Show HN: Goxe 19k Logs/S on an I5

Budget laptop chews 19,000 logs/sec and the crowd goes wild—then suspicious

TLDR: Goxe, a tool that compresses repeated logs into one line, reportedly handled 19,000 messages per second on a basic i5 laptop. Readers applauded the bargain‑bin performance but debated UDP reliability, timestamp stripping, and missing Docker support—sparking a classic speed vs. safety showdown for real‑world operations.

Hacker News lit up after a single flex: “19k logs/s on an i5”. Poster nxus_dev dropped laptop specs and called Goxe “edge-ready” with “near‑zero allocation,” and the crowd swooned at the idea of a tiny machine gulping a firehose of messages without breaking a sweat. Translation: fast, cheap, and perfect for small teams drowning in noise.

Under the hood, Goxe bundles repeat messages into one tidy line with a count, strips dates, lowercases text, and can ping webhooks when stuff explodes. It listens over UDP—think a “mail slot” that’s fast but doesn’t guarantee delivery—and ships summaries elsewhere if you want. The vibe: finally, calm in the chaos.

But the victory lap wasn’t uncontested. Skeptics side‑eyed the “no Docker yet” note, worried about UDP drops, and wondered if stripping timestamps or lowercasing might hide clues during troubleshooting. Bench‑warriors lined up to ask for apples‑to‑apples tests, and the classic ops split reappeared: speed and simplicity vs. forensic detail and strict reliability. Cue the meme energy—“logs go brrr” on a budget—right next to the “will this bite us at 3 a.m.?” chorus.

Bottom line: the performance boast hooked everyone, but the real story is whether this tidy log diet stays helpful when things go truly sideways.

Key Points

  • Goxe is a Go-based log reduction tool that ingests syslog/UDP logs and aggregates identical messages with counts to cut noise and storage.
  • It normalizes logs by stripping timestamps, lowercasing, trimming whitespace, filtering excluded words, and applying ASCII beautification before aggregation.
  • Key features include a worker pool, thread-safe state, partial reporting, timestamp parsing, graceful shutdown, similarity clustering, burst detection, notifications, and remote shipping.
  • Default setup listens on UDP port 1729 and uses an OS-specific config.json with hot-reload; shipping supports configurable address, interval, and protocol.
  • Integration supports system loggers (rsyslog, syslog-ng) and custom apps (Node transports, Go net package); Docker deployment is not supported in this release.

Hottest takes

“Goxe hits 19k logs/s on commodity hardware” — nxus_dev
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.