Commit Graph

1361 Commits

Author SHA1 Message Date
wangmenglan
f8df0e4ea4 feat(TSG-15342): 更新clixon到1.0.39 2023-06-02 21:09:49 +08:00
luwenpeng
f92dd28e0b fix笔误 2023-06-02 20:42:40 +08:00
liuxueli
e8690db000 更新tsg_master,新增:
TSG-15307 - TSG Master流状态同步时增加同步两侧封装包头
TSG-14945 - 功能端输出Application and Protocol Metrics
2023-06-02 12:38:22 +00:00
luwenpeng
b498752286 TFE性能优化 & TSG-15341 2023-06-02 12:36:38 +00:00
liuwentan
aa125189ec maat4.0.22 2023-06-02 12:33:04 +00:00
杨玉波
005309a438 增加Application and Protocol Metrics的telegraf配置 2023-06-02 12:32:32 +00:00
liuchang
311f987bfd add feature: TSG-15243 & TSG-15244 2023-06-02 12:31:51 +00:00
songyanchao
426f552938 🎈 perf: MRZCPD升级至mrzcpd-4.6.24.1e5c394(性能优化)
MRZCPD升级至mrzcpd-4.6.24.1e5c394(性能优化)
2023-06-02 12:31:27 +00:00
liuxueli
6a8e7a4558 更新sapp、tsg_master、libMESA_handle_logger,修复:
TSG-15325 - Firewall发送的控制报文中的session id与mrbuff metadata中的session id不一致
TSG-15187 - Proxy-Intercept的策略当Filter选择Category时,无法命中策略
libMESA_handle_logger: 按C99标准进行宏展开,展开前判断level是否enable
v23.05-rc3 v23.05
2023-06-02 20:26:17 +08:00
yangwei
db32da94e3 feat(MESA_handle_logger): v2.0.9->v2.0.12
提供获取level是否开启的接口
2023-06-02 11:49:52 +00:00
wangmenglan
6c9a184ee6 🐞 fix(TSG-15308): 更新tfe到v4.8.19
修复TFE Packet IO因启动顺序导致产生core
2023-06-02 13:27:40 +08:00
fumingwei
8250cf4da8 feature:TSG-15285:在容器中安装valgrind 2023-06-02 01:49:54 +00:00
liuwentan
0f6236b103 maat4.0.20 2023-06-02 01:48:20 +00:00
luwenpeng
05df1e5c38 更新火焰图生成脚本 2023-05-31 14:38:11 +08:00
fumingwei
124a06ba6a bugfix:修改配置文件笔误 v23.05-rc2 2023-05-31 07:59:56 +08:00
liuxueli
0c00e277ab 更新tsg_master、firewall、tsg_conn_sketch插件,修复:
TSG-15152 - Dashboard Main下Security Policy Monitor统计数量远低于Sessioin Records对应时间范围内的统计数量
TSG-15269 - monitor rdp和monitor openvpn的策略,安全日志中有对应日志,但策略详情页log count为0
TSG-14403 - 安全策略命中allow,deny,intercept动作后,流量不会再命中Service Chaining原始流量策略
TSG-15196 - 同时设置条件一样的Security-allow和Proxy-Intercept,同时命中,优先级应Allow>Intercept
TSG-14259 - Security Events命中Intercept动作后SSL.Server Side Version、SSL.Client Side Version为空
TSG-14064 - 满足Session Records产生满足条件的流量未产生Session日志
TSG-13577 - deny-rate limit动作日志中记录的包数与策略捕包包数相差很大
TSG-14402 - 有应答的DNS协议链接误识别为Asymmetric
TSG-13319 - 双方向流量错误标注Flag:Asymmetric
TSG-14616 - Security Shunt对应流量结束30分钟后无对应策略动作统计
TSG-14580 - Security策略Shunt动作生效情况下,对应流量产生Session Records日志
TSG-14773 - Allow+IP优先级低于Shunt+IP+SSL
TSG-15232 - VoIP、GTP-C日志统计vsys不准确
2023-05-30 21:35:37 +08:00
fumingwei
dde335f387 bugfix:TSG-15212:update kni to 5.1.5 2023-05-30 20:29:48 +08:00
wangmenglan
29c7f27219 🐞 fix(TSG-15212): 更新tfe到v4.8.18 2023-05-30 20:24:45 +08:00
fumingwei
6332ae6d91 bugfix:TSG-14782:使用systemd timer实现清理orphaned pods目录 2023-05-30 20:11:33 +08:00
fengweihao
d447f3aea8 更新tfe到v4.8.17, 版本修改: 修复TSG-15298 proxy_rule_hits中metric下action动作错误问题 2023-05-30 16:50:01 +08:00
fengweihao
ef3005ce3f 更新libswarmkv到v3.0.4, 版本修改: TSG-15166 swarmkv通过priority查询session排队数量存在负值 2023-05-30 10:20:29 +08:00
luwenpeng
49fdba9464 update sce and tfe v23.05-rc1 2023-05-26 11:52:47 +00:00
fumingwei
f1ace314bd bugfix:TSG-15130:TSG-15212:update kni to 5.1.4 2023-05-26 19:48:58 +08:00
fumingwei
0053d62144 bugfix:修改设置metric invisible输出file显示错误问题 2023-05-26 19:44:20 +08:00
fumingwei
ec558debda feature:update coredump-tools to 1.0.10 2023-05-26 11:39:01 +00:00
liuxueli
328c774356 TSGX设备默认打开发送拦截日志的开关SEND_INTERCEPT_LOG=1 2023-05-26 11:35:17 +00:00
liuxueli
7215efe5ee 更新sapp、tsg_master、tsg_conn_sketch; 修复:
TSG-15227 - 7400,9140环境,sapp因单向流测试拦截产生core
TSG-15228 - 9140环境,sapp因dtls.so产生core
TSG-15229 - 9140环境,sapp因tsg_ddos_sketch/tsg_ddos_sketch.so产生core
TSG-15236 - 9140环境,sapp因capture_packet_plug.so产生core
TSG-15235 - 7400环境出现Down告警,sapp未写入core
TSG-15093 - 自定义Signatures引用Intervals类的属性,流量不命中功能端
TSG-15130 - Policy_id=1的策略,7400&9140环境上的流量在SecurityEvents和ProxyEvents里都产生了日志
TSG-15212 - Proxy-Intercept策略命中后产生的日志中Intercept Status字段始终是passthrough,应为Intercept
tsg_conn_sketch: 移除分支测试相关编译选项,gitem对齐cacheline,提高性能

