TMAegis
Aturan lainnya untuk cockroachdb

TMA-COCKROACHDB-2.5

Disable Linux Memory Swapping to Prevent Performance and Stability Issues

SedangLevel 1Otomatiscockroachdb

Deskripsi

For production CockroachDB deployments on Linux VMs or bare-metal, it is a critical requirement to disable Linux memory swapping or ensure the system has adequate RAM to prevent swap usage. Swapping database memory pages to slow disk I/O introduces severe and unpredictable latency, compromising the database's performance and stability. The benchmark rates this recommendation Manual; the automated check covers its objective pass criterion. Passes when /proc/swaps lists no active swap device. Also confirm at least 4 GiB RAM per vCPU and that --cache plus 2x --max-sql-memory stays below 80% of RAM.

Cara pemeriksaan

Metode audit: Perintah shell

shell
[ -r /proc/swaps ] || exit 1; awk 'NR > 1 {n++} END {print n+0}' /proc/swaps
Output yang diharapkan
0

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

swapoff -a, remove swap entries from /etc/fstab (and set vm.swappiness=0), and size RAM to at least 4 GiB per vCPU.

Properti

Sistem operasi
Apa saja
Tag
cockroachdbos
Referensi
CIS CockroachDB v25.x Benchmark v1.0.0 - 2.5 Disable Linux Memory Swapping to Prevent Performance and Stability Issues

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell
tmaegis scan --target cockroachdb