{"id":14176,"date":"2018-01-26T16:08:13","date_gmt":"2018-01-26T16:08:13","guid":{"rendered":"https:\/\/www.firewallhardware.it\/schede-di-rete-soluzioni-ed-ottimizzazioni\/"},"modified":"2023-06-05T17:34:57","modified_gmt":"2023-06-05T15:34:57","slug":"tuning-and-troubleshooting-network-cards","status":"publish","type":"post","link":"https:\/\/blog.miniserver.it\/en\/pfsense\/tuning-and-troubleshooting-network-cards\/","title":{"rendered":"Tuning and Troubleshooting Network Cards"},"content":{"rendered":"

Broadcom bce(4) Cards<\/h3>\n

Several users have noted issues with certain Broadcom network cards, especially those built into Dell hardware. If you find that your bce cards are behaving erratically, dropping packets, or causing system crashes, then you may want to apply the following tweaks, especially on amd64.<\/p>\n

In \/boot\/loader.conf.local – Add the following (or create the file if it does not exist):<\/p>\n

kern.ipc.nmbclusters=”131072″
\nhw.bce.tso_enable=0
\nhw.pci.enable_msix=0<\/p>\n

That will increase the amount of network memory buffers, disable TSO directly, and disable msix.<\/p>\n

Packet loss with many (small) UDP packets<\/h3>\n

If you see a lot of packet loss with UDP on bce cards, you might also try changing the netisr settings. These can be set as system tunables under System > Advanced, on the System Tunables tab. On that page, add two new tunables:<\/p>\n

net.isr.direct_force=1
\nnet.isr.direct=1<\/p>\n

Broadcom bge(4) Cards<\/h3>\n

See above, but change “bce” to “bge” in the setting names.<\/p>\n

Intel igb(4) and em(4) Cards<\/h3>\n

Certain intel igb cards, especially multi-port cards, can very easily\/quickly exhaust mbufs and cause panics, especially on amd64. The following tweaks should help:<\/p>\n

In \/boot\/loader.conf.local – Add the following (or create the file if it does not exist):<\/p>\n

kern.ipc.nmbclusters=”131072″
\nhw.igb.num_queues=1<\/p>\n

That will increase the amount of network memory buffers, and make the card use one queue instead of multiple queues, to reduce the strain on the system.<\/p>\n

The same settings can also apply to em(4) cards, just use “em” in place of “igb” in the setting(s) above.<\/p>\n

Intel ix(4) Cards<\/h3>\n

in \/boot\/loader.conf.local<\/p>\n

kern.ipc.nmbclusters=”262144″
\nkern.ipc.nmbjumbop=”262144″<\/p>\n

As a sysctl (system tunable)<\/p>\n

hw.intr_storm_threshold=10000<\/p>\n

If using VLANs with Intel 10 Gb ix(4) cards, you may need to disable some features of the driver for VLANs to work correctly. For instance, to apply these settings on NIC ix0, run the following.<\/p>\n

ifconfig ix0 -vlanhwfilter<\/p>\n

That alone should be enough, but in some cases you may also find that you need to disable TSO in addition to VLAN hardware filtering, which can be done like so:<\/p>\n

ifconfig ix0 -vlanhwfilter -vlanhwtso -tso<\/p>\n

You can place these commands into a shellcmd tag to execute at boot time to make the change persistent.<\/p>\n

Flow Control<\/h3>\n

In some circumstances, you may wish to disable flow control. The exact method of this depends on the hardware involved, but here are a couple examples.<\/p>\n