[rsyslog] Multiple-server failover questions (and round-robin DNS resolution, too)

[RB]

On Wed, Dec 9, 2009 at 11:08, Ryan Lynch <ryan.b.lynch at gmail.com> wrote:
> ClusterIP is a heck of a neat technology, and it would definitely work
> for a lot of load-balancing cases.
>
> But it does require that all of the participating hosts share a single
> LAN segment. In my case, the "central" log-receiving hosts are are
> different physical sites, and are separated by routers.

That's definitely the case for CLUSTERIP, but have you looked at LVS
and the associated ipvsadm tool?  It's been in the Linux kernel for a
while, and provides the L3-L4 load balancing you seem to be looking
for.  To make the balancer itself dispersed you'd need to use other
clustering tools to complete the picture, but it's a decent tool
nonetheless.  If you're not married to Linux, I can highly recommend
CARP + slbd (or just use pfSense) as a nicely powerful balancer.