HotCakeX / Harden-Windows-Security

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.md
https://hotcakex.github.io
MIT License
1.37k stars 107 forks source link

Upcoming Windows Change: 🚀 Microsoft Defender UDP network protection improvements #226

Closed HotCakeX closed 3 months ago

HotCakeX commented 3 months ago

UDP Performance Improvements of the Microsoft Defender Network Protection

The (preview) updates are currently in the stable channel builds 22621.3374 and 22631.3374

General Related Documentation

UDP Segmentation Offload (USO)

UDP Receive Offload is a feature that enables a network adapter to consolidate multiple UDP packets into a larger single buffer before they are passed to the operating system. This process can significantly reduce the CPU overhead involved in processing a large number of small packets by allowing the handling of fewer, larger packets.

This offloading capability is particularly useful for improving the performance of network-intensive applications that receive a high volume of UDP traffic. By offloading the packet processing to the network hardware, it frees up the CPU to perform other tasks, which can lead to overall system performance improvements.

Defender CSP has not officially mentioned these features yet but once it does and tests are performed, these 2 features will be added to the Microsoft Defender category.

How To Activate Them in PowerShell

Set-MpPreference -EnableUdpReceiveOffload $true
Set-MpPreference -EnableUdpSegmentationOffload $true