I've seen the guidance for disabling CRC/TSO/LSO within OPNsense when running an IDS.
What about NIC parameters at the ESXi level? TSO can be killed globally with Net.UseHwTSO. Should I be looking into other ESXi params as well? I've been seeing IDS alerts similar to the ones normally blamed on TSO...