HSL iRule performance question.
Hello. I am looking into creating a High Speed Logging iRule to send syslogs of our main web app to our centralized syslog server (Logstash + Elasticsearch + Graylog2). I am already running the iRule on another web app that is not as heavily used as our main web application and it is running fine.
Our main web application gets substantially more traffic than the virtual server running with the HSL iRule. Here is my concern: Because more traffic heading to the main web app, I am worried that this might exhaust all of the hardware resources of our BIG-IP LTM. Am I being paranoid? Is the load from a HSL iRule minimal?
You can do a search on iRule timing if you really wanted to see how many clock cycles it is using, but in general, the HSL is very performant.
I would need more details on what you mean by "substantially more traffic". I've seen HSL send 50,000 messages per second per cpu core that a platform had and use an extra 5-10% cpu.
Main questions. How cpu busy is your box now? What model device do you have? How much traffic is making your box that busy today?