diff options
| -rw-r--r-- | ansible/install_config/group_vars/rpm_version.yml | 2 | ||||
| -rw-r--r-- | ansible/roles/traffic-engine/files/helm/conf/tfe.conf | 13 |
2 files changed, 3 insertions, 12 deletions
diff --git a/ansible/install_config/group_vars/rpm_version.yml b/ansible/install_config/group_vars/rpm_version.yml index 44e95133..ce24399e 100644 --- a/ansible/install_config/group_vars/rpm_version.yml +++ b/ansible/install_config/group_vars/rpm_version.yml @@ -74,7 +74,7 @@ sapp_rpm_version: sapp-pr: sapp-pr-4.3.67.07feab9 tfe_rpm_version: - tfe: tfe-4.10.2.1b917ef + tfe: tfe-4.10.3.5c1b881 tsg_diagnose_rpm_version: tsg_diagnose: tsg-diagnose-2.0.10.4d80fdf diff --git a/ansible/roles/traffic-engine/files/helm/conf/tfe.conf b/ansible/roles/traffic-engine/files/helm/conf/tfe.conf index ddfe9aee..73e6e690 100644 --- a/ansible/roles/traffic-engine/files/helm/conf/tfe.conf +++ b/ansible/roles/traffic-engine/files/helm/conf/tfe.conf @@ -1,9 +1,5 @@ [system] nr_worker_threads={{- include "traffic-engine.tfe.workerthread" . }} -enable_kni_v1=0 -enable_kni_v2=0 -enable_kni_v3=0 -enable_kni_v4=1 # Only when (disable_coredump == 1 || (enable_breakpad == 1 && enable_breakpad_upload == 1)) is satisfied, the core will not be generated locally @@ -70,7 +66,6 @@ timeout_debug=0 [ssl] ssl_debug=0 -ssl_ja3_table=PXY_SSL_FINGERPRINT # ssl version Not available, configured via TSG website # ssl_max_version=tls13 # ssl_min_version=ssl3 @@ -98,8 +93,8 @@ service_cache_slots=4194304 service_cache_expire_seconds=300 service_cache_fail_as_pinning_cnt=4 service_cache_fail_as_proto_err_cnt=5 -#service_cache_succ_as_app_not_pinning_cnt=0 service_cache_fail_time_window=30 +service_cache_succ_as_app_not_pinning_cnt=0 # cert check_cert_crl=0 @@ -196,7 +191,7 @@ file_stream_topic=TRAFFIC-HTTP-FILE-STREAM-RECORD exch_cert_topic=PXY-EXCH-INTERMEDIA-CERT [maat] -# 0:json 1:redis 2:iris +# 0:json 1:redis maat_input_mode=1 stat_switch=1 perf_switch=1 @@ -214,10 +209,6 @@ maat_redis_server={{- include "traffic-engine.global.cm.server-ip" . }} maat_redis_port_range={{- include "traffic-engine.global.cm.server-port" . }} maat_redis_db_index={{ .Values.vsys_id }} -# iris mode conf iterm -full_cfg_dir=pangu_policy/full/index/ -inc_cfg_dir=pangu_policy/inc/index/ - [proxy_hits] app_name="proxy_rule_hits" output_fs_interval_ms=500 |