We'll definitely be using imtcp in the short term, though we are considering imrhelp in the long term.
-- James -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Rainer Gerhards Sent: Tuesday, May 14, 2013 8:45 AM To: rsyslog-users Subject: Re: [rsyslog] Does rsyslog use ephemeral ports? If you don't need TLS, I recommend imptcp as an input. It handles even larger loads and uses less CPU (but is linux specific). Rainer On Tue, May 14, 2013 at 3:38 PM, Boylan, James <[email protected]>wrote: > I'm investigating issues with the current syslog server that is > running in our environment. The information I had found was they were > running into issues with the instances reaching a connection limit on > the port that resulted in them running multiple instances. > > I'm beginning to suspect it had more to do with how the connections > were being managed than a set limit of how many connections were being > able to be supported by the specific fixed port. > > Thanks David. Based on the performance I've been seeing with Rsyslog, > the fact that is also uses a fixed port supports my theory. > > -- James > > -----Original Message----- > From: [email protected] [mailto: > [email protected]] On Behalf Of David Lang > Sent: Tuesday, May 14, 2013 7:31 AM > To: rsyslog-users > Subject: Re: [rsyslog] Does rsyslog use ephemeral ports? > > On Tue, 14 May 2013, Boylan, James wrote: > > > Greetings! > > > > I'm trying to get a better idea on the number of connections a > > single > Rsyslog server can support. I currently have it running in our > pre-production environment as a smoke test for performance, but I > want to check on this prior to moving it into our production environment. > > > > Does it use ephemeral ports or is it using a static port with a > > finite > amount of load it can handle? > > It uses ephemeral ports as the source for outbound connections, the > way just about everything does. > > It uses fixed ports for inbound connections, the way just about > everything does. > > people have reported rsyslog handling 1M logs/sec, and this is not > limited by the network ports. What are you referring to when you say > "a static port with a finite amount of load it can handle"? > > David Lang > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: > This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites > beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
