gfwleak/tsg-tsg-os-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,317 Commits 92 Branches 330 Tags
f5fa87eeddf4bedfbcc8d469a346fab4be8916c6
Commit Graph

1317 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
fumingwei
f5fa87eedd feature:TSG-13281:新增生成traffic-engine安装包 2023-05-17 14:32:53 +08:00
fumingwei
47c8f458d5 feature:修改tfe发送metric的telegraf端口为8900 2023-05-16 17:14:15 +08:00
fumingwei
c051eccb36 bugfix:TSG-14782:临时修复k3s不断产生Cleaned up orphaned pod volumes dir日志的错误 2023-05-16 16:23:08 +08:00
wangmenglan
a7551d1015 🐞 fix(TSG-15050): TFE 配置增加proxy_hits字段; TFE packet io增加fieldstat状态统计 2023-05-15 11:09:15 +00:00
liuxueli
a979478dc9 更新tsg_master,修复： 
TSG-15014 - 使用错误的bridge id获取异步存储空间，导致内存被覆写
TSG-15036 - 安全策略deny，rate-limit无限速效果
 2023-05-15 11:08:51 +00:00
liuwentan
f5f8636094 maat4.0.17 2023-05-15 16:35:55 +08:00
fumingwei
ebbd9cf86b bugfix:1.修改fieldstat的输出格式 2.新增ratio相关接口 2023-05-15 14:24:05 +08:00
liuxueli
adc8a5d44e 更新sapp、tsg_master、capture_packet_plug、dns、wire_graft_plug、libwire_graft，修复: 
TSG-14967 - TSG X因capture_packet_plug导致firewall无法启动
TSG-14969 - 流量无法命中拦截策略
TSG-14567 - 7400,9140环境修改配置文件中VsysId后Session日志的VsysId未修改
TSG-15014 - TSG X firewall 因mapck使用不当导致内存被写乱
TSG-14990 - deny-dns-redirect 流量命中策略，但未被redirect
TSG-14966 - 在7400和9140环境上使能WAN NAT导致sapp无法启动
 2023-05-15 14:17:52 +08:00
luwenpeng
a4db7e97bb 更新SCE到1.0.11 
* 修复SF Status Metics的BUG
    * 启用发送控制报文的配置项
 2023-05-15 06:08:16 +00:00
fumingwei
60f5e4c721 bugfix:修复映射shaping port失败问题 2023-05-15 12:14:46 +08:00
liuchang
5f3fed87bd send log to sapp when receive avtive ctrlbuf 2023-05-15 01:48:13 +00:00
fumingwei
c73d03a11b bugfix:修改telegraf outputs.kafka的时间戳以毫秒为单位 2023-05-12 11:51:46 +08:00
fumingwei
83051c3717 bugfix:修改coredump-tools的输出格式和coredump-handler的磁盘限制逻辑 2023-05-11 18:29:24 +08:00
wangmenglan
92e6149ea4 TFE更新到4.8.11, 优化解析控制报文 2023-05-10 20:20:25 +08:00
luwenpeng
4105c8c73e SCE关闭send_log的配置项 2023-05-10 20:09:59 +08:00
liuxueli
d3ac0f4a00 更新sapp、tsg_master、firewall，新增: 
sapp提供判断是否为控制报文的相关接口
tsg_master、firewall支持Group内的逻辑非
TSG-14961 - SAPP接收的控制报文(TFE/SCE/SHAPER的LOG_UPDATE)，规避检查是否为重复流量及校验IP报文长度的逻辑
TSG-14932 - tsg_master控制报文中需增加service chaining和shaping的SID DONE
TSG-14928 - tsg_master接收TFE返回的ssl_intercept_info，填充为Proxy intercept event发送
 2023-05-10 18:26:44 +08:00
fumingwei
b9cdebd0b2 feature:TSG-14935:停止NetworkManager自动激活connection 2023-05-10 17:51:17 +08:00
fumingwei
5bf5b9d054 feature:TSG-14958:在host新增安装hwloc-gui和perl-open 2023-05-10 10:27:33 +08:00
fumingwei
270391b882 feature:TSG-14915,TSG-14949:kni新增cmesg字段和适配cmesg字段变更 2023-05-10 09:57:37 +08:00
wangmenglan
1fd630abe7 更新TFE 到4.8.10;更新tsg-os-mgnt-srv到1.0.37 2023-05-09 22:39:27 +08:00
fumingwei
a048ffef46 bugfix:更新coredump-tool工具 2023-05-09 10:59:02 +00:00
liuwentan
3b461db92a maat4.0.16 2023-05-09 10:58:27 +00:00
fengweihao
e875955a54 更新tfe到v4.8.9, 版本修改: 适配GROUP_GROUP_RELATION表结构变更 2023-05-09 18:28:33 +08:00
fumingwei
18b0380de7 bugfix:修改因镜像名字改变导致mrzcpd exporter启动失败的问题 2023-05-09 15:52:28 +08:00
fumingwei
a35400365e bugfix:修复因缺少驱动的库导致容器启动失败问题 2023-05-09 07:18:43 +00:00
