Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Intel NIC I-226V

    Scheduled Pinned Locked Moved General pfSense Questions
    78 Posts 3 Posters 12.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      Antibiotic @stephenw10
      last edited by

      @stephenw10 I will try to set in native mode, but also have net.bpf.zerocopy_enable=1 is it not a problem?

      pfSense plus 24.11 on Topton mini PC
      CPU: Intel N100
      NIC: Intel i-226v 4 pcs
      RAM : 16 GB DDR5
      Disk: 128 GB NVMe
      Brgds, Archi

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        I wouldn't expect that to make any difference there if netmap is working. Why do you have that set?

        A 1 Reply Last reply Reply Quote 0
        • A
          Antibiotic @stephenw10
          last edited by

          @stephenw10 During suricata installation at the end was this tip and I did)))

          pfSense plus 24.11 on Topton mini PC
          CPU: Intel N100
          NIC: Intel i-226v 4 pcs
          RAM : 16 GB DDR5
          Disk: 128 GB NVMe
          Brgds, Archi

          A 1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Oh, in the install log? Ok well I would definitely try disabling that then. Almost all users would not set that.

            1 Reply Last reply Reply Quote 0
            • A
              Antibiotic @Antibiotic
              last edited by

              @Antibiotic Unfortunately, sysctl dev.netmap.admode=1 doesn't help at all. So the option only to use in legacy mode?

              pfSense plus 24.11 on Topton mini PC
              CPU: Intel N100
              NIC: Intel i-226v 4 pcs
              RAM : 16 GB DDR5
              Disk: 128 GB NVMe
              Brgds, Archi

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                But it didn't break traffic?

                That implies igc is running netmap in native mode but for some reason the performance isn't as expected. That's not something I've ever poked at in any depth. There may be some tuning option there though.

                A 1 Reply Last reply Reply Quote 0
                • A
                  Antibiotic @stephenw10
                  last edited by Antibiotic

                  @stephenw10 I'm left netmap in native mode and remove from sysctl net.bpf.zerocopy_enable=1. The speed the same as not to be normal. Its not a break traffic. Can you please give me some links for tuning netmap in native mode? BTW after reboot all this services ( suricata, crowdsec, ntopng and pfblockerng need to start manually something wrong)

                  pfSense plus 24.11 on Topton mini PC
                  CPU: Intel N100
                  NIC: Intel i-226v 4 pcs
                  RAM : 16 GB DDR5
                  Disk: 128 GB NVMe
                  Brgds, Archi

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Well nothing specific since, as I say, I've not really poked at this. But I'd start here: https://man.freebsd.org/cgi/man.cgi?query=netmap

                    Bill can probably tell us if this is worth investigating.

                    A 1 Reply Last reply Reply Quote 0
                    • A
                      Antibiotic @stephenw10
                      last edited by

                      @stephenw10 FreeBSD man page too hard for me)))) I'm not IT pro)) Could some read our conversation and give some tips! I will wait

                      pfSense plus 24.11 on Topton mini PC
                      CPU: Intel N100
                      NIC: Intel i-226v 4 pcs
                      RAM : 16 GB DDR5
                      Disk: 128 GB NVMe
                      Brgds, Archi

                      1 Reply Last reply Reply Quote 0
                      • bmeeksB
                        bmeeks
                        last edited by

                        How many Suricata instances are you running and how many enabled rules on each instance?

                        Remove this setting:

                        sysctl net.bpf.zerocopy_enable=1
                        

                        Ignore those notes at the end of the package install. They are coming from the default notes packaged from upstream and have no usefulness in pfSense.

                        Running Suricata, ntopng, and Crowdsec is asking a lot from this firewall.

                        Post back the output of this command:

                        ps -ax | grep suricata
                        

                        I'm guessing you have multiple Suricata instances running on the same interface and thus are severely wasting CPU cycles doing duplicate work.

                        A 3 Replies Last reply Reply Quote 0
                        • A
                          Antibiotic @bmeeks
                          last edited by

                          @bmeeks 26057 - Ss 3:58.16 /usr/local/bin/suricata --netmap -D -c /usr/local/etc/suricata/suricata_12484_igc1/suricata.yaml --pidfile /var/run/suricata_igc112484.pid
                          27203 0 S+ 0:00.00 grep suricata

                          pfSense plus 24.11 on Topton mini PC
                          CPU: Intel N100
                          NIC: Intel i-226v 4 pcs
                          RAM : 16 GB DDR5
                          Disk: 128 GB NVMe
                          Brgds, Archi

                          1 Reply Last reply Reply Quote 0
                          • A
                            Antibiotic @bmeeks
                            last edited by Antibiotic

                            @bmeeks I'm not sure , what you asking but running suricata on LAN only. Also have a on pfSense box 4th NIC's but working only 2 now ( one as WAN and second as LAN)

                            pfSense plus 24.11 on Topton mini PC
                            CPU: Intel N100
                            NIC: Intel i-226v 4 pcs
                            RAM : 16 GB DDR5
                            Disk: 128 GB NVMe
                            Brgds, Archi

                            1 Reply Last reply Reply Quote 0
                            • bmeeksB
                              bmeeks
                              last edited by

                              What rules do you have enabled?

