Spectrum-X architecture
S7·E1The all-reduce that stalls at sixty percent · Customer data center, cage 4, last night of the proof of concept
Builds on: The NVIDIA networking portfolio, Modes of operation: DPU, NIC, Zero-Trust
Before you read: what do you already know?
3 quick questions. Wrong answers are fine and expected; trying first makes the lesson stick.
After this lesson you can
- Explain why per-flow ECMP hashing under-delivers for AI collectives and how RoCE Adaptive Routing plus Direct Data Placement removes the bottleneck.
- Trace one sprayed RoCE flow from the sending SuperNIC to in-order placement in GPU memory at the receiver.
- Distinguish the congestion problems adaptive routing solves from the incast problem that needs telemetry-based congestion control.
- Map BlueField-3 SuperNIC, ConnectX-8 and ConnectX-9 to the GPU generation, speed and switch generation they pair with.
- Analyze a customer claim that plain RoCE on a generic Ethernet fabric is equivalent to Spectrum-X and name what is missing.
Episode 1 — The all-reduce that stalls at sixty percent
The cage clock says 02:40; the proof of concept is judged at nine. Sixteen GPU servers, a clean leaf-spine, RoCE by the book, not a drop on any counter — and the claims model’s all-reduce sits at sixty percent of what the cabling should give. The customer is an insurance carrier that wants its own pod training before storm season. The network lead opens a graph-paper notebook to a clean page and repeats the sentence he has said since midnight: show me the counter. There is no counter. The Dell SE stirs coffee that went cold two hours ago and studies the tab he calls Promises. Under the two pinned uplinks the night operator has stuck labels off his label maker: BUSY, and ALSO BUSY. The other two sit idle.
The fabric is fine. The load balancing is not, and this is the exact case Spectrum-X was built for. A collective is a handful of enormous flows with almost no header entropy, so a switch that hashes each whole flow onto one uplink keeps stacking elephants on the same cable; the architecture whitepaper puts AI workloads at 60 percent of max throughput under static load balancing.[1] The cure cannot live in the switch alone. Per-packet spraying only becomes legal when the receiving endpoint can accept packets out of order, which is why NVIDIA sells switches, SuperNICs and software as one co-designed platform.[1][2]
A collective runs at the speed of its busiest cable, not its widest. You start where their night started: the hashing, then what sits on each GPU.[3]
1Why per-flow ECMP starves AI collectives
AI training traffic is not web traffic. A collective operation is a small number of very large flows with low entropy in their headers, so a switch that load-balances by hashing the 3-tuple or 5-tuple assigns whole flows to uplinks and regularly puts two elephants on the same link while another sits idle. NVIDIA’s architecture whitepaper shows AI workloads “reduced to 60 percent of max throughput with static load balancing”.[1]
RoCE itself is not the problem. RDMA over Converged Ethernet runs on any suitably configured Ethernet fabric, and the customer’s existing ConnectX and generic switches will pass it. What Spectrum-X changes is that the switch and the endpoint are designed together. The whitepaper names three co-designed mechanisms: RoCE Adaptive Routing on the Spectrum-X switch, NVIDIA Direct Data Placement (DDP) on the Spectrum-X SuperNIC, and RoCE Congestion Control running on both.[1]
The platform is therefore three things sold together: Spectrum switches, SuperNICs, and software. NVIDIA lists Cumulus Linux, Pure SONiC, NetQ and DOCA as the software stack.[4] The headline claim is “1.6x” AI network performance over “off-the-shelf Ethernet”; treat that as NVIDIA’s own test result, and treat the mechanisms below as the part you can reason about and verify.[2]
2Adaptive routing, packet spraying, and Direct Data Placement
