From your diagram, it looks like you are trying to load balance RELP. As far as I know, RELP does not suppot ActionTCPRebindInterval. I believe this has been discussed on the mailing list:
http://lists.adiscon.net/pipermail/rsyslog/2013-May/032549.html Unless something has changed, you need to use the omfwd module if you want to use tcp rebinding. This isn't a bug - this is documented behavior. The rebind interval parameter is documented as a parameter for omfwd. RELP uses omrelp, which has no such paramater. See: http://www.rsyslog.com/doc/v8-stable/configuration/modules/omfwd.html and http://www.rsyslog.com/doc/v8-stable/configuration/modules/omrelp.html I use ActionTCPRebindInterval with haproxy with plain TCP. It works very well. Cheers, Brian On Thu, Jul 23, 2015 at 7:03 AM, <[email protected]> wrote: > With the architecture enclosed. > > ----- Mail original ----- > De: [email protected] > À: "rsyslog-users" <[email protected]> > Envoyé: Jeudi 23 Juillet 2015 11:59:35 > Objet: [rsyslog] Load balancing issue > > Hello all, > > I'm currently trying to load balance the log traffic accross several > servers. > I thought my configuration with "ActionSendTCPRebindInterval" option was > working properly, unfortunately my recent benchs show that the log flow is > not well load balanced. > > Please find below a part of the architecture : > > > > > My problem is located on the log aggregators : the rsyslog send its > traffic to haproxy on localhost using relp protocol. > I monitored the tcp sessions and i can see that haproxy doesn't change the > destination servers. > > watch 'ss -lap -o state established \( dport = :20514 \)' > Recv-Q Send-Q Local Address:Port Peer Address:Port > 1716 0 127.0.0.1:43652 127.0.0.1:20514 users:(("rsyslogd",8409,88)) > 0 1138 10.17.252.4:58436 10.19.12.5:20514 timer:(on,196ms,0) > users:(("haproxy",3922 > ,2)) > 1760 0 127.0.0.1:43650 127.0.0.1:20514 users:(("rsyslogd",8409,22)) > 0 0 10.17.252.4:55583 10.19.12.6:20514 users:(("haproxy",3922,10)) > > Please find enclosed my configuration. > > NB : > - the source pid (rsyslog) never change as it is expected with > "ActionSendTCPRebindInterval" > - i mixed legacy and new syntaxe because of the following bug > https://github.com/rsyslog/rsyslog/issues/96 > This bug is annoying and i didn't receive any update since about 4 months > > Could you please help me ? > > OS : debian7 > rsyslog version : 8.10 > > Regards , > Smana > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
