Bug #6762
closedHugepages Error for FreeBSD when kernel NUMA build option is not enabled
Description
The new hugepages NUMA snapshot query code in Suricata 7.0.3 is generating a pair of back-to-back errors in the Suricata startup log ( suricata.log ) on systems based on FreeBSD where the NUMA kernel build option is not enabled. These are the two error messages:
[100687 - Suricata-Main] 2024-02-08 13:42:14 Error: hugepages: unable to open /sys/devices/system/node/
[100687 - Suricata-Main] 2024-02-08 13:42:14 Error: hugepages: failed to obtain number of NUMA nodes in the system
I am specifically seeing this error with the rollout of Suricata 7.0.3 on the pfSense firewall distro which is built upon FreeBSD 14.0-CURRENT. My understanding is that NUMA support is an optional kernel build parameter in FreeBSD and it is typically defaulted to disabled.
I recommend a suricata.yaml config option to either enable or disable the NUMA snapshot query during Suricata startup. Perhaps default it to "disabled" so as to be safe on non-NUMA systems.
Updated by Bill Meeks 9 months ago
- Subject changed from Hugepages error in FreeBSD when kernel NUMA build option is not enabled to Hugepages Error for FreeBSD when kernel NUMA build option is not enabled
Updated by Jason Ish 9 months ago
@Lukas Sismis Was this code intended to be run on FreeBSD, or just Linux.
Updated by Bill Meeks 9 months ago
Jason Ish wrote in #note-2:
@Lukas Sismis Was this code intended to be run on FreeBSD, or just Linux.
Yeah, according to my FreeBSD experts on the pfSense side, the path /sys/devices/system/node/ is specific to Linux. So, even if the NUMA kernel build option is enabled, the NUMA snapshot query still will not succeed on FreeBSD.
Maybe this new code should all be wrapped by a runmode=DPDK test ??
Updated by Victor Julien 9 months ago
- Related to Bug #6760: Hugepages Error for ARM64 and af-packet IPS mode added
Updated by Lukas Sismis 9 months ago
It should have been run on DPDK-supported platforms, Linux primarily, I didn't know about this difference in FreeBSD.
Will issue a patch ASAP.
Yes, Bill, something like that should work.
Updated by Victor Julien 9 months ago
An additional problem of the code is that it issues errors but acts as if they are warnings.
Updated by Lukas Sismis 9 months ago
- Status changed from New to In Review
- Assignee changed from OISF Dev to Lukas Sismis
- Target version changed from TBD to 8.0.0-beta1
- Label Needs backport to 7.0 added
Updated by Lukas Sismis 9 months ago
- Status changed from In Review to Resolved