Syslogging over VPN, TCP or UDP?

[0tt0]

Hi,

I have been planning on setting up (sys)logging over vpn tunnels for a few off-site servers.

I have installed and configured openvpn site-site PSK for these ubuntu servers and everything works well and persist through reboots by placing a .conf file in /etc/openvpn.

One detail I have been thinking of though is what type of tunnel I should use, UDP being the default and generally more suited for VPN but I think I read somewhere that if the protocol being tunneled is UDP, TCP might be a better choice.

Anyone have any thoughts on this, for this particular usage scenario?

TIA,

A note, the export in pfS 2.2 (that system not updated) include "pull" which openvpn complained about and I had to comment it out.