songyanchao
1671b671c3 🎈 perf: MRZCPD升级至v4.6.22-20230506，Set 'MR_SHMDEV_MAX = 128' 
MRZCPD升级至v4.6.22-20230506，Set 'MR_SHMDEV_MAX = 128'
 2023-05-09 07:17:34 +00:00
liuwentan
fff52ac242 maat4.0.15 2023-05-09 07:16:36 +00:00
luwenpeng
d8424e9c9d 更新TFE 4.8.7->4.8.8 2023-05-08 18:12:54 +08:00
luwenpeng
3744ae1d9d 更新SCE 1.0.9->1.0.10 2023-05-08 16:20:01 +08:00
wangmenglan
3fba4d4161 更新TFE 到4.8.7;更新tsg-os-mgnt-srv到1.0.36 2023-05-06 21:16:06 +08:00
fumingwei
dcf9f3bfbe feature:TSG-X环境下新增coredump-tools工具安装 2023-05-06 18:50:27 +08:00
fumingwei
08c5858c11 feature:新增TSG-X环境下traffic_steering配置项 2023-05-06 18:40:12 +08:00
fumingwei
25470c8405 feature:TSG-14933:TSG-OS增加汇聚TFE Metrics的telegraf 2023-05-06 08:41:12 +00:00
liuxueli
ab3887466b 更新tsg_master: 统一proxy_sid的变量名称 2023-05-06 16:01:22 +08:00
liuxueli
a4b1225708 更新sapp、tsg_master、app_proto_identify、app_sketch_local、http、mail、dtls、firewall、capture_packet_plug、tsg_conn_sketch，新增或修复： 
TSG-14654 - SAPP控制报文格式调整, 增加将cmsg字段发送给TFE
TSG-14911 - tsg_master输出的Metrics中的vsys_id定义
TSG-14785 - tsg_master支持输出Network Traffic Metric
TSG-13780 - AppSketch local支持MAAT4
TSG-13781 - AppSketch支持接收TSG MASTER通知signature id和pre signature id
原有AppSketch根据协议字段识别APP的逻辑迁移至Firewall插件中扫描
移除packet_capture_plug对maatframe3的链接
rtp采集日志发送到INTERNAL-RTP-RECORD
sapp支持从rawpkt读取sid和route_ctx；支持获取TCP/UDP单向流统计的接口
OMPUB-890 - 【XJ-CUCC】功能端异常重启
radius_collect_plug支持配置发日志的条件，如: called_station_id和calling_station_id等字符串类的属性
app_proto_identify修正openvpn的识别条件，增强openvpn的识别能力
TSG-10187 - mail解析结果异常，相同TCP连接两次调用session pending
OMPUB-886 - E现场: 升级tsg-os-v22.11.5-e8004bc版本后，2023-04-03出现一次重启
 2023-05-06 07:33:08 +00:00
luwenpeng
5ef2f70ad8 更新SCE 1.0.8->1.0.9 2023-05-06 07:26:55 +00:00
liuchang
c6d423a6f2 parse ctrl msg by mpack 
specify vsys_id by using fieldstat
 2023-05-06 07:25:40 +00:00
songyanchao
682cd0b0c1 🎈 perf(DPISDN-7): MRZCPD升级至v4.6.22-20230506，DPDK升级至21.11.3 
MRZCPD升级至v4.6.22-20230506，DPDK升级至21.11.3
 2023-05-06 07:24:48 +00:00
fumingwei
583e9caf4c feature:删除telegraf中关于vsys_id的tag配置 2023-05-06 15:07:48 +08:00
fumingwei
5dbbbe7163 bugfix:修复因telegraf配置错误导致metric数据不准确的bug 2023-05-06 15:05:15 +08:00
fumingwei
2aa4e21165 feature:新增适配TSG-X tfe配置 2023-05-06 14:49:39 +08:00
luwenpeng
10119e9486 TSG-14862 TSG-OS在执行tsg-init阶段创建proxy decrypted traffic steering的policy route 2023-05-05 10:07:51 +08:00
fumingwei
9cfcf2c9bf bugfix:删除proxy容器中的mrzcpd 2023-04-28 11:51:09 +08:00
fumingwei
2a5aa9838e feature:TSG-P0906环境删除kni安装 2023-04-28 11:27:29 +08:00
fumingwei
c248e0a934 bugfix:TSG-13277:使用buildah构建容器镜像 2023-04-28 11:27:29 +08:00
fumingwei
8f973b53ba bugfix:使用reloader解决configmap更新pod不重新生效问题 2023-04-28 11:27:26 +08:00
fumingwei
dc3cb1939f feature:TSG-14769:将traffic-engine deployment拆分为firewall,proxy,service-chaining,shaping四个deployment 2023-04-28 11:27:26 +08:00
fumingwei
d221af3d34 feature:TSG-14740:helm新增debug配置项 2023-04-28 11:27:26 +08:00
liuwentan
d661ff7d91 maat4.0.14 v23.04.1 2023-04-25 17:59:50 +08:00
liuwentan
07bd8b20c0 maat4.0.13 v23.04 2023-04-24 20:01:18 +08:00