Hello Alex,
 I am not aware of any short term plan to make syslog-ng "VRF Aware".
 I think it worth to open a "Feature request" on GitHub: https://github.com/syslog-ng/syslog-ng/issues I started to open a new one, but I quickly find myself in a situation where I couldn't reference any good documentation in the topic.
 You clearly have more experience on the field than me. So If you can describe the problem I would be very glad. Or just help me out with some documentation, and I will create the issue for you.

Thank You in advance!
Laci


From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Alexandre Santos <alexandre.rosas.santos@gmail.com>
Sent: Friday, July 24, 2020 12:03
To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu>
Subject: Re: [syslog-ng] syslog-ng multiple VRF
 
CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.

Hi,
Any plans to make syslog-ng VRF aware?
Thanks,
Alex


On Wed, Jul 22, 2020 at 3:59 PM Terry Slattery <tcs@netcraftsmen.com> wrote:
Alex,
The simplest solution is to configure the network to share routes between the
two VRFs.

Linux now supports VRF, however, my quick read on the subject suggests that its
configuration is complex. Applications like syslog-ng are rarely VRF-aware. It
would have to bind to two different interfaces, one in each VRF.

        -tcs

On 7/22/20 8:00 AM, syslog-ng-request@lists.balabit.hu wrote:
> Date: Tue, 21 Jul 2020 15:18:46 +0100
> From: Alexandre Santos <alexandre.rosas.santos@gmail.com>
> To: "Syslog-ng users' and developers' mailing list"
>       <syslog-ng@lists.balabit.hu>
> Subject: [syslog-ng] syslog-ng multiple VRF
> Message-ID:
>       <CAHxG_72hhkfCBu3j9nPxr_MVwKevJtFcpcRhVJLYPPYx4Mys1g@mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> Hi All,
>
> I have a question regarding syslog-ng and VRF.
> I want to read from a syslog source, which interface is in the default VRF,
> and send the logs to a syslog/network destination interface which is in a
> MGMT VRF.
>
> Can syslog-ng support this?
> If yes, what are the aspects I should be careful about?
>
> Thanks and regards,
> Alex


--
Terry Slattery
CCIE #1026
NetCraftsmen
www.netcraftsmen.com
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq