Ok, I see. You want to always use the same source port. This is indeed something that the client library (in this case logback-gelf) has to implement and nothing that Graylog could change.
Cheers, Jochen On Wednesday, 29 April 2015 09:32:25 UTC+2, Dan C. wrote: > > CheckPoint has a feature called UDP virtual session. I think he is > referring to something similar. CP is keeping UDP connection association > for a 40s by default, a lot of UDP logs would fill this up quickly. > Hangouts is using on the client same source UDP port for all traffic, > there is something similar for sending gelf messages? > Linux has a new feature SO_REUSEPORT socket option, but this implies > modifications in logback-gelf, right? > https://lwn.net/Articles/542629/ > > BR > > On Tuesday, April 28, 2015 at 11:48:19 PM UTC+3, Kay Röpke wrote: >> >> UDP has no connection so there's no pool to fill up and no time out >> values. >> >> So, no, there's no library that can do this, because there's no technical >> way. Are you sure the sender is not using TCP? >> On Apr 28, 2015 10:38 PM, <[email protected]> wrote: >> >>> Well , yes . >>> UDP does not have 'state' like tcp does , but the network administrator >>> says the hardware appliance tracks based on source / destination per >>> connection and theres a global timeout for this connection ( 60 seconds . >>> Since there are a lot of messages and each new message opens a new >>> connection the connection pool is filling up fast . >>> >>> Hence my question , is there any way to re-use one connection for all >>> messages ? >>> Any library out there that supports this ? >>> >>> Thanks alot , >>> >>> >>> marți, 28 aprilie 2015, 16:27:42 UTC+3, Jochen Schalanda a scris: >>>> >>>> Hi, >>>> >>>> I'm not sure what you're referring to. UDP is, by definition, a >>>> connection-less protocol so there's no connection which your firewalls or >>>> packet filters could track in the first place. Could you please elaborate >>>> on the problem? >>>> >>>> Cheers, >>>> Jochen >>>> >>>> On Tuesday, 28 April 2015 14:31:08 UTC+2, [email protected] wrote: >>>>> >>>>> Hello . >>>>> Has anyone ran into this issue ? >>>>> >>>>> I am sending logs using logback-gelf from different networks and even >>>>> though the traffic is UDP my firewalls connection pool is filling up >>>>> because each new message means a new connection and it has its own >>>>> timeout >>>>> settings . >>>>> >>>>> Is there anyway to re-use the same connection to send all messages ? >>>>> >>>>> Thanks , >>>>> >>>>> >>>>> -- >>> You received this message because you are subscribed to the Google >>> Groups "graylog2" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> For more options, visit https://groups.google.com/d/optout. >>> >> -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
