 
|
ConnectX-6 Lx OCP 3.0 Ethernet Adapter MCX623436AN-CDAB 25/50GbE PCIe 4.0 x8, Crypto Root-of-Trust
Dettagli:
| Marca: | Mellanox |
| Numero di modello: | MCX623436AN-CDAB |
Termini di pagamento e spedizione:
| Quantità di ordine minimo: | 1 pezzo |
|---|---|
| Prezzo: | Negotiate |
| Imballaggi particolari: | Scatola esterna |
| Tempi di consegna: | Basato sull'inventario |
| Termini di pagamento: | T/T |
| Capacità di alimentazione: | Fornitura per progetto/batch |
|
Informazioni dettagliate |
|||
| Modello n.: | MCX623436AN-CDAB | Porti: | Doppio |
|---|---|---|---|
| Tecnologia: | Et | Tipo di interfaccia: | OSFP56 |
| Specifica: | 16,7 cm x 6,9 cm | Origine: | India / Israele / Cina |
| velocità di trasmissione: | 100 gbe | Interfaccia host: | Gen4 x16 |
| Evidenziare: | Nvidia ConnectX-6 Ethernet adapter,OCP 3.0 network card 25/50GbE,PCIe 4.0 x8 crypto adapter |
||
Descrizione di prodotto
ConnectX-6 Lx OCP 3.0 Ethernet Adapter MCX623436AN-CDAB 25/50GbE PCIe 4.0 x8, Crypto Root-of-Trust
NVIDIA ConnectX-6 Lx 25/50GbE Ethernet SmartNIC
Model: MCX623436AN-CDAB | Dual-port 25G / Single-port 50G | PCIe 4.0 x8 | Crypto + Hardware Root-of-Trust
Accelerate enterprise cloud and telco workloads with the NVIDIA® ConnectX®-6 Lx Ethernet smart network interface card. The MCX623436AN-CDAB delivers up to 50Gb/s bandwidth, advanced RoCE with Zero-Touch deployment, SDN data plane offload via ASAP², and inline IPsec encryption. Built with hardware root-of-trust for secure boot and firmware updates, this OCP 3.0 SFF SmartNIC brings carrier-grade reliability and security to modern data centers.
Model: MCX623436AN-CDAB | Dual-port 25G / Single-port 50G | PCIe 4.0 x8 | Crypto + Hardware Root-of-Trust
Accelerate enterprise cloud and telco workloads with the NVIDIA® ConnectX®-6 Lx Ethernet smart network interface card. The MCX623436AN-CDAB delivers up to 50Gb/s bandwidth, advanced RoCE with Zero-Touch deployment, SDN data plane offload via ASAP², and inline IPsec encryption. Built with hardware root-of-trust for secure boot and firmware updates, this OCP 3.0 SFF SmartNIC brings carrier-grade reliability and security to modern data centers.
Product Overview
The NVIDIA ConnectX-6 Lx series -- model MCX623436AN-CDAB -- is purpose-built for 25GbE and 50GbE connectivity in enterprise data centers, telecom NFV, and high-performance storage fabrics. Featuring PCI Express Gen 4.0 x8 host interface, the adapter supports two ports of 10/25GbE or a single port of 50GbE. Advanced on-board acceleration includes ASAP² for SDN (VXLAN, GENEVE, NVGRE, MPLS, GTP), stateful connection tracking (L4 firewall), and VirtIO acceleration for containerized environments. The hardware-accelerated security engine provides inline IPsec encryption/decryption and a secure chain-of-trust, reducing CPU load while protecting east-west traffic.
Key Features
- Line-rate packet processing: 75 million packets per second (Mpps) at 50Gb/s line rate.
- Zero-Touch RoCE (ZTR): Run RDMA over standard Ethernet without PFC/ECN tuning; simplifies deployment at scale.
- ASAP² acceleration engine: Offloads SDN control/data plane, OVS, overlay tunnels and VNF acceleration.
- Inline IPsec crypto: AES-XTS 256/512-bit encryption/decryption; IPsec over RoCE support.
