{"expand":"renderedFields,names,schema,operations,editmeta,changelog,versionedRepresentations","id":"29848","self":"https://jira.geedge.net/rest/api/2/issue/29848","key":"OMPUB-641","fields":{"issuetype":{"self":"https://jira.geedge.net/rest/api/2/issuetype/10004","id":"10004","description":"","iconUrl":"https://jira.geedge.net/secure/viewavatar?size=xsmall&avatarId=10303&avatarType=issuetype","name":"故障","subtask":false,"avatarId":10303},"components":[],"timespent":null,"timeoriginalestimate":null,"description":"目前现在版本22.07情况下，对YouTube的deny失败。","project":{"self":"https://jira.geedge.net/rest/api/2/project/10206","id":"10206","key":"OMPUB","name":"Operation and Maintenance","projectTypeKey":"business","avatarUrls":{"48x48":"https://jira.geedge.net/secure/projectavatar?pid=10206&avatarId=10715","24x24":"https://jira.geedge.net/secure/projectavatar?size=small&pid=10206&avatarId=10715","16x16":"https://jira.geedge.net/secure/projectavatar?size=xsmall&pid=10206&avatarId=10715","32x32":"https://jira.geedge.net/secure/projectavatar?size=medium&pid=10206&avatarId=10715"},"projectCategory":{"self":"https://jira.geedge.net/rest/api/2/projectCategory/10002","id":"10002","description":"系统运维","name":"MaintenanceDev"}},"fixVersions":[],"aggregatetimespent":null,"resolution":{"self":"https://jira.geedge.net/rest/api/2/resolution/10000","id":"10000","description":"该问题的工作流程已完成。","name":"完成"},"timetracking":{},"customfield_10401":null,"customfield_10104":null,"customfield_10402":null,"customfield_10105":"0|i037yc:","customfield_10403":null,"customfield_10404":null,"attachment":[{"self":"https://jira.geedge.net/rest/api/2/attachment/33431","id":"33431","filename":"142.251.215.243.xlsx","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-06T21:27:30.923+0800","size":8783,"mimeType":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet","content":"https://jira.geedge.net/secure/attachment/33431/142.251.215.243.xlsx"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33432","id":"33432","filename":"172.217.14.238.xlsx","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-06T21:27:30.586+0800","size":6877,"mimeType":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet","content":"https://jira.geedge.net/secure/attachment/33432/172.217.14.238.xlsx"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33430","id":"33430","filename":"172.217.169.238.xlsx","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-06T21:27:29.449+0800","size":7633,"mimeType":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet","content":"https://jira.geedge.net/secure/attachment/33430/172.217.169.238.xlsx"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33433","id":"33433","filename":"172.217.169.254.xlsx","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-06T21:27:30.924+0800","size":6647,"mimeType":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet","content":"https://jira.geedge.net/secure/attachment/33433/172.217.169.254.xlsx"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33576","id":"33576","filename":"2022-12-08.rar","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-08T21:49:27.003+0800","size":71389,"mimeType":"application/x-rar-compressed","content":"https://jira.geedge.net/secure/attachment/33576/2022-12-08.rar"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33578","id":"33578","filename":"2022-12-08-BOLE-IGW.rar","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-08T22:21:07.456+0800","size":7349268,"mimeType":"application/x-rar-compressed","content":"https://jira.geedge.net/secure/attachment/33578/2022-12-08-BOLE-IGW.rar"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33730","id":"33730","filename":"2022-12-16.zip","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=chengsiyuan","name":"chengsiyuan","key":"JIRAUSER10915","emailAddress":"chengsiyuan@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?avatarId=10346","24x24":"https://jira.geedge.net/secure/useravatar?size=small&avatarId=10346","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&avatarId=10346","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&avatarId=10346"},"displayName":"程思源","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-16T22:41:53.620+0800","size":46635,"mimeType":"application/zip","content":"https://jira.geedge.net/secure/attachment/33730/2022-12-16.zip"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33845","id":"33845","filename":"BOL-IGW IO使用率.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=qidaijie","name":"qidaijie","key":"JIRAUSER10135","emailAddress":"qidaijie@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10135&avatarId=10727","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10135&avatarId=10727","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10135&avatarId=10727","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10135&avatarId=10727"},"displayName":"戚岱杰","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-20T23:04:23.524+0800","size":68673,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/33845/BOL-IGW+IO%E4%BD%BF%E7%94%A8%E7%8E%87.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/33845/_thumb_33845.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33729","id":"33729","filename":"f83b09c2f64d5e7b483e286f8b10bbf.