Commit Graph

1342 Commits

Author SHA1 Message Date
fengweihao
d447f3aea8 更新tfe到v4.8.17, 版本修改: 修复TSG-15298 proxy_rule_hits中metric下action动作错误问题 2023-05-30 16:50:01 +08:00
fengweihao
ef3005ce3f 更新libswarmkv到v3.0.4, 版本修改: TSG-15166 swarmkv通过priority查询session排队数量存在负值 2023-05-30 10:20:29 +08:00
luwenpeng
49fdba9464 update sce and tfe v23.05-rc1 2023-05-26 11:52:47 +00:00
fumingwei
f1ace314bd bugfix:TSG-15130:TSG-15212:update kni to 5.1.4 2023-05-26 19:48:58 +08:00
fumingwei
0053d62144 bugfix:修改设置metric invisible输出file显示错误问题 2023-05-26 19:44:20 +08:00
fumingwei
ec558debda feature:update coredump-tools to 1.0.10 2023-05-26 11:39:01 +00:00
liuxueli
328c774356 TSGX设备默认打开发送拦截日志的开关SEND_INTERCEPT_LOG=1 2023-05-26 11:35:17 +00:00
liuxueli
7215efe5ee 更新sapp、tsg_master、tsg_conn_sketch; 修复:
TSG-15227 - 7400,9140环境,sapp因单向流测试拦截产生core
TSG-15228 - 9140环境,sapp因dtls.so产生core
TSG-15229 - 9140环境,sapp因tsg_ddos_sketch/tsg_ddos_sketch.so产生core
TSG-15236 - 9140环境,sapp因capture_packet_plug.so产生core
TSG-15235 - 7400环境出现Down告警,sapp未写入core
TSG-15093 - 自定义Signatures引用Intervals类的属性,流量不命中功能端
TSG-15130 - Policy_id=1的策略,7400&9140环境上的流量在SecurityEvents和ProxyEvents里都产生了日志
TSG-15212 - Proxy-Intercept策略命中后产生的日志中Intercept Status字段始终是passthrough,应为Intercept
tsg_conn_sketch: 移除分支测试相关编译选项,gitem对齐cacheline,提高性能

