It has been observed that when WFP drivers are registered on a computer, the network throughput can be significantly decreased and the CPU usage can be significantly increased (on one or more cores).
Stream Filters have the largest effect on the performance. Transport Filters (with or without a Stream Filter present) have marginal effect on the performance.
The network throughput achieved is dependent upon these CPU based factors:
· The speed of processor(s)
· The number of cores
· The rate and affinity of ISRs
· The rate and affinity of DPCs
· The amount of WFP processing
DPC starvation plays a significant role in the network throughput achieved. When there are continual ISR interruptions, the DPC processing lags and acknowledgements are not processed in a timely fashion. This leads to a full receive buffer and an eventual catch-up period where new packet processing is halted. Changing the size of the receive buffer (from 4k to 64k) has a positive effect on the scheduling as this affects the ISR rate. Changing the NIC vendor also affects the throughput as each NIC vendor fires ISRs at different rates.
Laptops with lower-end processors are very susceptible to scheduling conflicts and accordingly have a more dramatic decrease in network throughput compared to other computers (laptops, desktops, servers) equipped with high-end processors. Laptops that lower their processor speed when AC power is unavailable are further affected due to the reduced amount of CPU resource.
Microsoft has reviewed the Windows Filtering Platform (WFP) implementation for the products listed. The WFP overhead is deemed to be by-design.
Id. de artículo: 2764911 - Última revisión: 3 oct. 2012 - Revisión: 1