rsyslog使用不同的TLS证书配置多个TCP侦听器

时间:2018-10-10 18:26:32

标签: rsyslog

我们有两种不同的环境,它们会将日志发送到rsyslog服务器。这两个环境具有不同的根证书。 rsyslogd是否支持指定多个DefaultNetstreamDriverCertFile和DefaultNetstreamDriverKeyFile?如果是这样,我该怎么做?

尝试多次指定配置,但无法启动侦听器

$ModLoad imtcp
$InputTCPMaxSessions 10000
$InputTCPServerRun 514
$InputTCPServerRun 515
$DefaultNetstreamDriver gtls


$DefaultNetstreamDriverCAFile /etc/ssl/certs/ca.pem
$DefaultNetstreamDriverCertFile /etc/ssl/certs/cert.pem
$DefaultNetstreamDriverKeyFile /etc/ssl/certs/private.pem


$DefaultNetstreamDriverCAFile /etc/ssl/certs/prod/ca2.pem
$DefaultNetstreamDriverCertFile /etc/ssl/certs/prod/cert2.pem
$DefaultNetstreamDriverKeyFile /etc/ssl/certs/prod/private2.pem
$ModLoad imtcp # load TCP listener


$InputTCPServerStreamDriverMode 1 
$eInputTCPServerStreamDriverAuthMod anon 
$InputTCPServerRun 514 
$InputTCPServerRun 6515

我看过这篇文章,但是omfwd模块不支持certfile和keyfile rsyslog logging to multiple servers with different TLS configurations

0 个答案:

没有答案