- Hardware root-of-trust (RoT): Secure boot, cryptographically verified firmware updates, device-unique key protection.
- Connection tracking & firewall: L4 stateful firewall offload, flow mirroring, hierarchical QoS.
- Virtualization ready: SR-IOV (up to 512 virtual functions), VirtIO-net acceleration, overlay offloads.
- Comprehensive manageability: NC-SI, MCTP, PLDM, NCSI over RBT for OCP 3.0 integration.
Advanced Technology & Acceleration
NVIDIA ASAP² (Accelerated Switch and Packet Processing)
Offloads the entire SDN data plane to the SmartNIC, dramatically reducing hypervisor CPU utilization while delivering wire-speed encapsulation/decapsulation for VXLAN, GENEVE, NVGRE, MPLS, and GTP. Ideal for NFV transitions and cloud-native infrastructure.
Industry-leading RoCE with Zero-Touch (ZTR)
ConnectX-6 Lx enables seamless RDMA over Converged Ethernet on existing Layer 2/3 networks. Zero-Touch RoCE eliminates the need for Priority Flow Control (PFC) or Explicit Congestion Notification (ECN) configuration, making RoCE deployment as simple as standard Ethernet while maintaining lossless efficiency and resiliency.
Inline Security & Platform Integrity
The on-chip IPsec engine performs encryption/decryption at line rate, freeing host CPU cores. Hardware root-of-trust (RoT) verifies firmware signature during boot and updates, ensuring protection from cloning and supply chain attacks -- essential for finance, government, and edge infrastructure.
Typical Deployments & Use Cases
- Enterprise Data Centers: High-density virtualization, SDN fabric acceleration, low-latency NVMe-oF (RoCE).
- Cloud & Hyperscale: OpenStack, VXLAN offloads, container networking with VirtIO acceleration.
- Telecommunications / NFV / 5G Edge: GTP, MPLS, vEPC offload, user plane function (UPF) acceleration.
- HPC & AI Clusters: RDMA-based MPI and distributed deep learning.
- Secure & Regulated Workloads: Inline IPsec for data-in-motion encryption, hardware root-of-trust compliance.
Platform & Software Compatibility
| Category | Supported Options / Details |
|---|---|
| Host Interface | PCIe Gen 4.0 x8 (up to 16 GT/s), backward compatible with Gen3 |
| Operating Systems | Linux (RHEL, Ubuntu, SLES, Debian), Windows Server 2019/2022, VMware ESXi, FreeBSD |
| Virtualization | SR-IOV, VirtIO-net, OVS hardware offload, KVM, Hyper-V |
| Management Standards | NC-SI, MCTP over SMBus/PCIe, PLDM (DSP0248, DSP0267), NCSI over RBT (OCP) |
| Remote Boot | PXE, iSCSI, UEFI HTTP Boot, Secure Boot (UEFI for x86/Arm) |
Technical Specifications
| Parameter | Specification |
|---|---|
| Product Model / MPN | MCX623436AN-CDAB |
| Product Series | NVIDIA ConnectX-6 Lx |
| Ports & Speed | 2x 10/25GbE or 1x 50GbE (SFP28 / QSFP28 depending on configuration) |
| Total Bandwidth | Up to 50Gb/s |
| Packet Rate | 75 million packets per second (Mpps) |
| Host Interface | PCIe Gen 4.0 x8 (compatible with Gen3 x8) |
| Form Factor | OCP 3.0 Small Form Factor (SFF) |
| Security Offloads | Inline IPsec (AES-XTS 256/512-bit), connection tracking (L4 firewall), hardware root-of-trust, secure firmware update |
| RoCE Support | Zero-Touch RoCE, ECN, PFC bypass mode, RoCE congestion control, DCQCN |
| SDN / Overlay Offload | ASAP²: VXLAN, GENEVE, NVGRE, MPLS, GTP, programmable flexible parser |
| Virtualization Features | SR-IOV (up to 512 VFs), VirtIO acceleration, VMQ, RSS |
| Advanced Features | Flow mirroring, sampling, header rewrite, hierarchical QoS, stateless TCP/UDP offloads |
| Management & Monitoring | NC-SI, MCTP, PLDM for monitor/control DSP0248, PLDM firmware update DSP0267 |
| Remote Boot Options | iSCSI, PXE, UEFI (x86 and Arm support) |
Selection Guide - ConnectX-6 Lx Family
| Ordering Part Number | Form Factor | Ports / Speed | Crypto & Secure Boot | Typical Application |
|---|---|---|---|---|
| MCX623436AN-CDAB | OCP 3.0 SFF | 2x 25GbE / 1x 50GbE | Yes (IPsec + RoT) | Secure enterprise cloud, NFV, encrypted data centers |
| MCX623106AN-CDAT | OCP 3.0 SFF | 2x 25GbE / 1x 50GbE | Crypto & RoT | High-performance SDN, financial trading |
| MCX623106AC-CDAT | PCIe low-profile | 2x 25GbE | Crypto & RoT | Universal server SmartNIC |
Why Choose ConnectX-6 Lx MCX623436AN-CDAB
- Optimized TCO: Offloads SDN, storage, and security functions from CPU, lowering power and licensing costs per 25G port.
