Project

General

Profile

Actions

Bug #6762

closed

Hugepages Error for FreeBSD when kernel NUMA build option is not enabled

Added by Bill Meeks 2 months ago. Updated about 1 month ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

The new hugepages NUMA snapshot query code in Suricata 7.0.3 is generating a pair of back-to-back errors in the Suricata startup log ( suricata.log ) on systems based on FreeBSD where the NUMA kernel build option is not enabled. These are the two error messages:

[100687 - Suricata-Main] 2024-02-08 13:42:14 Error: hugepages: unable to open /sys/devices/system/node/
[100687 - Suricata-Main] 2024-02-08 13:42:14 Error: hugepages: failed to obtain number of NUMA nodes in the system

I am specifically seeing this error with the rollout of Suricata 7.0.3 on the pfSense firewall distro which is built upon FreeBSD 14.0-CURRENT. My understanding is that NUMA support is an optional kernel build parameter in FreeBSD and it is typically defaulted to disabled.

I recommend a suricata.yaml config option to either enable or disable the NUMA snapshot query during Suricata startup. Perhaps default it to "disabled" so as to be safe on non-NUMA systems.


Subtasks 1 (0 open1 closed)

Bug #6765: Hugepages Error for FreeBSD when kernel NUMA build option is not enabled (7.0.x backport)ClosedLukas SismisActions

Related issues 1 (0 open1 closed)

Related to Suricata - Bug #6760: Hugepages Error for ARM64 and af-packet IPS modeClosedLukas SismisActions
Actions #1

Updated by Bill Meeks 2 months ago

  • Subject changed from Hugepages error in FreeBSD when kernel NUMA build option is not enabled to Hugepages Error for FreeBSD when kernel NUMA build option is not enabled
Actions #2

Updated by Jason Ish 2 months ago

@Lukas Sismis Was this code intended to be run on FreeBSD, or just Linux.

Actions #3

Updated by Bill Meeks 2 months ago

Jason Ish wrote in #note-2:

@Lukas Sismis Was this code intended to be run on FreeBSD, or just Linux.

Yeah, according to my FreeBSD experts on the pfSense side, the path /sys/devices/system/node/ is specific to Linux. So, even if the NUMA kernel build option is enabled, the NUMA snapshot query still will not succeed on FreeBSD.

Maybe this new code should all be wrapped by a runmode=DPDK test ??

Actions #4

Updated by Victor Julien 2 months ago

  • Related to Bug #6760: Hugepages Error for ARM64 and af-packet IPS mode added
Actions #5

Updated by Lukas Sismis 2 months ago

It should have been run on DPDK-supported platforms, Linux primarily, I didn't know about this difference in FreeBSD.
Will issue a patch ASAP.

Yes, Bill, something like that should work.

Actions #6

Updated by Victor Julien 2 months ago

An additional problem of the code is that it issues errors but acts as if they are warnings.

Actions #7

Updated by Lukas Sismis 2 months ago

  • Status changed from New to In Review
  • Assignee changed from OISF Dev to Lukas Sismis
  • Target version changed from TBD to 8.0.0-beta1
  • Label Needs backport to 7.0 added
Actions #8

Updated by OISF Ticketbot 2 months ago

  • Subtask #6765 added
Actions #9

Updated by OISF Ticketbot 2 months ago

  • Label deleted (Needs backport to 7.0)
Actions #10

Updated by Lukas Sismis about 2 months ago

  • Status changed from In Review to Resolved
Actions #11

Updated by Lukas Sismis about 1 month ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF