Prosumer NIC's with MACSec, VLAN tag, and other support?

[SDF07S]

What are some good PCIe NIC's that support MACSec, VLAN tagging, have secure hardware isolation, and good driver support?

 

[coxhaus]

I want the network info structure to support all VLANs using switches. I want clients to just flow across my info structure without knowing or caring about network info structure. So, NICs don't matter to me.

I can see using a NIC with tagging if you build a basic software router but I use a layer 3 switch so even my pfsense router does not need VLAN tagging. Networking to me is separate from clients and servers.

 

[Digilog]

What are some good PCIe NIC's that support MACSec, VLAN tagging, have secure hardware isolation, and good driver support?

MACsec and VLAN tagging, and isolation is software based systems that can run on any network interface.
Driver support? Sounds like you are into building a server gateway system than just buying someone's router. Which is fine because I'm doing the same thing. But I am doing it to thoroughly reaserch them so I can compile an unbiased summary of the good bad and ugly in each one. Since I still have my 486 computer with IPCOP, plus an old xenon server running a modified version of linux that ran a web data center network, I can compare and contrast all of them. But I will tell you this right now, all of the current systems are going through growing pains of development since their operating systems are working the bugs out of them.

As for my home network I am using IPFire which is a fork of IPCOP. Which I used before. However, I have it set up a certain way because the way the developers advance the project and their method of utilizing the blue network is incorrect to the original design of IPCOP. A member of this forum pointed out to me something I forgot to look at in addition to these PC router operating systems. Which is the PCIe slot WIFI cards that the person classified them as client cards. Which is, they build them with a single lane which will limit this throughput to 1Gb. So the wireless options with PCIe are limited. Not very much performance difference between them and the two lane M.2 wifi. I find this area networking better utilized with embedded systems (hardware routers) than a single board computer.

 

[coxhaus]

I tried IPcop back 25 years ago when I was running my email server. I had trouble with blocking for my email server so I dumped it pretty quickly without exploring it much.

 

[Digilog]

I tried IPcop back 25 years ago when I was running my email server. I had trouble with blocking for my email server so I dumped it pretty quickly without exploring it much.

I ran a version I patched. But I could never get my fixes submitted and the Dev was a flake at maintaining it. o later, I stuck that machine to the side and went for a time with a store bought router. Then I loaded an Ubuntu server that I stripped out plug n play, network discovery, and dbus and ran iptables, UFW, unbound, and bind9.

 

[sfx2000]

What are some good PCIe NIC's that support MACSec, VLAN tagging, have secure hardware isolation, and good driver support?

Really depends on your use-case...

All said - most Intel NIC's are well supported on Linux and BSD, which covers the bases for many Router/Gateway distributions...