gfwleak/tsg-tsg-os-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,352 Commits 92 Branches 330 Tags
db32da94e3f0a68e2d3532edea7cb35b2c04dc8f
Commit Graph

1352 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
yangwei
db32da94e3 ✨ feat(MESA_handle_logger): v2.0.9->v2.0.12 
提供获取level是否开启的接口
 2023-06-02 11:49:52 +00:00
wangmenglan
6c9a184ee6 🐞 fix(TSG-15308): 更新tfe到v4.8.19 
修复TFE Packet IO因启动顺序导致产生core
 2023-06-02 13:27:40 +08:00
fumingwei
8250cf4da8 feature:TSG-15285:在容器中安装valgrind 2023-06-02 01:49:54 +00:00
liuwentan
0f6236b103 maat4.0.20 2023-06-02 01:48:20 +00:00
luwenpeng
05df1e5c38 更新火焰图生成脚本 2023-05-31 14:38:11 +08:00
fumingwei
124a06ba6a bugfix:修改配置文件笔误 v23.05-rc2 2023-05-31 07:59:56 +08:00
liuxueli
0c00e277ab 更新tsg_master、firewall、tsg_conn_sketch插件,修复： 
TSG-15152 - Dashboard Main下Security Policy Monitor统计数量远低于Sessioin Records对应时间范围内的统计数量
TSG-15269 - monitor rdp和monitor openvpn的策略，安全日志中有对应日志，但策略详情页log count为0
TSG-14403 - 安全策略命中allow,deny,intercept动作后，流量不会再命中Service Chaining原始流量策略
TSG-15196 - 同时设置条件一样的Security-allow和Proxy-Intercept，同时命中，优先级应Allow>Intercept
TSG-14259 - Security Events命中Intercept动作后SSL.Server Side Version、SSL.Client Side Version为空
TSG-14064 - 满足Session Records产生满足条件的流量未产生Session日志
TSG-13577 - deny-rate limit动作日志中记录的包数与策略捕包包数相差很大
TSG-14402 - 有应答的DNS协议链接误识别为Asymmetric
TSG-13319 - 双方向流量错误标注Flag：Asymmetric
TSG-14616 - Security Shunt对应流量结束30分钟后无对应策略动作统计
TSG-14580 - Security策略Shunt动作生效情况下，对应流量产生Session Records日志
TSG-14773 - Allow+IP优先级低于Shunt+IP+SSL
TSG-15232 - VoIP、GTP-C日志统计vsys不准确
 2023-05-30 21:35:37 +08:00
fumingwei
dde335f387 bugfix:TSG-15212:update kni to 5.1.5 2023-05-30 20:29:48 +08:00
wangmenglan
29c7f27219 🐞 fix(TSG-15212): 更新tfe到v4.8.18 2023-05-30 20:24:45 +08:00
fumingwei
6332ae6d91 bugfix:TSG-14782:使用systemd timer实现清理orphaned pods目录 2023-05-30 20:11:33 +08:00
fengweihao
d447f3aea8 更新tfe到v4.8.17, 版本修改: 修复TSG-15298 proxy_rule_hits中metric下action动作错误问题 2023-05-30 16:50:01 +08:00
fengweihao
ef3005ce3f 更新libswarmkv到v3.0.4, 版本修改: TSG-15166 swarmkv通过priority查询session排队数量存在负值 2023-05-30 10:20:29 +08:00
luwenpeng
49fdba9464 update sce and tfe v23.05-rc1 2023-05-26 11:52:47 +00:00
fumingwei
f1ace314bd bugfix:TSG-15130:TSG-15212:update kni to 5.1.4 2023-05-26 19:48:58 +08:00
fumingwei
0053d62144 bugfix:修改设置metric invisible输出file显示错误问题 2023-05-26 19:44:20 +08:00
fumingwei
ec558debda feature:update coredump-tools to 1.0.10 2023-05-26 11:39:01 +00:00
liuxueli
328c774356 TSGX设备默认打开发送拦截日志的开关SEND_INTERCEPT_LOG=1 2023-05-26 11:35:17 +00:00
liuxueli
7215efe5ee 更新sapp、tsg_master、tsg_conn_sketch; 修复: 
TSG-15227 - 7400，9140环境，sapp因单向流测试拦截产生core
TSG-15228 - 9140环境，sapp因dtls.so产生core
TSG-15229 - 9140环境，sapp因tsg_ddos_sketch/tsg_ddos_sketch.so产生core
TSG-15236 - 9140环境，sapp因capture_packet_plug.so产生core
TSG-15235 - 7400环境出现Down告警，sapp未写入core
TSG-15093 - 自定义Signatures引用Intervals类的属性，流量不命中功能端
TSG-15130 - Policy_id=1的策略，7400&9140环境上的流量在SecurityEvents和ProxyEvents里都产生了日志
TSG-15212 - Proxy-Intercept策略命中后产生的日志中Intercept Status字段始终是passthrough，应为Intercept
tsg_conn_sketch: 移除分支测试相关编译选项，gitem对齐cacheline,提高性能

TSG-15187 - Proxy-Intercept的策略当Filter选择Category时，无法命中策略 RESOLVED
 2023-05-26 18:38:23 +08:00
fumingwei
