mirror of https://github.com/opnsense/docs
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
34 lines
1.9 KiB
ReStructuredText
34 lines
1.9 KiB
ReStructuredText
====================================
|
|
Network
|
|
====================================
|
|
|
|
|
|
---------------------------------
|
|
netmap (IPS, Sensei, ...)
|
|
---------------------------------
|
|
|
|
Netmap is a technology which enables fast packet processing while minimizing overhead, there are however some pittfals
|
|
which may turn your network interface unreachable.
|
|
|
|
Before using this technology, always make sure you have access via another interface (or console) to your firewall
|
|
in case connectivity is dropped.
|
|
|
|
In order for netmap to function properly it is imperative that all sorts of driver / hardware acceleration is disabled
|
|
(:menuselection:`Interfaces -> Settings`), this include :code:`VLAN Hardware Filtering` as well (which wasn't disabled pre 20.7).
|
|
|
|
Some drivers have may have additional tunables, which enable hardware acceleration, make sure to disable them as well
|
|
(.e.g intel ixl has :code:`hw.ixl.enable_head_writeback`, which we disable by default)
|
|
|
|
Below you will find a list of tunables which are know to be (partial) incompatible with netmap.
|
|
|
|
=========================================== =================================================================================
|
|
Tunable Description
|
|
=========================================== =================================================================================
|
|
hw.ixl.enable_head_writeback Intel :code:`ixl(4)` tunable for increased tx performance,
|
|
OPNsense standard value is disabled.
|
|
|
|
net.bpf.zerocopy_enable Use zero-copy for :code:`bpf(4)` for faster processing, when not set (the default)
|
|
packets will not be seen by bpf, which influences the traffic graphs for example.
|
|
|
|
=========================================== =================================================================================
|