Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

In Linux, incoming network data typically enters through a NIC receive queue, is handled by its driver and the kernel’s NAPI polling mechanism, then passes through applicable networking and protocol processing toward a socket an application can use. The exact route depends on the hardware, driver, kernel, configuration, and workload: some traffic is filtered or forwarded, and specialized paths can process packets earlier or with fewer copies.

What happens when a Linux NIC receives a packet?

A NIC receives network frames into hardware-managed receive queues. The driver is the kernel component that interacts with the device and handles receive work. From there, packet processing continues through the Linux networking stack toward the relevant protocol handling and, when appropriate, an application-facing socket.

This is a conceptual route, not a fixed sequence that every packet follows. Packets may be filtered, forwarded, or otherwise processed without reaching a user process. Hardware features, driver behavior, kernel version, and system configuration all affect the details. The Linux kernel’s networking and network-device APIs describe the driver-facing and upper networking interfaces.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How are packets distributed across CPUs?

On a system with multiple receive queues, Receive Side Scaling (RSS) can use packet-header hashes and an indirection table to choose a hardware queue. Queues may then be handled by different CPUs, allowing receive processing to run in parallel. The result depends on the NIC’s capabilities and the system’s queue and CPU configuration.

#1 Best Overall
Sale
TP-Link 2.5GB PCIe Network Card (TX201) – PCIe to 2.5 Gigabit Ethernet Card
  • 2.5 Gbps PCIe Network Card: With the 2.5G Base-T Technology, TX201 delivers high-speeds of up to 2.5 Gbps, which is 2.5x faster than typical Gigabit adapters. Performance varies by conditions, distance to devices, and obstacles such as walls
  • Versatile Compatibility – The Ethernet Network Adapter is backwards compatible with multiple data rates(2.5 Gbps, 1 Gbps, 100 Mbps Base-T connectivity). The 2.5G Ethernet port automatically negotiates between higher and lower speed connection.
  • QoS: Quality of Service technology delivers prioritized performance for gamers and ensures to avoid network congestion for PC gaming
  • Wake on LAN – Remotely power on or off your computer with WOL, helps to manage your devices more easily
  • Low-Profile and Full-Height Brackets: In addition to the standard bracket, a low-profile bracket is provided for mini tower computer cases

Linux also has software steering mechanisms. RSS and software steering are related ways of distributing work, but they are not mandatory steps that every machine uses. The kernel’s scaling guide covers RSS, RPS, RFS, accelerated RFS, and XPS:

Mechanism What it does Where it fits
RSS Uses packet-header hashes and an indirection table to select a receive queue. Hardware receive-queue selection; depends on device support.
RPS Provides software receive packet steering. Software scaling of receive processing.
RFS Provides receive flow steering. Software receive-flow placement.
Accelerated RFS Provides an accelerated form of receive flow steering. Depends on device and system support.
XPS Provides transmit-side packet steering. Transmit processing rather than the incoming-packet path.

These mechanisms differ in whether steering is hardware- or software-based, whether they affect receive or transmit work, and how queue and CPU placement are handled. There is no universal tuning choice: the relevant bottleneck, locality, workload, and device support matter.

Rank #2
Sale
TP-Link 10/100/1000Mbps Gigabit Ethernet PCI Express Network Card, Win10/11
  • Ultra-Fast: 10/100/1000Mbps PCIe Adapter upgrade your Ethernet speed to Gigabit
  • Automation: Wake-on-LAN supporting Auto-Negotiation and Auto MDI/MDIX
  • Supports: IEEE802.3x Flow Control for Full-duplex Mode and backpressure for Half-duplex Mode; 4k Bytes Port: 1x 10/100/1000Mbps RJ45 Network Media
  • Compatibility: Windows 11, 10, 8.1, 8, 7, Vista, XP
  • Dual Bracket: Low profile and standard profile bracket inside works with both mini and standard size PCs.

What does NAPI do?