- Effortless RoCE deployment: Zero-Touch RoCE eliminates network reconfiguration, reduces operational complexity.
- Defense-in-depth security: Inline IPsec + hardware RoT secures data at wire speed and protects firmware integrity.
- Future-proof scalability: PCIe 4.0 and 50GbE readiness supports next-gen server architectures.
- NVIDIA ecosystem: Full DOCA framework support, OFED drivers, and broad compatibility with open source stacks.
Frequently Asked Questions
Q1: Is MCX623436AN-CDAB backward compatible with PCIe Gen3 servers?
A: Yes, the card supports PCIe Gen3 x8 electrical and mechanical, bandwidth limited to Gen3 speeds.
Q2: What is the difference between MCX623436AN-CDAB and MCX623106AN-CDAT?
A: Both are ConnectX-6 Lx OCP 3.0 SmartNICs with crypto & RoT. The MCX623436AN-CDAB may have specific factory configuration or ordering code variations. Starsurge can confirm exact feature parity and availability.
Q3: Does this card support dual-port 25G and single-port 50G concurrently?
A: The adapter can operate in either dual-port 25GbE or single-port 50GbE mode (depending on cabling/optics).
Q4: Can I use Zero-Touch RoCE in a mixed-vendor network?
A: Yes, ZTR enables RoCE on standard Ethernet switches without PFC/ECN, but best performance is achieved with recommended configuration; consult Starsurge.
Q5: How do I request a quote or check stock?
A: Contact Starsurge sales via website RFQ form or email. We provide real-time pricing, lead times, and volume discounts.
Precautions & Ordering Notes
- Confirm OCP 3.0 slot type (SFF) and motherboard mezzanine pinout compatibility.
- Employ proper airflow in chassis; SmartNICs generate heat under heavy traffic.
- For IPsec offload, verify that target OS/driver supports inline crypto features.
- Use recommended SFP28 transceivers or DAC cables to ensure signal integrity.
- Request latest firmware revision from Starsurge before mass deployment.
About Hong Kong Starsurge Group Co., Limited
Founded in 2008, Starsurge is a technology-driven provider of network hardware, IT services, and system integration solutions. We serve government, healthcare, manufacturing, education, finance, and enterprise sectors globally. Backed by a seasoned sales and technical team, we deliver NVIDIA networking products, IoT solutions, custom software, and multilingual support with a customer-first approach. As an authorized partner, Starsurge ensures reliable quality, responsive service, and tailored infrastructure building -- from 25G SmartNICs to full-scale data center deployment.
Buyer Checklist
- Confirm OCP 3.0 SFF slot availability and airflow direction.
- Determine port requirement (2x25G vs 1x50G) and optics (SFP28 vs QSFP28 breakout).
- Verify if IPsec crypto offload is required for compliance policy.
- Check server PCIe slot bifurcation and lane assignment (x8 mechanical required).
- Request manufacturing code and firmware version from Starsurge for consistency.
Vuoi conoscere maggiori dettagli su questo prodotto