NVIDIA ConnectX-6 Lx MCX631432AN-ADAB 25/50GbE OCP 3.0 SmartNIC with IPsec & SDN Offload

The ConnectX-6 Lx MCX631432AN-ADAB transcends traditional nic card functionality by embedding sophisticated security and networking intelligence directly into hardware. It delivers line-rate IPsec encryption/decryption with no CPU tax, ASAP² technology to offload entire virtual switches (VXLAN, GENEVE), and Zero-Touch RoCE for effortless low-latency RDMA deployment. This makes it the definitive choice for modern enterprises and cloud providers seeking to consolidate security, virtualization, and performance into a single, power-efficient PCIe card, perfectly complementing high-performance platforms like the mq9700.

The NVIDIA ConnectX-6 Lx MCX631432AN-ADAB is a programmable Ethernet SmartNIC designed for the performance and security demands of modern enterprise and cloud data centers. This model supports a flexible port configuration: either two ports of 25GbE or a single port of 50GbE via QSFP28 connectivity.

Built on the PCI Express 4.0 x8 interface, it acts as a foundational network card that not only provides high-speed connectivity but also houses dedicated accelerators for cybersecurity, software-defined networking (SDN), and storage, significantly reducing host server CPU overhead.

• Flexible High-Speed Connectivity: Dual 25GbE SFP28 ports or single 50GbE QSFP28 port for adaptable deployment.
• Integrated Hardware Security: Inline IPsec encryption/decryption engine supporting AES-256/512, providing wire-speed data protection.
• ASAP² SDN Acceleration: Offloads virtual switches (OVS, etc.) and network functions (NFV) to the NIC, freeing up to 30% of host CPU cores.
• Zero-Touch RoCE: Enables high-performance RDMA over Ethernet without requiring complex Data Center Bridging (PFC/ECN) configuration.
• Advanced Virtualization: SR-IOV and VirtIO hardware acceleration for maximum VM and container density and performance.
• Hardware Root of Trust: Secure boot and cryptographically signed firmware updates guarantee supply chain integrity.
• Comprehensive Offloads: TCP stateless offloads, overlay encapsulation (VXLAN, GENEVE, NVGRE), connection tracking, and hierarchical QoS.

• Host Interface: PCI Express 4.0 (16 GT/s per lane), backward compatible with PCIe 3.0.
• Ethernet Standards: Compliant with IEEE 802.3by (25GbE) and 802.3cd (50GbE).
• Security Protocols: Hardware acceleration for IPsec (ESP, IKE), AES-GCM/XTS-256/512.
• SDN/Overlay Acceleration: NVIDIA ASAP² engine for VXLAN, GENEVE, NVGRE, MPLS, and GTP.
• RDMA Protocol: RoCE v2 with Zero-Touch RoCE (ZTR) enhancements for simplified deployment.
• Management: NC-SI and MCTP over SMBus/PCIe for out-of-band BMC management; PLDM standards (DSP0248, DSP0267).

The SmartNIC operates as an intelligent network processing unit. Incoming packets are first parsed by a programmable engine. Based on rules, traffic can be:

1. Secured: Routed to the IPsec engine for transparent encryption/decryption before reaching the host or network.
2. Accelerated: VXLAN/GENEVE encapsulated traffic is terminated/initiated by the ASAP² engine, exposing inner packets for standard offloads.
3. Virtualized: Directly assigned to a specific VM via SR-IOV or VirtIO, bypassing the software hypervisor switch.
4. RDMA Optimized: RoCE packets are processed with ultra-low latency, leveraging ZTR to coexist with standard TCP/IP traffic.

This hardware-based data path ensures deterministic performance and security, a critical feature for sensitive workloads on platforms such as the mq9700.

• Secure Multi-Tenant Cloud: Provides hardware-enforced tenant isolation with IPsec encryption and accelerated overlay networks for public/private clouds.
• Network Function Virtualization (NFV): Offloads virtual firewall, load balancer, and router data planes via ASAP², improving VNF performance and density.
• AI & Machine Learning Clusters: Zero-Touch RoCE enables high-throughput, low-latency communication between GPU servers for distributed training.
• Hyperconverged Infrastructure (HCI): Consolidates networking and security for storage (iSER) and compute traffic, simplifying HCI node design.
• Financial Services & Edge Computing: The combination of low latency, line-rate encryption, and hardware trust is ideal for regulated industries and edge security gateways.

• Consolidated Security & Networking: Uniquely combines line-rate encryption with full SDN offload in one network card, eliminating the need for separate crypto appliances or CPU cores for switching.
• Operational Simplicity: Zero-Touch RoCE removes the biggest barrier to RDMA adoption, allowing high-performance clusters to be deployed on existing Ethernet networks without switch reconfiguration.
• Superior Total Cost of Ownership: By offloading security and networking functions, it dramatically reduces server CPU requirements, allowing for higher VM density or repurposing cores for revenue-generating applications.
• Future-Proof Architecture: PCIe 4.0 readiness and programmable pipeline ensure the card remains relevant for evolving protocols and can integrate with orchestration stacks like Kubernetes through SR-IOV or VirtIO.
• Trusted Supply Chain: Hardware Root of Trust is a critical differentiator for secure, compliant deployments in government and financial sectors.

We provide end-to-end support for this and all our advanced networking solutions:

• Warranty & RMA: Full manufacturer's warranty backed by our efficient RMA process.
• Global Inventory: This SmartNIC is available from our extensive stock, ensuring quick fulfillment for proof-of-concepts and large-scale deployments.
• Technical Expertise: Our specialized engineering team offers architecture guidance, compatibility validation, and troubleshooting for complex integrations involving hypervisors, SDN controllers, and platforms like the mq9700.
• Software & Lifecycle Management: Access to official NVIDIA drivers, firmware, and documentation, along with advisory services for upgrade paths.
• 24/7 Operational Support: Around-the-clock customer service to address logistical and technical inquiries post-purchase.

• Platform Compatibility: Confirm your server chassis supports the OCP 3.0 SFF form factor and provides adequate cooling for a SmartNIC, which may have a higher thermal design power than a standard NIC.
• Software & Firmware: Always use the driver and firmware bundle recommended by NVIDIA for your specific OS to ensure stability and access to all accelerated features.
• Secure Deployment: Utilize the Hardware Root of Trust feature. Securely manage the encryption keys and leverage secure firmware updates to maintain the integrity of your infrastructure.
• Configuration Complexity: Leveraging advanced features like ASAP² or SR-IOV requires proper planning and configuration. Consult implementation guides or our technical team during the design phase.
• Thermal and Power: Ensure your server's power supply and thermal solution are rated to accommodate the additional power draw of a fully utilized SmartNIC.