gfwleak/tsg-tsg-os-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,550 Commits 92 Branches 330 Tags
f31633e718ea26747876d08a263f423b3ee8a8b2
Commit Graph

1550 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
liuxueli
f31633e718 更新session record, 修复: TSG-16183 - Security http协议的Session日志中http字段数值异常 v23.07.6 2023-07-20 19:46:41 +08:00
liuxueli
3730dd8c4e 更新BGP, 修复 OMPUB-840: 增强校验BGP协议的逻辑，避免误识别导致CPU消耗 v23.07.5 2023-07-19 12:11:13 +00:00
fumingwei
8a277feada bugfix:TSG-16265:新增telegraf aggregators grace和delay配置项 2023-07-19 11:19:07 +00:00
fumingwei
21c9d1ab63 feature:TSG-16271:在provision和clixon中增加开关 2023-07-19 11:18:05 +00:00
wangmenglan
1b562ba86a Clixon更新至1.0.59 
TSG-16271: Clixon中增加日志字段开关
 2023-07-19 11:15:53 +00:00
linxin
d34a8eff2b TSG-16258: 修复部分core文件无法查到info信息 2023-07-19 18:05:12 +08:00
liuxueli
f678dad09f 更新sapp, 支持: 
调整ipv6判断上层承载协议的逻辑，对于未知类型默认执行pass
无systemd时，检测到死锁直接exit(-1)
修复未正确更新SAPP_STAT_TCP_STREAM_DEL的bug
增加tcp.opening_timeout参数，默认10s
移除新设置超时时间必须大于已有的限制
v23.07.4 		2023-07-18 15:58:34 +00:00
liuxueli
8b4aa1f056 修正RAPIDJSON_CHUNK_CAPACITY变量默认值，由8192改为2048 2023-07-18 23:52:48 +08:00
fumingwei
43d0dab59e bugfix:修改安装PrettyTable使用清华源 2023-07-18 11:41:14 +00:00
fumingwei
89bffe2be6 feature:TSG-16254:os适配clixon SSL decode certificate开关 2023-07-18 11:35:26 +00:00
wangmenglan
3ac8136443 Clixon更新至1.0.58 
TSG-16254: Clixon增加SSL decode certificate的开关
 2023-07-18 11:35:09 +00:00
liuxueli
2703ce5306 更新ssl, 增加是否解析证书的开关: PARSE_CERTIFICATE_DETAIL 2023-07-18 19:22:41 +08:00
wangmenglan
27b3f65ef2 HAL调整k3s config.yaml配置, 调整系统预留内存资源 v23.07.3 2023-07-18 16:17:00 +08:00
liuxueli
fdbd3b36b1 更新tsg_master, 修复: OMPUB-965 - 【P19现场】tsg-os打开日志压缩开关，无压缩效果 v23.07.2 2023-07-17 11:49:15 +08:00
杨威
29d73abb7f 更新tsg_master-6.0.38.613bc2b，修复 OMPUB-963，发送日志时单核死锁 v23.07.1 2023-07-16 07:34:59 +00:00
liuxueli
feac7f001b 更新app_proto_identify-2.1.10.222e48e, OMPUB-960 - P19现场: 基础协议识别插件(app_proto_identify)占用CPU较高(15%左右) v23.07 2023-07-14 23:13:44 +08:00
liuxueli
2359b01529 更新tsg_master、app_proto_identify, 修复: 
OMPUB-961 - P19现场: TSG MASTER解析SYN/SYN_ACK占用CPU2.6%左右
OMPUB-960 - P19现场: 基础协议识别插件(app_proto_identify)占用CPU较高(15%左右)
 2023-07-14 21:08:12 +08:00
liuchang
1ad7863d30 shaping borrow profile do not drop packet 2023-07-14 10:39:55 +00:00
wangmenglan
d0cd8e8ca8 HAL支持mrglobal.conf模板中poll_wait_throttle字段调整 2023-07-14 17:51:25 +08:00
liuxueli
859e5c0607 更新: tsg_master、session_record，修复: 
TSG-15999 - 日志中的app_full_path出现异常内容
TSG-15855 - Session Records存在大量重复Session ID
发送日志时开启KAFKA压缩 COMPRESSION_TYPE="snappy"
v23.07-rc2 		2023-07-13 11:03:55 +00:00
wangmenglan
d47065b2b3 bugfix: SCE更新至1.0.14 
TSG-14170: Service Function的Health Check为None时，未获取到SF状态和MAC Address
 2023-07-13 11:02:35 +00:00
陆秋文
925b4a88eb disable the collection of mount service. 2023-07-13 07:14:57 +00:00
Lu Qiuwen
38541f4433 disable firmware upgrade at os install. 2023-07-13 12:08:39 +05:00
liuxueli
079e9646db 更新http、session_record、firewall, 修复: 
