Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Enabling TSO on Intel 10gb/s NICs

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 2 Posters 329 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • O
      olaszfiu
      last edited by

      Hi,
      I'm running pfsense 2.4.4-RELEASE-p2 on a DELL Poweredge with Xeon Silver 4114 CPU and dual Intel 10gb/s NIC.
      Without any tuning I can get a max throughput of ~5.5 Gb/s on each NIC.
      The only way I was able to get full 10gb/s speed is by enabling TSO.
      I've read this could break things, such as ipfw/NAT.
      As I'm planning to use Captive Portal (and this seems to use ipfw) my question is: is it safe to enable TSO in my case ?

      Thanks

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        TSO and LRO are only safe when acting as an endpoint (e.g. appliance, client, server) and not as a router.

        https://docs.netgate.com/pfsense/en/latest/book/config/advanced-networking.html#hardware-large-receive-offloading

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • O
          olaszfiu
          last edited by

          Hi, thanks a lot for claryfing this, I'll keep it disabled.
          BTW, I tried all the reccomendations I found in this page:
          https://docs.netgate.com/pfsense/en/latest/hardware/tuning-and-troubleshooting-network-cards.html
          but still cannot get more than ~5.5 Gb/s from my Intel NIC (measured with iperf3 and multiple parallel streams).
          Is there anything else I could try or this is something I should actually expect from these cards ?

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.