parallelize: modified ivykis for Fedora / RHEL
Hi, Version 4.3.1 of syslog-ng was released last weekend and it contains an interesting feature: parallelize(). TL;DR: it allows faster processing of single, high-traffic TCP connections. You can read more about it in my latest blog at: https://www.syslog-ng.com/community/b/blog/posts/accelerating-single-tcp-con... The problem is that it requires a modified ivykis library. The syslog-ng source code bundles ivykis, and has a modified version. However, all Fedora and RHEL syslog-ng packages use a separate ivykis package. I feel uncomfortable with modifying the "official" ivykis package in Fedora / RHEL with patches not yet in the upstream ivykis sources. And it would not help the majority of syslog-ng users anyway, who use RHEL 8 and compatible operating systems. I could only add it to Fedora and upcoming RHEL releases. However, I want to enable this feature for the majority of syslog-ng users. Plan: add a modified ivykis library to my unofficial repositories. The version would stay 0.42.4, but the release would be a high number, making sure that it stays larger than the "official" package. First I'd introduce it to my git snapshot repository, and once I collect some positive feedback, I implement it in other repos too for upcoming syslog-ng versions. What do you think? Peter Peter Czanik (CzP) <peter.czanik@oneidentity.com> Balabit (a OneIdentity company) / syslog-ng upstream https://syslog-ng.com/community/ https://twitter.com/PCzanik
On Tue, 1 Aug 2023 12:40:23 +0000 "Peter Czanik (pczanik)" <Peter.Czanik@oneidentity.com> wrote: [...]
What do you think?
Hi Peter, This sounds interesting, but I probably won't see it nor enable it for quite some time if I do. I tend to stick to official distribution packages in Debian stable so I imagine it would be quite some time before this would show up there. However, if it does and when it does I might go out of the way to disable it since your initial tests suggest degradation with higher numbers of sources, which would fit my use case. John
On 2023-08-01 05:40, Peter Czanik (pczanik) wrote:
[ snip ]
What do you think?
Peter
I think there should be a clear path to get these changes into the upstream ivykis. I'm comfortable building an updated ivykis, but only from official sources. I would not be comfortable building ivykis from some bundle included inside some other source tree. As long as the plan is to get this into the upstream ivykis, I'm comfortable running this in a development environment, but no further than that. Evan.
participants (3)
-
Evan Rempel
-
John Kristoff
-
Peter Czanik (pczanik)