Upgrade from E1000E to VMXNET3 Network Adapters for Enhanced Performance and Stability
The E1000E network driver is a common older driver used in VMWare platforms which is known to cause problems with Windows systems under high load, these problems occur even if SenseOn is not running on the system.
SenseOn has identified an issue with the E1000E driver that can lead to a loss of network connectivity, particularly during periods of high network load. The issue likely stems from a bug within the E1000E driver or how it interfaces with the VMware hypervisor. To prevent disruption to your network and ensure optimal performance of your SenseOn deployment, we strongly recommend upgrading to the VMXNET3 network adapter.
This articles outlines why you should upgrade to the VMXNET3 network adapter. While E1000E offers initial convenience as it used to the be default VMware network driver for Windows, VMXNET3 provides significant performance and stability advantages, especially when running SenseOn security solutions.
Issues with E1000E driver
- Driver bugs: e1000e has a history of driver-related bugs that can cause unexpected behavior or system instability. While some of these bugs may have been addressed in later versions, the driver is generally considered less stable than VMXNET3.
- Limited offloading capabilities: e1000e has limited capabilities for offloading tasks like checksum calculations and TCP segmentation to the hypervisor, potentially impacting network performance and security. This means more work is done by the guests CPU rather than dedicated hardware available to the hypervisor or host.
- Driver bugs: e1000e has a history of driver-related bugs that can cause unexpected behavior or system instability. While some of these bugs may have been addressed in later versions, the driver is generally considered less stable than VMXNET3.
- Lack of advanced features: e1000e lacks some of the advanced features offered by VMXNET3, such as support for jumbo frames and Receive Side Scaling (RSS), which can further enhance network performance in certain scenarios.
- Limited support: While e1000e is a common driver, it does not receive the same level of support and updates as VMXNET3, which is the recommended network adapter for VMware environments.
Benefits of VMXNET3
- Enhanced Performance: VMXNET3 is specifically designed for virtual environments and offers significantly improved network throughput and lower CPU overhead compared to E1000E. This translates to faster data transfer speeds and improved overall system performance.
- Increased Stability: VMXNET3 is a more stable and reliable network adapter, reducing the likelihood of network connectivity issues and downtime.
- Improved Security: VMXNET3 includes features that enhance security, such as offloading checksum calculations and TCP segmentation to the hypervisor.
- Future-Proofing: VMXNET3 is the recommended network adapter for VMware environments and is actively maintained and updated by VMware.
How to upgrading to VMXNET3
Upgrading to VMXNET3 is a straightforward process that can be performed without significant downtime. The exact steps may vary depending on your specific VMware environment and operating system. However, the general process involves the following:
- Install VMware Tools: Ensure VMware Tools is installed on your VM. This provides the necessary drivers for VMXNET3.
- Add VMXNET3 Adapter: Add a new VMXNET3 network adapter to your VM's settings.
- Configure Network Settings: Configure the new VMXNET3 adapter with the appropriate network settings, such as IP address, subnet mask, and gateway.
- Remove E1000E Adapter: Once the VMXNET3 adapter is configured and working correctly, remove the old E1000E adapter.
Best Practice
- Consult VMware Documentation: Refer to the official VMware documentation for detailed instructions on configuring VMXNET3 adapters in your specific environment.
- Test Thoroughly: After upgrading to VMXNET3, thoroughly test your network connectivity and applications to ensure everything is working as expected.
- Plan for Downtime: While the upgrade process can be relatively quick, it's always advisable to plan for some downtime to minimise any potential disruptions.
Finding potential hosts with the E1000E driver
The following Hunt Lab query will assist in the finding host which may be running the risk driver. The query does not consider if the hosts are running on VMware but hosts which are should be considered for upgrade to VMXNET3.
SELECT
DISTINCT _hostname,
_platform,
device_name,
image,
service,
driver_class
FROM
endpoint_driver
WHERE
device_name LIKE '%82574L%'
OR image LIKE '%e1i63x64%'
AND _platform = 'os_windows'
AND service = 'e1iexpress'
SenseOn Support
If you encounter any issues during the upgrade process or have any questions, please don't hesitate to contact SenseOn Support for assistance. We are committed to ensuring your SenseOn deployment runs smoothly and efficiently.
Conclusion
Upgrading to VMXNET3 network adapters from E1000E is a crucial step in optimising the performance, stability, and security of your VMware VM's running SenseOn solutions. By following the recommendations outlined in this document, you can prevent potential network connectivity issues and ensure uninterrupted protection for your critical assets.