[SOLVED] Realtek & FreeBSD 11

[csmall]

Is anyone using Realtek nic's with 17.1 (FreeBSD 11)?

I'm wondering if the driver support is any better. I had to move away from OPNSense because IDPS didn't work with these NIC's.

[franco]

Hi csmall,

We're migrating to Realtek's original driver version 1.93 (released February 2017) with 17.1.2. If there aren't any late show stoppers.

So far people have reported promising results. I have one more IPS test that I want to do tomorrow.

The relevant thread is:

https://forum.opnsense.org/index.php?topic=4183.0


Cheers,
Franco

PS: Problems in FreeBSD 11 are the same, that's why we are moving to the original vendor driver.

[csmall]

Hi csmall,

We're migrating to Realtek's original driver version 1.93 (released February 2017) with 17.1.2. If there aren't any late show stoppers.

So far people have reported promising results. I have one more IPS test that I want to do tomorrow.

The relevant thread is:

https://forum.opnsense.org/index.php?topic=4183.0


Cheers,
Franco

PS: Problems in FreeBSD 11 are the same, that's why we are moving to the original vendor driver.

I would love to switch back to OPNSense! I hope IDPS works in 17.1.2

[franco]

Hi C,

So this is how IPS testing went:

I could max out my connection (47 Mbit / 9 Mbit) with a Realtek on an older APU with a small IPS ruleset. Though the Realtek 1.93 driver does not support Netmap/IPS mode natively like the one in FreeBSD, the emulation mode of Netmap works well.

The emulation mode may also prevent some problems the FreeBSD driver was having as it does not interfere with driver operation and it's been known to run smoothly for others (our 16.7 Intel e1000 driver and vmxnet3 in VMware always use this emulation).

Feeling lucky so I'm marking this solved. :)


Cheers,
Franco

[csmall]

Hi C,

So this is how IPS testing went:

I could max out my connection (47 Mbit / 9 Mbit) with a Realtek on an older APU with a small IPS ruleset. Though the Realtek 1.93 driver does not support Netmap/IPS mode natively like the one in FreeBSD, the emulation mode of Netmap works well.

The emulation mode may also prevent some problems the FreeBSD driver was having as it does not interfere with driver operation and it's been known to run smoothly for others (our 16.7 Intel e1000 driver and vmxnet3 in VMware always use this emulation).

Feeling lucky so I'm marking this solved. :)


Cheers,
Franco

Great news! So this is in 17.1.2 and it is being released tomorrow?

[csmall]

Franco,

Was your testing done with the new Suricata 3.2.1?

[franco]

Realtek 1.92 + Suricata 3.2.1 + Hyperscan 4.4.0


Cheers,
Franco

[tillsense]

Hi C,

So this is how IPS testing went:

I could max out my connection (47 Mbit / 9 Mbit) with a Realtek on an older APU...

Cheers,
Franco

Hi Franco,

which was exactly that? APU1D?

cheers till

[franco]

APU1C :D