NVIDIA ConnectX-6 Lx 25/50G Ethernet SmartNIC MCX623106AN-CDAT

The NVIDIA ConnectX-6 Lx MCX623106AN-CDAT is a feature-rich Ethernet SmartNIC built for secure, high-performance data centers. With inline IPsec encryption/decryption, hardware root-of-trust, and advanced SDN acceleration (ASAP2), this adapter delivers wire-speed 25/50GbE connectivity while offloading the CPU. Ideal for cloud, enterprise, finance, and AI infrastructure that demands both performance and security.

Based on NVIDIA's proven ConnectX architecture, the ConnectX-6 Lx family sets the standard for 25GbE SmartNICs. The MCX623106AN-CDAT variant features onboard cryptographic acceleration - including AES-XTS 256/512-bit inline IPsec - enabling encrypted tunnels at line rate without host CPU overhead. It supports two ports of 10/25GbE or a single 50GbE port, with total bandwidth up to 50Gb/s and PCIe Gen4 x8 host interface (backward compatible with Gen3).

Key offloads include overlay tunneling (VXLAN, GENEVE, NVGRE, MPLS, GTP), stateful connection tracking for L4 firewall, and ASAP2 for SDN data plane acceleration. Zero-Touch RoCE (ZTR) simplifies RDMA deployment across existing Ethernet networks, eliminating the need for complex PFC/ECN configuration. This makes the MCX623106AN-CDAT a superior choice for NVMe-oF, distributed storage, and latency-sensitive applications that also require data-in-transit protection.

The MCX623106AN-CDAT integrates a hardware crypto engine that performs IPsec encryption and decryption at line rate (25/50GbE) with AES-XTS 256/512-bit keys. This offloads the host CPU entirely, enabling secure multi-tenant clouds, VPN gateways, and encrypted storage traffic without performance degradation. Additionally, IPsec over RoCE is supported for end-to-end protected RDMA.

Offloads the SDN data plane to the SmartNIC, accelerating Open vSwitch and virtualized networking. It supports stateful connection tracking, flow mirroring, header rewrite, and hierarchical QoS. For CSPs, encapsulation offloads include MPLS and GTP for NFV acceleration.

Eliminates the need for PFC or ECN configuration, allowing RDMA to operate seamlessly on standard Ethernet fabrics. This drastically simplifies deployment for storage and AI clusters while ensuring resilience and efficiency at scale.

Hardware root-of-trust (RoT) ensures secure boot and firmware updates using RSA cryptography and device-unique keys, preventing cloning and guaranteeing firmware authenticity.

A: AES-XTS 256-bit and 512-bit keys, supporting both transport and tunnel mode IPsec at line rate.

A: Yes, it auto-negotiates to PCIe Gen3 x8, delivering full 25GbE performance.

A: Yes, using SR-IOV or VirtIO, different traffic types can be partitioned and offloaded concurrently.

A: SFP28 passive DAC (up to 5m), active optical cables (AOC), or SFP28 optical transceivers from validated vendors.

A: Yes, it supports UEFI for x86 and Arm servers, fully compatible with Secure Boot environments.

Founded in 2008, Starsurge is a technology-driven provider of network hardware, IT services, and system integration solutions. We serve government, healthcare, manufacturing, education, finance, and enterprise clients globally. With experienced sales and technical teams, Starsurge offers IoT solutions, network management, custom software development, and multilingual support. Our customer-first philosophy ensures reliable quality, responsive service, and tailored network infrastructure. As an authorized partner of leading brands including NVIDIA, we deliver genuine SmartNICs with global logistics and deep technical expertise.