> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Gaurav Kumar > Sent: Thursday, January 12, 2012 9:49 AM > To: rsyslog-users > Subject: Re: [rsyslog] udp forwarding performance > > Thanks Rainer! > I am using Ubuntu 10.04 LTS and 4.2.0 is the version which gets install > by > apt-get. I will try to install newer version. > > BTW, what should be the expected performance (messages/sec) for sending > and > receiving messages over UDP?
Wiht v6 > 500k/second, but you possibly need to enable realtime priority in order for the OS to know that rsyslog must be sufficiently often activated. This number assumes lightweight processing (no database inserts or such). Try first without realtime. Rainer > > Thanks again, > Gaurav > > On Thu, Jan 12, 2012 at 3:45 AM, Rainer Gerhards > <[email protected]>wrote: > > > I guess your problem is rooted in name resolution. A full blown DNS > cache > > has > > only recently been introduced in v6. Previous version had limited > caching, > > which usually works well, but not in all cases. Also 4.2.0 is *way > > outdated*, > > so probably the issue (if it is one rooted in code) may be solved by > > running > > the current 4.8.6 version. > > > > HTH > > Rainer > > > > > -----Original Message----- > > > From: [email protected] [mailto:rsyslog- > > > [email protected]] On Behalf Of Gaurav Kumar > > > Sent: Thursday, January 12, 2012 9:40 AM > > > To: [email protected] > > > Subject: [rsyslog] udp forwarding performance > > > > > > Hi all, > > > I am wondering if anybody has performance testing numbers for > rsyslog > > > forwarding (using UDP) ? > > > > > > Currently, I am forwarding all of my rsyslog messages from one host > to > > > another host (also running rsyslog). Both hosts are running version > > > 4.2.0. > > > I am seeing throughput of about 2k-3k messages/second on receiver. > If I > > > try > > > to send more messages from sender, I find that receiver's rsyslog > is > > > dropping logs. Both hosts share same virtual network with network > > > latency > > > of just about 1-2 ms. Both hosts have 2 virtual CPUs and 2 GB RAM. > > > > > > As per http://blog.gerhards.net/2008/10/rsyslog-performance.html it > > > seems > > > that rsyslog is capable of performing processing 100k > messages/second. > > > > > > Can someone please clarify that this number (100k) is for local > syslog > > > messages only? (as opposed to receiving 100k messages/second over > > > network) > > > > > > My intent is to find out what is the expected number of messages > that > > > rsyslog can forward to other rsyslog host? (assuming average host > spec- > > > dual core, 2 GB RAM) > > > > > > Cheers, > > > Gaurav > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/