firewall: TCP/UDP未注册FS Line ID, 使用FS-operate函数操作可能会导致重启
http,session_record: 修正输出本地日志的级别
v23.07-rc1 		2023-07-12 23:43:26 +08:00
liuchang
069ecd24a0 没有缓存报文时，减少CPU使用率 v23.07-rc0 2023-07-12 12:03:02 +00:00
yangwei
53c8a6bc7d ✨ feat(rpm and sapp.toml update): sapp.toml & mail.so 
1、sapp.toml 默认polling_priority=100
2、update to mail-1.0.19.e982b44, Fix TSG-12082 and Fix TSG-11013
 2023-07-12 14:50:23 +08:00
liuxueli
7b3dcefe5d 更新tsg_master、firewall、session_record，修复: 
TSG-13811 - 策略条件为flag+application，日志中出现其他application的日志
TSG-15779 - 建议SSL协议日志中增加ECH相关字段
TSG-16028 - 功能端未按照0号策略配置发送reset、icmp包
TSG-15934 - Security Events中的Request body文件下载时提示失败，未发现文件
 2023-07-11 13:51:49 +00:00
fengweihao
cf4df8a18b 更新tfe到v4.8.32, 版本修改: TSG-16056 修复deny动作 2023-07-11 18:11:54 +08:00
wangmenglan
2b90184a7b Clixon更新至1.0.57 
修复Clixon加载failsafe_db时, 配置带有默认值的字段不生效
 2023-07-10 18:24:31 +08:00
Lu Qiuwen
777982d4b5 TSG-15972 update mrzcpd to 4.6.37 2023-07-07 20:37:47 +08:00
liuwentan
6153d63b11 maat4.0.30 2023-07-07 16:18:11 +08:00
wangmenglan
aae891e082 ✨ feat(TSG-15994): GRUB新增isolcpus启动参数 2023-07-07 07:02:27 +00:00
luwenpeng
6287040946 bugfix(hasp-tools): open too many files 2023-07-07 13:29:59 +08:00
fumingwei
a7950fdf04 feature:TSG-X os新增prometheus systemd exporter 2023-07-06 13:51:45 +00:00
liuxueli
0ad4e347b9 修正fs2_sysinfo.metrics/fs3_sysinfo.metrics的路径 2023-07-06 13:48:03 +00:00
fumingwei
3cfbc5275f bugfix:update libfieldstat3 to 3.0.9 2023-07-06 21:46:03 +08:00
fumingwei
f7727d6f3b bugfix:TSG-15730:增大pod probe时间 2023-07-06 13:40:20 +00:00
luwenpeng
aa967fd9b2 优化hasp_login的逻辑 2023-07-06 17:50:48 +08:00
fengweihao
f96f47b513 更新app-proto-engine，版本变更：修改OS上main.conf模板 2023-07-06 06:19:09 +00:00
fumingwei
07b9314c7c bugfix:修复自检pod找不到image的bug 2023-07-06 14:17:45 +08:00
fumingwei
81939cc635 bugfix:修改清理k3s持久化目录功能的笔误 2023-07-06 10:09:13 +08:00
liuxueli
de0d5fa9d8 修正capture_packet_plug插件的部署位置 2023-07-05 20:38:21 +08:00
liuxueli
94cbee8854 更新sapp、tsg_master、packet_pacture_plug、radius_collect_plug, 修复: 
TSG-15514 - 对于dns协议，流量未遵循天然条件优先级命中规则
TSG-15585 - http流量命中deny-alert-204策略，功能端未发送204响应码
TSG-15642 - 功能端未发送icmp不可达报文
TSG-15673 - 【LTS版本】Monitor动作会对dns协议多记录一条无返回的安全日志
TSG-15682 - 【LTS版本】Radius Records中，firewall未将MAC相关字段发送给OLAP
 2023-07-05 20:28:49 +08:00
fumingwei
b01f346026 feature:TSG-15905:新增os适配decoders.HTTP_GZIP和decoders.MAIL_BASE64选项 2023-07-05 12:20:28 +00:00
yangyubo
da10a7eb7a 修复tsg-15907:telegraf发送队列不足导致数据丢失 2023-07-05 20:05:02 +08:00
fumingwei
ede282b80c bugfix:修复tsg-x编译vm cp失败的错误 2023-07-05 19:23:38 +08:00
wangmenglan
c96d3ac7bf Clixon更新至1.0.56 增加HTTP_GZIP和MAIL_BASE64开关 2023-07-05 11:16:38 +00:00
fengweihao
23d2acbb6e 更新app-proto-engine到v3.0.2, 版本修改: 配置项变更，删除debug日志无效输出 2023-07-05 18:44:02 +08:00
fumingwei
81cbe98ec1 bugfix:修改vm因存在多个.bin文件编译失败问题 2023-07-05 07:58:59 +00:00
fumingwei
dc9b3e7529 bugfix:TSG-14782:修改clean orphand pod dir定时任务为1h执行一次 2023-07-05 07:58:59 +00:00