Hello Alex, I am not aware of any short term plan to make syslog-ng "VRF Aware". I think it worth to open a "Feature request" on GitHub: https://github.com/syslog-ng/syslog-ng/issues I started to open a new one, but I quickly find myself in a situation where I couldn't reference any good documentation in the topic. You clearly have more experience on the field than me. So If you can describe the problem I would be very glad. Or just help me out with some documentation, and I will create the issue for you. Thank You in advance! Laci ________________________________ From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Alexandre Santos <alexandre.rosas.santos@gmail.com> Sent: Friday, July 24, 2020 12:03 To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: Re: [syslog-ng] syslog-ng multiple VRF CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe. Hi, Any plans to make syslog-ng VRF aware? Thanks, Alex On Wed, Jul 22, 2020 at 3:59 PM Terry Slattery <tcs@netcraftsmen.com<mailto:tcs@netcraftsmen.com>> wrote: Alex, The simplest solution is to configure the network to share routes between the two VRFs. Linux now supports VRF, however, my quick read on the subject suggests that its configuration is complex. Applications like syslog-ng are rarely VRF-aware. It would have to bind to two different interfaces, one in each VRF. -tcs On 7/22/20 8:00 AM, syslog-ng-request@lists.balabit.hu<mailto:syslog-ng-request@lists.balabit.hu> wrote:
Date: Tue, 21 Jul 2020 15:18:46 +0100 From: Alexandre Santos <alexandre.rosas.santos@gmail.com<mailto:alexandre.rosas.santos@gmail.com>> To: "Syslog-ng users' and developers' mailing list" <syslog-ng@lists.balabit.hu<mailto:syslog-ng@lists.balabit.hu>> Subject: [syslog-ng] syslog-ng multiple VRF Message-ID: <CAHxG_72hhkfCBu3j9nPxr_MVwKevJtFcpcRhVJLYPPYx4Mys1g@mail.gmail.com<mailto:CAHxG_72hhkfCBu3j9nPxr_MVwKevJtFcpcRhVJLYPPYx4Mys1g@mail.gmail.com>> Content-Type: text/plain; charset="utf-8"
Hi All,
I have a question regarding syslog-ng and VRF. I want to read from a syslog source, which interface is in the default VRF, and send the logs to a syslog/network destination interface which is in a MGMT VRF.
Can syslog-ng support this? If yes, what are the aspects I should be careful about?
Thanks and regards, Alex
-- Terry Slattery CCIE #1026 NetCraftsmen www.netcraftsmen.com<https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.netcraftsmen.com%2F&data=02%7C01%7CLaszlo.Szemere%40oneidentity.com%7C9dacf6f3de06493a2de908d82fb8cf91%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637311818092352122&sdata=YLSmu0UmOPQkH2wvH4BbBIU0%2BfZ%2BNh0HvyojWis4aPo%3D&reserved=0> ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=02%7C01%7CLaszlo.Szemere%40oneidentity.com%7C9dacf6f3de06493a2de908d82fb8cf91%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637311818092352122&sdata=dx%2F3XD22V3hipBFAEuWxXnvCthmCv9ybWveOs6I5Ej0%3D&reserved=0> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng<https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=02%7C01%7CLaszlo.Szemere%40oneidentity.com%7C9dacf6f3de06493a2de908d82fb8cf91%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637311818092362088&sdata=QzvYIPzRln31A%2FlvEqkJ3dWgC1ba6yexVzJViKGdH5M%3D&reserved=0> FAQ: http://www.balabit.com/wiki/syslog-ng-faq<https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=02%7C01%7CLaszlo.Szemere%40oneidentity.com%7C9dacf6f3de06493a2de908d82fb8cf91%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637311818092362088&sdata=20AwNTGA6etFuCcBsJhtWAd94I9mQbCcIjdoooKy6%2Bc%3D&reserved=0>