关
2021-11-22 02:04:13 +00:00
彭宣正
3dc654dc39 🐞 fix(TSG-8558): update tsg_conn_sketch-3.1.8 to tsg_conn_sketch-3.1.9 2021-11-22 02:03:45 +00:00
luwenpeng
c57c3b7a93 update tfe from 4.5.25 to 4.5.26 2021-11-20 19:56:28 +03:00
songyanchao
72fd71d4d0 feat(TSG-OS-9140): CPU FrequencyScaling
通过使能cpupower来设置CPU frequency scaling来优化9140性能
v21.11-rc3
2021-11-18 10:56:45 +00:00
yangwenlin
71b9ddf1b4 fix(TSG-8555,TSG-8556):修复tamper没有阻断ssl协议 2021-11-18 18:21:27 +08:00
fumingwei
a90476ec80 bugfix:TSG-8516:修改mrapm_device和mrapm_stream service由requires mrzcpd变为wants 2021-11-18 16:38:58 +08:00
luwenpeng
dd1177ede0 TSG-7335 重新调整TSG-9140上CPU核心的分配 2021-11-18 10:55:45 +03:00
彭宣正
e6da4107e7 🐞 fix(TSG-8536): update tsg_conn_sketch-3.1.7 to tsg_conn_sketch-3.1.8 2021-11-18 14:53:35 +08:00
fumingwei
f2b7e6fc84 refactor:TSG-8535:provision新增session_distribution_policy 2021-11-18 14:45:40 +08:00
彭宣正
624e01afcd 🐞 fix(TSG-8558): update tsg_conn_sketch-3.1.6 to tsg_conn_sketch-3.1.7 2021-11-17 17:47:37 +08:00
fumingwei
88225866a2 bugfix:TSG-8516:修改sapp,tfe service和mrzcpd的依赖关系由Requires变为Wants 2021-11-17 17:24:44 +08:00
songyanchao
04afaf84df 🐞 fix(TSG-8541): 内核升级后需要重新编译i40e驱动
内核升级后需要根据升级后的内核版本重新构建i40e驱动包

https://jira.geedge.net/browse/TSG-8541
2021-11-17 00:49:43 -05:00
Lu Qiuwen
4de2d84574 更新mrzcpd到4.4.11,修正TSG-8538 v21.11-rc2 2021-11-17 01:29:31 +00:00
liuxueli
38ab8635b1 更新app_proto_identify插件,修复:
TSG-8369 - 基础协议识别插件未识别DNS协议(小部分未正确识别)
2021-11-16 22:38:28 +03:00
fumingwei
e19fdb323b feature:TSG-8535:provision新增load_balancing_distribution配置项来配置mrzcpd分流模式 2021-11-16 13:16:37 +00:00
lijia
059449fa04 升级wangw, wire_graft插件:
TSG-8381 - wire_graft不支持带vlan的链路信息;
 TSG-8508 - WANNAT没有将统计指标输出到Prometheus,请输出以便监控;
 TSG-8528 - WANNAT不支持四元组分流;
2021-11-16 20:49:36 +08:00
songyanchao
0969ce1a19 🔧 fix(TSG-8505): 内核升级为5.4.159
为解决小概率情况下iavf网卡初始化时内核崩溃问题,内核升级为5.4.159

https://jira.geedge.net/browse/TSG-8505
2021-11-16 12:32:52 +00:00
liuxueli
f0731f2bd3 更新app_proto_idnetify插件,修复:
TSG-8534 - MAIL解析层识别与基础协议识别插件(app_proto_identify)识别结果不一致
2021-11-16 14:08:34 +03:00
彭宣正
33766c47e8 🐞 fix(TSG-8328): update tsg_conn_sketch-3.1.5 to tsg_conn_sketch-3.1.6 2021-11-16 18:02:11 +08:00
彭宣正
8b5b6c75b8 🐞 fix(TSG-8520): update tsg_conn_sketch-3.1.4 to tsg_conn_sketch-3.1.5 2021-11-16 17:17:18 +08:00
liuxueli
36bb5738a3 更新基础协议识别插件app_proto_identify,修复:
TSG-8407 - Security Events 以及 Session Records中存在Schema Type 为MAIL,L7 Prococol为UNCATEGORIZED的情况
TSG-8483 - Session Record中SMTP链接日志的L7 Potocol为FTP(非标端口26)
v21.11-rc1
2021-11-15 22:46:34 +03:00
彭宣正
a2a834a84b (TSG-8500, TSG-8502): update ssh-2.0.11 to ssh-2.0.12, tsg_conn_sketch-3.1.3 to tsg_conn_sketch-3.1.4 2021-11-15 21:27:44 +08:00
