On Fri, 30 Oct 2015, rmkml wrote:
Hello,
Anyone already discuss around a new simple "pseudo" load balacing filtering
please ?
pseudo filter example:
if $lb_number == '1' then action (<syslog_1>)
if $lb_number == '2' then action (<syslog_2>)
First log sended to first syslog server
Second log sended to another second syslog server
and back first...
a better way to do this is to setup the two syslog servers with a shared IP
address using the CLUSTERIP feature of iptables using a hash of
sourceip-sourceport, and then configure the sending system with a rebind
interval of 1000 or so. Every time the sending system disconnects and reconnects
it will use a different source port. Just about every time this changes, the
traffic will switch to the other system.
Much more efficient, and if you use corosync/pacemaker to manage the IP, when
one system dies (or is taken down for maintinance), it will redirect the traffic
that would have gone to it to the other nodes of a cluster. This works with an
arbitrary number of destination machines without needing to reconfigure the
senders.
David Lang
I have a presentation and paper that touches on this at
https://www.usenix.org/conference/lisa12/technical-sessions/presentation/lang_david
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
