Skip to content

docs pipeline: outputs: syslog: document DTLS transport mode - #2643

Open
eschabell wants to merge 2 commits into
fluent:masterfrom
eschabell:erics_out_syslog_updates
Open

docs pipeline: outputs: syslog: document DTLS transport mode#2643
eschabell wants to merge 2 commits into
fluent:masterfrom
eschabell:erics_out_syslog_updates

Conversation

@eschabell

@eschabell eschabell commented Aug 1, 2026

Copy link
Copy Markdown
Collaborator

Replace the statement that DTLS isn't supported with the four available transport modes and their tls requirements, including the startup validation rules for mode=dtls and mode=udp. Note that mode=tls alone does not secure the connection, and add a DTLS configuration example.

Note, covers code changes without corresponding docs PR.

Summary by CodeRabbit

  • Documentation
    • Added documentation for DTLS support in Syslog transports.
    • Clarified transport modes, TLS validation behavior, and configuration requirements.
    • Added DTLS configuration examples for YAML and classic formats.

@eschabell eschabell self-assigned this Aug 1, 2026
@eschabell eschabell added the waiting-on-review Waiting on a review from mainteners label Aug 1, 2026
@eschabell
eschabell requested a review from a team as a code owner August 1, 2026 09:27
@eschabell eschabell added the 5.0.9 label Aug 1, 2026
@coderabbitai

coderabbitai Bot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 0d50fe27-b7c0-4e09-bc3f-dcf3ccf454b9

📥 Commits

Reviewing files that changed from the base of the PR and between 19774bb and 5724de0.

📒 Files selected for processing (1)
  • pipeline/outputs/syslog.md
🚧 Files skipped from review as they are similar to previous changes (1)
  • pipeline/outputs/syslog.md

📝 Walkthrough

Walkthrough

The Syslog output documentation now lists DTLS as a supported transport, defines transport and TLS validation rules, and adds YAML and classic configuration examples.

Changes

Syslog DTLS support

Layer / File(s) Summary
Transport modes and validation
pipeline/outputs/syslog.md
The documentation lists udp, tcp, tls, and dtls modes. It describes TLS requirements, invalid combinations, DTLS availability, and applicable TLS properties.
DTLS configuration examples
pipeline/outputs/syslog.md
The documentation adds YAML and classic configuration examples with TLS enabled, certificate verification, and a CA file.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Possibly related PRs

Suggested reviewers: patrick-stephens

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly identifies the documentation change for DTLS transport mode in the syslog output plugin.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@pipeline/outputs/syslog.md`:
- Line 3: Update the _Syslog_ overview to describe UDP, TCP, and DTLS as
transports, while presenting TLS as optional security applied to a transport
rather than as an independent transport. Apply the same terminology correction
to the related wording in the overview’s transport description.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 9546f5f7-d678-43e8-a595-20759436572d

📥 Commits

Reviewing files that changed from the base of the PR and between 0eb06a6 and 19774bb.

📒 Files selected for processing (1)
  • pipeline/outputs/syslog.md

Comment thread pipeline/outputs/syslog.md Outdated
Replace the statement that DTLS isn't supported with the four available
transport modes and their tls requirements, including the startup
validation rules for mode=dtls and mode=udp. Note that mode=tls alone
does not secure the connection, and add a DTLS configuration example.
Also, clarified that TLS is not a transport.

Note, covers code changes without corresponding docs PR.

Signed-off-by: Eric D. Schabell <eric@schabell.org>
@eschabell
eschabell force-pushed the erics_out_syslog_updates branch from 19774bb to 3e9e4a6 Compare August 1, 2026 09:51
@eschabell

Copy link
Copy Markdown
Collaborator Author

@patrick-stephens ready for review!

@eschabell

eschabell commented Aug 4, 2026

Copy link
Copy Markdown
Collaborator Author

Heads-up: this PR was written before 40641ddb (out_syslog: Handle TLS mode automatically) landed on master, and that commit inverts the central claim in the new "Transport modes" section.

After 40641ddb, in plugins/out_syslog/syslog.c and syslog_conf.c:

  • mode: tls sets ins->use_tls = FLB_TRUE itself and builds a FLB_TLS_CLIENT_MODE context. It no longer falls back to plaintext TCP.
  • mode: dtls also sets use_tls itself, and the mode=dtls requires tls=on startup check was removed from syslog_conf.c.
  • The only remaining conflict check is mode: udp with tls: on, which still fails with mode=udp with tls=on is unsupported (syslog_conf.c:112).
  • In a build without FLB_HAVE_TLS, both tls and dtls now fail with TLS support is unavailable.

Suggested corrections to pipeline/outputs/syslog.md on this branch:

  1. Transport modes table — change the tls setting column for tls and dtls from "Required" to something like "Optional. Enabled automatically."
  2. Remove the paragraph beginning "Setting mode to tls doesn't secure the connection on its own..." — this is no longer accurate.
  3. Remove the bullet "mode set to dtls without tls set to on fails with mode=dtls requires tls=on." Keep only the udp + tls: on bullet.
  4. DTLS example — still valid, but tls: on is now redundant. Either drop it or add a note that it's optional.

Everything else in the PR (the mode parameter description, the TLS properties note) matches the current source.

I'll process this in the branch shortly and repost for review @patrick-stephens.

Upstream commit 40641ddb (out_syslog: Handle TLS mode automatically)
changed how mode=tls and mode=dtls interact with the tls parameter.
Both modes now enable TLS themselves, and the mode=dtls requires
tls=on startup check was removed. Update the docs to match:

- Intro: list UDP, TCP, TLS, and DTLS as four transports, and drop
  the claim that TLS isn't a transport of its own.
- Transport modes table: change the tls setting for tls and dtls
  from required to optional and enabled automatically, and drop
  "behaves the same as tcp" from the tls row.
- Replace the paragraph stating that mode=tls doesn't secure the
  connection on its own with the automatic TLS behavior.
- Startup validation: remove the mode=dtls requires tls=on bullet,
  which no longer exists in the source, and add a bullet for builds
  compiled without TLS support failing with "TLS support is
  unavailable".
- DTLS example: drop the now-redundant tls: on from both the YAML
  and classic configuration tabs.

Signed-off-by: Eric D. Schabell <eric@schabell.org>
@eschabell

Copy link
Copy Markdown
Collaborator Author

@coderabbitai review

@coderabbitai

coderabbitai Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor
✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@eschabell

Copy link
Copy Markdown
Collaborator Author

@patrick-stephens ready for your review!

@patrick-stephens

Copy link
Copy Markdown
Contributor

@eschabell does that mean it's only on master rather than in the latest release, in which case we don't want to cover it until a release?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

5.0.9 waiting-on-review Waiting on a review from mainteners

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants