NVIDIA ConnectX-6 Lx MCX623106AN-CDAT Smart Network Interface Card (SmartNIC)

Product Model: MCX623106AN-CDAT | Interface: Dual-Port SFP28 | Data Rate: 10/25GbE per port (50GbE total) | Host Interface: PCIe 4.0 x8

1. Product Overview

The NVIDIA ConnectX-6 Lx MCX623106AN-CDAT is a high-performance, feature-rich Smart Network Interface Card (SmartNIC) designed to accelerate and secure data center infrastructure. Moving beyond basic connectivity, this NIC card integrates advanced hardware accelerators for software-defined networking (SDN), RDMA over Converged Ethernet (RoCE), and inline IPsec encryption. The dual SFP28 ports support flexible 10GbE or 25GbE connectivity, providing up to 50Gb/s of aggregate bandwidth. It is a pivotal component for building efficient, scalable, and secure clouds, directly complementing high-speed infrastructure built with solutions like the mq9700 series.

2. Key Characteristics

• High-Performance Connectivity: Two ports of 10/25GbE or one port of 50GbE (via breakout cable).
• PCIe Host Interface: PCI Express 4.0 x8 (backward compatible with PCIe 3.0).
• Hardware Accelerators: Dedicated engines for RoCE, ASAP2 (SDN), and inline IPsec cryptography.
• Advanced Virtualization: Comprehensive SR-IOV and VirtIO support for high-density virtual machine and container deployments.
• Enhanced Security: Hardware root-of-trust for secure boot and firmware validation.
• Intelligent Offloads: Stateless TCP offloads, header rewrite, connection tracking, and hierarchical QoS.

3. Core Technology & Standards

This SmartNIC is built on a foundation of industry-leading technologies that define modern data center networking:

• ASAP² (Accelerated Switch and Packet Processing): Offloads the entire SDN data plane (VXLAN, GENEVE, NVGRE encapsulation/decapsulation) to the network card hardware.
• Zero-Touch RoCE (ZTR): An implementation of RDMA over Converged Ethernet that operates seamlessly on existing networks without requiring special QoS configurations like PFC.
• Inline IPsec Acceleration: Hardware-based encryption/decryption for IPsec tunnels at line rate, supporting AES-256/512-XTS.
• Hardware Security Module (HSM) Lite: Provides a hardware root-of-trust using RSA cryptography for secure firmware updates and anti-cloning protection.

4. How It Works: The SmartNIC Advantage

Unlike a traditional NIC card that merely moves data, the MCX623106AN-CDAT acts as an intelligent co-processor on the server's PCIe bus. When network traffic arrives, its programmable parser identifies the packet type. RoCE traffic is directly placed into application memory via RDMA, bypassing the OS kernel. Overlay network packets (VXLAN/GENEVE) are decapsulated by the ASAP2 engine. Secured IPsec packets are decrypted inline. All these complex operations are handled at wire speed on the card itself. This process offloads significant CPU cycles, freeing server resources for core applications and reducing latency—a principle central to the performance philosophy shared by the broader mq9700 ecosystem.

5. Application Scenarios

• Hyper-Converged Infrastructure (HCI): Accelerates storage traffic (vSAN, Ceph) using RoCE for low-latency, high-throughput data movement.
• Cloud & Telco NFV Platforms: Offloads virtual switching (OVS) and network functions (firewalls, routers) via ASAP2, improving virtual machine density and performance.
• AI/ML and HPC Clusters: Provides high-bandwidth, low-latency interconnects crucial for distributed training and parallel computing tasks.
• Secure Enterprise Networks: Establishes high-performance, encrypted tunnels between data centers or to the cloud using hardware-accelerated IPsec.
• Storage Networking: Ideal for NVMe-oF (NVMe over Fabrics) initiators, leveraging RoCE for efficient storage access.

6. Technical Specifications

Note: This network card is part of a broader portfolio. For OCP 3.0 SFF or other variants, please inquire.

7. Competitive Advantages

• Unmatched Total Cost of Ownership (TCO): Reduces server CPU utilization by up to 30% for networking tasks, allowing consolidation of workloads or deployment of smaller, more energy-efficient servers.
• Simplified RoCE Deployment: Zero-Touch RoCE technology removes the complexity of configuring lossless Ethernet, enabling high-performance storage and AI networks on existing infrastructure.
• Holistic Security: Combines endpoint security (hardware RoT) with network security (line-rate IPsec), providing a defense-in-depth strategy directly on the NIC card.
• Future-Proof Investment: PCIe 4.0 readiness and support for next-gen protocols ensure the card remains relevant through multiple server refresh cycles, much like the forward-looking design of the mq9700 series switches it often connects to.

8. Support & Services

We ensure a seamless experience from selection to deployment:

• Genuine Warranty: All products are covered by the full NVIDIA standard warranty.
• Technical Consultation: Our experts assist with compatibility verification and integration planning for your specific server and switch environment.
• Reliable Supply: We maintain strategic inventory to support both project-based and ad-hoc procurement needs.
• Global Logistics: Efficient shipping and customs clearance for international customers.

9. Frequently Asked Questions

10. Important Precautions

• Compatibility: Verify server BIOS/UEFI settings enable PCIe ASPM and SR-IOV if required. Ensure adequate chassis cooling for the card.
• Firmware: Always use firmware versions recommended by NVIDIA for your specific driver and OS combination. Utilize the secure update mechanism.
• Thermal: Ensure proper airflow across the card's heatsink. Do not obstruct vents in the server chassis.
• Electrostatic Discharge (ESD): Handle the card by its edges and use an anti-static wrist strap during installation.
• Optics Compatibility: Use SFP28 optical transceivers or Direct Attach Cables (DAC) that are qualified for use with ConnectX-6 Lx adapters.

11. About Our Company