Chinese I226-V on 23.05.1, problems

w0w

@stephenw10
I will clarify and draw your attention to the fact that this is my main or primary unit where igc replaced for test with ix (x550-t2) card. There is nothing in suricata logs. I do not think it's suricata or netmap. It looks more like card or driver or some kernel part failure… or i don't know what else it can be.

Is there something in the FreeBSD that ix and igc can use at some level?

Now testing secondary unit igc0 under iperf 100Mbit load, port speed is 2500, switch is placed between test server and igc0 port.

stephenw10

Well the logs show the link bouncing. So either it really did bounce in which case I'd be trying to confirm that from logs in the switch. Or it was a virtual interface of some sort like netmap. The only time I have seen the link bounced by something in software (other than a NIC config change) is when using Snort or Suricata in in-line mode.

w0w

@stephenw10
Well, how can I disable netmap completely?

stephenw10

Put Suricata in legacy mode. It uses netmap for in-line mode.

w0w

@stephenw10
I've removed suricata completely, but I still see
ix1: netmap queues/slots: TX 4/2048, RX 4/2048 in dmesg output for all the cards, is this normal?

w0w

I don’t want to jump to conclusions, but at the moment there is a suspicion that there is some kind of dependence between these connection breaks and the netmap, which is built into the kernel, as I understand it, and PPPoE. I can’t imagine what kind of dependence, but if the port is used on 226 as a normal DHCP through a similar connection, as in the case of PPPoE, the link is stable.
At the moment, I have replaced both cards on both testlab firewalls with the original Intel X550-T2 running latest firmware.
Also I removed the suricata, and we will see if the situation repeats itself next month.

stephenw10

@w0w said in Chinese I226-V on 23.05.1, problems:

is this normal?

Yes. The driver shows that as available queues when it attaches:

ix0: <Intel(R) X553 N (SFP+)> mem 0x80400000-0x805fffff,0x80604000-0x80607fff at device 0.0 on pci9
ix0: Using 2048 TX descriptors and 2048 RX descriptors
ix0: Using 4 RX queues 4 TX queues
ix0: Using MSI-X interrupts with 5 vectors
ix0: allocated for 4 queues
ix0: allocated for 4 rx queues
ix0: Ethernet address: 00:08:a2:12:17:7e
ix0: eTrack 0x8000084b PHY FW V65535
ix0: netmap queues/slots: TX 4/2048, RX 4/2048

That doesn't mean that netmap itself is in use.

w0w

Preliminary information on one of the firewalls — X550-T2 works without problems. If the connection is interrupted, then only from the provider, every known amount of days. Link never going down as it did with igc.

stephenw10

Hmm, so the physical link stays up and only the PPPoE is restarted?

w0w

@stephenw10
Yes, exactly.

stephenw10

Hmm, I have no idea what would cause that on igc but not ix. Unless it's actually the igc link dropping causing PPPoE to reset. I've never seen it on any of our igc NICs but that is the reported symptom from those early igc NICs in Linux or Windows.

w0w

@stephenw10
Everything is possible. It can be fake i225-v3 or even 226, just something reflashed early 225. Also it can be this buggy pcie hub/switch that is present on 2 port version cards.
But, what is really strange is that when i used it just as DHCP WAN it was also rock stable, the problem remains when PPPoE is used. I don't know. Maybe some hidden bug in the driver

Unoptanio

@w0w
Hello,

what are the 2.5G NICs that definitely work fine with pfsense 2.7.0?

stephenw10

As far as I know the i225-V rev3 NICs work fine. That's what we have in the 6100 and 4100.

w0w

@Unoptanio
There is i226-V is on the market already, that is claimed as “fixed” version of 225.
But…
https://wccftech.com/intel-releases-new-driver-to-mitigate-i226-i225-ethernet-controller-issues/
This somehow still trial and error…
You can try it anyway, at your own risk. There is no good solution for that amount of money, only if you're going with next level, like 10Gbps Intel cards that have issues as well, but support is a bit better.

stephenw10

We use that in the 8200 and haven't seen any issues there either. The i226 is significantly more efficient. Uses about half the power IIRC.

Unoptanio

@w0w

Greetings,
As a Windows user and owner of motherboards with integrated i225 and i226 network cards, I know the problems with these cards. But the new released intel drivers are only for windows systems. Are there no chip firmware updates?
So on BSB14 I have no idea if an updated driver has been released

Unoptanio

@stephenw10 said in Chinese I226-V on 23.05.1, problems:

8200

To install pfsense 2.7.0 in a traditional PC, do you know if this card works well? Card PCI Express Intel X710BM2

Product Description:
Model number: X710-DA2
Chipset: Intel X710BM2
Transmission rate: Up to 10Gb/s per port
Bus Interface: PCI Express 3.0 X8
Port configuration: Dual port
Connector: SFP+ connector
Bracket: Low profile & Full height
Accessory: A low profile bracket

In this moment i have installed:
N.1 Intel Ethernet I350-T4V2 10/100/1000 Mbps 4*GLAN PCi Ex 2.0 4x

Psych0D0g

@Unoptanio should work i use a 4 port counterpart of the x710 variant just well

Unoptanio

@Psych0D0g

I saw that the model "Intel X520-DA2 Intel 82599 10Gbe 2*SFP+ PCi Ex 2.0 8X Bulk" is also on sale, but maybe it's older model .

Intel X520-DA2 Scheda di rete Intel 82599 10Gbe 2*SFP+ PCi Ex 2.0 8X Bulk