Navigating the Network Driver Design Guide

Microsoft Windows-based operating systems support several types of kernel-mode network drivers. The Network section of the Windows Driver Kit (WDK) documentation describes how to write these network drivers. This topic briefly describes the supported types of network drivers and explains which sections of the Network section you should read before writing each type of network driver.

This network driver design guide documents the following Network Driver Interface Specification (NDIS) interfaces:

  • NDIS 6.40, which is supported on Windows 8.1, Windows Server 2012 R2, and later versions of Windows. NDIS 6.30 includes support for Network Direct Kernel Provider Interface (NDKPI) 1.12.

    For more information about NDIS 6.30, see Introduction to NDIS 6.40.

  • NDIS 6.30, which is supported on Windows 8, Windows Server 2012, and later versions of Windows. NDIS 6.30 includes support for single root/I/O virtualization (SR-IOV), Hyper-V extensible switch, Network Direct Kernel Provider Interface (NDKPI) 1.1, and other services.

    For more information about NDIS 6.30, see Introduction to NDIS 6.30.

  • NDIS 6.20, which is supported on Windows 7, Windows Server 2008 R2, and later versions of Windows. NDIS 6.20 includes support for Virtual Machine Queue (VMQ), receive side throttle, and other services.

    For more information about NDIS 6.20, see Introduction to NDIS 6.20.

  • NDIS 6.1, which is supported on Windows Vista with Service Pack 1 (SP1), Windows Server 2008, and later versions of Windows. NDIS 6.1 includes support for header-data split, direct OID requests, and other services.

    For more information about NDIS 6.1, see Introduction to NDIS 6.1.

  • NDIS 6.0, which is supported on Windows Vista and later versions of Windows. NDIS 6.0 includes support for filter drivers and many additional services that were not provided by earlier NDIS versions. NDIS 6.0 includes major updates to driver initialization and network data management including required support for driver reconfiguration at runtime and the NET_BUFFER architecture for handling network packet data. For more information about supporting runtime reconfiguration, see Driver Stack Management. For more information about how to handle network packet data in NDIS 6.0 see NET_BUFFER Architecture.

    For more information about NDIS 6.0, see Introduction to NDIS 6.0.

Windows Vista and later operating system versions support the following types of kernel-mode NDIS-based network drivers:

Miniport Drivers
A miniport driver manages miniport adapters and provides an interface to the adapters for higher-level drivers. A miniport adapter is a conceptual entity that can represent either a physical device or a virtual device. For example, a miniport adapter can represent a network interface card (NIC) or a virtual device that is associated with an intermediate driver.

There are many variations of miniport drivers, such as a connection-oriented miniport call manager (MCM), a Windows Driver Model (WDM) miniport driver, and the upper edge of an intermediate driver.

Protocol Drivers
A protocol driver provides high-level services in a driver stack. A protocol driver binds to underlying miniport adapters. An upper-level protocol driver implements an interface, possibly an application-specific interface, at its upper edge to provide services to users of the network. At its lower edge, a protocol driver provides a protocol interface to pass network data to and receive incoming data from the next-lower driver.

There are many variations of protocol drivers, such as a connection-oriented call manager (MCM), a connection-oriented client, and the lower edge of an intermediate driver.

Filter Drivers
A filter driver filters information on the interface between protocol drivers and miniport drivers. Filter modules are attached in the binding between the protocol driver and the miniport adapter and are generally transparent to the other drivers. Filter drivers can implement modifying or monitoring filters. For example, a filter driver can enhance the services that the underlying miniport adapter provides or simply collect statistics.

Intermediate Drivers
An intermediate driver interfaces between upper-level protocol drivers and miniport drivers. Intermediate drivers provide a miniport driver interface at their upper-edge to bind to overlying protocol drivers. Intermediate drivers provide a protocol driver interface at their lower edge to bind to underlying miniport adapters. Intermediate drivers are typically used to implement n to m multiplexer services. For example, an intermediate driver can implement load balance and failover solutions.

Intermediate drivers can also manage hardware when they are configured as a miniport-intermediate driver.

For more information about the Windows network architecture and programming considerations, see Network Architecture for Kernel-Mode Drivers and Network Driver Programming Considerations.

For more information about network INF files, which are used to install network components, see Installing Network Components. If your network driver requires a notify object--for example, to control bindings--also see Notify Objects for Network Components.

The following additional driver models are available to use particular hardware technologies and architectures.

Technology Description

Scalable Networking

Networking technologies that support the offload of tasks to a network adapter, such as the following:

  • Header-Data Split, a service that splits the header and the data in received Ethernet frames into separate buffers.

  • Receive Side Scaling, a network driver technology that improves network performance on multiprocessor systems.

  • TCP Chimney Offload, an offload of the data-transfer part of the TCP protocol processing to a network adapter that has the appropriate capabilities.

  • TCP/IP Offload, an offload of tasks or connections to a network adapter that has the appropriate capabilities.

  • Network Direct Kernel Provider Interface (NDKPI), which enables kernel-mode Windows components, such as SMB server and client, to use remote direct memory access (RDMA) functionality that is provided by independent hardware vendors (IHVs).

  • Network Virtualization using Generic Routing Encapsulation (NVGRE) Task Offload, which makes it possible to use Generic Routing Encapsulation (GRE)-encapsulated packets with:

    • Large Send Offload (LSO)
    • Virtual Machine Queue (VMQ)
    • Transmit (Tx) checksum offload
    • Receive (Rx) checksum offload

Virtualized Networking

Networking technologies that support Hyper-V virtualization environments, such as the following:

Wireless Networking

Networking capabilities that include Native 802.11 Wireless LAN.

Network Module Registrar

A system facility that allows a driver to attach network modules to one another.

Winsock Kernel

A kernel-mode Network Programming Interface (NPI).

IP Helper

A set of utility functions that enable drivers to retrieve and modify information about the network configuration of the local computer.

Windows Filtering Platform Callout Drivers

A kernel-mode interface that enables deep inspection, packet modification, stream modification, and logging of network data.

System Area Networks

A type of network connection that uses Windows Sockets Direct to support a high-performance, connection-oriented network.

Remote NDIS (RNDIS)

A class specification that defines a system-provided, bus-independent message set over a USB bus.