{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter/", "slug": "dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter", "url": "https://update.dsesecurity.com/updates/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter/" }, "title": "Set send and receive limits independently on an SDN VM adapter", "summary": "Which traffic direction should a bandwidth limit constrain on an SDN VM network adapter?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "network-infrastructure", "label": "Networks & infrastructure", "alt": "Resilient network core with engineered blue and gold data paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-08T18:15:18+00:00", "modified_at": "2026-09-08T18:23:26+00:00", "reviewed_on": "2026-09-08", "reading_minutes": 1, "word_count": 203, "potentially_affected": "Administrators applying SDN QoS to virtual-machine network adapters.", "dse_recommendation": "Ask the workload owner to specify whether the concern is outbound traffic, inbound traffic, or both.", "primary_source": { "name": "Configure Quality of Service (QoS) for a VM network adapter", "url": "https://learn.microsoft.com/en-us/windows-server/networking/sdn/manage/Configure-QoS-for-Tenant-VM-Network-Adapter", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft SDN QoS permits a maximum bandwidth limit on VM traffic in the sending direction, receiving direction, or both. The documented control applies to VMs on traditional VLANs and SDN virtual networks. Microsoft configures the policies through Network Controller PowerShell cmdlets after Network Controller is installed. The source also describes hardware QoS offload for physical adapters that support it. Microsoft documentation.

\n

Applicability

\n

Identify the VM adapter, network attachment, direction of the contested traffic, and application requirement. Review the physical adapter capabilities and host configuration separately from choosing the requested limit.

\n

DSE recommendation

\n

Ask the workload owner to specify whether the concern is outbound traffic, inbound traffic, or both. Record separate limits and the reason for each. Choose a controlled competing workload and retain the original policy association before changing the adapter configuration.

\n

Verification

\n

Measure both send and receive traffic during the approved test, including a competing VM. Compare the observed rates and application response with the chosen directional limits. Inspect the policy attachment on the intended adapter and preserve any unexpected restriction in the opposite direction as an issue to resolve before wider deployment.

\n

Official references

\n

Microsoft Learn: Configure Quality of Service (QoS) for a VM network adapter. Source reviewed September 8, 2026.

", "content_text": "Source facts\nMicrosoft SDN QoS permits a maximum bandwidth limit on VM traffic in the sending direction, receiving direction, or both. The documented control applies to VMs on traditional VLANs and SDN virtual networks. Microsoft configures the policies through Network Controller PowerShell cmdlets after Network Controller is installed. The source also describes hardware QoS offload for physical adapters that support it. Microsoft documentation.\nApplicability\nIdentify the VM adapter, network attachment, direction of the contested traffic, and application requirement. Review the physical adapter capabilities and host configuration separately from choosing the requested limit.\nDSE recommendation\nAsk the workload owner to specify whether the concern is outbound traffic, inbound traffic, or both. Record separate limits and the reason for each. Choose a controlled competing workload and retain the original policy association before changing the adapter configuration.\nVerification\nMeasure both send and receive traffic during the approved test, including a competing VM. Compare the observed rates and application response with the chosen directional limits. Inspect the policy attachment on the intended adapter and preserve any unexpected restriction in the opposite direction as an issue to resolve before wider deployment.\nOfficial references\nMicrosoft Learn: Configure Quality of Service (QoS) for a VM network adapter. Source reviewed September 8, 2026.", "content_markdown": "## Source facts\n\nMicrosoft SDN QoS permits a maximum bandwidth limit on VM traffic in the sending direction, receiving direction, or both. The documented control applies to VMs on traditional VLANs and SDN virtual networks. Microsoft configures the policies through Network Controller PowerShell cmdlets after Network Controller is installed. The source also describes hardware QoS offload for physical adapters that support it. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/networking/sdn/manage/Configure-QoS-for-Tenant-VM-Network-Adapter).\n\n## Applicability\n\nIdentify the VM adapter, network attachment, direction of the contested traffic, and application requirement. Review the physical adapter capabilities and host configuration separately from choosing the requested limit.\n\n## DSE recommendation\n\nAsk the workload owner to specify whether the concern is outbound traffic, inbound traffic, or both. Record separate limits and the reason for each. Choose a controlled competing workload and retain the original policy association before changing the adapter configuration.\n\n## Verification\n\nMeasure both send and receive traffic during the approved test, including a competing VM. Compare the observed rates and application response with the chosen directional limits. Inspect the policy attachment on the intended adapter and preserve any unexpected restriction in the opposite direction as an issue to resolve before wider deployment.\n\n## Official references\n\n[Microsoft Learn: Configure Quality of Service (QoS) for a VM network adapter](https://learn.microsoft.com/en-us/windows-server/networking/sdn/manage/Configure-QoS-for-Tenant-VM-Network-Adapter). Source reviewed September 8, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter/", "url": "https://update.dsesecurity.com/updates/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-08" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Set send and receive limits independently on an SDN VM adapter", "item": "https://update.dsesecurity.com/updates/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter/", "url": "https://update.dsesecurity.com/updates/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter/", "headline": "Set send and receive limits independently on an SDN VM adapter", "description": "Which traffic direction should a bandwidth limit constrain on an SDN VM network adapter?", "abstract": "Which traffic direction should a bandwidth limit constrain on an SDN VM network adapter?", "articleBody": "Source facts\nMicrosoft SDN QoS permits a maximum bandwidth limit on VM traffic in the sending direction, receiving direction, or both. The documented control applies to VMs on traditional VLANs and SDN virtual networks. Microsoft configures the policies through Network Controller PowerShell cmdlets after Network Controller is installed. The source also describes hardware QoS offload for physical adapters that support it. Microsoft documentation.\nApplicability\nIdentify the VM adapter, network attachment, direction of the contested traffic, and application requirement. Review the physical adapter capabilities and host configuration separately from choosing the requested limit.\nDSE recommendation\nAsk the workload owner to specify whether the concern is outbound traffic, inbound traffic, or both. Record separate limits and the reason for each. Choose a controlled competing workload and retain the original policy association before changing the adapter configuration.\nVerification\nMeasure both send and receive traffic during the approved test, including a competing VM. Compare the observed rates and application response with the chosen directional limits. Inspect the policy attachment on the intended adapter and preserve any unexpected restriction in the opposite direction as an issue to resolve before wider deployment.\nOfficial references\nMicrosoft Learn: Configure Quality of Service (QoS) for a VM network adapter. Source reviewed September 8, 2026.", "datePublished": "2026-09-08T18:15:18+00:00", "dateModified": "2026-09-08T18:23:26+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260908-113-set-send-and-receive-limits-independently-on-an-sdn-vm-adapter/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Set send and receive limits independently on an SDN VM adapter" }, "articleSection": [ "IT", "Networks & Infrastructure" ], "keywords": [ "IT", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 203, "timeRequired": "PT1M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Configure Quality of Service (QoS) for a VM network adapter", "url": "https://learn.microsoft.com/en-us/windows-server/networking/sdn/manage/Configure-QoS-for-Tenant-VM-Network-Adapter" } } ] } }