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=chengsiyuan","name":"chengsiyuan","key":"JIRAUSER10915","emailAddress":"chengsiyuan@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?avatarId=10346","24x24":"https://jira.geedge.net/secure/useravatar?size=small&avatarId=10346","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&avatarId=10346","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&avatarId=10346"},"displayName":"程思源","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-16T22:41:47.748+0800","size":114547,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/33729/f83b09c2f64d5e7b483e286f8b10bbf.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/33729/_thumb_33729.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/31364","id":"31364","filename":"image-2022-09-26-09-45-16-214.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuxueli","name":"liuxueli","key":"JIRAUSER10133","emailAddress":"liuxueli@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10133&avatarId=10612","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10133&avatarId=10612","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10133&avatarId=10612","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10133&avatarId=10612"},"displayName":"刘学利","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-09-26T09:45:22.575+0800","size":77566,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/31364/image-2022-09-26-09-45-16-214.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/31364/_thumb_31364.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/31528","id":"31528","filename":"image-2022-10-08-19-07-46-060.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-10-08T19:07:46.478+0800","size":64766,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/31528/image-2022-10-08-19-07-46-060.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/31528/_thumb_31528.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/32587","id":"32587","filename":"image-2022-11-07-10-02-51-001.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-11-07T10:02:51.345+0800","size":90549,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/32587/image-2022-11-07-10-02-51-001.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/32587/_thumb_32587.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33908","id":"33908","filename":"image-2022-12-26-15-34-15-331.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-26T15:34:15.528+0800","size":111084,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/33908/image-2022-12-26-15-34-15-331.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/33908/_thumb_33908.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33909","id":"33909","filename":"image-2022-12-26-15-35-07-022.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-26T15:35:07.245+0800","size":95096,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/33909/image-2022-12-26-15-35-07-022.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/33909/_thumb_33909.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33910","id":"33910","filename":"image-2022-12-26-15-38-44-332.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-26T15:38:44.612+0800","size":310622,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/33910/image-2022-12-26-15-38-44-332.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/33910/_thumb_33910.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33912","id":"33912","filename":"image-2022-12-26-15-55-35-726.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-26T15:55:37.113+0800","size":441591,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/33912/image-2022-12-26-15-55-35-726.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/33912/_thumb_33912.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33913","id":"33913","filename":"image-2022-12-26-15-57-12-419.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-26T15:57:12.704+0800","size":298410,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/33913/image-2022-12-26-15-57-12-419.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/33913/_thumb_33913.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33846","id":"33846","filename":"OLAP数据流监控.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=qidaijie","name":"qidaijie","key":"JIRAUSER10135","emailAddress":"qidaijie@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10135&avatarId=10727","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10135&avatarId=10727","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10135&avatarId=10727","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10135&avatarId=10727"},"displayName":"戚岱杰","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-20T23:04:23.524+0800","size":45583,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/33846/OLAP%E6%95%B0%E6%8D%AE%E6%B5%81%E7%9B%91%E6%8E%A7.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/33846/_thumb_33846.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33848","id":"33848","filename":"功能端日志情况记录-更新后.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=qidaijie","name":"qidaijie","key":"JIRAUSER10135","emailAddress":"qidaijie@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10135&avatarId=10727","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10135&avatarId=10727","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10135&avatarId=10727","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10135&avatarId=10727"},"displayName":"戚岱杰","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-20T23:10:52.855+0800","size":144270,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/33848/%E5%8A%9F%E8%83%BD%E7%AB%AF%E6%97%A5%E5%BF%97%E6%83%85%E5%86%B5%E8%AE%B0%E5%BD%95-%E6%9B%B4%E6%96%B0%E5%90%8E.