Bug #6762
closed
Hugepages Error for FreeBSD when kernel NUMA build option is not enabled
Added by Bill Meeks 10 months ago.
Updated 9 months ago.
Description
The new hugepages NUMA snapshot query code in Suricata 7.0.3 is generating a pair of back-to-back errors in the Suricata startup log ( suricata.log ) on systems based on FreeBSD where the NUMA kernel build option is not enabled. These are the two error messages:
[100687 - Suricata-Main] 2024-02-08 13:42:14 Error: hugepages: unable to open /sys/devices/system/node/
[100687 - Suricata-Main] 2024-02-08 13:42:14 Error: hugepages: failed to obtain number of NUMA nodes in the system
I am specifically seeing this error with the rollout of Suricata 7.0.3 on the pfSense firewall distro which is built upon FreeBSD 14.0-CURRENT. My understanding is that NUMA support is an optional kernel build parameter in FreeBSD and it is typically defaulted to disabled.
I recommend a suricata.yaml config option to either enable or disable the NUMA snapshot query during Suricata startup. Perhaps default it to "disabled" so as to be safe on non-NUMA systems.
- Subject changed from Hugepages error in FreeBSD when kernel NUMA build option is not enabled to Hugepages Error for FreeBSD when kernel NUMA build option is not enabled
@Lukas Sismis Was this code intended to be run on FreeBSD, or just Linux.
Jason Ish wrote in #note-2:
@Lukas Sismis Was this code intended to be run on FreeBSD, or just Linux.
Yeah, according to my FreeBSD experts on the pfSense side, the path /sys/devices/system/node/ is specific to Linux. So, even if the NUMA kernel build option is enabled, the NUMA snapshot query still will not succeed on FreeBSD.
Maybe this new code should all be wrapped by a runmode=DPDK test ??
- Related to Bug #6760: Hugepages Error for ARM64 and af-packet IPS mode added
It should have been run on DPDK-supported platforms, Linux primarily, I didn't know about this difference in FreeBSD.
Will issue a patch ASAP.
Yes, Bill, something like that should work.
An additional problem of the code is that it issues errors but acts as if they are warnings.
- Status changed from New to In Review
- Assignee changed from OISF Dev to Lukas Sismis
- Target version changed from TBD to 8.0.0-beta1
- Label Needs backport to 7.0 added
- Label deleted (
Needs backport to 7.0)
- Status changed from In Review to Resolved
- Status changed from Resolved to Closed
Also available in: Atom
PDF