-
Notifications
You must be signed in to change notification settings - Fork 54
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Output with a FQDN as host value make a DNS lookup with every event #13
Comments
(I'm not the author, but can try to clarify how this works) @derjohn: are you referring to the local system's hostname (set optionally with @yfoelling: that LoC is obtaining the local hostname, not resolving the remote server hostname. It should not need to consult DNS. It's an entirely local call. |
@troy : I am talking about the name/adress of the remote syslog server (host foo.bar.com). I inserted 127.0.0.1 to mask my real IP Adress of the server. I should have taken 192.168.x.y. instead, to be clearer ;) The thing is, you do a |
@derjohn Thanks for clarifying, that makes sense :)
If this is all accurate, another likely workaround would be to add an entry to the |
An example for an even better approach that implements a cache with expire can be found in fluentd output forwarder: https://github.com/fluent/fluentd/blob/master/lib/fluent/plugin/out_forward.rb |
Hello,
I suspect that this plugin does not cache DNS and does a lookup with each output event.
If used like this:
Ii will make tons of tons of tons of DNS lookups in the nameserver of that host ("Self-DDoS-ing").
Workaround: Set an IP address as value, it will not make lookups:
How about a expire_dns_cache like the fluentd "forward Output Plugin" has?
rgds,
j
The text was updated successfully, but these errors were encountered: