10GbE NIC Cheat Sheet: Mellanox, Intel, Chelsio

Your Next Used NIC is $15 on eBay and It Will Definitely Have Quirks

10-gigabit networking used to be a corporate luxury. In 2026, you can buy a ConnectX-3 for the price of a fast-food lunch and wire your whole homelab at 10G. Problem is, “cheap used enterprise NIC” comes with an attached mountain of caveats: dropped ESXi support, vendor-locked SFP+ ports, firmware that hasn’t been touched since 2019, and enough heat output to warm a small apartment.

This is the cheat sheet I wish I had before buying four different cards and learning the hard way.

The Quick Verdict Table

Before diving into the details, here’s the cheat sheet in plain English:

Mellanox Cards: The eBay Special That Actually Works

Mellanox (now NVIDIA) made some of the best NICs of the last decade, and the used market is absolutely full of them. Here’s where it gets complicated.

ConnectX-3 (mlx4): The $8 eBay Gamble

The ConnectX-3 with the mlx4_core driver is everywhere. Cards like the MCX311A-XCAT and MCX312A-XCBT show up for $8–15 regularly, and they’ll do 10G SFP+ without drama on most Linux systems.

The catches:

• ESXi support dropped. VMware pulled support somewhere around ESXi 7. If you’re running Proxmox, you’re mostly fine. If you’re on ESXi, don’t bother.
• Firmware is frozen at 2.42.5000. No security patches, no new features. What you see is what you get forever.
• Linux mainline support is slowly shrinking. The driver still exists, but there’s less enthusiasm for fixing edge cases.
• No RoCE v2. You get InfiniBand RDMA and basic RoCE v1, which matters if you’re doing anything fancy with NVMe-oF.

# Check what you've got
lspci -vvn | grep -A 10 Ethernet

# Confirm driver loaded
dmesg | grep mlx4_core

# Card details
ethtool -i eth0

Bottom line on ConnectX-3: fine if you already own one, questionable for a new purchase in 2026. For $5 more you can get a ConnectX-4 Lx.

ConnectX-3 Pro / ConnectX-4 Lx (mlx5): Buy These

The ConnectX-4 Lx is where Mellanox made the jump to the mlx5_core driver, and it’s still under active development. Cards like the MCX4121A-XCAT do 10/25G SFP+, support RoCE v2, and idle around 4W.

Why it’s the sweet spot for home:

• Vendor-agnostic SFP+ ports. No optics lock. Stick whatever transceiver in there and it’ll work. Generic $3 eBay SFP+ modules are fine.
• SR-IOV works properly. If you’re running Proxmox and want to pass through a virtual function to a VM, ConnectX-4 Lx handles it without complaint.
• RDMA / RoCE v2. Overkill for most, but if you ever want NVMe-oF over Ethernet, this card can do it without a separate InfiniBand fabric.
• Firmware is still getting updates. NVIDIA pushes updates through their MLNX_OFED stack and mlxup still works.

# Check mlx5 driver
dmesg | grep mlx5_core

# Get link stats and errors
ethtool -S eth0 | grep -E "rx_errors|tx_errors|rx_dropped"

# Query card firmware version
mst start
mlxconfig -d /dev/mst/mt4119_pciconf0 q

# Update firmware (get mlxup from NVIDIA)
mlxup -u -d /dev/mst/mt4119_pciconf0

The ConnectX-4 Lx regularly shows up for $20–35 on eBay. At that price it’s an absurd value.

ConnectX-5 / ConnectX-6 Lx: 25G for the Price of Old 10G

ConnectX-5 25G cards are hitting the used market now as data centers cycle them out for 100G. The MCX512A-ACAT does 2x25G and you’ll see them for $40–80 depending on the day.

If you’ve got a switch with 25G SFP28 ports (like the MikroTik CRS326-24S+2Q+ or similar), a ConnectX-5 turns your NAS-to-hypervisor link into something genuinely obscene. For most home labs this is overkill, but “cheap overkill” is kind of what we’re here for.

