1M *logs* per second, not mb ;)

On Tue, May 14, 2013 at 3:53 PM, Boylan, James <[email protected]>wrote:

> Oh! I missed the P.
>
> I'll have to look into that. Our log servers are handling considerably
> more than 1mb/sec so I'm going to have to figure out a means of testing
> this overall performance. David was saying that he had heard of people
> sending 1mb/sec using imtcp. Do we have any estimates on what imptcp could
> handle?
>
> -- James
>
>
> -----Original Message-----
> From: [email protected] [mailto:
> [email protected]] On Behalf Of Rainer Gerhards
> Sent: Tuesday, May 14, 2013 8:51 AM
> To: rsyslog-users
> Subject: Re: [rsyslog] Does rsyslog use ephemeral ports?
>
> im*p*tcp I said, not imtcp ;)
>
>
> On Tue, May 14, 2013 at 3:47 PM, Boylan, James <[email protected]
> >wrote:
>
> > We'll definitely be using imtcp in the short term, though we are
> > considering imrhelp in the long term.
> >
> > -- James
> >
> > -----Original Message-----
> > From: [email protected] [mailto:
> > [email protected]] On Behalf Of Rainer Gerhards
> > Sent: Tuesday, May 14, 2013 8:45 AM
> > To: rsyslog-users
> > Subject: Re: [rsyslog] Does rsyslog use ephemeral ports?
> >
> > If you don't need TLS, I recommend imptcp as an input. It handles even
> > larger loads and uses less CPU (but is linux specific).
> >
> > Rainer
> >
> >
> > On Tue, May 14, 2013 at 3:38 PM, Boylan, James
> > <[email protected]
> > >wrote:
> >
> > > I'm investigating issues with the current syslog server that is
> > > running in our environment. The information I had found was they
> > > were running into issues with the instances reaching a connection
> > > limit on the port that resulted in them running multiple instances.
> > >
> > > I'm beginning to suspect it had more to do with how the connections
> > > were being managed than a set limit of how many connections were
> > > being able to be supported by the specific fixed port.
> > >
> > > Thanks David. Based on the performance I've been seeing with
> > > Rsyslog, the fact that is also uses a fixed port supports my theory.
> > >
> > > -- James
> > >
> > > -----Original Message-----
> > > From: [email protected] [mailto:
> > > [email protected]] On Behalf Of David Lang
> > > Sent: Tuesday, May 14, 2013 7:31 AM
> > > To: rsyslog-users
> > > Subject: Re: [rsyslog] Does rsyslog use ephemeral ports?
> > >
> > > On Tue, 14 May 2013, Boylan, James wrote:
> > >
> > > > Greetings!
> > > >
> > > > I'm trying to get a better idea on the number of connections a
> > > > single
> > > Rsyslog server can support. I currently have it running in our
> > > pre-production environment as a smoke test for performance,  but I
> > > want to check on this prior to moving it into our production
> environment.
> > > >
> > > > Does it use ephemeral ports or is it using a static port with a
> > > > finite
> > > amount of load it can handle?
> > >
> > > It uses ephemeral ports as the source for outbound connections, the
> > > way just about everything does.
> > >
> > > It uses fixed ports for inbound connections, the way just about
> > > everything does.
> > >
> > > people have reported rsyslog handling 1M logs/sec, and this is not
> > > limited by the network ports. What are you referring to when you say
> > > "a static port with a finite amount of load it can handle"?
> > >
> > > David Lang
> > > _______________________________________________
> > > rsyslog mailing list
> > > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > > http://www.rsyslog.com/professional-services/
> > > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE
> WELL:
> > > This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
> > > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> > > DON'T LIKE THAT.
> > > _______________________________________________
> > > rsyslog mailing list
> > > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > > http://www.rsyslog.com/professional-services/
> > > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE
> > > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if
> > > you DON'T LIKE THAT.
> > >
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL:
> > This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites
> > beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
> > LIKE THAT.
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE
> > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
> > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> > DON'T LIKE THAT.
> >
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL:
> This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites
> beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
> THAT.
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to