Deliver scalable, secure, and high-performance networking for modern cloud and enterprise data centers. The ConnectX-6 Lx MCX623436AN-CDAB supports dual-port 10/25GbE or single-port 50GbE connectivity, PCIe Gen4 x8 host interface, inline IPsec encryption, and Zero-Touch RoCE — all designed to reduce CPU overhead and accelerate SDN and NFV workloads.
NVIDIA ConnectX-6 Lx Ethernet SmartNICs bring breakthrough efficiency to 25GbE deployments. The model MCX623436AN-CDAB is a PCIe low-profile form factor adapter equipped with advanced ASAP2 acceleration, hardware root-of-trust, and full support for RoCE (RDMA over Converged Ethernet). Whether you are virtualizing network functions, securing east-west traffic, or building a high-frequency trading environment, this SmartNIC offloads the data plane and ensures line-rate performance at up to 75 million packets per second (Mpps). Ideal for enterprises, telecom CSPs, and cloud providers looking to optimize server utilization without compromising security or scalability.
The ConnectX-6 Lx integrates NVIDIA ASAP2 (Accelerated Switch and Packet Processing) technology, enabling full SDN data plane offload to the SmartNIC. This dramatically reduces CPU burden in software-defined data centers while supporting both cloud (VXLAN, GENEVE) and telecom (MPLS, GTP) encapsulations. Meanwhile, Zero-Touch RoCE eliminates legacy RDMA configuration pains, allowing RoCE traffic to run on standard Ethernet fabrics without priority flow control or explicit congestion notification. Combined with inline IPsec cryptography, the adapter secures data in transit at line rate, preserving performance for encrypted east-west communications. Hardware root-of-trust further protects the supply chain, ensuring that only authenticated firmware executes during boot.
NVIDIA ConnectX-6 Lx adapters are supported across major operating systems, hypervisors, and container platforms. Common validated environments include:
For detailed firmware and driver versions, refer to NVIDIA's official documentation or contact Starsurge technical support.
| Parameter | Specification |
|---|---|
| Product Model | MCX623436AN-CDAB |
| Form Factor | PCIe Low Profile (also available in OCP 3.0 SFF) |
| Port Configuration | 2x 10/25GbE or 1x 50GbE (SFP28 / QSFP28 depending on SKU variant) |
| Host Interface | PCIe Gen4 x8 (compatible with PCIe Gen3 x8) |
| Maximum Throughput | 50Gb/s total bandwidth |
| Message Rate | 75 million packets per second (Mpps) |
| RoCE Support | Zero-Touch RoCE, RoCE Congestion Control, IPsec over RoCE |
| Security Offload | Inline IPsec (AES-XTS 256/512-bit), hardware root-of-trust, secure firmware update |
| SDN / Overlay Offload | VXLAN, GENEVE, NVGRE, MPLS, GTP; ASAP2 connection tracking and stateful firewall |
| Virtualization | SR-IOV (up to 256 VFs), VirtIO acceleration, Netronome-compatible flow API |
| Management | NC-SI, MCTP over SMBus/PCIe, PLDM for monitor/control and firmware update (DSP0248, DSP0267) |
| Remote Boot | PXE, iSCSI, UEFI (x86 and Arm) |
| Power Consumption | Not publicly specified – please confirm with ordering |
| Operating Temperature | 0°C to 55°C (typical), refer to user manual for exact derating |
| Ordering Part Number | Description | Crypto Acceleration | Form Factor |
|---|---|---|---|
| MCX623436AN-CDAB | ConnectX-6 Lx, 25/50GbE, dual-port SFP28, PCIe Gen4 x8, crypto enabled | Yes (IPsec inline) | Low Profile PCIe |
| MCX623436AN-CDAT | Same as CDAB but OCP 3.0 SFF with crypto | Yes | OCP 3.0 |
| MCX623416AN-CDAB | Non-crypto version (no IPsec engine) | No | Low Profile PCIe |
For additional ordering codes (e.g., tall bracket, QSFP28 variant), please contact Starsurge sales team.
Hong Kong Starsurge Group provides a complete lifecycle support package: pre-sales architecture review, cross-shipment RMA options, driver and firmware advisory, and remote troubleshooting. For enterprise customers, we offer on-site integration support (depending on region) and training for SDN acceleration with ASAP2 and RoCE deployment.
A: The CDAB includes inline IPsec hardware encryption and deceleration acceleration; non-crypto SKUs (e.g., MCX623416AN-CDAB) are suitable for environments where encryption is handled by software or external appliances.
A: Yes, the dual-port adapter can be configured as one 50GbE port (using breakout cables or QSFP28 variant) or two independent 25GbE or 10GbE ports.
A: ZTR works on standard lossy Ethernet networks without requiring PFC or ECN, making it far easier to deploy compared to traditional RoCE. Most modern switches support it.
A: Yes, ConnectX-6 Lx supports SR-IOV on ESXi and is certified with leading hypervisors. VirtIO acceleration also benefits containerized VMs.
A: Standard lead time is 2 to 4 weeks depending on quantity. Contact Starsurge for current stock availability.

Founded in 2008, Hong Kong Starsurge Group Co., Limited is a technology-driven provider of network hardware, IT services, and system integration. Serving government, healthcare, manufacturing, education, finance, and enterprise sectors worldwide, Starsurge delivers networking switches, SmartNICs, wireless solutions, and custom software. With a customer-first approach, multilingual support, and global delivery capabilities, Starsurge helps clients build efficient, scalable, and dependable infrastructure. As a trusted partner for NVIDIA networking solutions, we combine technical expertise with responsive service.
Global shipping and local support | Email: sales@starsurgegroup.com | Website: starsurgegroup.com (example)
| Environment | Driver Support | SR-IOV | VirtIO |
|---|---|---|---|
| Linux (RHEL 8/9, Ubuntu 20.04/22.04) | Native inbox and OFED | Yes | Yes |
| Windows Server 2019 and 2022 | NVIDIA WinOF-2 | Yes | No |
| VMware ESXi 7.0 and 8.0 | Native nmlx5_core | Yes | Guest OS dependent |
| Kubernetes / OpenShift | SR-IOV CNI + Multus | Yes | VirtIO offload supported |