{"expand":"renderedFields,names,schema,operations,editmeta,changelog,versionedRepresentations","id":"34453","self":"https://jira.geedge.net/rest/api/2/issue/34453","key":"OMPUB-918","fields":{"issuetype":{"self":"https://jira.geedge.net/rest/api/2/issuetype/10004","id":"10004","description":"","iconUrl":"https://jira.geedge.net/secure/viewavatar?size=xsmall&avatarId=10303&avatarType=issuetype","name":"故障","subtask":false,"avatarId":10303},"components":[],"timespent":null,"timeoriginalestimate":null,"description":"client ip :196.188.157.5\r\n\r\n测试出的穿透的节点IP如下：\r\n\r\n79.142.71.59\r\n\r\n192.46.233.233\r\n\r\n82.196.13.218\r\n\r\n数据包及其他信息已提交给姜谊","project":{"self":"https://jira.geedge.net/rest/api/2/project/10206","id":"10206","key":"OMPUB","name":"Operation and Maintenance","projectTypeKey":"business","avatarUrls":{"48x48":"https://jira.geedge.net/secure/projectavatar?pid=10206&avatarId=10715","24x24":"https://jira.geedge.net/secure/projectavatar?size=small&pid=10206&avatarId=10715","16x16":"https://jira.geedge.net/secure/projectavatar?size=xsmall&pid=10206&avatarId=10715","32x32":"https://jira.geedge.net/secure/projectavatar?size=medium&pid=10206&avatarId=10715"},"projectCategory":{"self":"https://jira.geedge.net/rest/api/2/projectCategory/10002","id":"10002","description":"系统运维","name":"MaintenanceDev"}},"fixVersions":[],"aggregatetimespent":null,"resolution":{"self":"https://jira.geedge.net/rest/api/2/resolution/10100","id":"10100","description":"Developer and tester should keep tracking on this issue, and issue will keep open.","name":"Need tracking"},"timetracking":{},"customfield_10401":null,"customfield_10104":null,"customfield_10402":null,"customfield_10105":"0|i04010:","customfield_10403":null,"customfield_10404":null,"attachment":[{"self":"https://jira.geedge.net/rest/api/2/attachment/37966","id":"37966","filename":"192.46.233.233.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"created":"2023-05-15T11:20:33.100+0800","size":49006,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/37966/192.46.233.233.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/37966/_thumb_37966.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/37965","id":"37965","filename":"79.142.71.59.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"created":"2023-05-15T11:16:29.593+0800","size":100451,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/37965/79.142.71.59.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/37965/_thumb_37965.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/37801","id":"37801","filename":"微信图片_20230511131735.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"created":"2023-05-11T18:17:57.008+0800","size":92620,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/37801/%E5%BE%AE%E4%BF%A1%E5%9B%BE%E7%89%87_20230511131735.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/37801/_thumb_37801.png"}],"aggregatetimeestimate":null,"resolutiondate":"2023-06-25T11:17:40.482+0800","workratio":-1,"summary":"【E21现场】客户反馈测试psiphon3时部分节点穿透","lastViewed":null,"watches":{"self":"https://jira.geedge.net/rest/api/2/issue/OMPUB-918/watchers","watchCount":3,"isWatching":false},"creator":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"subtasks":[],"created":"2023-05-11T18:18:54.239+0800","reporter":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuju","name":"liuju","key":"JIRAUSER10222","emailAddress":"liuju@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/de39e01c583621fe2030d723f55e0e79?d=mm&s=32"},"displayName":"刘菊","active":false,"timeZone":"Asia/Shanghai"},"customfield_10000":"{summaryBean=com.atlassian.jira.plugin.devstatus.rest.SummaryBean@215eb687[summary={pullrequest=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@2faf9c8a[overall=PullRequestOverallBean{stateCount=0, state='OPEN', details=PullRequestOverallDetails{openCount=0, mergedCount=0, declinedCount=0}},byInstanceType={}], build=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@3851fb15[overall=com.atlassian.jira.plugin.devstatus.summary.beans.BuildOverallBean@6b496b59[failedBuildCount=0,successfulBuildCount=0,unknownBuildCount=0,count=0,lastUpdated=,lastUpdatedTimestamp=],byInstanceType={}], review=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@509d0ed5[overall=com.atlassian.jira.plugin.devstatus.summary.beans.ReviewsOverallBean@4076f54d[stateCount=0,state=,dueDate=,overDue=false,count=0,lastUpdated=,lastUpdatedTimestamp=],byInstanceType={}], deployment-environment=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@77c83705[overall=com.atlassian.jira.plugin.devstatus.summary.beans.DeploymentOverallBean@577b9906[topEnvironments=[],showProjects=false,successfulCount=0,count=0,lastUpdated=,lastUpdatedTimestamp=],byInstanceType={}], repository=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@6fa8de9a[overall=com.atlassian.