fix(native): accept physical TCP header options

This commit is contained in:
冰朔 2026-08-07 06:06:18 +08:00
commit f0b069f850
4 changed files with 124 additions and 19 deletions

View file

@ -0,0 +1,55 @@
schema: guanghu.jd-native-anchor-physical-gate-receipt/v1
receipt_id: GH-OS-JD-FD-PRIMARY-NATIVE-ANCHOR-PHYSICAL-GATE-20260807-001
status: FAIL_0_PHYSICAL_TCP_HEADER_OPTIONS
observed_at: 2026-08-07T05:49:24+08:00
node_id: JD-FD-PRIMARY
accepted_repository_commit: 27c6ba2c4d9a9c2372d977b8adfdf802af7656e5
candidate:
lba_start: 105
sector_count: 29
sha256: 2911b5f6a067efb7b5b7ec330833cb9f8a6b965b5a05802770dd27032678f32f
cloud_firewall:
source: 43.153.193.169/32
destination: 111.228.0.139:3922
linux_listener_preflight: PASS_100
physical_cycle:
native_boot_executed: true
native_heartbeat_sequences_1_to_6: PASS_100
native_ssh_offline: PASS_100
native_anchor_http: FAIL_0_TCP_CONNECT_TIMEOUT
protected_recovery: PASS_100
linux_boot_id_before: e95b13e0-bf93-498d-a108-6ede5e947015
linux_boot_id_after: 8b39ec63-6776-4e65-94b7-099a6a6a5762
linux_default_preserved: gnulinux-simple-9e4550a0-452b-4f28-b5a5-d5364aa450f6
code_channel_http_after_recovery: 200
public_anchor_http_after_recovery: 200
physical_diagnosis:
captured_source: 43.153.193.169
captured_destination: 172.16.0.6:3922
ipv4_header_bytes: 20
tcp_header_bytes: 40
tcp_options: MSS_SACK_TIMESTAMP_WINDOW_SCALE
candidate_expected_tcp_header_bytes: 20
native_syn_ack_proof_byte: 0
native_http_response_proof_byte: 0
root_cause: FIXED_TCP_HEADER_OFFSET_REJECTED_REAL_SYN_OPTIONS
correction:
parser_accepts_ipv4_ihl: true
parser_accepts_tcp_data_offset_greater_than_5: true
request_payload_offset_is_dynamic: true
acknowledgement_payload_length_is_dynamic: true
qemu_syn_tcp_header_bytes: 40
qemu_get_tcp_header_bytes: 32
option_aware_qemu_gate: PASS_100
gates:
native_anchor_http_qemu_capability: 100
native_anchor_http_physical_capability: 0
public_front_door_native_anchor_equivalence: 0
code_channel_service_equivalence: 0
production_native_cutover: 0
server_receipt:
path: /guanghu/recovery/JD-FD-PRIMARY-native-anchor-physical-27c6ba2c4d9a9c2372d977b8adfdf802af7656e5/PHYSICAL-GATE-RECEIPT.hldp
sha256: e5f8071929a7a05fadc5b0283cef97962d53d57dd8d94bbe524e8148706af920
decision:
production_cutover: FORBIDDEN
next_action: BUILD_WITH_PRODUCTION_RECOVERY_CAPABILITY_THEN_REPEAT_ONE_TIME_PHYSICAL_HTTP_GATE