MCX623436AN-CDAB 50GbE SmartNIC with IPsec Inline & RoCE Acceleration

NVIDIA ConnectX-6 Lx Ethernet SmartNICs bring breakthrough efficiency to 25GbE deployments. The model MCX623436AN-CDAB is a PCIe low-profile form factor adapter equipped with advanced ASAP2 acceleration, hardware root-of-trust, and full support for RoCE (RDMA over Converged Ethernet). Whether you are virtualizing network functions, securing east-west traffic, or building a high-frequency trading environment, this SmartNIC offloads the data plane and ensures line-rate performance at up to 75 million packets per second (Mpps). Ideal for enterprises, telecom CSPs, and cloud providers looking to optimize server utilization without compromising security or scalability.

• High Throughput and Connectivity: Dual-port 10/25GbE or single-port 50GbE; total bandwidth up to 50Gb/s.
• PCIe Gen4 and Gen3 x8: Host interface compatible with PCIe 4.0 (8 lanes) and backward compatible to Gen3.
• ASAP2 SDN Acceleration: Offloads overlay encapsulations (VXLAN, GENEVE, NVGRE) and stateful connection tracking (L4 firewall).
• Zero-Touch RoCE (ZTR): Seamless RDMA deployment without PFC or ECN configuration; resilient and scalable.
• Inline IPsec Crypto Acceleration: AES-XTS 256/512-bit hardware encryption and decryption, supports IPsec over RoCE.
• Hardware Root of Trust: Secure boot, RSA-authenticated firmware updates, device-unique key for clone protection.
• Programmable Flexible Parser and Flow Steering: Header rewrite, flow mirroring, sampling, hierarchical QoS.
• Virtualization Ready: SR-IOV, VirtIO acceleration, overlay offloads for containerized and virtualized environments.

The ConnectX-6 Lx integrates NVIDIA ASAP2 (Accelerated Switch and Packet Processing) technology, enabling full SDN data plane offload to the SmartNIC. This dramatically reduces CPU burden in software-defined data centers while supporting both cloud (VXLAN, GENEVE) and telecom (MPLS, GTP) encapsulations. Meanwhile, Zero-Touch RoCE eliminates legacy RDMA configuration pains, allowing RoCE traffic to run on standard Ethernet fabrics without priority flow control or explicit congestion notification. Combined with inline IPsec cryptography, the adapter secures data in transit at line rate, preserving performance for encrypted east-west communications. Hardware root-of-trust further protects the supply chain, ensuring that only authenticated firmware executes during boot.

• Cloud and Enterprise Data Centers: Accelerate Open vSwitch (OVS) and SDN controllers; offload connection tracking for stateful firewalls.
• NFV and Telecom Infrastructures: Deploy virtualized packet gateways, GTP encapsulation and decapsulation, and MPLS acceleration.
• High-Performance Storage and HPC: RoCE-based NVMe over Fabrics, distributed storage (Ceph, Lustre) with low latency.
• Edge and AI Inference Servers: 50GbE single-port density for edge nodes requiring inline security and small form factor (OCP 3.0 options available).
• Financial Services: Hardware offload for market data feeds, low-latency trading with flow mirroring and packet sampling.

NVIDIA ConnectX-6 Lx adapters are supported across major operating systems, hypervisors, and container platforms. Common validated environments include:

• Linux: RHEL, Ubuntu, Debian, CentOS, Rocky Linux, SUSE
• Windows Server 2019 and 2022
• VMware ESXi (with SR-IOV and VirtIO offload)
• Container runtimes: Docker, containerd with CNI plugins
• Orchestration: Kubernetes, OpenStack, OpenShift
• DPDK and VPP for high-performance user-space networking

For detailed firmware and driver versions, refer to NVIDIA's official documentation or contact Starsurge technical support.

For additional ordering codes (e.g., tall bracket, QSFP28 variant), please contact Starsurge sales team.

• Authorized Supply Partnership: Genuine NVIDIA adapters with full warranty and traceability.
• Technical Pre-Sales Support: Compatibility validation, driver guidance, and performance tuning.
• Global Logistics and Fast Shipping: Warehousing in Asia-Pacific and Europe; express delivery to USA, EU, Middle East, SEA.
• Competitive Volume Pricing: Tailored quotes for data center rollouts, ODM and OEM projects.
• After-Sales Care: Firmware update assistance, RMA handling, and extended technical service agreements.

Hong Kong Starsurge Group provides a complete lifecycle support package: pre-sales architecture review, cross-shipment RMA options, driver and firmware advisory, and remote troubleshooting. For enterprise customers, we offer on-site integration support (depending on region) and training for SDN acceleration with ASAP2 and RoCE deployment.

• Ensure server PCIe slot provides sufficient cooling (minimum airflow 200 LFM).
• Use certified SFP28 or QSFP28 optical or DAC cables for 25/50GbE operation.
• For crypto functionality, appropriate software configuration and licensing may be required; refer to NVIDIA DOCA framework.
• Parameters not explicitly listed (e.g., exact power consumption) should be confirmed before volume orders.

• Confirm your required port speed: 10/25GbE dual-port or 50GbE single-port mode.
• Verify PCIe slot: x8 physical (Gen3 or Gen4) with adequate airflow.
• Determine crypto requirement: choose CDAB (crypto) or non-crypto variant accordingly.
• Check bracket type: low-profile bracket standard, full-height bracket available upon request.
• Ensure OS and driver compatibility: visit NVIDIA's network drivers page for latest firmware.
• Volume discounts? Contact Starsurge for multi-unit pricing and lead times.

• NVIDIA ConnectX-6 Dx Dual-port 100GbE SmartNIC
• NVIDIA BlueField-2 DPU 25/100GbE data processing units
• Mellanox QSFP28 and SFP28 active optical cables and transceivers
• NVIDIA Spectrum Ethernet Switches (SN2000/SN3000 series)
• NVIDIA Cumulus Linux licenses and professional services