From 23e4edb7044611f54a966f1e6527fa5e91b25418 Mon Sep 17 00:00:00 2001 From: Joe LeVeque Date: Fri, 15 Feb 2019 22:36:40 +0000 Subject: [PATCH 1/2] Set a rate limit on syslog messages from all Docker containers --- dockers/docker-base-stretch/etc/rsyslog.conf | 7 +++++++ dockers/docker-base/etc/rsyslog.conf | 7 +++++++ 2 files changed, 14 insertions(+) diff --git a/dockers/docker-base-stretch/etc/rsyslog.conf b/dockers/docker-base-stretch/etc/rsyslog.conf index 40c7463afa2d..83aa8c360c66 100644 --- a/dockers/docker-base-stretch/etc/rsyslog.conf +++ b/dockers/docker-base-stretch/etc/rsyslog.conf @@ -10,6 +10,13 @@ ################# $ModLoad imuxsock # provides support for local system logging + +# +# Set a rate limit on messages from the container +# +$SystemLogRateLimitInterval 300 +$SystemLogRateLimitBurst 10000 + #$ModLoad imklog # provides kernel logging support #$ModLoad immark # provides --MARK-- message capability diff --git a/dockers/docker-base/etc/rsyslog.conf b/dockers/docker-base/etc/rsyslog.conf index 863c11d8c17a..534b164d7a1a 100644 --- a/dockers/docker-base/etc/rsyslog.conf +++ b/dockers/docker-base/etc/rsyslog.conf @@ -14,6 +14,13 @@ ################# $ModLoad imuxsock # provides support for local system logging + +# +# Set a rate limit on messages from the container +# +$SystemLogRateLimitInterval 300 +$SystemLogRateLimitBurst 10000 + #$ModLoad imklog # provides kernel logging support #$ModLoad immark # provides --MARK-- message capability From 3a0958b518248d029613aadeeebbf341b426e1ed Mon Sep 17 00:00:00 2001 From: Joe LeVeque Date: Sat, 2 Mar 2019 01:26:39 +0000 Subject: [PATCH 2/2] Increase threshold to 20,000 messages per 5-minute interval --- dockers/docker-base-stretch/etc/rsyslog.conf | 2 +- dockers/docker-base/etc/rsyslog.conf | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/dockers/docker-base-stretch/etc/rsyslog.conf b/dockers/docker-base-stretch/etc/rsyslog.conf index 83aa8c360c66..ef249229ab1e 100644 --- a/dockers/docker-base-stretch/etc/rsyslog.conf +++ b/dockers/docker-base-stretch/etc/rsyslog.conf @@ -15,7 +15,7 @@ $ModLoad imuxsock # provides support for local system logging # Set a rate limit on messages from the container # $SystemLogRateLimitInterval 300 -$SystemLogRateLimitBurst 10000 +$SystemLogRateLimitBurst 20000 #$ModLoad imklog # provides kernel logging support #$ModLoad immark # provides --MARK-- message capability diff --git a/dockers/docker-base/etc/rsyslog.conf b/dockers/docker-base/etc/rsyslog.conf index 534b164d7a1a..4851ac784475 100644 --- a/dockers/docker-base/etc/rsyslog.conf +++ b/dockers/docker-base/etc/rsyslog.conf @@ -19,7 +19,7 @@ $ModLoad imuxsock # provides support for local system logging # Set a rate limit on messages from the container # $SystemLogRateLimitInterval 300 -$SystemLogRateLimitBurst 10000 +$SystemLogRateLimitBurst 20000 #$ModLoad imklog # provides kernel logging support #$ModLoad immark # provides --MARK-- message capability