fumingwei
c499cea8d2 feature:TSG-8379:在provision中添加开关,控制是否开启DNS会话记录/RTP会话记录/RADIUS会话记录功能 2021-11-15 12:34:02 +00:00
fengweihao
889756b71e 更新tfe到v4.5.25, 版本修改:TSG-8451 common_stream_trace_id修改为字符串 2021-11-15 19:31:44 +08:00
liuxueli
c6c9910013 更新tsg_master、app_proto_identify、tsg_conn_sketch、quic、radius、radius_collect_plug,支持或修复
TSG-8379: 在provision中添加开关,控制是否开启DNS会话记录/RTP会话记录/RADIUS会话记录功能
TSG-8402: Security Events中Schema为Mail,L7 Protocol为FTP
TSG-8498: Radius Records中Device Group为空
TSG-8489: 一个会话被同时识别为HTTP和SSL协议时,Session Record插件(tsg_conn_record)使用已释放的内存导致SAPP重启
TSG-8488: Session Record插件(tsg_conn_record v3.1.2.79b489e)运行时找不到符号(函数声明与定义不一致)
TSG-8484: Session Record插件(tsg_conn_record)存在内存泄漏
2021-11-15 13:53:05 +03:00
yangwei
b52287d0c7 feat(rpm_version): 更新quic及关联插件,修复ssl和masterbug
quic重构,升级至2.0.1,同步升级关联的fw_quic,tsg_master,tsg_conn_sketch,app_proto_identify
ssl修复TSG-8210
tsg_master修复TSG-8345
v21.11-rc0
2021-11-11 10:18:14 +00:00
fumingwei
56176a9bba feature:TSG-8445:provision增加enable_hos配置项 2021-11-11 18:14:53 +08:00
fengweihao
0a7df888a1 更新tfe到v4.5.24, 版本修改:TSG-8451 Proxy增加HOS非格式化日志发送开关 2021-11-11 17:42:50 +08:00
彭宣正
03c8c5c7ef 🐞 fix(TSG-8428.TSG-8433): update ssh-2.0.8 to ssh-2.0.11 2021-11-11 17:30:03 +08:00
彭宣正
417379044f 🐞 fix(TSG-8413): update fw_http_plug-4.0.10 to fw_http_plug-4.0.11 2021-11-11 17:24:55 +08:00
彭宣正
5ba920b21a 🐞 fix(TSG-8364): update tsg_conn_sketch-3.0.39 to tsg_conn_sketch-3.1.1 2021-11-11 17:22:17 +08:00
lijia
5957a4ac5d TSG-8395, 修复pkt dump重新文件路径错误, 文件最大阈值溢出错误. 2021-11-10 15:40:51 +08:00
fengweihao
0c2616d1bd 更新libMV-Sketch到v1.1.1,版本修改:修复valgrind检查工具报错问题 2021-11-10 14:12:19 +08:00
彭宣正
6240c55663 feat(TSG-8390): update fw_mail_plug-4.0.1 to fw_mail_plug-4.1.0 2021-11-09 21:14:58 +08:00
彭宣正
c2634a2df5 feat(TSG-8409): update fw_http_plug-4.0.9 to fw_http_plug-4.0.10 2021-11-09 21:12:01 +08:00
彭宣正
d341e72bcf 🐞 fix(TSG-8302,TSG-8390): update tsg_master-5.4.13 to tsg_master-5.4.14 2021-11-09 21:07:19 +08:00
彭宣正
ffd32ddf81 🐞 fix(TSG-8332,TSG-8237,TSG-8330,TSG-8390,TSG-8353,TSG-8349): update tsg_conn_sketch-3.0.37 to tsg_conn_sketch-3.0.39 2021-11-09 21:02:08 +08:00
彭宣正
903e87dfd5 🐞 fix(TSG-8330, TSG-8332): update ssh-2.0.7 to ssh-2.0.8 2021-11-09 20:56:52 +08:00
lijia
2b4c67b024 update sapp, wire_graft, MESA_jump_layer
TSG-8326 - sapp CI增加软件加壳流程;
TSG-8371 - sapp不支持超过两层vlan;
TSG-8381 - wire_graft不支持带vlan的链路信息;
TSG-8372 - MESA_jump_layer不支持三层vlan跳转.
2021-11-08 16:35:55 +08:00
彭宣正
e7a12d8c7a 🐞 fix(TSG-8327,TSG-8328,TSG-8301): update tsg_conn_sketch-3.0.36 to tsg_conn_sketch-3.0.37 2021-11-05 06:01:17 +00:00