TSG-15187 - Proxy-Intercept的策略当Filter选择Category时,无法命中策略 RESOLVED
2023-05-26 18:38:23 +08:00
fumingwei
10b915e298 feature: update coredump-tools to 1.0.9 2023-05-26 10:09:34 +08:00
fumingwei
2fafbe896e feature:更新coredump-tool,增加minidump debug的功能 2023-05-23 18:53:21 +08:00
liuwentan
5f9c46f3d7 maat4.0.19 2023-05-23 18:33:26 +08:00
fumingwei
0e89e07741 feature:通过cgo调用动态库实现minidump生成 v23.05-rc0 2023-05-22 20:20:15 +08:00
fumingwei
fa28cf5550 feature:在容器中安装perl相关工具 2023-05-22 11:27:05 +00:00
yangwei
f4ad02f4e9 🐞 fix(sapp & session flag): 更新sapp至4.3.3,session marker至2.1.3 2023-05-22 18:54:09 +08:00
fumingwei
4a508c75e1 bugfix:TSG-13281:修复生成traffic-engine压缩目录错误问题 2023-05-22 10:23:28 +00:00
fumingwei
b2bbc899ae bugfix:修改tfe metric模板telegraf_ip配置项笔误 2023-05-22 10:23:28 +00:00
fumingwei
3aea5cd0e2 bugfix:修改rockylinux8 ansible安装方式由rpm改为pip安装 2023-05-22 10:23:28 +00:00
wangmenglan
0439e69eed 🐞 fix(TSG-15233): TFE更新到4.8.13,修复TFE内存泄漏 2023-05-22 15:59:38 +08:00
fumingwei
d9ded705e6 feature:修改handler写coredump大文件分块写入降低内存使用,提交最初版minidump生成 2023-05-19 18:31:11 +08:00
fumingwei
6de46d5277 feature:1.修改自检pod的namespace为tsg-os-system 2.修改reloader容器名字为config-reloader 2023-05-19 16:36:09 +08:00
fumingwei
8d4fd6f444 feature:TSG-12552:新增k3s相关证书轮转方法 2023-05-19 16:02:43 +08:00
liuchang
e0330241c0 fix invoke swarmkv hmget api wrong 2023-05-18 13:24:15 +00:00
fumingwei
e375a66a67 bugfix:TSG-13281:修改笔误 2023-05-18 10:09:55 +08:00
wangmenglan
26f2f1ef35 feat: 更新tsg-os-mgnt-srv到1.0.38
TSG-14740 增加interactive startup等调试选项
TSG-15171 调整mrzcpd和k3s服务启动顺序
2023-05-17 11:05:54 +00:00
liuwentan
3056f8963f maat4.0.18 2023-05-17 18:19:54 +08:00
fumingwei
f5fa87eedd feature:TSG-13281:新增生成traffic-engine安装包 2023-05-17 14:32:53 +08:00
fumingwei
47c8f458d5 feature:修改tfe发送metric的telegraf端口为8900 2023-05-16 17:14:15 +08:00
fumingwei
c051eccb36 bugfix:TSG-14782:临时修复k3s不断产生Cleaned up orphaned pod volumes dir日志的错误 2023-05-16 16:23:08 +08:00
wangmenglan
a7551d1015 🐞 fix(TSG-15050): TFE 配置增加proxy_hits字段; TFE packet io增加fieldstat状态统计 2023-05-15 11:09:15 +00:00
liuxueli
a979478dc9 更新tsg_master,修复:
TSG-15014 - 使用错误的bridge id获取异步存储空间,导致内存被覆写
TSG-15036 - 安全策略deny,rate-limit无限速效果
2023-05-15 11:08:51 +00:00
liuwentan
f5f8636094 maat4.0.17 2023-05-15 16:35:55 +08:00
fumingwei
ebbd9cf86b bugfix:1.修改fieldstat的输出格式 2.新增ratio相关接口 2023-05-15 14:24:05 +08:00
liuxueli
adc8a5d44e 更新sapp、tsg_master、capture_packet_plug、dns、wire_graft_plug、libwire_graft,修复:
TSG-14967 - TSG X因capture_packet_plug导致firewall无法启动
TSG-14969 - 流量无法命中拦截策略
TSG-14567 - 7400,9140环境修改配置文件中VsysId后Session日志的VsysId未修改
TSG-15014 - TSG X firewall 因mapck使用不当导致内存被写乱
TSG-14990 - deny-dns-redirect 流量命中策略,但未被redirect
TSG-14966 - 在7400和9140环境上使能WAN NAT导致sapp无法启动
2023-05-15 14:17:52 +08:00
luwenpeng
a4db7e97bb 更新SCE到1.0.11
* 修复SF Status Metics的BUG
    * 启用发送控制报文的配置项
2023-05-15 06:08:16 +00:00
fumingwei
60f5e4c721 bugfix:修复映射shaping port失败问题 2023-05-15 12:14:46 +08:00
liuchang
5f3fed87bd send log to sapp when receive avtive ctrlbuf 2023-05-15 01:48:13 +00:00
fumingwei
c73d03a11b bugfix:修改telegraf outputs.kafka的时间戳以毫秒为单位 2023-05-12 11:51:46 +08:00
fumingwei
83051c3717 bugfix:修改coredump-tools的输出格式和coredump-handler的磁盘限制逻辑 2023-05-11 18:29:24 +08:00
wangmenglan
92e6149ea4 TFE更新到4.8.11, 优化解析控制报文 2023-05-10 20:20:25 +08:00
luwenpeng
4105c8c73e SCE关闭send_log的配置项 2023-05-10 20:09:59 +08:00
liuxueli
d3ac0f4a00 更新sapp、tsg_master、firewall,新增:
sapp提供判断是否为控制报文的相关接口
tsg_master、firewall支持Group内的逻辑非
TSG-14961 - SAPP接收的控制报文(TFE/SCE/SHAPER的LOG_UPDATE),规避检查是否为重复流量及校验IP报文长度的逻辑
TSG-14932 - tsg_master控制报文中需增加service chaining和shaping的SID DONE
TSG-14928 - tsg_master接收TFE返回的ssl_intercept_info,填充为Proxy intercept event发送
2023-05-10 18:26:44 +08:00
fumingwei
b9cdebd0b2 feature:TSG-14935:停止NetworkManager自动激活connection 2023-05-10 17:51:17 +08:00
fumingwei
5bf5b9d054 feature:TSG-14958:在host新增安装hwloc-gui和perl-open 2023-05-10 10:27:33 +08:00
fumingwei
270391b882 feature:TSG-14915,TSG-14949:kni新增cmesg字段和适配cmesg字段变更 2023-05-10 09:57:37 +08:00
wangmenglan
1fd630abe7 更新TFE 到4.8.10;更新tsg-os-mgnt-srv到1.0.37 2023-05-09 22:39:27 +08:00
fumingwei
a048ffef46 bugfix:更新coredump-tool工具 2023-05-09 10:59:02 +00:00
liuwentan
3b461db92a maat4.0.16 2023-05-09 10:58:27 +00:00
fengweihao
e875955a54 更新tfe到v4.8.9, 版本修改: 适配GROUP_GROUP_RELATION表结构变更 2023-05-09 18:28:33 +08:00
fumingwei
18b0380de7 bugfix:修改因镜像名字改变导致mrzcpd exporter启动失败的问题 2023-05-09 15:52:28 +08:00
fumingwei
a35400365e bugfix:修复因缺少驱动的库导致容器启动失败问题 2023-05-09 07:18:43 +00:00