OPNsense - Intel i226 NIC tunables

opnsense-i226-nic-tunables.txt

<item>
  <tunable>net.inet.icmp.drop_redirect</tunable>
  <value>1</value>
  <descr/>
</item>
<item>
  <tunable>net.isr.bindthreads</tunable>
  <value>1</value>
  <descr/>
</item>
<item>
  <tunable>net.isr.maxthreads</tunable>
  <value>-1</value>
  <descr/>
</item>
<item>
  <tunable>net.inet.rss.bits</tunable>
  <value>2</value>
  <descr/>
</item>
<item>
  <tunable>net.inet.rss.enabled</tunable>
  <value>1</value>
  <descr/>
</item>
<item>
  <tunable>kern.ipc.nmbclusters</tunable>
  <value>1000000</value>
  <descr/>
</item>
<item>
  <tunable>kern.ipc.nmbjumbop</tunable>
  <value>524288</value>
  <descr/>
</item>
<item>
  <tunable>hw.intr_storm_threshold</tunable>
  <value>10000</value>
  <descr/>
</item>
<item>
  <tunable>net.inet.ip.intr_queue_maxlen</tunable>
  <value>3000</value>
  <descr/>
</item>
<item>
  <tunable>net.inet6.ip6.intr_queue_maxlen</tunable>
  <value>3000</value>
  <descr/>
</item>
<item>
  <tunable>hw.ix.flow_control</tunable>
  <value>0</value>
  <descr/>
</item>
<item>
  <tunable>dev.igc.0.fc</tunable>
  <value>0</value>
  <descr/>
</item>
<item>
  <tunable>dev.igc.1.fc</tunable>
  <value>0</value>
  <descr/>
</item>
<item>
  <tunable>dev.igc.2.fc</tunable>
  <value>0</value>
  <descr/>
</item>
<item>
  <tunable>dev.igc.3.fc</tunable>
  <value>0</value>
  <descr/>
</item>
<item>
  <tunable>net.isr.dispatch</tunable>
  <value>deferred</value>
  <descr/>
</item>

Hi @dezza. That's weird. Do you perhaps run IDS/IPS? I don't but even with the hardware offloading disabled, I get full line-rate (I use these same tunabels on a 6x i226 N100 unit from Topton). I determined these tunables using the documentation of both OPNsense and pfSense, but also some other sources. Unfortunately I did not wrote down those sources.

https://docs.opnsense.org/troubleshooting/performance.html

https://docs.netgate.com/pfsense/en/latest/hardware/tune.html