Thanks, I found out other issues as well and this did not work as I expected.
I will check other options. iptables might do the trick for me as well. Your input was valuable =) Regards Johan 2015-04-03 14:04 GMT+02:00 <[email protected]>: > A couple things here. If you're sending upstream to any other load balancer > after this, you'll want to probably set your rebind interval, otherwise you > definitely won't get the balancing you're expecting. Things like old ASAs > use a static 514 source port, which makes load balancing this "stream" with > your typical LBs quite difficult. Iptables allows us to LB per packet. > > We have a similar setup ( but with 6 nodes in the rsyslog cluster). TBH, > we're using keepalived to share the VIP, but we're using Haproxy for tcp load > balancing and iptables for udp LB. We found iptables + haproxy was great > because of the logging and stats for LB, plus the incredible simplicity. > > I know this doesn't help you particular setup, but we do things quite > similarly, so I figured I'd chime in. > > Cheers, > > JB > Sent from my Verizon Wireless BlackBerry > > -----Original Message----- > From: Rainer Gerhards <[email protected]> > Sender: [email protected] > Date: Fri, 3 Apr 2015 13:43:59 > To: rsyslog-users<[email protected]> > Reply-To: rsyslog-users <[email protected]> > Subject: Re: [rsyslog] Exclude interface from rsyslog > > If you can use imptcp, you can specify the listen address. But it doesn't > do tls. Not sure if it is present in your ancient version . > > Hth Rainer > > Sent from phone, thus brief. > Am 03.04.2015 11:59 schrieb "Johan Ryberg" <[email protected]>: > >> Hi, >> >> Running Redhat 6.6, rsyslog 5.8.10 <- Old, yes =( >> >> >> I'm running keepalived on two hosts (1.1.1.4 and 1.1.1.5) for a HA >> syslog receiver and the sending part are using the VIP (1.1.1.10) >> address that are shared between the two hosts. >> >> I would like to distribute the load equally between the two receivers >> and tried to add the following to keepalived config: >> >> virtual_server 1.1.1.10 514 { >> delay_loop 6 >> lb_algo rr >> lb_kind DR >> protocol UDP >> >> real_server 1.1.1.4 514 { >> weight 1 >> TCP_CHECK { >> connect_timeout 3 >> connect_port 514 >> } >> } >> >> real_server 1.1.1.5 514 { >> weight 1 >> TCP_CHECK { >> connect_timeout 3 >> connect_port 514 >> } >> } >> } >> >> Once this is in place rsyslog starts to spam with this error: >> rsyslogd-2165: netstream session 0x7f0974001de0 will be closed due to error >> [try http://www.rsyslog.com/e/2165 >> >> >> I'm thinking this might be due to rsyslog and keepalived are both >> listening to the "virtual_server" IP? >> >> Is it possible to exclude rsyslog to listen on a specific IP? >> >> Regards Johan >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
