Spectrum-X architecture
S7·E1 The all-reduce that stalls at sixty percent · Customer data center, cage 4, last night of the proof of concept
Builds on: The NVIDIA networking portfolio, Modes of operation: DPU, NIC, Zero-Trust
Before you read: what do you already know?
Wrong answers are fine and expected; trying first makes the lesson stick.
After this lesson you can
- Explain why per-flow ECMP hashing under-delivers for AI collectives and how RoCE Adaptive Routing plus Direct Data Placement removes the bottleneck.
- Trace one sprayed RoCE flow from the sending SuperNIC to in-order placement in GPU memory at the receiver.
- Distinguish the congestion problems adaptive routing solves from the incast problem that needs telemetry-based congestion control.
- Map BlueField-3 SuperNIC, ConnectX-8 and ConnectX-9 to the GPU generation, speed and switch generation they pair with.
- Analyze a customer claim that plain RoCE on a generic Ethernet fabric is equivalent to Spectrum-X and name what is missing.
Episode 1 — The all-reduce that stalls at sixty percent
The cage clock says 02:40; the proof of concept is judged at nine. Sixteen GPU servers, a clean leaf-spine, RoCE by the book, not a drop on any counter — and the claims model’s all-reduce sits at sixty percent of what the cabling should give. The customer is an insurance carrier that wants its own pod training before storm season. The network lead opens a graph-paper notebook to a clean page and repeats the sentence he has said since midnight: show me the counter. There is no counter. The Dell SE stirs coffee that went cold two hours ago and studies the tab he calls Promises. Under the two pinned uplinks the night operator has stuck labels off his label maker: BUSY, and ALSO BUSY. The other two sit idle.
The fabric is fine. The load balancing is not, and this is the exact case Spectrum-X was built for. A collective is a handful of enormous flows with almost no header entropy, so a switch that hashes each whole flow onto one uplink keeps stacking elephants on the same cable; the architecture whitepaper puts AI workloads at 60 percent of max throughput under static load balancing.1 The cure cannot live in the switch alone. Per-packet spraying only becomes legal when the receiving endpoint can accept packets out of order, which is why NVIDIA sells switches, SuperNICs and software as one co-designed platform.12
A collective runs at the speed of its busiest cable, not its widest. You start where their night started: the hashing, then what sits on each GPU.3
1Why per-flow ECMP starves AI collectives
AI training traffic is not web traffic. A collective operation is a small number of very large flows with low entropy in their headers, so a switch that load-balances by hashing the 3-tuple or 5-tuple assigns whole flows to uplinks and regularly puts two elephants on the same link while another sits idle. NVIDIA’s architecture whitepaper shows AI workloads “reduced to 60 percent of max throughput with static load balancing”.1
RoCE itself is not the problem. RDMA over Converged Ethernet runs on any suitably configured Ethernet fabric, and the customer’s existing ConnectX and generic switches will pass it. What Spectrum-X changes is that the switch and the endpoint are designed together. The whitepaper names three co-designed mechanisms:1
| Mechanism | Where it runs |
|---|---|
| RoCE Adaptive Routing | Spectrum-X switch |
| NVIDIA Direct Data Placement (DDP) | Spectrum-X SuperNIC |
| RoCE Congestion Control | Both |
The platform is therefore three things sold together: Spectrum switches, SuperNICs, and software. NVIDIA lists Cumulus Linux, Pure SONiC, NetQ and DOCA as the software stack.4 The headline claim is “1.6x” AI network performance over “off-the-shelf Ethernet”; treat that as NVIDIA’s own test result, and treat the mechanisms below as the part you can reason about and verify.2
Why does adding more ECMP uplinks not fix elephant-flow collisions?
2Adaptive routing, packet spraying, and Direct Data Placement
RoCE Adaptive Routing selects, “for every packet forwarded to an ECMP group”, “the port with the minimal load over its egress queue”; only queues matching the packet’s traffic class are evaluated.1 The switches “employ packet spraying” and also “receive status notifications from neighboring switches, which can influence the forwarding decision”, so the choice is not purely local.1
Spraying has a cost: packets of one flow “may arrive out of order”. The SuperNIC “transforms any out-of-order data at the RoCE transport layer, transparently delivering in-order data to the application”.1
On the sender side the SuperNIC “can dynamically mark traffic for eligibility to packet reordering”, and the switch classifier applies spraying “only [to] these marked RoCE packets”, so traffic that needs strict ordering still gets it.1 On the receiver side DDP places sprayed packets “in the correct order in the host/GPU memory”.1
Diagram source (Mermaid)
flowchart LR; A["1. Sender SuperNIC marks RoCE packets eligible for reordering"] --> B["2. Leaf: adaptive routing picks least-loaded egress queue per packet"]; B --> S1["Spine 1"]; B --> S2["Spine 2"]; B --> S3["Spine 3"]; B --> S4["Spine 4"]; S1 --> D["3. Destination leaf: packets of one flow arrive out of order"]; S2 --> D; S3 --> D; S4 --> D; D --> E["4. Receiver SuperNIC: DDP writes each packet to its offset in host or GPU memory"]; E --> F["5. Application sees in-order data"]
The whitepaper’s own result: effective bandwidth moves “from 60 percent on standard Ethernet to 95 percent with Spectrum-X”, and in its RDMA-write test all flows finish “at approximately the same time” under adaptive routing versus a wide spread under static hashing.1
Why must reordering happen in the SuperNIC rather than in the switch?