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/33848/_thumb_33848.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33849","id":"33849","filename":"功能端日志情况记录-更新前.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=qidaijie","name":"qidaijie","key":"JIRAUSER10135","emailAddress":"qidaijie@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10135&avatarId=10727","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10135&avatarId=10727","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10135&avatarId=10727","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10135&avatarId=10727"},"displayName":"戚岱杰","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-20T23:10:52.847+0800","size":115541,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/33849/%E5%8A%9F%E8%83%BD%E7%AB%AF%E6%97%A5%E5%BF%97%E6%83%85%E5%86%B5%E8%AE%B0%E5%BD%95-%E6%9B%B4%E6%96%B0%E5%89%8D.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/33849/_thumb_33849.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33847","id":"33847","filename":"功能端写入Kafka监控.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=qidaijie","name":"qidaijie","key":"JIRAUSER10135","emailAddress":"qidaijie@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10135&avatarId=10727","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10135&avatarId=10727","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10135&avatarId=10727","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10135&avatarId=10727"},"displayName":"戚岱杰","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-20T23:04:23.524+0800","size":120161,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/33847/%E5%8A%9F%E8%83%BD%E7%AB%AF%E5%86%99%E5%85%A5Kafka%E7%9B%91%E6%8E%A7.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/33847/_thumb_33847.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/33577","id":"33577","filename":"微信图片_20221208171911.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-08T22:18:31.489+0800","size":86451,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/33577/%E5%BE%AE%E4%BF%A1%E5%9B%BE%E7%89%87_20221208171911.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/33577/_thumb_33577.png"}],"aggregatetimeestimate":null,"resolutiondate":"2023-04-10T17:49:18.737+0800","workratio":-1,"summary":"【E21现场】YouTube deny失败","lastViewed":null,"watches":{"self":"https://jira.geedge.net/rest/api/2/issue/OMPUB-641/watchers","watchCount":6,"isWatching":false},"creator":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"subtasks":[],"created":"2022-09-23T15:21:11.755+0800","reporter":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"customfield_10000":"{summaryBean=com.atlassian.jira.plugin.devstatus.rest.SummaryBean@1cc03d50[summary={pullrequest=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@361eff84[overall=PullRequestOverallBean{stateCount=0, state='OPEN', details=PullRequestOverallDetails{openCount=0, mergedCount=0, declinedCount=0}},byInstanceType={}], build=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@90771fa[overall=com.atlassian.jira.plugin.devstatus.summary.beans.BuildOverallBean@48245d81[failedBuildCount=0,successfulBuildCount=0,unknownBuildCount=0,count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], review=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@e02bad3[overall=com.atlassian.jira.plugin.devstatus.summary.beans.ReviewsOverallBean@1d8553fe[stateCount=0,state=<null>,dueDate=<null>,overDue=false,count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], deployment-environment=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@2fbf7915[overall=com.atlassian.jira.plugin.devstatus.summary.beans.DeploymentOverallBean@451df136[topEnvironments=[],showProjects=false,successfulCount=0,count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], repository=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@5ed21f64[overall=com.atlassian.jira.plugin.devstatus.summary.beans.CommitOverallBean@69ffbde3[count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], branch=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@3ddc0618[overall=com.atlassian.jira.plugin.devstatus.summary.beans.BranchOverallBean@1762c4d4[count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}]},errors=[],configErrors=[]], devSummaryJson={\"cachedValue\":{\"errors\":[],\"configErrors\":[],\"summary\":{\"pullrequest\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"stateCount\":0,\"state\":\"OPEN\",\"details\":{\"openCount\":0,\"mergedCount\":0,\"declinedCount\":0,\"total\":0},\"open\":true},\"byInstanceType\":{}},\"build\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"failedBuildCount\":0,\"successfulBuildCount\":0,\"unknownBuildCount\":0},\"byInstanceType\":{}},\"review\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"stateCount\":0,\"state\":null,\"dueDate\":null,\"overDue\":false,\"completed\":false},\"byInstanceType\":{}},\"deployment-environment\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"topEnvironments\":[],\"showProjects\":false,\"successfulCount\":0},\"byInstanceType\":{}},\"repository\":{\"overall\":{\"count\":0,\"lastUpdated\":null},\"byInstanceType\":{}},\"branch\":{\"overall\":{\"count\":0,\"lastUpdated\":null},\"byInstanceType\":{}}}},\"isStale\":false}}","aggregateprogress":{"progress":0,"total":0},"customfield_10100":null,"priority":{"self":"https://jira.geedge.net/rest/api/2/priority/3","iconUrl":"https://jira.geedge.net/images/icons/priorities/medium.svg","name":"Medium","id":"3"},"customfield_10200":null,"customfield_10400":null,"labels":["E21现场","TSG-OS性能"],"environment":null,"timeestimate":null,"aggregatetimeoriginalestimate":null,"versions":[],"duedate":null,"progress":{"progress":0,"total":0},"issuelinks":[{"id":"27962","self":"https://jira.geedge.net/rest/api/2/issueLink/27962","type":{"id":"10003","name":"Relates","inward":"relates to","outward":"relates to","self":"https://jira.geedge.net/rest/api/2/issueLinkType/10003"},"outwardIssue":{"id":"31520","key":"OMPUB-749","self":"https://jira.geedge.net/rest/api/2/issue/31520","fields":{"summary":"【E21现场】YouTube、Facebook、Twitter网站deny无效果","status":{"self":"https://jira.geedge.net/rest/api/2/status/10103","description":"这一问题被认为是完成, 这项决议是正确的。