CockroachDB
TMA-COCKROACHDB-2.6
Configure Transparent Huge Pages (THP) to madvise to Avoid Increased Memory Usage
Descripción
Linux Transparent Huge Pages (THP) is a kernel feature that automatically manages large memory pages to improve performance for some workloads. However, for databases such as CockroachDB, this behavior can cause unpredictable latency spikes, increased memory fragmentation, and excessive CPU overhead due to THP defragmentation. Cockroach Labs recommends configuring THP to madvise instead of the default always mode. The benchmark rates this recommendation Manual; the automated check covers its objective pass criterion. Passes when madvise is the selected (bracketed) Transparent Huge Pages mode.
Cómo se verifica
Método de auditoría: Comando de shell
out=$(cat /sys/kernel/mm/transparent_hugepage/enabled 2>/dev/null) || exit 1; printf '%s\n' "$out" | grep -o '\[[a-z]*\]'- Salida esperada
[madvise]
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
echo madvise > /sys/kernel/mm/transparent_hugepage/enabled (and defrag), then persist it at boot (kernel parameter transparent_hugepage=madvise or a systemd unit).
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- cockroachdbos
- Referencia
- CIS CockroachDB v25.x Benchmark v1.0.0 - 2.6 Configure Transparent Huge Pages (THP) to madvise to Avoid Increased Memory Usage
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
tmaegis scan --target cockroachdb