Configure Transparent Huge Pages (THP) to madvise to Avoid Increased Memory Usage

低レベル 1自動cockroachdb

説明

Linux Transparent Huge Pages (THP) is a kernel feature that automatically manages large memory pages to improve performance for some workloads. However, for databases such as CockroachDB, this behavior can cause unpredictable latency spikes, increased memory fragmentation, and excessive CPU overhead due to THP defragmentation. Cockroach Labs recommends configuring THP to madvise instead of the default always mode. The benchmark rates this recommendation Manual; the automated check covers its objective pass criterion. Passes when madvise is the selected (bracketed) Transparent Huge Pages mode.

チェック方法

監査方法: シェルコマンド

shell

out=$(cat /sys/kernel/mm/transparent_hugepage/enabled 2>/dev/null) || exit 1; printf '%s\n' "$out" | grep -o '\[[a-z]*\]'

期待される出力: [madvise]

修正方法

修正方法: ガイダンスまたは IaC パッチ

echo madvise > /sys/kernel/mm/transparent_hugepage/enabled (and defrag), then persist it at boot (kernel parameter transparent_hugepage=madvise or a systemd unit).

プロパティ

オペレーティングシステム: すべて
タグ: cockroachdbos
参照: CIS CockroachDB v25.x Benchmark v1.0.0 - 2.6 Configure Transparent Huge Pages (THP) to madvise to Avoid Increased Memory Usage

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell

tmaegis scan --target cockroachdb