Changelog of SSG BETA-version [Документация VAS Experts]

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
en:dpi:dpi_components:platform:dpi_admin:testversion_install [2025/01/15 08:24] elena.krasnobryzhen:dpi:dpi_components:platform:dpi_admin:testversion_install [2025/02/17 14:32] (current) elena.krasnobryzh
Line 20: Line 20:
   - [Utils] ''bgp2bin'' works similarly to ''as2bin'', but only accepts /24 or larger subnets. It recognizes the IP1-IP2 range format as in RIPE records (extracting /24 or larger subnets from it). Subsequent entries take precedence over previous ones, creating a slightly larger file than ''as2bin''. However, in this file, subnet ranges do not overlap (as less prioritized entries are filtered out). This allows the utility to process data from multiple sources in order of priority.   - [Utils] ''bgp2bin'' works similarly to ''as2bin'', but only accepts /24 or larger subnets. It recognizes the IP1-IP2 range format as in RIPE records (extracting /24 or larger subnets from it). Subsequent entries take precedence over previous ones, creating a slightly larger file than ''as2bin''. However, in this file, subnet ranges do not overlap (as less prioritized entries are filtered out). This allows the utility to process data from multiple sources in order of priority.
   - [BRAS][PPP] Fixed: Heterogeneous dual-stack. One address (IPv4 or IPv6) is explicitly set, while the other (IPv6 or IPv4) is assigned via framed-pool.   - [BRAS][PPP] Fixed: Heterogeneous dual-stack. One address (IPv4 or IPv6) is explicitly set, while the other (IPv6 or IPv4) is assigned via framed-pool.
 +
 +====Changes in version 13.3 BETA3.2====
 +
 +  - [DPI] Fixed: searching for both ''*'' and '':'' in HTTP domains simultaneously
 +  - [DPI] Fixed: removal of addresses in virtual channels during reload
 +  - [DPI] Fixed: ignoring drop when the ''smartdrop'' parameter is set in case of SSL parsing errors
 +  - [BRAS][PPP] Fixed: consideration of the ''bras_pppoe_trace_mac'' option when saving DHCPv6 packets in pcap. Previously, only the ''bras_dhcp_trace_mac'' option was considered. Now, for DHCPv6 packets in the PPPoE tunnel, ''bras_pppoe_trace_mac'' is also taken into account 
 +
 +====Changes in version 13.3 BETA3.3====
 +
 +  - [DPI] Reduced the number of false positives for DPI TUNNEL
 +  - [DPI] Fixed errors when assigning vchannel by IP/CIDR
 +
 +====Changes in version 13.3 BETA3.4====
 +
 +  - [DPI] Fixed: blocking by IP of DNS working over TCP
 +  - [DPI] Increased packet inspection depth when searching for BIGOTV
 +  - [DPI Utils] Fixed ''checkproto'' for the case of an unknown IP protocol
 +  - Initial support for writing alert logs to syslog. Enabled with the ''syslog_level=7'' setting (defines the highest level of messages to be duplicated in syslog, default is off). Notes:
 +    - By default, rsyslog replaces tab characters and newlines with their codes when writing to a text log. To disable this, create a file ''/etc/rsyslog.d/fastdpi.conf'' with the setting <code bash>global(parser.escapeControlCharactersOnReceive="off")</code> or use the ''journalctl'' utility. Example: <code bash>journalctl -t fastdpi -p 4 --since "1 hour ago" -o verbose --output-fields PRIORITY,MESSAGE</code>
 +    - Logs can be redirected to a remote server. Example from ''/etc/rsyslog.conf'':
 +      - On the local server with fastdpi:<code bash>*.*  action(type="omfwd" target="192.0.0.1" port="10514" protocol="tcp"
 +            action.resumeRetryCount="100"
 +            queue.type="linkedList" queue.size="10000")</code>
 +      - On the remote server:<code bash>input(type="imptcp" port="10514"
 +      ruleset="writeRemoteData")
 +ruleset(name="writeRemoteData"
 +        queue.type="fixedArray"
 +        queue.size="250000"
 +        queue.dequeueBatchSize="4096"
 +        queue.workerThreads="4"
 +        queue.workerThreadMinimumMessages="60000"
 +       ) {
 +    action(type="omfile" file="/var/log/fastdpi.log"
 +           ioBufferSize="64k" flushOnTXEnd="off"
 +           asyncWriting="on")</code>