Intel Cards: Reliable and Mostly Annoying About Optics

Intel NICs have been in Linux since forever, and the driver history is solid. The ixgbe, i40e, and ice drivers are all well-maintained and you’ll find them in any distro without drama. The main thing Intel does that Mellanox doesn’t: it’ll try to lock you into Intel-branded optics.

X520 / X540 / X550: The 10G Workhorses

The X520 is SFP+ (good), the X540 is 10GBASE-T (generates heat like a server room drama), and the X550 is the cooler, better X540.

X520 optics situation: By default, the ixgbe driver will refuse to initialize with non-Intel branded SFPs. You get a message like failed to load because an unsupported SFP+ module type was detected. Fix it:

# Check current parameter
modinfo ixgbe | grep allow_unsupported_sfp

# Load module with the override
modprobe ixgbe allow_unsupported_sfp=1

# Make it permanent
echo "options ixgbe allow_unsupported_sfp=1" > /etc/modprobe.d/ixgbe.conf
update-initramfs -u

After that, your $3 generic SFP+ modules will work fine.

X540 heat reality: The X540 uses the 40nm process and idles around 9W. In a server chassis with airflow, that’s manageable. In a Proxmox box cobbled together from spare parts sitting on a shelf with no active cooling over the PCIe slot, you’ll throttle. The X550 uses a newer process, idles around 6W, and is worth the small premium on the used market.

# Check link speed
ethtool eth0 | grep -E "Speed|Duplex"

# Watch error counters in real time
watch -n 1 'ethtool -S eth0 | grep -E "rx_crc_errors|tx_timeout|rx_missed_errors"'

X710: The Right Choice If You Want Intel at 10/25G

The X710 uses the i40e driver and is a significant step up from the X520/X540 generation. SR-IOV support is mature, DPDK works well with it, and OPNsense in particular has great support.

If you’re building a software router or firewall on Proxmox and want to pass virtual functions to VMs, the X710 is probably the cleanest Intel option for that use case.

E810: Unless You’re Running DPDK Production Workloads, Skip It

The E810 with the ice driver is Intel’s current flagship. It’s great. It’s also mostly solving problems you don’t have in a homelab. The driver is newer and still has occasional rough edges. If you find one cheap, take it, but don’t go hunting.

Chelsio: The NVMe-oF NIC Nobody Talks About

Chelsio makes NICs that are optimized for storage offload — iSCSI, NVMe-oF, NFS over RDMA. The T520-CR and T540-CR are two-port 10G SFP+ cards that can handle iSCSI in hardware, taking load off your CPU when you’re saturating a shared storage link.

For a home lab NAS scenario where TrueNAS is serving iSCSI to multiple hosts, a Chelsio T520-CR is genuinely interesting. Used prices are $30–60.

The catches: the cxgb4 driver is fine, but Chelsio cards have less community documentation than Mellanox or Intel. When something goes wrong, you’re staring at a much thinner wall of forum posts.

# Verify cxgb4 driver loaded
dmesg | grep cxgb4

# Check offload capabilities
ethtool -k eth0 | grep -E "tx-checksum|rx-checksum|scatter-gather|tcp-segmentation"

The T62100 (100G) is a collector’s item at this point — priced out of home lab territory unless you find a miracle eBay listing.

The No-Name Tier: AQC107 and Friends

The Marvell Aquantia AQC107 is a 10GBASE-T chip that shows up in consumer motherboards (ASUS, ASRock) and cheap add-in cards. The atlantic driver is in mainline Linux. It works.

It’s not great for anything fancy — no SR-IOV, no RDMA, no serious offload. But if you want to run a 10G connection from a workstation to a switch and you don’t care about any of that, it’s fine. Idle power is ~3W which is actually better than most enterprise options.