3Congestion control: what adaptive routing cannot fix
Adaptive routing rebalances paths; it does not shrink a receiver’s single link. The whitepaper is explicit: “RoCE Adaptive Routing will not solve incast congestion since there is no way to route around it.” Many-to-one congestion “requires data-flow metering per endpoint”.1
The mechanism is a closed loop between switch and SuperNIC. The switch “provides real-time network telemetry information” in-band, carrying “both queuing information for accurate congestion estimation, as well as port utilization indication for fast recovery”, and the telemetry is allowed “to bypass queueing delays in congested flows”.1 The SuperNIC “manage[s] and control[s] the data sender’s data injection rate”, running the algorithm at “millions of congestion control events per second with microsecond reaction latency”.1
Why it matters for multi-job clusters: in the whitepaper’s 3-to-1 incast example without congestion control, the shared leaf back-pressures and cuts an unrelated flow “to 33 percent of available bandwidth (50 percent of expected performance)”.1 The stated goals are “multi-tenant security and multi-job performance isolation”; the product page markets the same property as “noise isolation”.12
Diagram source (Mermaid)
flowchart LR; Q["Switch egress queue builds at the incast port"] --> T["In-band telemetry: queue depth + port utilization, bypasses queueing delay"]; T --> N["Sender SuperNIC congestion-control engine meters injection rate"]; N --> Q; N -. "victim flow on the shared leaf keeps its bandwidth" .-> V["Other job unaffected"]
Why is a victim flow evidence of missing congestion control rather than of a bad routing decision?
4Switches, scale, and telemetry
The first-generation Spectrum-X switch is the SN5600: a 51.2 Tb/s Spectrum-4 ASIC with “up to 64 ports of 800GbE or 128 ports of 400GbE within a single 2U switch”.1 That is the switch NVIDIA announced with Dell, HPE and Lenovo in November 2023, using PowerEdge XE9680 servers and BlueField-3 SuperNICs in the Israel-1 reference design.4
The current generation is Spectrum-6, “102.4 Tb/s per switch chip with 200 G SerDes”; the SN6600 offers “128 ports of 800 G OSFP” and the SN6800 “512 ports of 800 G in a 5U form factor”.2 For scale, NVIDIA says “Spectrum-X Multiplane scales up to 128,000 GPUs in two tiers” and that “Spectrum-XGS accelerates multi-site NCCL collectives by 1.9x”; Spectrum-X Photonics (co-packaged optics) carries reliability and power-efficiency claims. All of these are vendor figures from NVIDIA’s own tests.2
NetQ and What Just Happened
Visibility comes from NetQ, which combines switch telemetry and DOCA telemetry; NetQ “flow telemetry maps flow paths and behavior across switch ports and RoCE queues” and is paired with What Just Happened (WJH) for drop analysis.1 The switch operating systems in the stack are Cumulus Linux and Pure SONiC.4 The validated solution stack you will read in lesson 7.3 pins Cumulus for Spectrum-4 at exact versions per release.9
Why does NetQ need both switch telemetry and DOCA telemetry to be useful in an AI cluster?
