Re: RSS on FreeBSD stable/12 gateway

2021-03-21 Thread Adrian Chadd
On Sat, 13 Mar 2021 at 23:24, Özkan KIRIK wrote: > > Hello Adrian, > > I wonder if the current RSS code supports software mode. Is it possible to > enforce software RSS? And what about Sender Side Scaling ? The current RSS code does enforce it on all the NICs, so if you enable it and you don't h

Re: RSS on FreeBSD stable/12 gateway

2021-03-14 Thread Adrian Chadd
On Sun, 7 Mar 2021 at 23:08, Özkan KIRIK wrote: > > Thanks, > > I wonder that, why RSS and PCBGROUP options are not enabled in GENERIC > kernel by default. > Is there any performance or stability issues? I've been running it for years at home on my desktop machine with zero issues. However, I'm l

Re: RSS on FreeBSD stable/12 gateway

2021-03-13 Thread Özkan KIRIK
Hello Adrian, I wonder if the current RSS code supports software mode. Is it possible to enforce software RSS? And what about Sender Side Scaling ? I want to assign a snort instance for each NIC queue. Snort is configured to use netmap mode. Needs and questions are below: - For a proper detection

Re: RSS on FreeBSD stable/12 gateway

2021-03-07 Thread Özkan KIRIK
Thanks, I wonder that, why RSS and PCBGROUP options are not enabled in GENERIC kernel by default. Is there any performance or stability issues? On Mon, Mar 8, 2021 at 12:26 AM Hans Petter Selasky wrote: > On 3/7/21 10:03 PM, Özkan KIRIK wrote: > > Any suggestions to enable RSS ? > > I found tha

Re: RSS on FreeBSD stable/12 gateway

2021-03-07 Thread Hans Petter Selasky
On 3/7/21 10:03 PM, Özkan KIRIK wrote: Any suggestions to enable RSS ? I found that RSS hardware computed checksums are not correct when using iflib (intel hardware), compared to what the software expects, so traffic goes on wrong queue and gets dropped simply. Maybe you see something simila

RSS on FreeBSD stable/12 gateway

2021-03-07 Thread Özkan KIRIK
Hello, I'm using FreeBSD stable/12 as firewall. I think RSS is not working properly. Multiple snort processes are running that one process for each NIC queue. I've igb and ixgbe NICs. When number of NIC queues is 8, snort appid detection not working properly. When number of NIC queues is set to 1,