“NAPI is the event handling mechanism used by the Linux networking stack,” according to the Linux Kernel documentation’s NAPI page. A device commonly notifies the host about events, often with interrupts. The networking stack schedules NAPI, and the driver’s poll method processes packets and other work.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

NAPI polling uses a budget to limit receive work, helping processing share CPU time rather than allowing one polling pass to run without bound. A driver may also complete transmit work while polling. The kernel API documentation describes packets being queued from a driver toward upper protocol levels through the backlog NAPI device, and recommends NAPI and GRO for modern drivers. These details are driver- and configuration-dependent; NAPI is not a guarantee that all packets use one identical interrupt-to-application sequence.

Rank #3
Sale
TP-Link 10GB PCIe Network Card (TX401)-PCIe to 10 Gigabit Ethernet Adapter
  • 10 Gbps PCIe Network Card: With the latest 10GBase-T Technology, TX401 delivers extreme speeds of up to 10 Gbps, which is 10× faster than typical Gigabit adapters, guaranteeing smooth data transmissions for both internet access and local data transmissions[1]
  • Versatile Compatibility: With extreme speed and ultra-low latency, 10GBase-T is backwards compatible with multiple data rates (10 Gbps, 5 Gbps, 2.5 Gbps, 1 Gbps, 100 Mbps), automatically negotiating between higher and lower speed connections
  • QoS: Quality of Service technology delivers prioritized performance for gamers and ensures to avoid network congestion for PC gaming
  • Free CAT6A Ethernet Cable: To maximize TX401's performance, a 1.5 m CAT6A Ethernet Cable is included—rated for up to 10 Gbps while a regular cable is only rated for 1 Gbps
  • Low-Profile and Full-Height Brackets: In addition to the standard bracket, a low-profile bracket is provided for mini tower computer cases

How do packets reach an application?

After receive-side driver work, packets proceed through the applicable kernel networking and protocol handling. If they are destined for a local application and are not diverted or stopped by other processing, they can become available through a socket interface that the application uses.

The socket is the application-facing endpoint, not a promise that every frame received by the NIC will be delivered to a process. Filtering, forwarding, congestion, protocol behavior, or other handling can change or end the path. The exact middle stages depend on the traffic and system setup, so a single diagram or sequence should not be mistaken for a universal packet trace.

Rank #4
2.5Gb PCIe Network Card, GiGaPlus 2500Mbps Ethernet Interface Adapter, with Realtek RTL8125B, Wake on LAN, 2.5G NIC Compliant Windows/Linux/MAC OS
  • ⭐【Super-fast 2.5Gbps Networking】High up to 2.5x-speed with Realtek RTL8125B chip, much faster data-transfer speeds for gaming, living broadcasts and downloads in bandwidth-demanding tasks.
  • ⭐【Complete Compatibility】Seamless backward compatibility for 2.5Gbps/1Gbps/100Mbps, Support Windows11/10/8.1/8/7, MAC OS and Linux, no dirver needed on Windows10, easily download the driver in Realtek official website for other OS.
  • ⭐【PCIe to 2.5G RJ45】 This 2.5GBASE-T PCIe Network Adater convers a PCIe slot(X1/X4/X8/16) into a 2.5G RJ45 Ethernet Port. Note: Only work with PCIe slot, not for PCI slot.
  • ⭐【Widely Use with Heat Sink】Comes with standard bracket and low-profile-bracket to meet the needs of different cases such as desktop, workstation, server, mini tower computer and so on. Excellent heat dissipation can reduce the temperature quickly and maintain the stability of network transmission.
  • ⭐【Customer Service】Each GigaPlus 2.5G NIC has been rigorously tested for reliability, quality, and performance. We provide lifetime technical support for the entire product.

Where do XDP and AF_XDP fit?

XDP programs can inspect or redirect packets early in processing. AF_XDP provides socket rings and UMEM buffers for high-performance packet processing in user space. These options can create paths that differ from the ordinary route toward a conventional application socket; they are specialized mechanisms, not default stages required for routine networking.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Operation and performance depend on device and driver support, configuration, and the particular path in use. In particular, ordinary AF_XDP fallback behavior and XDP-capable paths are not identical. The kernel’s AF_XDP documentation describes the interface. For XDP receive metadata, the XDP RX metadata guide notes that availability depends on driver implementation and whether the packet has the metadata in question.

