MonitorWare Knowledge Base

I keep hitting a bug in 2.0.6 on RHEL5 whereby

I upped the limits by specifying it sysconfig/rsyslog:

Code: Select all

SYSLOGD_OPTIONS="-m 0 -r514 -t514,4000 -x"
KLOGD_OPTIONS="-x"
ulimit -Hn 5000
ulimit -Sn 4200


I verifiered that the limits have taken hold:

Code: Select all

# cat /proc/$(pgrep rsyslogd)/limits
Limit                     Soft Limit           Hard Limit           Units     
Max cpu time              unlimited            unlimited            seconds   
Max file size             unlimited            unlimited            bytes     
Max data size             unlimited            unlimited            bytes     
Max stack size            10485760             unlimited            bytes     
Max core file size        0                    unlimited            bytes     
Max resident set          unlimited            unlimited            bytes     
Max processes             139264               139264               processes
Max open files            4200                 5000                 files     
Max locked memory         32768                32768                bytes     
Max address space         unlimited            unlimited            bytes     
Max file locks            unlimited            unlimited            locks     
Max pending signals       139264               139264               signals   
Max msgqueue size         819200               819200               bytes     
Max nice priority         0                    0                   
Max realtime priority     0                    0

Yet for some reason, after a while the number of open fd hits 1038 and never goes above, and new connections are are stalled for a minute or 2 (until a connection frees up I guess).

Am I missing something here?

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

This may be a select() limit. I have to admit I so far did not test with that number of connections...

Oh it uses select, not poll or epoll?

Was this changed in 3.x?

no, its unfortunately still at select. Reason is platform compatibilty and no time (yet) to change to epoll for those platforms that support it

Oh crap. This means I'll have to switch to UDP, or maybe launch several instances bound to different ports, I guess.

I fear so...