OPNsense Forum
English Forums => Hardware and Performance => Topic started by: jerry.jacobs on November 30, 2018, 02:22:47 pm
-
Hi All,
We just received the OPNsense A10 Quad Core SSD rack Gen2 appliance and I tried to find out if we could enable the hardware offloading features.
https://www.applianceshop.eu/security-appliances/19-rack-appliances/opnsense-based/dec2630-opnsense-a10-quad-core-ssd-rack-gen2.html
I had a look at the NIC driver:
IntelĀ® I210-AT https://www.intel.com/content/dam/www/public/us/en/documents/datasheets/i210-ethernet-controller-datasheet.pdf
This is fearly clear in the datasheet:
* IPv6 support for IP/TCP and IP/UDP receive checksum offload
Which offloading types could I enable for this appliance in the latest OPNSense without affecting performance?
Kind regards,
Jerry Jacobs
-
Hi Jerry,
We normally discourage the use of various offloading features, since there are side affects/incompatibilities.
If for example you would like to use IPS, none of the offloading features may be enabled to prevent traffic from being dropped by suricata+netmap.
In case the appliance isn't used for routing, offloading can improve performance, otherwise it might even slow you down (https://wiki.freebsd.org/10gFreeBSD/Router#Disabling_LRO_and_TSO).
So, the short answer in most cases is none.
Best regards,
Ad
-
Hi AdSchellevis,
Thanks for the answer. I will leave it untouched then.
Kind regards,
Jerry Jacobs