jira.plugin.devstatus.summary.beans.CommitOverallBean@180392bf[count=0,lastUpdated=,lastUpdatedTimestamp=],byInstanceType={}], branch=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@2ec5fea5[overall=com.atlassian.jira.plugin.devstatus.summary.beans.BranchOverallBean@25fdf1d2[count=0,lastUpdated=,lastUpdatedTimestamp=],byInstanceType={}]},errors=[],configErrors=[]], devSummaryJson={\"cachedValue\":{\"errors\":[],\"configErrors\":[],\"summary\":{\"pullrequest\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"stateCount\":0,\"state\":\"OPEN\",\"details\":{\"openCount\":0,\"mergedCount\":0,\"declinedCount\":0,\"total\":0},\"open\":true},\"byInstanceType\":{}},\"build\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"failedBuildCount\":0,\"successfulBuildCount\":0,\"unknownBuildCount\":0},\"byInstanceType\":{}},\"review\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"stateCount\":0,\"state\":null,\"dueDate\":null,\"overDue\":false,\"completed\":false},\"byInstanceType\":{}},\"deployment-environment\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"topEnvironments\":[],\"showProjects\":false,\"successfulCount\":0},\"byInstanceType\":{}},\"repository\":{\"overall\":{\"count\":0,\"lastUpdated\":null},\"byInstanceType\":{}},\"branch\":{\"overall\":{\"count\":0,\"lastUpdated\":null},\"byInstanceType\":{}}}},\"isStale\":false}}","aggregateprogress":{"progress":0,"total":0},"customfield_10100":null,"priority":{"self":"https://jira.geedge.net/rest/api/2/priority/3","iconUrl":"https://jira.geedge.net/images/icons/priorities/medium.svg","name":"Medium","id":"3"},"customfield_10200":null,"customfield_10400":null,"labels":["E21现场"],"environment":null,"timeestimate":null,"aggregatetimeoriginalestimate":null,"versions":[],"duedate":null,"progress":{"progress":0,"total":0},"issuelinks":[],"comment":{"comments":[{"self":"https://jira.geedge.net/rest/api/2/issue/34453/comment/58229","id":"58229","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"body":"79.142.71.59：查询会话日志，穿透会话为s2c单向流，策略仅对c2s侧生效 。\r\n\r\n192.46.233.233：未查询到对应时段日志。\r\n\r\n82.196.13.218：能够命中程序自动学习IP object，查询相关会话日志，部分会话未成功标注为Psiphon-Server-APP。82.223.55.87上出现类似情况  OMPUB-923","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"created":"2023-05-15T11:23:21.297+0800","updated":"2023-05-15T11:27:58.436+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/34453/comment/58318","id":"58318","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"body":"上述节点均为业主办公室常规测试环境中出现穿透的节点","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"created":"2023-05-15T16:24:07.264+0800","updated":"2023-05-15T16:24:07.264+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/34453/comment/59050","id":"59050","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"body":"当前配置的psiphon App 特征：\r\n * IP == slok_ip && Not ssl.SNI==xxx.com\r\n\r\n功能端执行过程\r\n * stage 1（packet stage）：扫描IP\r\n * stage 2（session stage）：扫描， protocol， SNI ...\r\n * stage N （第8个包）：显式执行Not，识别结束\r\n\r\n现象分析\r\n * 对于issue中描述的会话，承载的协议是SSH，扫描的条件包括IP、SSH\r\n * 但是会话生命周期内传输的包数量<8，因此不会执行到Not条件，因此，也就不会命中前述的App特征\r\n * 从结果看，对于这种传输包数小于8的会话，原则上不会影响psiphon的效果\r\n * 如果传输的SSH会话包数超过8，则在第8个包时，显式执行Not，满足特征\r\n\r\n \r\n\r\n扩展\r\n * 对于前述的特征，实际的语义应该为以下两条特征\r\n ** IP==slok_ip && Not SNI==xxx.com && Protocol in (HTTP, SSL)\r\n\r\nIP==slok_ip && Not Protocol in (HTTP，SSL )\r\n\r\n * 受限于执行Not的时机（一个会话只能执行一次Not），上述特征的第二条，需要更新为：\r\n ** IP==slok_ip && Protocol in (DNS、BGP、SSH。。。)\r\n * 如果能够列举psiphon3可能的承载协议，上述更新后的特征，更符合实际的意图\r\n\r\n \r\n\r\n结论\r\n * 当前特征受描述能力限制，对于小于8个包的会话，无法有效执行带Not条件的psiphon3特征\r\n * 从实际应用角度，小于8个包的会话，是否被识别为psiphon3，不影响管控效果\r\n\r\n       \r\n\r\n ","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2023-05-24T17:27:27.673+0800","updated":"2023-05-24T17:27:27.673+0800"}],"maxResults":3,"total":3,"startAt":0},"votes":{"self":"https://jira.geedge.net/rest/api/2/issue/OMPUB-918/votes","votes":0,"hasVoted":false},"worklog":{"startAt":0,"maxResults":20,"total":0,"worklogs":[]},"assignee":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuyang","name":"liuyang","key":"JIRAUSER10102","emailAddress":"liuyang@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?avatarId=10341","24x24":"https://jira.geedge.net/secure/useravatar?size=small&avatarId=10341","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&avatarId=10341","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&avatarId=10341"},"displayName":"刘洋","active":true,"timeZone":"Asia/Shanghai"},"updated":"2024-01-12T18:11:53.786+0800","status":{"self":"https://jira.geedge.net/rest/api/2/status/10103","description":"这一问题被认为是完成, 这项决议是正确的。问题已关闭可以重新开放。","iconUrl":"https://jira.geedge.net/images/icons/statuses/generic.png","name":"已关闭","id":"10103","statusCategory":{"self":"https://jira.geedge.net/rest/api/2/statuscategory/3","id":3,"key":"done","colorName":"green","name":"完成"}}}}