The RTL8169 “10G” cards are mostly Chinese AliExpress specials. Some work, some don’t, driver support is inconsistent, and you have no idea what you’re actually getting. Life’s too short.

Real Performance Numbers

Quick iperf3 reference so you know what “working” looks like:

# Server side
iperf3 -s

# Client side, single stream
iperf3 -c 192.168.10.100 -t 30

# Parallel streams (better for saturating 10G)
iperf3 -c 192.168.10.100 -t 30 -P 4

Expected results on a clean 10G link with no CPU bottleneck:

• Single stream: 8.5–9.4 Gbits/sec
• 4 parallel streams: 9.4–9.8 Gbits/sec

If you’re getting 4–6 Gbits/sec, check your SFP+ modules, check your cable (DAC vs optical matters), and check CPU interrupt affinity. A saturated 10G link on a single core will pin that core and drag everything down.

# Check interrupt distribution
cat /proc/interrupts | grep eth0

# Pin IRQs to specific CPUs (example: 4 queues on cores 2-5)
for i in $(grep eth0 /proc/interrupts | awk '{print $1}' | tr -d ':'); do
  echo 4 > /proc/irq/$i/smp_affinity
done

Firmware Reality Check

For Mellanox cards, NVIDIA’s mlxup tool is the easiest path:

# Install mlxup (download from NVIDIA MLNX_OFED page)
chmod +x mlxup
./mlxup --list        # See what's installed and what's available
./mlxup -u            # Update all detected cards

For Intel, grab the NVM Update Utility from Intel’s download center. It’s a zip with a binary that knows how to flash X520/X540/X710 firmware without drama.

Proxmox / TrueNAS / OPNsense Compatibility Notes

Proxmox:

• mlx4/mlx5: solid, SR-IOV works, use vfio-pci for passthrough or virtual functions directly in Proxmox’s GUI
• ixgbe/i40e/ice: works, SR-IOV works, OVS integration is fine
• Chelsio: works, no special treatment needed

TrueNAS Scale (Linux-based):

• Mellanox ConnectX-4 Lx: first-class support, shows up cleanly
• Intel X540: works but the heat situation in a NAS chassis with poor airflow over PCIe is something you’ll notice
• AQC107: works, onboard variants (ASUS boards) are common in home NAS builds

OPNsense (FreeBSD-based):

• ixgbe (Intel X520/X540/X550): excellent, has been in FreeBSD forever
• mlx4/mlx5: present in FreeBSD, but fewer people run Mellanox in OPNsense so the community troubleshooting base is smaller
• i40e (X710): good
• Chelsio: cxgbe driver exists in FreeBSD, used by some people for router builds

The Bottom Line

Buy a ConnectX-4 Lx first. It’s cheap, modern enough, has the best driver story in 2026, accepts generic SFP+ modules, and does SR-IOV properly. If you find one for under $30, just buy it.

Buy a ConnectX-3 only if it’s free. The frozen firmware and fading driver attention aren’t dealbreakers today, but you’re buying deprecating hardware. In two years it’ll be a different story.

Buy Intel X550 over X540 if you’re doing 10GBASE-T (copper). The lower power and newer process are worth the small price difference. Always set allow_unsupported_sfp=1 on X520 cards or you’ll spend 45 minutes debugging why your SFPs don’t initialize.

Buy Chelsio T520-CR if you’re building a storage network and want hardware offload on iSCSI. Otherwise, the Mellanox cards handle NVMe-oF just as well at lower power with better community docs.

Avoid ConnectX-3 for ESXi, the X540 without dedicated airflow, and no-name RTL 10G cards unless you genuinely enjoy debugging driver quirks at 1 AM.

The used enterprise NIC market in 2026 is absurdly good for home labbers. For $20–40 you can run 10G everywhere. Just know what you’re buying before you click “Add to Cart” on that eBay listing with three photos taken in bad lighting.