Have your turned off name resolution for a test? Why not use 5.8.6? rainer
> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Gaurav Kumar > Sent: Thursday, January 12, 2012 10:33 AM > To: rsyslog-users > Subject: Re: [rsyslog] udp forwarding performance > > Hi Rainer, > I am now running version 5.8.1. I was running into rate-limiting issues > so > I've set following- > $IMUXSockRateLimitInterval 0 > $SystemLogRateLimitInterval 0 > > After this, the sender host is sending only about 300-400 messages, > then > dropping a lot of them (literally thousands). I ran Wireshark to > confirm > whether if it is receiver's issue or sender's and found that indeed > sender > is not sending messages. > > Can you please suggest which directives I should set in config to > troubleshoot this? > > Thanks, > Gaurav > > > > On Thu, Jan 12, 2012 at 3:52 AM, Rainer Gerhards > <[email protected]>wrote: > > > > -----Original Message----- > > > From: [email protected] [mailto:rsyslog- > > > [email protected]] On Behalf Of Gaurav Kumar > > > Sent: Thursday, January 12, 2012 9:49 AM > > > To: rsyslog-users > > > Subject: Re: [rsyslog] udp forwarding performance > > > > > > Thanks Rainer! > > > I am using Ubuntu 10.04 LTS and 4.2.0 is the version which gets > install > > > by > > > apt-get. I will try to install newer version. > > > > > > BTW, what should be the expected performance (messages/sec) for > sending > > > and > > > receiving messages over UDP? > > > > Wiht v6 > 500k/second, but you possibly need to enable realtime > priority in > > order for the OS to know that rsyslog must be sufficiently often > activated. > > This number assumes lightweight processing (no database inserts or > such). > > > > Try first without realtime. > > > > Rainer > > > > > > Thanks again, > > > Gaurav > > > > > > On Thu, Jan 12, 2012 at 3:45 AM, Rainer Gerhards > > > <[email protected]>wrote: > > > > > > > I guess your problem is rooted in name resolution. A full blown > DNS > > > cache > > > > has > > > > only recently been introduced in v6. Previous version had limited > > > caching, > > > > which usually works well, but not in all cases. Also 4.2.0 is > *way > > > > outdated*, > > > > so probably the issue (if it is one rooted in code) may be solved > by > > > > running > > > > the current 4.8.6 version. > > > > > > > > HTH > > > > Rainer > > > > > > > > > -----Original Message----- > > > > > From: [email protected] [mailto:rsyslog- > > > > > [email protected]] On Behalf Of Gaurav Kumar > > > > > Sent: Thursday, January 12, 2012 9:40 AM > > > > > To: [email protected] > > > > > Subject: [rsyslog] udp forwarding performance > > > > > > > > > > Hi all, > > > > > I am wondering if anybody has performance testing numbers for > > > rsyslog > > > > > forwarding (using UDP) ? > > > > > > > > > > Currently, I am forwarding all of my rsyslog messages from one > host > > > to > > > > > another host (also running rsyslog). Both hosts are running > version > > > > > 4.2.0. > > > > > I am seeing throughput of about 2k-3k messages/second on > receiver. > > > If I > > > > > try > > > > > to send more messages from sender, I find that receiver's > rsyslog > > > is > > > > > dropping logs. Both hosts share same virtual network with > network > > > > > latency > > > > > of just about 1-2 ms. Both hosts have 2 virtual CPUs and 2 GB > RAM. > > > > > > > > > > As per http://blog.gerhards.net/2008/10/rsyslog- > performance.html it > > > > > seems > > > > > that rsyslog is capable of performing processing 100k > > > messages/second. > > > > > > > > > > Can someone please clarify that this number (100k) is for local > > > syslog > > > > > messages only? (as opposed to receiving 100k messages/second > over > > > > > network) > > > > > > > > > > My intent is to find out what is the expected number of > messages > > > that > > > > > rsyslog can forward to other rsyslog host? (assuming average > host > > > spec- > > > > > dual core, 2 GB RAM) > > > > > > > > > > Cheers, > > > > > Gaurav > > > > > _______________________________________________ > > > > > rsyslog mailing list > > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > > http://www.rsyslog.com/professional-services/ > > > > _______________________________________________ > > > > rsyslog mailing list > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > http://www.rsyslog.com/professional-services/ > > > > > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/