问题已关闭可以重新开放。","iconUrl":"https://jira.geedge.net/images/icons/statuses/generic.png","name":"已关闭","id":"10103","statusCategory":{"self":"https://jira.geedge.net/rest/api/2/statuscategory/3","id":3,"key":"done","colorName":"green","name":"完成"}},"priority":{"self":"https://jira.geedge.net/rest/api/2/priority/2","iconUrl":"https://jira.geedge.net/images/icons/priorities/high.svg","name":"High","id":"2"},"issuetype":{"self":"https://jira.geedge.net/rest/api/2/issuetype/10004","id":"10004","description":"","iconUrl":"https://jira.geedge.net/secure/viewavatar?size=xsmall&avatarId=10303&avatarType=issuetype","name":"故障","subtask":false,"avatarId":10303}}}},{"id":"28191","self":"https://jira.geedge.net/rest/api/2/issueLink/28191","type":{"id":"10003","name":"Relates","inward":"relates to","outward":"relates to","self":"https://jira.geedge.net/rest/api/2/issueLinkType/10003"},"outwardIssue":{"id":"30062","key":"OMPUB-670","self":"https://jira.geedge.net/rest/api/2/issue/30062","fields":{"summary":"【E21现场】BOLE-IGW 多块NPB CPU均接近100% ","status":{"self":"https://jira.geedge.net/rest/api/2/status/10103","description":"这一问题被认为是完成, 这项决议是正确的。问题已关闭可以重新开放。","iconUrl":"https://jira.geedge.net/images/icons/statuses/generic.png","name":"已关闭","id":"10103","statusCategory":{"self":"https://jira.geedge.net/rest/api/2/statuscategory/3","id":3,"key":"done","colorName":"green","name":"完成"}},"priority":{"self":"https://jira.geedge.net/rest/api/2/priority/3","iconUrl":"https://jira.geedge.net/images/icons/priorities/medium.svg","name":"Medium","id":"3"},"issuetype":{"self":"https://jira.geedge.net/rest/api/2/issuetype/10004","id":"10004","description":"","iconUrl":"https://jira.geedge.net/secure/viewavatar?size=xsmall&avatarId=10303&avatarType=issuetype","name":"故障","subtask":false,"avatarId":10303}}}},{"id":"27480","self":"https://jira.geedge.net/rest/api/2/issueLink/27480","type":{"id":"10003","name":"Relates","inward":"relates to","outward":"relates to","self":"https://jira.geedge.net/rest/api/2/issueLinkType/10003"},"outwardIssue":{"id":"31096","key":"OMPUB-704","self":"https://jira.geedge.net/rest/api/2/issue/31096","fields":{"summary":"CN学习到Psiphon3中继节点IP，但是TSG未将其成功Deny","status":{"self":"https://jira.geedge.net/rest/api/2/status/10103","description":"这一问题被认为是完成, 这项决议是正确的。问题已关闭可以重新开放。","iconUrl":"https://jira.geedge.net/images/icons/statuses/generic.png","name":"已关闭","id":"10103","statusCategory":{"self":"https://jira.geedge.net/rest/api/2/statuscategory/3","id":3,"key":"done","colorName":"green","name":"完成"}},"priority":{"self":"https://jira.geedge.net/rest/api/2/priority/3","iconUrl":"https://jira.geedge.net/images/icons/priorities/medium.svg","name":"Medium","id":"3"},"issuetype":{"self":"https://jira.geedge.net/rest/api/2/issuetype/10004","id":"10004","description":"","iconUrl":"https://jira.geedge.net/secure/viewavatar?size=xsmall&avatarId=10303&avatarType=issuetype","name":"故障","subtask":false,"avatarId":10303}}}},{"id":"28214","self":"https://jira.geedge.net/rest/api/2/issueLink/28214","type":{"id":"10003","name":"Relates","inward":"relates to","outward":"relates to","self":"https://jira.geedge.net/rest/api/2/issueLinkType/10003"},"inwardIssue":{"id":"31712","key":"OMPUB-756","self":"https://jira.geedge.net/rest/api/2/issue/31712","fields":{"summary":"【E21现场】YouTube、Twitter等网站在IGW站点deny失败原因分析报告","status":{"self":"https://jira.geedge.net/rest/api/2/status/10102","description":"","iconUrl":"https://jira.geedge.net/images/icons/status_generic.gif","name":"完成","id":"10102","statusCategory":{"self":"https://jira.geedge.net/rest/api/2/statuscategory/3","id":3,"key":"done","colorName":"green","name":"完成"}},"priority":{"self":"https://jira.geedge.net/rest/api/2/priority/2","iconUrl":"https://jira.geedge.net/images/icons/priorities/high.svg","name":"High","id":"2"},"issuetype":{"self":"https://jira.geedge.net/rest/api/2/issuetype/10002","id":"10002","description":"需要完成的任务。","iconUrl":"https://jira.geedge.net/secure/viewavatar?size=xsmall&avatarId=10318&avatarType=issuetype","name":"任务","subtask":false,"avatarId":10318}}}}],"comment":{"comments":[{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/47435","id":"47435","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuxueli","name":"liuxueli","key":"JIRAUSER10133","emailAddress":"liuxueli@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10133&avatarId=10612","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10133&avatarId=10612","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10133&avatarId=10612","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10133&avatarId=10612"},"displayName":"刘学利","active":true,"timeZone":"Asia/Shanghai"},"body":"* 测试时间段已排查内容：\r\n ** 交换版均为pass状态\r\n ** 没有相应的DDOS Bypass\r\n ** 没有丢包\r\n ** 策略没有问题\r\n ** 与单向流无关\r\n ** youtube在E境内存在节点，但不是IGW阻断无效果的真正原因\r\n *** !image-2022-09-26-09-45-16-214.png!","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuxueli","name":"liuxueli","key":"JIRAUSER10133","emailAddress":"liuxueli@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10133&avatarId=10612","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10133&avatarId=10612","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10133&avatarId=10612","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10133&avatarId=10612"},"displayName":"刘学利","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-09-26T09:45:50.811+0800","updated":"2022-09-26T09:45:50.811+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/47615","id":"47615","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuxueli","name":"liuxueli","key":"JIRAUSER10133","emailAddress":"liuxueli@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10133&avatarId=10612","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10133&avatarId=10612","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10133&avatarId=10612","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10133&avatarId=10612"},"displayName":"刘学利","active":true,"timeZone":"Asia/Shanghai"},"body":"* 暂时关闭BOL-IGW NPB 1/2/5的overload protection功能，观察丢包情况。","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuxueli","name":"liuxueli","key":"JIRAUSER10133","emailAddress":"liuxueli@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10133&avatarId=10612","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10133&avatarId=10612","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10133&avatarId=10612","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10133&avatarId=10612"},"displayName":"刘学利","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-09-29T15:58:06.746+0800","updated":"2022-09-29T15:58:23.274+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/47701","id":"47701","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"body":"更新10.5-10.7排查记录\r\n * 10.5 UTC+8 18:00-22:00\r\n ** 现象描述\r\n *** 在IGW下发YouTube deny策略，拨测（固定公网IP）有效率低于10%\r\n *** 在PE下发相同策略，拨测有效率100%\r\n *** PE相当于省口，IGW相当于国际口，流量理论上先过PE，再上行至IGW至国际互联网\r\n ** 现场拨测\r\n *** {*}生效策略{*}：IGW deny Client IP（196.188.136.150）+YouTube \r\n *** 使用现场终端，分别用浏览器直接访问www.youtube.com和命令行执行curl [https://www.youtube.com|https://www.youtube.com/] ，多次测试后，有效率仍然低于10%\r\n *** 通过观察客户端捕获的数据包，观察到\r\n **** *问题1：deny有效的会话，实际生效的动作为drop，未收到rst包*\r\n **** 都有用172.217.169.238这个IP（归属地美国，所属公司为Google）使用SSL SNI请求www.youtube.com的行为，相同二元组不同四元组的情况下，同时存在有效和失效的情况\r\n *** 缩小测试范围\r\n **** 测试终端上修改hosts，将www.youtube.com固定解析为172.217.169.23\r\n **** 使用curl复测，仍然存在有效率低的现象，但是并不为0\r\n *** 界面查询会话日志\r\n **** 查询条件为172.217.169.23-196.188.136.150二元组\r\n **** 二元组会话日志同时存在于Old Airpod PE、DIR IGW和MW IGW三个站点\r\n ***** PE的会话日志数量与拨测数量相符\r\n ***** 两个IGW站点的会话数量，与拨测数量不相符\r\n *** 策略改为在PE生效，有效率100%\r\n *** 通过在DIR IGW的NPB捕包，配合拨测操作，未捕获到deny无效的会话\r\n *** *推测1：PE流量完整，IGW流量不完整，即使相同二元组，也存在部分会话流量缺失的情况*\r\n ** 当天结论\r\n ***  怀疑IGW接入流量不完整，建议用户如果想使用deny功能，优先在PE生效。不足之处在于丢流量的工具链完全由我方提供，加上存在丢日志的情况，对业主的说服力或许不够.\r\n *** 补充测试了Facebook、Instagram、Telegram等应用，有效率都是100%，暂时可观察到的有问题应用范围仍然是YouTube\r\n * 10.6 UTC+8 17:00-19:00\r\n ** 补充前一晚拨测结果\r\n *** OLAP已经尝试修复日志丢失的问题\r\n *** 策略仅在IGW生效的话，拨测有效率在10%-50%之间变化\r\n *** 仍然存在PE的会话日志量，与拨测次数能够对应，但是IGW的会话日志量，少于拨测次数，怀疑仍然存在日志丢失的问题\r\n ** 补充测试策略\r\n *** 安全策略日志缺失的量，似乎少于会话日志，因此补充两条安全策略，方便进行对比验证 \r\n **** PE新增一条client IP + YouTube Monitor策略\r\n **** IGW新增一条 Client IP + Server IP Monitor策略\r\n **** !image-2022-10-08-19-07-46-060.png|width=575,height=168!\r\n * 10.7 UTC+8 17:00-22:00\r\n ** 测试问题\r\n *** 由于同一天业主同时也在办公网内，使用同一个公网出口进行拨测，因此，界面上出现二元组的策略日志和会话日志，远大于拨测终端访问的次数\r\n *** 要求现场人员，补充了客户端捕包，和NPB捕包的数据，方便进行对比验证\r\n\r\n * \r\n ** \r\n *** \r\n **** 业主办公网的出口，经过NAT后共享196.188.136.150这个公网IP进行访问，除源端口发生转换外，似乎NAT中包含一个L4 Proxy，导致TSG日志中使用TCP_ISN无法关联拨测终端捕到的包\r\n **** 使用SSL JA3 Hash，成功关联拨测终端产生的会话，和TSG日志中的会话\r\n ** 结果分析\r\n *** 以最后一次拨测为例，尝试31次访问，15次有效deny，16次deny失败\r\n **** PE\r\n ***** NPB上捕获的数据包，能够查询到31条会话，且{*}全部为双向流{*}\r\n ***** 可以查询到31条会话日志，和31条monitor策略日志\r\n **** DIR_IGW\r\n ***** NPB捕获的数据包，能够查询到15条会话，与deny成功的对应，{*}全部为C2S单向流{*}\r\n ***** 查询到Deny策略日志13条，均包含在上述15条会话中\r\n ***** 查询到Monitor策略日志13条，均包含在上述15条会话中\r\n ***** 查询到会话记录日志12条，均包含在上述15条会话中\r\n **** MW_IGW\r\n ***** NPB捕获的数据包，能够查询到16条会话，与deny失败的对应，{*}全部为S2C单向流{*}\r\n ***** 查询到Monitor策略日志12条，均包含在上述16条会话中\r\n ***** 查询到会话记录日志6条，均包含在上述16条会话中\r\n ** 更新结论\r\n *** *测试固定的二元组（196.188.136.150，172.217.169.23）过IGW时存在单侧流量缺失的情况*\r\n **** 经过PE时为完整的双向流\r\n **** 上行至IGW，随机从DIR_IGW或者MW_IGW出口访问国际互联网\r\n **** 经过DIR_IGW的流量，缺失S2C侧流量，不影响deny效果\r\n **** 经过MW_IGW的流量，缺失C2S侧流量，影响YouTube识别，导致无法有效deny\r\n *** {*}IGW仍然存在丢失日志的情况{*}，包括安全日志和会话记录日志","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-10-08T19:07:50.103+0800","updated":"2022-10-10T10:08:49.346+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/49192","id":"49192","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"body":"更新记录11.01 UTC+8 17:00-22:00\r\n * Old Airport的70次访问，到IGW全部变成单向流\r\n * 应该在IGW查到70*2=140条日志，但是Microwave-IGW只有36条，Dire Dawa-IGW只有34条，并集为20条\r\n * 从Old Airport出来的70条拨测访问，20条经过IGW接入是完整的（以单向流的形式Dire Dawa-IGW+Microwave-IGW分开）\r\n * 14个会话只有C2S，16个只有S2C\r\n * 拨测的70个会话，在IGW出现次数是20+14+16=50，有20个会话在IGW缺失，缺失率到28%\r\n * !image-2022-11-07-10-02-51-001.png|width=524,height=125!