                              Suricata should be able to obtain 1 Gigabit/sec performance using inline-IPS mode with most modern multicore CPUs and a decent multi-queue NIC. Perhaps your flavor of the I-226V NIC has an issue. How many netmap queues and slots show up from this command?

                              grep /var/log/dmesg.boot netmap
                              
                              A 1 Reply Last reply Reply Quote 0
                              • A
                                Antibiotic @bmeeks
                                last edited by

                                @bmeeks Suricata in IPS Policy Selection Balanced
                                IPS Policy Mode Policy

                                pfSense plus 24.11 on Topton mini PC
                                CPU: Intel N100
                                NIC: Intel i-226v 4 pcs
                                RAM : 16 GB DDR5
                                Disk: 128 GB NVMe
                                Brgds, Archi

                                1 Reply Last reply Reply Quote 0
                                • A
                                  Antibiotic @bmeeks
                                  last edited by

                                  @bmeeks
                                  grep /var/log/dmesg.boot netmap
                                  grep: netmap: No such file or directory

                                  pfSense plus 24.11 on Topton mini PC
                                  CPU: Intel N100
                                  NIC: Intel i-226v 4 pcs
                                  RAM : 16 GB DDR5
                                  Disk: 128 GB NVMe
                                  Brgds, Archi

                                  bmeeksB 1 Reply Last reply Reply Quote 0
                                  • bmeeksB
                                    bmeeks @Antibiotic
                                    last edited by

                                    @Antibiotic said in Intel NIC I-226V:

                                    @bmeeks
                                    grep /var/log/dmesg.boot netmap
                                    grep: netmap: No such file or directory

                                    I'm sorry. I had the terms reversed. Use this command:

                                    grep netmap /var/log/dmesg.boot
                                    
                                    A 1 Reply Last reply Reply Quote 0
                                    • A
                                      Antibiotic @bmeeks
                                      last edited by

                                      @bmeeks
                                      igc0: netmap queues/slots: TX 4/1024, RX 4/1024
                                      igc1: netmap queues/slots: TX 4/1024, RX 4/1024
                                      igc2: netmap queues/slots: TX 4/1024, RX 4/1024
                                      igc3: netmap queues/slots: TX 4/1024, RX 4/1024

                                      pfSense plus 24.11 on Topton mini PC
                                      CPU: Intel N100
                                      NIC: Intel i-226v 4 pcs
                                      RAM : 16 GB DDR5
                                      Disk: 128 GB NVMe
                                      Brgds, Archi

                                      1 Reply Last reply Reply Quote 0
                                      • bmeeksB
                                        bmeeks
                                        last edited by

                                        You can try switching the runmode to workers on the INTERFACE SETTINGS tab in Suricata. Restart Suricata after making that change.

                                        If that does not increase performance to where you want it, then you will just have to be content with using Legacy Blocking Mode and abandon Inline IPS Mode. There is really nothing else you can do.

                                        A 2 Replies Last reply Reply Quote 0
                                        • A
                                          Antibiotic @bmeeks
                                          last edited by

                                          @bmeeks
                                          runmode to workers set from beginning , so only option for legacy mode as understood ((((

                                          pfSense plus 24.11 on Topton mini PC
                                          CPU: Intel N100
                                          NIC: Intel i-226v 4 pcs
                                          RAM : 16 GB DDR5
                                          Disk: 128 GB NVMe
                                          Brgds, Archi

                                          1 Reply Last reply Reply Quote 0
                                          • A
                                            Antibiotic @bmeeks
                                            last edited by Antibiotic

                                            @bmeeks
                                            Should I'm remove from sysctl netmap native mode option if suricata set to legacy mode or ntopng still can use this? I will try asking FreeBSD forum , could some tip give me regarding tuning netmap in native mode.

                                            pfSense plus 24.11 on Topton mini PC
                                            CPU: Intel N100
                                            NIC: Intel i-226v 4 pcs
                                            RAM : 16 GB DDR5
                                            Disk: 128 GB NVMe
                                            Brgds, Archi

                                            bmeeksB 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.