10b915e298 feature: update coredump-tools to 1.0.9 2023-05-26 10:09:34 +08:00
fumingwei
2fafbe896e feature:更新coredump-tool,增加minidump debug的功能 2023-05-23 18:53:21 +08:00
liuwentan
5f9c46f3d7 maat4.0.19 2023-05-23 18:33:26 +08:00
fumingwei
0e89e07741 feature:通过cgo调用动态库实现minidump生成 v23.05-rc0 2023-05-22 20:20:15 +08:00
fumingwei
fa28cf5550 feature:在容器中安装perl相关工具 2023-05-22 11:27:05 +00:00
yangwei
f4ad02f4e9 🐞 fix(sapp & session flag): 更新sapp至4.3.3，session marker至2.1.3 2023-05-22 18:54:09 +08:00
fumingwei
4a508c75e1 bugfix:TSG-13281:修复生成traffic-engine压缩目录错误问题 2023-05-22 10:23:28 +00:00
fumingwei
b2bbc899ae bugfix:修改tfe metric模板telegraf_ip配置项笔误 2023-05-22 10:23:28 +00:00
fumingwei
3aea5cd0e2 bugfix:修改rockylinux8 ansible安装方式由rpm改为pip安装 2023-05-22 10:23:28 +00:00
wangmenglan
0439e69eed 🐞 fix(TSG-15233): TFE更新到4.8.13,修复TFE内存泄漏 2023-05-22 15:59:38 +08:00
fumingwei
d9ded705e6 feature:修改handler写coredump大文件分块写入降低内存使用,提交最初版minidump生成 2023-05-19 18:31:11 +08:00
fumingwei
6de46d5277 feature:1.修改自检pod的namespace为tsg-os-system 2.修改reloader容器名字为config-reloader 2023-05-19 16:36:09 +08:00
fumingwei
8d4fd6f444 feature:TSG-12552:新增k3s相关证书轮转方法 2023-05-19 16:02:43 +08:00
liuchang
e0330241c0 fix invoke swarmkv hmget api wrong 2023-05-18 13:24:15 +00:00
fumingwei
e375a66a67 bugfix:TSG-13281:修改笔误 2023-05-18 10:09:55 +08:00
wangmenglan
26f2f1ef35 ✨ feat: 更新tsg-os-mgnt-srv到1.0.38 
TSG-14740 增加interactive startup等调试选项
TSG-15171 调整mrzcpd和k3s服务启动顺序
 2023-05-17 11:05:54 +00:00
liuwentan
3056f8963f maat4.0.18 2023-05-17 18:19:54 +08:00
fumingwei
f5fa87eedd feature:TSG-13281:新增生成traffic-engine安装包 2023-05-17 14:32:53 +08:00
fumingwei
47c8f458d5 feature:修改tfe发送metric的telegraf端口为8900 2023-05-16 17:14:15 +08:00
fumingwei
c051eccb36 bugfix:TSG-14782:临时修复k3s不断产生Cleaned up orphaned pod volumes dir日志的错误 2023-05-16 16:23:08 +08:00
wangmenglan
a7551d1015 🐞 fix(TSG-15050): TFE 配置增加proxy_hits字段; TFE packet io增加fieldstat状态统计 2023-05-15 11:09:15 +00:00
liuxueli
a979478dc9 更新tsg_master,修复： 
TSG-15014 - 使用错误的bridge id获取异步存储空间，导致内存被覆写
TSG-15036 - 安全策略deny，rate-limit无限速效果
 2023-05-15 11:08:51 +00:00
liuwentan
f5f8636094 maat4.0.17 2023-05-15 16:35:55 +08:00
fumingwei
ebbd9cf86b bugfix:1.修改fieldstat的输出格式 2.新增ratio相关接口 2023-05-15 14:24:05 +08:00
liuxueli
adc8a5d44e 更新sapp、tsg_master、capture_packet_plug、dns、wire_graft_plug、libwire_graft，修复: 
TSG-14967 - TSG X因capture_packet_plug导致firewall无法启动
TSG-14969 - 流量无法命中拦截策略
TSG-14567 - 7400,9140环境修改配置文件中VsysId后Session日志的VsysId未修改
TSG-15014 - TSG X firewall 因mapck使用不当导致内存被写乱
TSG-14990 - deny-dns-redirect 流量命中策略，但未被redirect
TSG-14966 - 在7400和9140环境上使能WAN NAT导致sapp无法启动
 2023-05-15 14:17:52 +08:00
luwenpeng
a4db7e97bb 更新SCE到1.0.11 
* 修复SF Status Metics的BUG
    * 启用发送控制报文的配置项
 2023-05-15 06:08:16 +00:00
fumingwei
60f5e4c721 bugfix:修复映射shaping port失败问题 2023-05-15 12:14:46 +08:00
liuchang
5f3fed87bd send log to sapp when receive avtive ctrlbuf 2023-05-15 01:48:13 +00:00
fumingwei
c73d03a11b bugfix:修改telegraf outputs.kafka的时间戳以毫秒为单位 2023-05-12 11:51:46 +08:00
fumingwei
83051c3717 bugfix:修改coredump-tools的输出格式和coredump-handler的磁盘限制逻辑 2023-05-11 18:29:24 +08:00
wangmenglan
92e6149ea4 TFE更新到4.8.11, 优化解析控制报文 2023-05-10 20:20:25 +08:00
luwenpeng
4105c8c73e SCE关闭send_log的配置项 2023-05-10 20:09:59 +08:00