5Who does the endpoint work: BlueField-3 SuperNIC, ConnectX-8, ConnectX-9
NVIDIA defines SuperNICs as “a new class of network accelerators designed to supercharge hyperscale AI workloads in Ethernet-based clouds”, “Integrated with NVIDIA Spectrum-X Ethernet”. The portfolio is BlueField-3 SuperNIC “up to 400 Gb/s”, ConnectX-8 SuperNIC “up to 800 Gb/s” and ConnectX-9 SuperNIC “up to 1.6 Tb/s throughput per GPU”.3
The BlueField-3 SuperNIC is the Hopper-era endpoint: “up to 400Gb/s of RoCE network connectivity between GPU servers” with “deterministic and isolated performance between jobs and tenants”.1
These SKUs “natively run in network interface card (NIC) mode”, keep the large number of queue pairs in on-card memory “instead of using system memory”, and include DDP.1 The modes-of-operation page agrees: “BlueField-3 SuperNIC SKUs are shipped in NIC Mode by default”, and in NIC mode the Arm cores are inactive and the device functions as a ConnectX adapter.8
ConnectX-8 and ConnectX-9
ConnectX-8 is the Blackwell-era endpoint: “up to 800 gigabits per second” through a PCIe Gen6 64 GT/s x16 edge connector, with Socket-Direct extension options.6 The HGX B300 reference architecture places “Eight NVIDIA ConnectX-8 SuperNICs on the HGX baseboard for the East/West” at “up to 800 Gb/s (2 x 400Gb/s Ethernet) per GPU”, “maintaining a 1:1 GPU-to-NIC ratio”.5 ConnectX-9 is the Vera Rubin endpoint at 1.6 Tb/s per GPU and was declared in full production at GTC in March 2026.37
The validated stack tracks exactly these pairings: H200 rows pin BlueField-3 firmware, while B300 and GB300 rows pin ConnectX-8 firmware.9 The DOCA 3.5.0 firmware table gives the three families as BlueField-3 32.50.1002, ConnectX-8 40.50.1002 and ConnectX-9 82.50.1002.10
Note what is absent: the BlueField-3 DPU SKU (Arm active) is not an east-west device in the Blackwell design. Its job is north-south, which is lesson 7.2.
Why ship the BlueField-3 SuperNIC in NIC mode when the silicon has Arm cores?
Every step is worked for you. Read it once, then try the faded version.The same method with steps blanked out (____). Fill them in from memory.A fresh case with no steps shown. Solve it on your own.
Customer statement: “Our ConnectX cards already do RoCE and our switches do ECMP. Spectrum-X is branding.”
- Identify the load-balancing mechanism. Ask: per-flow or per-packet? Generic ECMP is per-flow hashing on 3-tuple or 5-tuple. The whitepaper’s number for AI traffic under static load balancing is 60 percent of max throughput.1
- Identify why per-packet is impossible for them. A generic NIC needs RoCE packets in order. Spraying only works when the receiving NIC reorders by placement (DDP) and the sender marks eligible traffic. Both are SuperNIC functions.1
- Identify incast handling. Spectrum-X carries queue depth and port utilization in-band to the SuperNIC, which meters the sender at microsecond scale. Ask what their switches send and what their NICs do with it.1
- Write the gap table: mechanism, where it lives, present in the customer fabric (yes, no, unknown).
- Conclusion: the claim confuses the protocol (RoCE, which they have) with the co-designed switch and NIC behavior (which requires a Spectrum-X switch plus a SuperNIC from the portfolio: BlueField-3 SuperNIC, ConnectX-8 or ConnectX-9).3
Acceptance: each row of the gap table cites a specific whitepaper mechanism and a specific BOM part.
- Load balancing in a generic fabric is per-____ hashing; the whitepaper’s AI throughput under it is ____ percent of max.
- Per-packet spraying requires the receiving NIC to reorder by placement, called ____, and the sender to ____ eligible packets.
- Incast handling in Spectrum-X uses ____ telemetry from the switch and a congestion-control engine on the ____.
- Gap table columns: mechanism, ____, present in customer fabric.
- The customer’s claim confuses the ____ with the co-designed ____ and ____ behavior.
A customer runs H100 servers with ConnectX-7 adapters and SN5600 switches on Cumulus. They want to know which Spectrum-X mechanisms their fabric can and cannot deliver as-is. Using only the portfolio page and the whitepaper, write the three-row gap table and one sentence per row. Acceptance: you state whether ConnectX-7 appears in the SuperNIC portfolio, you name which of the three mechanisms depends on the NIC, and you do not quote any performance multiplier without its source.
Episode 1 closes — sunrise, one page, no multipliers
By the nine o’clock handover the gap table is one page. Adaptive routing lives on the switch, Direct Data Placement on the SuperNIC, congestion control on both — and their fabric has none of the three, because a generic NIC cannot accept an out-of-order RoCE packet.13 You quote no multiplier without its source. What you say is the sentence he repeats to his director: “Your fabric is not slow. It is putting two of your eight big flows on the same cable, and only a NIC that reorders by placement lets the switch stop doing that.” He writes it down, turns the page: “If we buy the real thing, tell me which card goes in which slot.” Thursday, Round Rock, thirty-two servers on a quote — and line nine is wrong.
