TMAegis
Más reglas para cockroachdb

TMA-COCKROACHDB-2.5

Disable Linux Memory Swapping to Prevent Performance and Stability Issues

MediaNivel 1Automatizadacockroachdb

Descripción

For production CockroachDB deployments on Linux VMs or bare-metal, it is a critical requirement to disable Linux memory swapping or ensure the system has adequate RAM to prevent swap usage. Swapping database memory pages to slow disk I/O introduces severe and unpredictable latency, compromising the database's performance and stability. The benchmark rates this recommendation Manual; the automated check covers its objective pass criterion. Passes when /proc/swaps lists no active swap device. Also confirm at least 4 GiB RAM per vCPU and that --cache plus 2x --max-sql-memory stays below 80% of RAM.

Cómo se verifica

Método de auditoría: Comando de shell

shell
[ -r /proc/swaps ] || exit 1; awk 'NR > 1 {n++} END {print n+0}' /proc/swaps
Salida esperada
0

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

swapoff -a, remove swap entries from /etc/fstab (and set vm.swappiness=0), and size RAM to at least 4 GiB per vCPU.

Propiedades

Sistemas operativos
Cualquiera
Etiquetas
cockroachdbos
Referencia
CIS CockroachDB v25.x Benchmark v1.0.0 - 2.5 Disable Linux Memory Swapping to Prevent Performance and Stability Issues

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell
tmaegis scan --target cockroachdb