locked
Network Perfomance issue of 10Gbps Network Environment (WFP) RRS feed

  • Question

  • Hi.

    I have tried network speed testing in a 10Gbps network environment.

    As a result of testing, the speed is 8.4Gbps without network filter driver (WFP based).

    However, after loading the network filter driver (WFP-based), the speed dropped to 4 ~ 5 Gbps.

    I used xPerf to find the cause. According to the logs, NETIO.sys used a lot of resources for the callout.

    So, I tested with WFPSampler.exe and WFPSamplerCallouts.sys (written by Microsoft), but the results were similar. (About 4 ~ 5Gbps)

    I checked all of the antivirus products AhnLab V3, Norton Free, Avast Free... They all use WFP, and performance degradation has occurred.

    I think this is a structural problem of WFP. Do too much unnecessary work in NETIO.

    I hope to improve the performance of WFP.

    For reference, the problematic layers are

    1. FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET

    2. FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET

    3. FWPM_LAYER_STREAM_V4

    4. FWPM_LAYER_STREAM_V6

    Please Answer me ASAP. Thanks :)


    • Edited by gwgwna Thursday, March 21, 2019 5:25 AM
    Thursday, March 21, 2019 5:21 AM