\r\n\r\n结论\r\n * 按概率，怀疑IGW侧C2S和S2C接入各缺失约50%，需要更大的测试样本\r\n\r\n ","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-11-07T10:04:24.067+0800","updated":"2022-11-07T10:07:10.139+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/50864","id":"50864","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"body":"* 背景\r\n ** 前述测试server IP 172.217.169.238，属于AS15169，登记的掩码为23位\r\n * 目标\r\n ** 为验证流量在IGW的缺失，是否与AS域相关，拟扩大拨测范围，请[~liuju] 测试后更新下测试结果表\r\n * 方法\r\n ** 针对待测试IP，执行以下命令，重复10次，记录命令是否执行成功\r\n{code:java}\r\nopenssl s_client  -connect [测试IP]:443 -state {code}\r\n\r\n * \r\n ** 查询会话日志（查询条件 client IP == 196.188.136.150 && server IP == 测试IP），记录对应的IGW和PE日志数量，和流量方向（单向流or双向流）\r\n\r\n \r\n\r\n \r\n||测试IP||拨测时间||拨测次数(成功次数)||PE会话日志情况||IGW会话日志情况||备注||\r\n|172.217.169.238| | |站点：\r\nSledIP：\r\n会话数量：\r\n双向流：\r\nC2S单向流：\r\nS2C单向流：|站点：\r\nSledIP：\r\n会话数量：\r\n双向流：\r\nC2S单向流：\r\nS2C单向流：|YouTube服务端拨测IP，Google AS15169|\r\n|172.217.169.254| | | | |Google IP\r\n与172.217.169.238相同C段IP|\r\n|172.217.14.238| | | | |Google IP\r\n相同ASN,临近C段的Google IP|\r\n|142.251.215.243| | | | |Google IP\r\n相同ASN的Google IP|\r\n| | | | | | |\r\n|104.244.42.6| | | | |Twitter IP\r\nAS13414|\r\n|157.240.3.35| | | | |Facebook IP\r\nAS32934|\r\n| | | | | | |\r\n|175.27.8.138| | | | |Tencent IP\r\nAS45090|\r\n\r\n ","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-06T15:55:43.880+0800","updated":"2022-12-07T13:43:11.440+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/50892","id":"50892","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"body":" \r\n\r\n \r\n\r\n2022-12-06 拨测结果见下表，具体会话日志见附件\r\n\r\n \r\n||测试IP||拨测时间||拨测次数(成功次数)||PE会话日志情况||IGW会话日志情况||IGW会话日志情况||备注||\r\n|172.217.169.254|15:42:56--15:45:08|5|站点：old airport -pe \r\nSledIP：10.231.11.3\r\n会话数量：5\r\n双向流：5\r\nC2S单向流：0\r\nS2C单向流：0|站点：BOLE-IGW\r\nSledIP：10.225.11.3\r\n会话数量：1\r\n双向流：0\r\nC2S单向流：1\r\nS2C单向流：0| |与172.217.169.238相同C段IP|\r\n|172.217.14.238|15:54:21--15:57:13|5|站点：old airport -pe\r\nSledIP：10.231.11.5\r\n会话数量：4\r\n双向流：4\r\nC2S单向流：0\r\nS2C单向流：0|站点：0\r\nSledIP：0\r\n会话数量：0\r\n双向流：0\r\nC2S单向流：0\r\nS2C单向流：0| |相同ASN,临近C段的Google IP|\r\n|142.251.215.243|16:03:22--16:04:29|5|站点：old airport-PE\r\nSledIP：10.231.11.2\r\n会话数量：5\r\n双向流：5\r\nC2S单向流：0\r\nS2C单向流：0|站点：BOLE-IGW\r\nSledIP：10.225.11.2\r\n会话数量：2\r\n双向流：0\r\nC2S单向流：2\r\nS2C单向流：0|站点：MWV-IGW\r\nSledIP：10.227.11.6\r\n会话数量：2\r\n双向流：0\r\nC2S单向流：0\r\nS2C单向流：2|相同ASN的Google IP|\r\n|172.217.169.238|16:14:32--16:16:23|5|站点：old airport-pe\r\nSledIP：10.231.11.3\r\n会话数量：5\r\n双向流：5\r\nC2S单向流：0\r\nS2C单向流：0|站点：MWV-IGW\r\nSledIP：10.227.11.9\r\n会话数量：1\r\n双向流：0\r\nC2S单向流：0\r\nS2C单向流：1| | |\r\n\r\n \r\n \r\n ","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-06T20:53:24.205+0800","updated":"2022-12-06T21:27:08.942+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/50898","id":"50898","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"body":"[~liuju] 看结果，像是PE日志都完整，而且流量100%经过，\r\n\r\n怀疑IGW在丢流量或者日志，下次测试，把拨测次数增加到10次，并且附一下当时IGW有没有功能端bypass或者丢日志的描述。","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-07T09:52:05.457+0800","updated":"2022-12-07T09:56:45.844+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/50903","id":"50903","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"body":"新增Facebook、Twitter 、 Tencent IP各一个","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-07T10:15:07.563+0800","updated":"2022-12-07T13:43:25.296+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/51119","id":"51119","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"body":" \r\n\r\n \r\n\r\n2022-12-08 拨测结果如下：\r\n\r\n具体会话日志及拨测期间板卡监测详情见附件\r\n\r\n查询拨测2022-12-08 09:28:00~~2022-12-08 10:25:15时间段内涉及到的NPB 的ddos bypass情况如下：\r\n\r\n10.231.11.1 （有bypass 但是bypass期间没有拨测）\r\n10.231.11.2(有bypss 但是bypass期间没有拨测)\r\n10.231.11.3 (无bypass)\r\n10.231.11.4 (无bypass)\r\n10.231.11.5 (无bypass)\r\n-----------------\r\n10.225.11.1（有bypass 拨测期间一直都有ddos bypass）\r\n10.225.11.2 (有bypass 拨测期间一直都有ddos bypass）\r\n10.225.11.3 （有bypass 拨测期间一直都有ddos bypass）\r\n10.225.11.4 （有bypass 拨测期间一直都有ddos bypass）\r\n10.225.11.5  （有bypass 拨测期间一直都有ddos bypass）\r\n-----------------\r\n10.227.11.4  (无bypass)\r\n10.227.11.5  (无bypass)\r\n10.227.11.6  (无bypass)\r\n10.227.11.9  (有bypss 但是bypass期间没有拨测)\r\n10.227.11.10 (无bypass)\r\n||测试IP||拨测时间||拨测次数(成功次数)||PE会话日志情况||IGW会话日志情况||IGW会话日志情况||备注||\r\n|172.217.169.238|9:28:01--9:33:52|10|站点：OAP-PE \r\nSledIP：10.225.11.3\r\n会话数量：14\r\n双向流：14\r\nC2S单向流：0\r\nS2C单向流：0|站点：BOLE-IGW\r\nSledIP：10.225.11.3\r\n会话数量：5\r\n双向流：0\r\nC2S单向流：5\r\nS2C单向流：0|站点：MWV-IGW\r\nSledIP：10.227.11.9\r\n会话数量：4\r\n双向流：0\r\nC2S单向流：0\r\nS2C单向流：4|YouTube服务端拨测IP，Google AS15169|\r\n|172.217.169.254|9:37:10--9:39:05|10|站点：OAP-PE \r\nSledIP：10.231.11.3\r\n会话数量：10\r\n双向流：10\r\nC2S单向流：0\r\nS2C单向流：0|站点：BOLE-IGW\r\nSledIP：10.225.11.3 \r\n会话数量：2\r\n双向流：0\r\nC2S单向流：2\r\nS2C单向流：0|站点：\r\nSledIP：\r\n会话数量：\r\n双向流：\r\nC2S单向流：\r\nS2C单向流：|Google IP\r\n与172.217.169.238相同C段IP|\r\n|172.217.14.238|9:41:57--9:47:11|10|站点：OAP-PE\r\nSledIP：10.231.11.3\r\n会话数量：10\r\n双向流：10\r\nC2S单向流：0\r\nS2C单向流：0|站点：BOLE-IGW\r\nSledIP：10.225.11.5\r\n会话数量：6\r\n双向流：0\r\nC2S单向流：6\r\nS2C单向流：0|站点：MWV-IGW\r\nSledIP：10.227.11.5\r\n会话数量：5\r\n双向流：0\r\nC2S单向流：0\r\nS2C单向流：5|Google IP\r\n相同ASN,临近C段的Google IP|\r\n|142.251.215.243|9:49:54--9:53:28|10|站点：OAP-PE\r\nSledIP：10.231.11.2\r\n会话数量：10\r\n双向流：10\r\nC2S单向流：0\r\nS2C单向流：0|站点：BOLE-IGW\r\nSledIP：10.225.11.2\r\n会话数量：3\r\n双向流：0\r\nC2S单向流：3\r\nS2C单向流：0|站点：MWV-IGW\r\nSledIP：10.227.11.6\r\n会话数量：1\r\n双向流：0\r\nC2S单向流：0\r\nS2C单向流：1|Google IP\r\n相同ASN的Google IP|\r\n| | | | | | | |\r\n|104.244.42.6|10:25:50--11:21:03|10|站点：OAP-PE\r\nSledIP：10.231.11.1\r\n会话数量：10\r\n双向流：10\r\nC2S单向流：0\r\nS2C单向流：0|站点：BOLE-IGW\r\nSledIP：10.225.11.1\r\n会话数量：8\r\n双向流：0\r\nC2S单向流：8\r\nS2C单向流：0|站点：MWV-IGW\r\nSledIP：10.227.11.10\r\n会话数量：5\r\n双向流：0\r\nC2S单向流：0\r\nS2C单向流：5|Twitter IP\r\nAS13414|\r\n|157.240.3.35|15:33:30--16:40:24|10|站点：OAP-PE\r\nSledIP：10.231.11.4\r\n会话数量：10\r\n双向流：10\r\nC2S单向流：0\r\nS2C单向流：0|站点：BOLE-IGW\r\nSledIP：10.225.11.4 \r\n会话数量：4\r\n双向流：0\r\nC2S单向流：4\r\nS2C单向流：0|站点：MWV-IGW\r\nSledIP：10.227.11.4\r\n会话数量：5\r\n双向流：0\r\nC2S单向流：0\r\nS2C单向流：5|Facebook IP\r\nAS32934|\r\n|175.27.8.138|10:08:09--10:25:14|10|站点：OAP-PE \r\nSledIP：10.231.11.5\r\n会话数量：10\r\n双向流：10\r\nC2S单向流：0\r\nS2C单向流：0|站点：BOLE-IGW\r\nSledIP：10.225.11.5\r\n会话数量：1\r\n双向流：0\r\nC2S单向流：1\r\nS2C单向流：0|站点：MWV-IGW\r\nSledIP：10.227.11.5\r\n会话数量：9\r\n双向流：0\r\nC2S单向流：0\r\nS2C单向流：9|Tencent IP\r\nAS45090|","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-08T21:03:16.385+0800","updated":"2022-12-08T22:13:45.002+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/51424","id":"51424","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=chengsiyuan","name":"chengsiyuan","key":"JIRAUSER10915","emailAddress":"chengsiyuan@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?avatarId=10346","24x24":"https://jira.geedge.net/secure/useravatar?size=small&avatarId=10346","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&avatarId=10346","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&avatarId=10346"},"displayName":"程思源","active":true,"timeZone":"Asia/Shanghai"},"body":"2022-12-16 拨测结果如下：\r\n\r\n具体会话日志及拨测期间板卡监测详情见附件\r\n\r\n查询拨测2022-12-16 15:11:00~~2022-12-16 16:16:42时间段内涉及到的NPB 的ddos bypass情况如下：\r\n\r\n10.231.11.1 （有bypass）\r\n10.231.11.2（有bypss)\r\n10.231.11.3 （有bypass)\r\n10.231.11.4 （有bypass)\r\n10.231.11.5 （无bypass)\r\n-----------------\r\n10.225.11.1（有bypass 拨测期间一直都有ddos bypass）\r\n10.225.11.2 （有bypass 拨测期间一直都有ddos bypass）\r\n10.225.11.3 （有bypass 拨测期间一直都有ddos bypass）\r\n10.225.11.4 （有bypass 拨测期间一直都有ddos bypass）\r\n10.225.11.5  （有bypass 拨测期间一直都有ddos bypass）\r\n-----------------\r\n10.227.11.4  (无bypass)\r\n10.227.11.5  (无bypass)\r\n10.227.11.6  (有bypass)\r\n10.227.11.9  (有bypss)\r\n10.227.11.10 (有bypass)\r\n\r\n \r\n||测试IP||拨测时间||拨测次数(成功次数)||PE会话日志情况||IGW会话日志情况||IGW会话日志情况||备注||\r\n|172.217.169.238|15:11:48--15:13:13|5|站点：OAP-PE \r\nSledIP：10.231.11.3\r\n会话数量：5\r\n双向流：5\r\nC2S单向流：0\r\nS2C单向流：0|站点：BOLE-IGW\r\nSledIP：10.225.11.3\r\n会话数量：2\r\n双向流：0\r\nC2S单向流：2\r\nS2C单向流：0|站点：MWV-IGW\r\nSledIP：10.227.11.9\r\n会话数量：1\r\n双向流：0\r\nC2S单向流：0\r\nS2C单向流：1|YouTube服务端拨测IP|\r\n|104.244.42.65|15:16:54--15:45:01|5|站点：OAP-PE \r\nSledIP：10.231.11.3\r\n会话数量：5\r\n双向流：5\r\nC2S单向流：0\r\nS2C单向流：0|站点：BOLE-IGW\r\nSledIP：10.225.11.3 \r\n会话数量：1\r\n双向流：0\r\nC2S单向流：1\r\nS2C单向流：0|站点：MWV-IGW\r\nSledIP：10.227.11.10\r\n会话数量：\r\n3\r\n双向流：0\r\nC2S单向流：0\r\nS2C单向流：3|Twitter服务端拨测IP|\r\n|157.240.195.35|15:45:39--16:16:42|5|站点：OAP-PE\r\nSledIP：10.231.11.5\r\n会话数量：40\r\n双向流：40\r\nC2S单向流：0\r\nS2C单向流：0|站点：BOLE-IGW\r\nSledIP：10.225.11.5\r\n会话数量：10\r\n双向流：0\r\nC2S单向流：10\r\nS2C单向流：0|站点：MWV-IGW\r\nSledIP：10.227.11.10\r\n会话数量：34\r\n双向流：0\r\nC2S单向流：0\r\nS2C单向流：34|Facebook服务端拨测IP|\r\n\r\n \r\n ","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=chengsiyuan","name":"chengsiyuan","key":"JIRAUSER10915","emailAddress":"chengsiyuan@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?avatarId=10346","24x24":"https://jira.geedge.net/secure/useravatar?size=small&avatarId=10346","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&avatarId=10346","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&avatarId=10346"},"displayName":"程思源","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-16T22:33:34.590+0800","updated":"2022-12-16T22:48:11.224+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/51443","id":"51443","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=zhengchao","name":"zhengchao","key":"JIRAUSER10000","emailAddress":"zhengchao@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10000&avatarId=10604","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10000&avatarId=10604","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10000&avatarId=10604","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10000&avatarId=10604"},"displayName":"郑超","active":true,"timeZone":"Asia/Qyzylorda"},"body":"[~doufenghu]   本周三前定位IGW Data Transporter丢日志的原因","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=zhengchao","name":"zhengchao","key":"JIRAUSER10000","emailAddress":"zhengchao@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10000&avatarId=10604","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10000&avatarId=10604","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10000&avatarId=10604","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10000&avatarId=10604"},"displayName":"郑超","active":true,"timeZone":"Asia/Qyzylorda"},"created":"2022-12-19T10:34:29.006+0800","updated":"2022-12-19T10:34:29.006+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/51558","id":"51558","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=qidaijie","name":"qidaijie","key":"JIRAUSER10135","emailAddress":"qidaijie@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10135&avatarId=10727","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10135&avatarId=10727","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10135&avatarId=10727","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10135&avatarId=10727"},"displayName":"戚岱杰","active":false,"timeZone":"Asia/Shanghai"},"body":"关于日志在IGW 存在丢失情况，排查如下：\r\n# 通过OLAP数据流监控，日志从Data Transporter汇聚到国家中心未有明显的日志丢失现象。但在MWV-IGW/ BOL-IGW Data Transporter，功能端向Kafka写入有较明显丢失情况，推断因Kafka磁盘IO利用率过高，影响功能端向Kafka写入日志的性能或延迟。\r\n !OLAP数据流监控.png|thumbnail! \r\n# MWV-IGW/ BOL-IGW站点Kafka服务端日志没有ERROR信息，仅有个别WARN信息。\r\n# MWV-IGW IO使用率在65%左右，平均每秒写入140MB；BOL-IGW IO抖动较大峰值在75%左右，平均每秒写入170MB。