Best Value
Dual-Port PCIe Gigabit Network Card 1000M PCI Express Ethernet Adapter with Intel 82575/82576 Two Ports LAN NIC Card for Support PXE for Windows/Windows Server/Linux/Freebsd/DOS with Low Profile
  • Supports Windows 7/8/2000/XP/Vista/Windows Server 2003/2008/2012; Novell Netware 5.x/6.x; Linux; FreeBSD 7.x or later; DOS; SCO Open Server; UnixWare / OpenUnix 8; Sun Solaris x86; OS Independent Vmware ESX (Does not support VMware ESXi 7.0 or above)
  • PCI Express 2.1. 2.5 GT/s x1 Lane. Compatible with x1, x2,x4, x8, x16 standard and low-profile PCI Express slots.
  • Compatible with IPMI pass-through (SMBus or NC-SI), iSCSI boot, WoL, PXE remote boot, VLAN filtering
  • Support Network Management Protocol (SNMP) and Remote Network Monitoring (RMON).
  • Imported alloy heat sink , can effectively remove excess heat , keep the network card at normal operating temperature and double stable operation
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What are busy polling and zero-copy receive?

Busy polling trades CPU time for latency

With busy polling, a process checks for packets before an interrupt rather than relying only on the ordinary event-notification sequence. This can trade additional CPU cycles for lower latency. The NAPI documentation also describes epoll-based and threaded approaches; applicability depends on kernel, driver, and application setup. Busy polling is therefore a workload-dependent choice, not a general-purpose speed-up switch.

io_uring zero-copy receive has specific prerequisites

The kernel’s io_uring zero-copy Rx documentation describes eliminating the kernel-to-user copy for payload data while packet headers still pass through the kernel TCP stack. The documented design requires NIC hardware features including header/data split and flow steering, and the kernel API does not configure the NIC for the user. It is a specialized capability rather than the baseline Linux receive path.

Quick Recap

SaleBestseller No. 1
TP-Link 2.5GB PCIe Network Card (TX201) – PCIe to 2.5 Gigabit Ethernet Card
TP-Link 2.5GB PCIe Network Card (TX201) – PCIe to 2.5 Gigabit Ethernet Card
Industry leading 2-year warranty and free 24/7 technical support
$22.46
SaleBestseller No. 2
TP-Link 10/100/1000Mbps Gigabit Ethernet PCI Express Network Card, Win10/11
TP-Link 10/100/1000Mbps Gigabit Ethernet PCI Express Network Card, Win10/11
Ultra-Fast: 10/100/1000Mbps PCIe Adapter upgrade your Ethernet speed to Gigabit; Automation: Wake-on-LAN supporting Auto-Negotiation and Auto MDI/MDIX
$12.99
SaleBestseller No. 3
TP-Link 10GB PCIe Network Card (TX401)-PCIe to 10 Gigabit Ethernet Adapter
TP-Link 10GB PCIe Network Card (TX401)-PCIe to 10 Gigabit Ethernet Adapter
Industry leading 2-year warranty and free 24/7 technical support
$60.53

What to keep in mind when tracing a packet

  • Start with the NIC’s receive queues and driver: device capabilities and driver behavior shape the hardware-facing entry point.
  • Account for NAPI polling as the common event-handling mechanism, while allowing for implementation and configuration differences.
  • Distinguish queue selection and software steering from protocol processing; RSS, RPS, RFS, accelerated RFS, and XPS are complementary mechanisms, not steps every packet must take.
  • Treat XDP, AF_XDP, busy polling, and zero-copy receive as workload- and capability-dependent options, not universal defaults.
  • When diagnosing an actual system, use documentation matching its kernel and check its driver and hardware support before drawing conclusions from a conceptual path.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.