 
|
NVIDIA ConnectX-6 Lx 25/50G Ethernet SmartNIC MCX623106AN-CDAT
Product Details:
| Brand Name: | Mellanox |
| Model Number: | MCX631102AN-ADAT |
| Document: | connectx-6-infiniband.pdf |
Payment & Shipping Terms:
| Minimum Order Quantity: | 1pcs |
|---|---|
| Price: | Negotiate |
| Packaging Details: | outer box |
| Delivery Time: | Based on inventory |
| Payment Terms: | T/T |
| Supply Ability: | Supply by project/batch |
|
Detail Information |
|||
| Products Status: | Stock | Condition: | New And Original |
|---|---|---|---|
| Technology: | Ethernet | Network Interface: | Two SerDes Lanes Supporting 25Gb/s Per Lane, For Various Port Configurations: -2x 10/25 GbE -1x 50GbE |
| Host Interface: | PCIe Gen 4.0, 3.0, 2.0, 1.1 16.0, 8.0, 5.0, 2.5 GT/s Link Rate 8 Lanes Of PCIe MSI/MSI-X Mechanisms Advanced PCIe Capabilities | Speed: | 25Gbps |
| Connectors: | 2 X SFP28 | Interface: | PCIe 4.0 X8 |
| Highlight: | NVIDIA ConnectX-6 Lx 25G Ethernet SmartNIC,Nvidia Network Card with 50G bandwidth,MCX623106AN-CDAT SmartNIC with high performance |
||
Product Description
NVIDIA ConnectX-6 Lx 25/50G Ethernet SmartNIC MCX623106AN-CDAT
The NVIDIA ConnectX-6 Lx MCX623106AN-CDAT is a feature-rich Ethernet SmartNIC built for secure, high-performance data centers. With inline IPsec encryption/decryption, hardware root-of-trust, and advanced SDN acceleration (ASAP2), this adapter delivers wire-speed 25/50GbE connectivity while offloading the CPU. Ideal for cloud, enterprise, finance, and AI infrastructure that demands both performance and security.
Product Overview
Based on NVIDIA's proven ConnectX architecture, the ConnectX-6 Lx family sets the standard for 25GbE SmartNICs. The MCX623106AN-CDAT variant features onboard cryptographic acceleration - including AES-XTS 256/512-bit inline IPsec - enabling encrypted tunnels at line rate without host CPU overhead. It supports two ports of 10/25GbE or a single 50GbE port, with total bandwidth up to 50Gb/s and PCIe Gen4 x8 host interface (backward compatible with Gen3).
Key offloads include overlay tunneling (VXLAN, GENEVE, NVGRE, MPLS, GTP), stateful connection tracking for L4 firewall, and ASAP2 for SDN data plane acceleration. Zero-Touch RoCE (ZTR) simplifies RDMA deployment across existing Ethernet networks, eliminating the need for complex PFC/ECN configuration. This makes the MCX623106AN-CDAT a superior choice for NVMe-oF, distributed storage, and latency-sensitive applications that also require data-in-transit protection.
Key Features
- Inline IPsec Crypto: AES-XTS 256/512-bit, wire-speed encryption
- Line-rate 75Mpps: Full message rate performance
- RoCE with Zero-Touch: Seamless RDMA deployment
- ASAP2 SDN Acceleration: Offloads VXLAN, GENEVE, MPLS, GTP
- Hardware Root-of-Trust: Secure boot & firmware update
- SR-IOV & VirtIO: High-density virtualization
Technology - Smart Acceleration & Security
Inline IPsec Cryptography Acceleration
The MCX623106AN-CDAT integrates a hardware crypto engine that performs IPsec encryption and decryption at line rate (25/50GbE) with AES-XTS 256/512-bit keys. This offloads the host CPU entirely, enabling secure multi-tenant clouds, VPN gateways, and encrypted storage traffic without performance degradation. Additionally, IPsec over RoCE is supported for end-to-end protected RDMA.
ASAP2 (Accelerated Switch and Packet Processing)
Offloads the SDN data plane to the SmartNIC, accelerating Open vSwitch and virtualized networking. It supports stateful connection tracking, flow mirroring, header rewrite, and hierarchical QoS. For CSPs, encapsulation offloads include MPLS and GTP for NFV acceleration.
Zero-Touch RoCE (ZTR)
Eliminates the need for PFC or ECN configuration, allowing RDMA to operate seamlessly on standard Ethernet fabrics. This drastically simplifies deployment for storage and AI clusters while ensuring resilience and efficiency at scale.
Supply Chain Protection
Hardware root-of-trust (RoT) ensures secure boot and firmware updates using RSA cryptography and device-unique keys, preventing cloning and guaranteeing firmware authenticity.