TSG-15187 - Proxy-Intercept的策略当Filter选择Category时,无法命中策略 RESOLVED
2023-05-26 18:38:23 +08:00
fumingwei
10b915e298 feature: update coredump-tools to 1.0.9 2023-05-26 10:09:34 +08:00
fumingwei
2fafbe896e feature:更新coredump-tool,增加minidump debug的功能 2023-05-23 18:53:21 +08:00
liuwentan
5f9c46f3d7 maat4.0.19 2023-05-23 18:33:26 +08:00
fumingwei
0e89e07741 feature:通过cgo调用动态库实现minidump生成 v23.05-rc0 2023-05-22 20:20:15 +08:00
fumingwei
fa28cf5550 feature:在容器中安装perl相关工具 2023-05-22 11:27:05 +00:00
yangwei
f4ad02f4e9 🐞 fix(sapp & session flag): 更新sapp至4.3.3,session marker至2.1.3 2023-05-22 18:54:09 +08:00
fumingwei
4a508c75e1 bugfix:TSG-13281:修复生成traffic-engine压缩目录错误问题 2023-05-22 10:23:28 +00:00
fumingwei
b2bbc899ae bugfix:修改tfe metric模板telegraf_ip配置项笔误 2023-05-22 10:23:28 +00:00
fumingwei
3aea5cd0e2 bugfix:修改rockylinux8 ansible安装方式由rpm改为pip安装 2023-05-22 10:23:28 +00:00
wangmenglan
0439e69eed 🐞 fix(TSG-15233): TFE更新到4.8.13,修复TFE内存泄漏 2023-05-22 15:59:38 +08:00
fumingwei
d9ded705e6 feature:修改handler写coredump大文件分块写入降低内存使用,提交最初版minidump生成 2023-05-19 18:31:11 +08:00
fumingwei
6de46d5277 feature:1.修改自检pod的namespace为tsg-os-system 2.修改reloader容器名字为config-reloader 2023-05-19 16:36:09 +08:00
fumingwei
8d4fd6f444 feature:TSG-12552:新增k3s相关证书轮转方法 2023-05-19 16:02:43 +08:00
liuchang
e0330241c0 fix invoke swarmkv hmget api wrong 2023-05-18 13:24:15 +00:00
fumingwei
e375a66a67 bugfix:TSG-13281:修改笔误 2023-05-18 10:09:55 +08:00
wangmenglan
26f2f1ef35 feat: 更新tsg-os-mgnt-srv到1.0.38
TSG-14740 增加interactive startup等调试选项
TSG-15171 调整mrzcpd和k3s服务启动顺序
2023-05-17 11:05:54 +00:00
liuwentan
3056f8963f maat4.0.18 2023-05-17 18:19:54 +08:00
fumingwei
f5fa87eedd feature:TSG-13281:新增生成traffic-engine安装包 2023-05-17 14:32:53 +08:00
fumingwei
47c8f458d5 feature:修改tfe发送metric的telegraf端口为8900 2023-05-16 17:14:15 +08:00
fumingwei
c051eccb36 bugfix:TSG-14782:临时修复k3s不断产生Cleaned up orphaned pod volumes dir日志的错误 2023-05-16 16:23:08 +08:00
wangmenglan
a7551d1015 🐞 fix(TSG-15050): TFE 配置增加proxy_hits字段; TFE packet io增加fieldstat状态统计 2023-05-15 11:09:15 +00:00
liuxueli
a979478dc9 更新tsg_master,修复:
TSG-15014 - 使用错误的bridge id获取异步存储空间,导致内存被覆写
TSG-15036 - 安全策略deny,rate-limit无限速效果
2023-05-15 11:08:51 +00:00
liuwentan
f5f8636094 maat4.0.17 2023-05-15 16:35:55 +08:00