Enabling TOE in a VMware VM for the effect of improved networking performance
Deathmage
Banned Posts: 2,496
Hey guys,
I'm curious if anyone here has ever enabled this command:
"netsh int tcp set global chimney = enabled"
It essentially enables TOE, RSS, Checksum/Segmentation offload.
I'm curious if anyone here has ever enabled this command:
"netsh int tcp set global chimney = enabled"
It essentially enables TOE, RSS, Checksum/Segmentation offload.
Comments
-
iBrokeIT Member Posts: 1,318 ■■■■■■■■■□I would be interested in hearing the use case for enabling these settings.2019: GPEN | GCFE | GXPN | GICSP | CySA+
2020: GCIP | GCIA
2021: GRID | GDSA | Pentest+
2022: GMON | GDAT
2023: GREM | GSE | GCFA
WGU BS IT-NA | SANS Grad Cert: PT&EH | SANS Grad Cert: ICS Security | SANS Grad Cert: Cyber Defense Ops | SANS Grad Cert: Incident Response -
joelsfood Member Posts: 1,027 ■■■■■■□□□□TOE can be tricky on VMs. at times it will make performance worse, not better
https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1009517 -
Deathmage Banned Posts: 2,496Well I found this nice little book at Barnes and Noble hidden in a corner on Advanced Windows Setting in Windows Server 2008 and 2012. Since I'm always tinkering at home on how to tweak the piss out of Windows Server, I figured what the heck...
I'm right now transcribing them to my blog as I test them out, here is a graph I've made so far of the settings and their benefits:
[TH]Server role
[/TH]
[TH]Checksum offload
[/TH]
[TH]Segmentation offload
[/TH]
[TH]TCP offload engine (TOE)
[/TH]
[TH]Receive-side scaling (RSS)
[/TH]
File server
X
X
X
X
Web server
X
X
X
X
Mail server (short-lived connections)
X
X
Database server
X
X
X
X
FTP server
X
X
X
Media server
X
X
X
If your hardware supports TOE, RSS, Checksum/Segmentation offload, then you must enable that option in the operating system to benefit from the hardware’s capability. You can enable TOE by running the following command:
"netsh int tcp set global chimney = enabled" -
Deathmage Banned Posts: 2,496TOE can be tricky on VMs. at times it will make performance worse, not better
https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1009517
Well that is interesting indeed. Will need to monitor the server that this was applied too. I just did it to the file server, will watch the graphs and compare them to the baselines from before the change. If it effects it, I can simply turn it off. Was curious of it's benefits maybe with the SQL server.
Always looking to increase performance, but it's not a perfect science. -
iBrokeIT Member Posts: 1,318 ■■■■■■■■■□Just because you can toggle a setting doesn't necessarily mean you should unless there is a strong need or use case for doing so. By doing a bunch of stuff like this you are increasing the complexity of your environment and you will have to spend time ruling this stuff out when something goes wrong all for a marginal gain in performance at best.2019: GPEN | GCFE | GXPN | GICSP | CySA+
2020: GCIP | GCIA
2021: GRID | GDSA | Pentest+
2022: GMON | GDAT
2023: GREM | GSE | GCFA
WGU BS IT-NA | SANS Grad Cert: PT&EH | SANS Grad Cert: ICS Security | SANS Grad Cert: Cyber Defense Ops | SANS Grad Cert: Incident Response -
Deathmage Banned Posts: 2,496Just because you can toggle a setting doesn't necessarily mean you should unless there is a strong need or use case for doing so. By doing a bunch of stuff like this you are increasing the complexity of your environment and you will have to spend time ruling this stuff out when something goes wrong all for a marginal gain in performance at best.
Indeed, I tested it at home in the home-lab and I saw differences. Testing it in Production now. Was curious though if others used it. -
iBrokeIT Member Posts: 1,318 ■■■■■■■■■□How much of a difference did you see? What were your numbers before and after? How did you measure the performance difference? (genuinely interested)2019: GPEN | GCFE | GXPN | GICSP | CySA+
2020: GCIP | GCIA
2021: GRID | GDSA | Pentest+
2022: GMON | GDAT
2023: GREM | GSE | GCFA
WGU BS IT-NA | SANS Grad Cert: PT&EH | SANS Grad Cert: ICS Security | SANS Grad Cert: Cyber Defense Ops | SANS Grad Cert: Incident Response -
Deathmage Banned Posts: 2,496I'm home now, but when I get back to work, I can post the baseline screenshots.