经过比对监控时间线，IO的抖动情况与功能端记录的丢日志监控基本吻合，下图为截取的12月17号BOL-IGW IO利用率和功能端写入BOL-IGW Kafka监控。\r\n !功能端写入Kafka监控.png|thumbnail!  !BOL-IGW IO使用率.png|thumbnail! \r\n# 在先前的优化处理中，MWV-IGW站点功能端关闭了部分日志字段的发送（OMPUB-684），修改后平均日志大小1.6K；日志写入相对更平稳，多写入了2.5-4K的日志。\r\n !功能端日志情况记录-更新前.png|thumbnail!  !功能端日志情况记录-更新后.png|thumbnail! \r\n\r\n后续排查及处理建议：\r\n1.从功能端出的写入异常监控图，凌晨0-7点未出现丢失日志，可在此阶段通过自动化脚本进行拨测。\r\n2.在Kafka服务端未看到任何错误信息，需要功能端协助查看客户端具体的错误信息。\r\n3.在IGW会话日志适当提高发送会话日志条件(已统计目前会话日志都大于5个包），或关闭DNS会话日志(当前占比40%)，为安全事件日志预留IO。","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=qidaijie","name":"qidaijie","key":"JIRAUSER10135","emailAddress":"qidaijie@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10135&avatarId=10727","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10135&avatarId=10727","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10135&avatarId=10727","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10135&avatarId=10727"},"displayName":"戚岱杰","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-20T23:14:50.586+0800","updated":"2022-12-20T23:14:50.586+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/51730","id":"51730","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"body":"* 现状（2022年12月25日）\r\n ** 流量缺失问题\r\n *** 通过在低谷时段进行拨测（此时TSG健康状态较为良好，不存在Bypass，日志失败比例较低），发现YouTube和Facebook仍然存在流量缺失的情况\r\n **** 按100次拨测，流量缺失率在5%-10%之间\r\n **  TSG自身问题\r\n *** 日志失败比例高 \r\n **** 经在京版模拟测试，相同硬件配置情况下的kafka broker，极限处理日志量为11w-12w tps（前提为对kafka broker参数进行优化，减少写磁盘和增加Batch Queue Size）\r\n **** 目前Bole和MWV功能端预计发送的总量均超过14w tps（非峰值时段），超过现场极限处理能力\r\n **** 现场情况 \r\n ***** Bole和MWV日志发送失败现象严重，峰值日志（安全+会话）失败比例超过60%\r\n ***** Bole和和MWV功能端由于Self Protection触发的会话bypass比例逐步上升\r\n *** 流量Bypass比例高\r\n **** Bole和MWV流量再一次呈上涨趋势，抽样一台NPB观察，每秒新建会话数较两个月前，上涨 20%-30%\r\n ***** Bole峰值流量下（晚上21:30），TCP新建每秒已经超过6w CPS，此时功能端bypass比例接近50%\r\n ***** MWV峰值Bypass会话比例接近18%\r\n * 问题\r\n ** {*}E21 IGW侧确实存在流量缺失现象，估测比例在5%-10%{*}，仅有缺失C2S侧流量时，将造成Deny失败\r\n ** 由于TSG自身问题，业主工作时段拨测，会因为功能端处理能力过载造成Bypass的原因，{*}放大Deny失败的结果，比例高于实际的5%-10%{*}\r\n ** 加上日志发送失败的现象，如果仅以TSG作为排查工具链，将{*}给用户以流量缺失较实际更为严重的结论{*}\r\n * 解决方案\r\n ** 日志失败\r\n *** 功能端 关闭Bole和MWV的DNS会话日志（此前仅调整MWV单条日志的长度，降低了发送带宽，但是没有调整日志量），缓解kafka broker压力（调整后，预计日志发送量在11w tps）\r\n **** 具体操作方法已提交刘菊，视现场情况酌情进行调整\r\n *** OLAP 调整两个站点kafka broker参数，提升接收性能（如果不调整参数，降低后的11w tps仍然过载）\r\n ** 功能端Bypass造成Deny效果不佳\r\n *** 根据前述分析，目前性能瓶颈之一在于策略命中结果较多，造成扫描消耗CPU较大，但是指导用户对冗余策略条件进行合并，可操作性不大\r\n *** 升级sapp，Bypass时，跳过常用端口（如443、80），从而一定程度上，优先保证Deny效果\r\n **** 目前HTTP和SSL流量占比约50%，理论上仅对非HTTP和SSL会话进行bypass，仍然能够起到Self Protection的效果，具体效果需要更新后观察\r\n **** 对应的sapp程序已发送给刘菊（MD5sum 5b43d015df8a8d77fee10e6a994ddc5a），视现场情况酌情进行调整","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-25T17:45:42.400+0800","updated":"2022-12-26T10:43:06.347+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/51749","id":"51749","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"body":"2022-12-26 10:33\r\n\r\nBole-IGW NPB04，单核使用已经超过85%，存在Bypass现象\r\n\r\n!image-2022-12-26-15-34-15-331.png|width=590,height=337!\r\n\r\n \r\n\r\nperf top -C 4\r\n\r\n!image-2022-12-26-15-35-07-022.png|width=809,height=486!\r\n\r\n ","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-26T15:35:18.398+0800","updated":"2022-12-26T15:35:18.398+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/51750","id":"51750","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"body":"Bole-IGW 2022-12-25 11:05至2022-12-26 11:05 24小时的Live Traffic Chart\r\n\r\n \r\n\r\nSSL占比（HTTPS+SSL）约49%\r\n\r\nHTTP占比约5.6%\r\n\r\n!image-2022-12-26-15-38-44-332.png|width=580,height=489!","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-26T15:40:05.504+0800","updated":"2022-12-26T15:40:05.504+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/51752","id":"51752","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"body":"Bole-IGW NPB04 扫描统计情况\r\n\r\n  !image-2022-12-26-15-55-35-726.png|width=659,height=457!\r\n\r\n流量统计情况，原始流量7.8Gbps，每秒新建TCP 5.7w，UDP 2.9w，总计新建8.6w，平均每1Gbps流量每秒新建1.1w\r\n\r\n!image-2022-12-26-15-57-12-419.png|width=668,height=294!","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-12-26T15:58:51.441+0800","updated":"2022-12-26T15:58:51.441+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/29848/comment/51763","id":"51763","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"body":" 2022-12-26 已根据研发提供的sapp（MD5sum 5b43d015df8a8d77fee10e6a994ddc5a）对BOLE-IGW 10.225.11.4做以下更新：\r\n1、sapp进行升级；\r\n\r\n2、关闭DNS transaction log；\r\n编辑plug/business/tsg_conn_sketch/tsg_conn_sketch.inf，把下面这三行前面加上#注释了\r\n[DNS]\r\nFUNC_FLAG=ALL\r\nFUNC_NAME=tsg_record_dns_entry\r\n\r\n3、sapp添加了5个核。\r\n目前/opt/tsg/sapp/etc/sapp.toml配置如下：\r\nworker_threads=48\r\nbind_mask=[5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52]\r\n/opt/tsg/tfe/conf/tfe/tfe.conf配置如下：\r\nnr_worker_threads=1","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"created":"2022-12-26T21:08:55.512+0800","updated":"2022-12-26T21:10:17.794+0800"}],"maxResults":17,"total":17,"startAt":0},"votes":{"self":"https://jira.geedge.net/rest/api/2/issue/OMPUB-641/votes","votes":0,"hasVoted":false},"worklog":{"startAt":0,"maxResults":20,"total":0,"worklogs":[]},"assignee":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"updated":"2024-08-29T15:38:05.474+0800","status":{"self":"https://jira.geedge.net/rest/api/2/status/10103","description":"这一问题被认为是完成, 这项决议是正确的。问题已关闭可以重新开放。","iconUrl":"https://jira.geedge.net/images/icons/statuses/generic.png","name":"已关闭","id":"10103","statusCategory":{"self":"https://jira.geedge.net/rest/api/2/statuscategory/3","id":3,"key":"done","colorName":"green","name":"完成"}}}}