Thursday, April 03, 2008

TCP Syslog =/= Reliable?

Usually, people associate UDP-based log transfer with being "unreliable" and TCP with being "reliable." Rainier here raises a few interesting issues (not the least of which is TCP buffering) that question the reliability of TCP syslog.

Is there a need for a "more reliable" TCP with application-level ACKs? Maybe ... but not in the world where UDP syslog is still king.

Dr Anton Chuvakin