Skip to content

NSFS | Disabling rate-limiting for Rsyslog is not recommended #8739

@naveenpaul1

Description

@naveenpaul1

Environment info

  • NooBaa Version: VERSION
  • Platform: Kubernetes 1.14.1 | minikube 1.1.1 | OpenShift 4.1 | other: specify

Actual behavior

  1. Disabling rate limit for rsyslog will result into denial-of-service.
$imjournalRatelimitInterval 0
$imjournalRatelimitBurst 0

Its mentioned in Redhat official document

As with systemd-journald, disabling rate-limiting altogether is not recommended. Note the following:
Warning: Some versions of journald have problems with database corruption, which leads to the journal returning the same data endlessly in a tight loop. This can result in a large number of log messages getting duplicated inside the logs managed by rsyslog. It can also lead to denial-of-service if this results in 100% CPU or memory usage. 

doc : https://access.redhat.com/solutions/1417483

Expected behavior

  1. Need to identify best Noobaa configuration for both imjournalRatelimitInterval and imjournalRatelimitBurst

Steps to reproduce

More information - Screenshots / Logs / Other output

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions