Mailing-List: contact log4net-dev-help@logging.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Log4NET Dev" <log4net-dev@logging.apache.org>
Date: Tue, 7 Jan 2014 09:37:50 +0000 (UTC)
From: "Jose Luis Pedrosa (JIRA)" <jira@apache.org>
To: log4net-dev@logging.apache.org
Message-ID: <JIRA.12687429.1389011203996.53532.1389087470068@arcas>
In-Reply-To: <JIRA.12687429.1389011203996@arcas>
References: <JIRA.12687429.1389011203996@arcas>
Subject: [jira] [Commented] (LOG4NET-415) RemoteSyslogAppender may block for
 ARP resolution + Improvement Strict RFC3164
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/LOG4NET-415?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13864040#comment-13864040 ] 

Jose Luis Pedrosa commented on LOG4NET-415:
-------------------------------------------

Hi all,

Please also note that in the http://tools.ietf.org/html/rfc5424 (a newer syslog specification) specifies that all encoding should be UTF8.
Maybe we should change the parameter name to control which specification is followed.


> RemoteSyslogAppender may block for ARP resolution + Improvement Strict RFC3164
> ------------------------------------------------------------------------------
>
>                 Key: LOG4NET-415
>                 URL: https://issues.apache.org/jira/browse/LOG4NET-415
>             Project: Log4net
>          Issue Type: Bug
>          Components: Appenders
>    Affects Versions: 1.2.13
>         Environment: Any Windows environment
>            Reporter: Jose Luis Pedrosa
>              Labels: RemoteSyslogAppender
>         Attachments: LOG4NET-415.patch
>
>
> Sending UDP packages may block for some time in specific circumstances:
> 1) Next hop in network level 3 can't be resolved by ARP.
> 2) Datagram size exceeds FastSendDatagramThreshold configured size.
> When sending packets bigger than FastSendDatagramThreshold, the OS waits until the packet is actually sent, if the If the syslog (or the next hop to reach the syslog) is in the same VLAN/Subnet the OS tries to resolve by ARP the Ip of the configured syslog, this may take up to 3 seconds, slowing down the whole application, which in some cases can lead to outages (timeouts, DB locks...).
> Also the fact that each carriage return generates the headers of the packet again, that can lead to a significant overhead in some scenarios, for instance when loggign HTTP requests to a remote syslog, every header will go in a different message. Also some logging may require characters that are now skipped in patch:  https://issues.apache.org/jira/browse/LOG4NET-370
> I'm adding a patch that
> 1) Moves the use of UDPClient to Non blocking sockets, which eliminates the blocking. 
> 2) Adds a configuration field to decide if you want Strict RFC Behaviour or not (with default Strict).
> Please your feedback, thanks in advance
> Jose Luis


--
This message was sent by Atlassian JIRA
(v6.1.5#6160)