gfwleak/tsg-tsg-os-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,532 Commits 92 Branches 330 Tags
d0cd8e8ca89b15b7e0f0ee104c4e61a6b2e7ac8f
Commit Graph

1532 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
wangmenglan
d0cd8e8ca8 HAL支持mrglobal.conf模板中poll_wait_throttle字段调整 2023-07-14 17:51:25 +08:00
liuxueli
859e5c0607 更新: tsg_master、session_record，修复: 
TSG-15999 - 日志中的app_full_path出现异常内容
TSG-15855 - Session Records存在大量重复Session ID
发送日志时开启KAFKA压缩 COMPRESSION_TYPE="snappy"
v23.07-rc2 		2023-07-13 11:03:55 +00:00
wangmenglan
d47065b2b3 bugfix: SCE更新至1.0.14 
TSG-14170: Service Function的Health Check为None时，未获取到SF状态和MAC Address
 2023-07-13 11:02:35 +00:00
陆秋文
925b4a88eb disable the collection of mount service. 2023-07-13 07:14:57 +00:00
Lu Qiuwen
38541f4433 disable firmware upgrade at os install. 2023-07-13 12:08:39 +05:00
liuxueli
079e9646db 更新http、session_record、firewall, 修复: 
firewall: TCP/UDP未注册FS Line ID, 使用FS-operate函数操作可能会导致重启
http,session_record: 修正输出本地日志的级别
v23.07-rc1 		2023-07-12 23:43:26 +08:00
liuchang
069ecd24a0 没有缓存报文时，减少CPU使用率 v23.07-rc0 2023-07-12 12:03:02 +00:00
yangwei
53c8a6bc7d ✨ feat(rpm and sapp.toml update): sapp.toml & mail.so 
1、sapp.toml 默认polling_priority=100
2、update to mail-1.0.19.e982b44, Fix TSG-12082 and Fix TSG-11013
 2023-07-12 14:50:23 +08:00
liuxueli
7b3dcefe5d 更新tsg_master、firewall、session_record，修复: 
TSG-13811 - 策略条件为flag+application，日志中出现其他application的日志
TSG-15779 - 建议SSL协议日志中增加ECH相关字段
TSG-16028 - 功能端未按照0号策略配置发送reset、icmp包
TSG-15934 - Security Events中的Request body文件下载时提示失败，未发现文件
 2023-07-11 13:51:49 +00:00
fengweihao
cf4df8a18b 更新tfe到v4.8.32, 版本修改: TSG-16056 修复deny动作 2023-07-11 18:11:54 +08:00
wangmenglan
2b90184a7b Clixon更新至1.0.57 
修复Clixon加载failsafe_db时, 配置带有默认值的字段不生效
 2023-07-10 18:24:31 +08:00
Lu Qiuwen
777982d4b5 TSG-15972 update mrzcpd to 4.6.37 2023-07-07 20:37:47 +08:00
liuwentan
6153d63b11 maat4.0.30 2023-07-07 16:18:11 +08:00
wangmenglan
aae891e082 ✨ feat(TSG-15994): GRUB新增isolcpus启动参数 2023-07-07 07:02:27 +00:00
luwenpeng
6287040946 bugfix(hasp-tools): open too many files 2023-07-07 13:29:59 +08:00
fumingwei
a7950fdf04 feature:TSG-X os新增prometheus systemd exporter 2023-07-06 13:51:45 +00:00
liuxueli
0ad4e347b9 修正fs2_sysinfo.metrics/fs3_sysinfo.metrics的路径 2023-07-06 13:48:03 +00:00
fumingwei
3cfbc5275f bugfix:update libfieldstat3 to 3.0.9 2023-07-06 21:46:03 +08:00
fumingwei
f7727d6f3b bugfix:TSG-15730:增大pod probe时间 2023-07-06 13:40:20 +00:00
luwenpeng
aa967fd9b2 优化hasp_login的逻辑 2023-07-06 17:50:48 +08:00
fengweihao
f96f47b513 更新app-proto-engine，版本变更：修改OS上main.conf模板 2023-07-06 06:19:09 +00:00
fumingwei
07b9314c7c bugfix:修复自检pod找不到image的bug 2023-07-06 14:17:45 +08:00
fumingwei
81939cc635 bugfix:修改清理k3s持久化目录功能的笔误 2023-07-06 10:09:13 +08:00
liuxueli
de0d5fa9d8 修正capture_packet_plug插件的部署位置 2023-07-05 20:38:21 +08:00
liuxueli
94cbee8854 更新sapp、tsg_master、packet_pacture_plug、radius_collect_plug, 修复: 
TSG-15514 - 对于dns协议，流量未遵循天然条件优先级命中规则
TSG-15585 - http流量命中deny-alert-204策略，功能端未发送204响应码
TSG-15642 - 功能端未发送icmp不可达报文
TSG-15673 - 【LTS版本】Monitor动作会对dns协议多记录一条无返回的安全日志
TSG-15682 - 【LTS版本】Radius Records中，firewall未将MAC相关字段发送给OLAP
 2023-07-05 20:28:49 +08:00
fumingwei
b01f346026 feature:TSG-15905:新增os适配decoders.HTTP_GZIP和decoders.MAIL_BASE64选项 2023-07-05 12:20:28 +00:00
yangyubo
da10a7eb7a 修复tsg-15907:telegraf发送队列不足导致数据丢失 2023-07-05 20:05:02 +08:00
fumingwei
ede282b80c bugfix:修复tsg-x编译vm cp失败的错误 2023-07-05 19:23:38 +08:00
wangmenglan
c96d3ac7bf Clixon更新至1.0.56 增加HTTP_GZIP和MAIL_BASE64开关 2023-07-05 11:16:38 +00:00
fengweihao
23d2acbb6e 更新app-proto-engine到v3.0.2, 版本修改: 配置项变更，删除debug日志无效输出 2023-07-05 18:44:02 +08:00
fumingwei
81cbe98ec1 bugfix:修改vm因存在多个.bin文件编译失败问题 2023-07-05 07:58:59 +00:00
fumingwei
dc9b3e7529 bugfix:TSG-14782:修改clean orphand pod dir定时任务为1h执行一次 2023-07-05 07:58:59 +00:00
fumingwei
e7d313375d feature:TSG-X os升级安装时删除/data/var/lib/rancher和/data/var/kubelet持久化目录 2023-07-05 07:58:59 +00:00
liuchang
3af2a592d2 change max processed session num when polling for different priority 
check diabled rule for existed session every interval, default interval 120s
 2023-07-05 07:57:29 +00:00
songyanchao
fecfda4bcf 🐞 fix(TSG-15643): mrzcpd升级至v4.6.36 
ctrlmsg 添加 tcp keepalive 、 从mrzcpd.service中删除k3s相关依赖项
 2023-07-04 22:17:39 -04:00
liuxueli
97fa373fea 更新session record，修复: 
TSG-15760 - Security Events握手延迟不准确
TSG-15829 - Logs统计HTTP的HTTP.Response Latency (ms)与HTTP.Session Duration (ms)字段出现负值
 2023-07-04 21:04:19 +08:00
wangmenglan
cd950c722a ✨ feat(TSG-15852):Clixon cm_policy_local_cache命令支持主备切换 2023-07-04 12:02:35 +00:00
fumingwei
2480166f99 bugfix:TSG-15730:修改cm-cache redis的save配置项 2023-07-04 10:32:36 +00:00
liuxueli
8fbd4b1dab 更新sapp、ssl、tsg_master、session_record、firewall，修复： 
TSG-15591 - tsg-x和9140环境，deny-quic协议的drop after n packet设置为非0值时有阻断效果，但未产生安全日志 RESOLVED
TSG-14336 - deny ftp的策略，当Drop packet after N packet设置为64时无阻断效果
 2023-07-04 10:22:57 +00:00
liuxueli
44e06e99d8 TSGX设备firewall插件缺少TCP/UDP函数入口，修正session_record的日志文件 2023-07-04 17:53:25 +08:00
fumingwei
54f34bc716 feature:TSG-15851:新增cm-cache切换主备cm的功能 2023-07-04 08:57:41 +00:00
fumingwei
80377951be bugfix:构建chroot时使用构建容器的resolv.conf文件 2023-07-04 14:49:20 +08:00
fumingwei
bbe81ab464 bugfix:修复TSG-X rebase代码后笔误后编译失败问题 2023-07-04 12:51:05 +08:00
fumingwei
246e318a4f bugfix:修复docker-ce仓库为空的bug 2023-07-03 23:30:51 +08:00
fumingwei
0fbefc7709 refactor:mrzcpd-exporter使用固定镜像，不再使用tsg-init镜像,TSG-13281:重新构造traffic-engine升级包 2023-07-03 21:25:38 +08:00
wangmenglan
ee41b1ef23 ✨ feat(TSG-15805): OS启动时分配大页内存 2023-07-03 20:04:01 +08:00
fumingwei
9666bbc7e3 feature:在ci上编译TSG-X使用mirrors.cloud.aliyuncs.com仓库域名 2023-07-03 11:35:33 +00:00
fengweihao
39bc5d8016 更新tfe到v4.8.31, 版本修改: TSG-15781 删除策略用户自定域中的protocol字段检查 2023-07-03 18:56:47 +08:00
陆秋文
9f2e07258a TSG-15768 在OS开机、关机过程中显示TSG的Logo 2023-07-03 10:29:15 +00:00
linxin
a4c7fc8dbe TSG-15646：调整coredump磁盘使用率限制为60% 2023-07-03 10:27:59 +00:00