Lab
Read-only0 of 5 steps doneRead-only. The Dell lab has one BlueField-3 and no Spectrum-X switch, so adaptive routing and congestion control cannot be observed here; this lab records the endpoint facts you would compare against a Spectrum-X BOM.
- Inventory:
sudo mst start && sudo mst status -v. Record the device path (for example/dev/mst/mt41692_pciconf0) and the PCI address. If not:lspci | grep -i mellanoxto confirm the card enumerates. - Mode:
sudo mlxconfig -d /dev/mst/<dev> q INTERNAL_CPU_OFFLOAD_ENGINE.ENABLED(0)is DPU mode,DISABLED(1)is NIC mode. A card in the east-west SuperNIC role would read NIC mode; note which one the lab card is in and do not change it.8 - Firmware:
sudo mlxfwmanager --query. Record the FW version and the PSID. Compare with the DOCA 3.5.0 table value for BlueField-3, 32.50.1002.10 - Ports:
ip -br linkandethtool <netdev> | grep -i speedfor each BlueField netdev. Record the negotiated speed; a 400GbE SKU with a 100G optic will report 100000Mb/s. - Write two sentences: which SuperNIC generation this card corresponds to, and which switch and NetQ components would be needed to observe adaptive routing on it.31
- Reproduce the low-entropy problem with a toy model. Run:
python3 - <<'EOF'
import random
trials, flows, links = 10000, 8, 8
collide = 0
for _ in range(trials):
hashed = [random.randrange(links) for _ in range(flows)]
if len(set(hashed)) < flows:
collide += 1
print(f"{flows} flows on {links} uplinks: at least one collision in {100*collide/trials:.1f}% of trials")
EOFExpected: roughly 99 percent of trials have at least one collision. This is a model of per-flow hashing, not a measurement of any switch; the whitepaper’s real-world figure is 60 percent of max throughput.1 If not: check python3 --version is 3.6 or newer.
- Write the five-step packet walk from Segment 2 in your own words, then compare to the diagram. Acceptance: your version names the sender mark, the least-loaded-queue decision, out-of-order arrival, and DDP.1
- Build the symptom-to-mechanism table: “some flows finish late while links sit idle” maps to adaptive routing plus DDP; “an unrelated job slows when another job’s all-to-all runs” maps to congestion control. Add the whitepaper page reference for each.1
- Fill the generation table from the portfolio page: BlueField-3 SuperNIC 400 Gb/s, ConnectX-8 800 Gb/s, ConnectX-9 1.6 Tb/s, with the GPU platform each pairs with (Hopper H100/H200, Blackwell B200/B300, Vera Rubin).357
Retrieval check
Answer from memory before looking anything up; misses become flashcards.
Explain it to a Dell SE
Explain to a Dell SE, in four sentences, why a Spectrum-X fabric finishes an all-reduce faster than the same switches and NICs running plain RoCE with ECMP.
Sources
10 sourcesFacts in this lesson were checked against Spectrum-X architecture whitepaper (July 2024), NVIDIA Spectrum-X and SuperNIC product pages, HGX AI Factory RA components page, Spectrum-X Validated Solution Stack v2.3.1, DOCA 3.5.0 General Support — fetched 2026-09-06. Dates are when each page was fetched. Sources fetched 2026-09-06, checked 16 days ago.
- NVIDIA Spectrum-X Network Platform Architecture whitepaper (July 2024; third-party mirror of the NVIDIA PDF)
- NVIDIA Spectrum-X Ethernet Platform for Giga-Scale AI
- NVIDIA SuperNICs (BlueField-3 / ConnectX-8 / ConnectX-9)
- NVIDIA Spectrum-X available from Dell, HPE, Lenovo (Nov 20 2023)
- NVIDIA HGX AI Factory Enterprise Reference Architecture — Components
- NVIDIA ConnectX-8 SuperNIC User Manual — Introduction
- NVIDIA Vera Rubin Opens Agentic AI Frontier (GTC, Mar 16 2026)
- BlueField Modes of Operation
- NVIDIA Spectrum-X Validated Solution Stack
- DOCA General Support (firmware table)
The same idea elsewhere
Other lessons that cover this ground, sometimes from another course's angle.
- Spectrum-X course Scenario: 'the fabric is slow and adaptive routing does nothing' Spectrum-X course · Same ground: congestion, netq and SuperNIC
- Spectrum-X course Why spraying needs a SuperNIC: reordering and direct data placement Spectrum-X course · Same ground: SuperNIC, Direct Data Placement and firmware
- Spectrum-X course Telemetry-based congestion control: three loops, not one Spectrum-X course · Same ground: numbers, SuperNIC and congestion