Project

General

Profile

Actions

Bug #6762

closed
BM LS

hugepages: error for FreeBSD when kernel NUMA build option is not enabled

Bug #6762: hugepages: error for FreeBSD when kernel NUMA build option is not enabled

Added by Bill Meeks about 2 years ago. Updated about 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

The new hugepages NUMA snapshot query code in Suricata 7.0.3 is generating a pair of back-to-back errors in the Suricata startup log ( suricata.log ) on systems based on FreeBSD where the NUMA kernel build option is not enabled. These are the two error messages:

[100687 - Suricata-Main] 2024-02-08 13:42:14 Error: hugepages: unable to open /sys/devices/system/node/
[100687 - Suricata-Main] 2024-02-08 13:42:14 Error: hugepages: failed to obtain number of NUMA nodes in the system

I am specifically seeing this error with the rollout of Suricata 7.0.3 on the pfSense firewall distro which is built upon FreeBSD 14.0-CURRENT. My understanding is that NUMA support is an optional kernel build parameter in FreeBSD and it is typically defaulted to disabled.

I recommend a suricata.yaml config option to either enable or disable the NUMA snapshot query during Suricata startup. Perhaps default it to "disabled" so as to be safe on non-NUMA systems.


Subtasks 1 (0 open1 closed)

Bug #6765: Hugepages Error for FreeBSD when kernel NUMA build option is not enabled (7.0.x backport)ClosedLukas SismisActions

Related issues 1 (0 open1 closed)

Related to Suricata - Bug #6760: af-packet: hugepages Error for ARM64 and af-packet IPS modeClosedLukas SismisActions

BM Updated by Bill Meeks about 2 years ago Actions #1

  • Subject changed from Hugepages error in FreeBSD when kernel NUMA build option is not enabled to Hugepages Error for FreeBSD when kernel NUMA build option is not enabled

JI Updated by Jason Ish about 2 years ago Actions #2

@Lukas Sismis Was this code intended to be run on FreeBSD, or just Linux.

BM Updated by Bill Meeks about 2 years ago Actions #3

Jason Ish wrote in #note-2:

@Lukas Sismis Was this code intended to be run on FreeBSD, or just Linux.

Yeah, according to my FreeBSD experts on the pfSense side, the path /sys/devices/system/node/ is specific to Linux. So, even if the NUMA kernel build option is enabled, the NUMA snapshot query still will not succeed on FreeBSD.

Maybe this new code should all be wrapped by a runmode=DPDK test ??

VJ Updated by Victor Julien about 2 years ago Actions #4

  • Related to Bug #6760: af-packet: hugepages Error for ARM64 and af-packet IPS mode added

LS Updated by Lukas Sismis about 2 years ago Actions #5

It should have been run on DPDK-supported platforms, Linux primarily, I didn't know about this difference in FreeBSD.
Will issue a patch ASAP.

Yes, Bill, something like that should work.

VJ Updated by Victor Julien about 2 years ago Actions #6

An additional problem of the code is that it issues errors but acts as if they are warnings.

LS Updated by Lukas Sismis about 2 years ago Actions #7

  • Status changed from New to In Review
  • Assignee changed from OISF Dev to Lukas Sismis
  • Target version changed from TBD to 8.0.0-beta1
  • Label Needs backport to 7.0 added

OT Updated by OISF Ticketbot about 2 years ago Actions #8

  • Subtask #6765 added

OT Updated by OISF Ticketbot about 2 years ago Actions #9

  • Label deleted (Needs backport to 7.0)

LS Updated by Lukas Sismis about 2 years ago Actions #10

  • Status changed from In Review to Resolved

LS Updated by Lukas Sismis about 2 years ago Actions #11

  • Status changed from Resolved to Closed

VJ Updated by Victor Julien about 1 year ago Actions #12

  • Subject changed from Hugepages Error for FreeBSD when kernel NUMA build option is not enabled to hugepages: error for FreeBSD when kernel NUMA build option is not enabled
Actions

Also available in: PDF Atom