6.3 Ensure that operating system resource limits are set for MongoDB

Information

Operating systems provide ways to limit and control the usage of system resources such as threads, files, and network connections on a per-process and per-user basis
Rationale:
These ulimits prevent a single user from consuming too many system resources.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Every deployment may have unique requirements and settings. Recommended thresholds and settings are particularly important for MongoDB deployments:
f (file size): unlimited
t (cpu time): unlimited
v (virtual memory): unlimited [1]
n (open files): 64000
m (memory size): unlimited [1] [2]
u (processes/threads): 64000
Restart the mongod and mongos instances after changing the ulimit settings to ensure that the changes take effect.


Default Value:
Not configured

See Also

https://workbench.cisecurity.org/files/1705

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-6

Plugin: Unix

Control ID: e8609aef3254472cbfb2eade079de48a27d579a785e769888379d1d47fdd933c