Commits on Aug 27, 2024

1. Upgrade Suricata to 7.0 …

   Suricata 6.0 is now end-of-life so we upgrade to 7.0:
   https://forum.suricata.io/t/suricata-6-is-now-end-of-life-eol/4790
   
   Suricata 7.0 includes support for some new protocols, including HTTP/2
   and QUIC, which means we could start supporting these protocols in
   L7NetworkPolicies.
   
   Two changes were required in Antrea for this upgrade:
   
   * The /etc/suricata/rules no longer seems to be created by default in
     the antrea-agent container image, when installing the Suricata
     package. So we create it if needed when starting Suricata from the
     Antrea Agent.
   * The alert events logged by Suricata for our default drop rules no
     longer include app-layer metadata. This should be expected for an ip
     rule, and the earlier behavior was probably invalid in a way. See also
     https://redmine.openinfosecfoundation.org/issues/7199. As a result of
     this behavioral change, e2e tests as well as L7NP documentation had to
     be updated.
   
   Signed-off-by: Antonin Bas <antonin.bas@broadcom.com>

   

   antoninbas committed Aug 27, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for d42db80
   • Browse repository at this point

   Copy the full SHA

   d42db80 View commit details

   Browse the repository at this point in the history

2. Address review comments …

   Signed-off-by: Antonin Bas <antonin.bas@broadcom.com>

   

   antoninbas committed Aug 27, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 444b560
   • Browse repository at this point

   Copy the full SHA

   444b560 View commit details

   Browse the repository at this point in the history