Typical Deployments
- Secure Cloud & Virtualized Data Centers: IPsec-protected tenant isolation, SDN offload in OpenStack/VMware, and high-density VM/container environments.
- AI & Machine Learning Clusters: Low-latency RoCE for GPU direct storage access combined with encrypted data-in-transit for sensitive training data.
- Financial Services & Trading: Ultra-low latency networking with inline encryption for transaction integrity and compliance.
- Edge & NFV Infrastructure: Hardware-accelerated GTP and IPsec for 5G secure edge nodes.
- Government & Defense: FIPS-ready encryption, hardware root-of-trust, and tamper-resistant firmware.
Technical Specifications
| Category | Specification (MCX623106AN-CDAT) |
|---|---|
| Product Model | MCX623106AN-CDAT (Crypto-enabled) |
| Ports & Speed | 2x 10/25GbE or 1x 50GbE; total aggregate bandwidth 50Gb/s |
| Connector Type | SFP28 (for 25GbE) / QSFP28 for single 50GbE port operation |
| Host Interface | PCIe Gen 4.0 (compatible with Gen3) x8 lanes |
| Form Factor | PCIe low-profile (standard bracket included) |
| Message Rate | 75 million packets per second (Mpps) |
| RoCE Support | Zero-Touch RoCE, RoCE congestion control, DCQCN |
| Security Offload | Inline IPsec (AES-XTS 256/512), L4 connection tracking, hardware root-of-trust, secure firmware update |
| Overlay Offload | VXLAN, GENEVE, NVGRE, MPLS, GTP, NSH |
| Virtualization | SR-IOV (up to 1K VFs), VirtIO-net offload, VMware NetQueue |
| Remote Boot | PXE, iSCSI, UEFI (x86/Arm) |
| Management Interfaces | NC-SI, MCTP over SMBus/PCIe, PLDM (DSP0248, DSP0267) |
| Power Consumption | Please confirm before ordering (typical estimate: ~11-14W depending on crypto load) |
| Operating Temperature | 0°C to 55°C with proper airflow |
Key Facts at a Glance
25/50GbE
Dual-speed ports
75Mpps
Line-rate packets
PCIe 4.0 x8
High bandwidth I/O
Inline IPsec
AES-XTS 256/512
RoCE ZTR
Zero-touch RDMA
ASAP2
SDN offload
Compatibility Matrix
| Category | Supported Options / Platforms |
|---|---|
| CPU Architecture | x86 (Intel Xeon, AMD EPYC), ARM (Ampere, AWS Graviton, NXP) |
| Operating Systems | Linux (RHEL 8/9, Ubuntu 20.04/22.04, SLES15), Windows Server 2019/2022, VMware ESXi 7.0/8.0, FreeBSD 13+ |
| Virtualization | KVM, VMware vSphere, Microsoft Hyper-V, Xen, Proxmox |
| Containers & Orchestration | Docker, Kubernetes (CNI), OpenShift, NVIDIA BlueField DPU stacks |
| Management Standards | NC-SI, MCTP, PLDM, Redfish (via BMC) |
Frequently Asked Questions
Q: What encryption standards does the inline IPsec engine support?
A: AES-XTS 256-bit and 512-bit keys, supporting both transport and tunnel mode IPsec at line rate.
Q: Is MCX623106AN-CDAT compatible with PCIe Gen3 servers?
A: Yes, it auto-negotiates to PCIe Gen3 x8, delivering full 25GbE performance.
Q: Can I use this adapter for both IPsec VPN and RoCE storage simultaneously?
A: Yes, using SR-IOV or VirtIO, different traffic types can be partitioned and offloaded concurrently.
Q: What cabling is recommended for 25GbE operation?
A: SFP28 passive DAC (up to 5m), active optical cables (AOC), or SFP28 optical transceivers from validated vendors.
Q: Does the card support UEFI Secure Boot?
A: Yes, it supports UEFI for x86 and Arm servers, fully compatible with Secure Boot environments.
Hong Kong Starsurge Group Co., Limited
Founded in 2008, Starsurge is a technology-driven provider of network hardware, IT services, and system integration solutions. We serve government, healthcare, manufacturing, education, finance, and enterprise clients globally. With experienced sales and technical teams, Starsurge offers IoT solutions, network management, custom software development, and multilingual support. Our customer-first philosophy ensures reliable quality, responsive service, and tailored network infrastructure. As an authorized partner of leading brands including NVIDIA, we deliver genuine SmartNICs with global logistics and deep technical expertise.
Want to Know more details about this product