I'm working on optimizing and right-sizing my EC2 syslog-ng servers and have some carryover settings in our ansible playbook for kernel settings that were used on "in-house" data center machines. (Previosly we also used syslog-ng in the DC, whereas now we are using SC4S)
Related to net.core.netdev_max_backlog
specifically:
Redhat portal states the default is 1000, but we're currently setting it to 65536, and I don't have any records of why or where that recommendation came from.
I've found lots of helpful articles here and on the Redhat portal about testing and increasing this setting, but what is the impact of this being set too high?
kernel parameter - net.core.netdev_max_backlog , what happened when its too low