RoCE Adaptive Routing selects, “for every packet forwarded to an ECMP group”, “the port with the minimal load over its egress queue”; only queues matching the packet’s traffic class are evaluated.[1] The switches “employ packet spraying” and also “receive status notifications from neighboring switches, which can influence the forwarding decision”, so the choice is not purely local.[1]
Spraying has a cost: packets of one flow “may arrive out of order”. The SuperNIC “transforms any out-of-order data at the RoCE transport layer, transparently delivering in-order data to the application”.[1] On the sender side the SuperNIC “can dynamically mark traffic for eligibility to packet reordering”, and the switch classifier applies spraying “only [to] these marked RoCE packets”, so traffic that needs strict ordering still gets it.[1] On the receiver side DDP places sprayed packets “in the correct order in the host/GPU memory”.[1]
The whitepaper’s own result: effective bandwidth moves “from 60 percent on standard Ethernet to 95 percent with Spectrum-X”, and in its RDMA-write test all flows finish “at approximately the same time” under adaptive routing versus a wide spread under static hashing.[1]
Diagram source (Mermaid)
flowchart LR; A["1. Sender SuperNIC marks RoCE packets eligible for reordering"] --> B["2. Leaf: adaptive routing picks least-loaded egress queue per packet"]; B --> S1["Spine 1"]; B --> S2["Spine 2"]; B --> S3["Spine 3"]; B --> S4["Spine 4"]; S1 --> D["3. Destination leaf: packets of one flow arrive out of order"]; S2 --> D; S3 --> D; S4 --> D; D --> E["4. Receiver SuperNIC: DDP writes each packet to its offset in host or GPU memory"]; E --> F["5. Application sees in-order data"]
3Congestion control: what adaptive routing cannot fix
Adaptive routing rebalances paths; it does not shrink a receiver’s single link. The whitepaper is explicit: “RoCE Adaptive Routing will not solve incast congestion since there is no way to route around it.” Many-to-one congestion “requires data-flow metering per endpoint”.[1]
The mechanism is a closed loop between switch and SuperNIC. The switch “provides real-time network telemetry information” in-band, carrying “both queuing information for accurate congestion estimation, as well as port utilization indication for fast recovery”, and the telemetry is allowed “to bypass queueing delays in congested flows”.[1] The SuperNIC “manage[s] and control[s] the data sender’s data injection rate”, running the algorithm at “millions of congestion control events per second with microsecond reaction latency”.[1]
Why it matters for multi-job clusters: in the whitepaper’s 3-to-1 incast example without congestion control, the shared leaf back-pressures and cuts an unrelated flow “to 33 percent of available bandwidth (50 percent of expected performance)”.[1] The stated goals are “multi-tenant security and multi-job performance isolation”; the product page markets the same property as “noise isolation”.[1][2]
Diagram source (Mermaid)
flowchart LR; Q["Switch egress queue builds at the incast port"] --> T["In-band telemetry: queue depth + port utilization, bypasses queueing delay"]; T --> N["Sender SuperNIC congestion-control engine meters injection rate"]; N --> Q; N -. "victim flow on the shared leaf keeps its bandwidth" .-> V["Other job unaffected"]
4Switches, scale, and telemetry
The first-generation Spectrum-X switch is the SN5600: a 51.2 Tb/s Spectrum-4 ASIC with “up to 64 ports of 800GbE or 128 ports of 400GbE within a single 2U switch”.[1] That is the switch NVIDIA announced with Dell, HPE and Lenovo in November 2023, using PowerEdge XE9680 servers and BlueField-3 SuperNICs in the Israel-1 reference design.[4]
The current generation is Spectrum-6, “102.4 Tb/s per switch chip with 200 G SerDes”; the SN6600 offers “128 ports of 800 G OSFP” and the SN6800 “512 ports of 800 G in a 5U form factor”.[2] For scale, NVIDIA says “Spectrum-X Multiplane scales up to 128,000 GPUs in two tiers” and that “Spectrum-XGS accelerates multi-site NCCL collectives by 1.9x”; Spectrum-X Photonics (co-packaged optics) carries reliability and power-efficiency claims. All of these are vendor figures from NVIDIA’s own tests.[2]
Visibility comes from NetQ, which combines switch telemetry and DOCA telemetry; NetQ “flow telemetry maps flow paths and behavior across switch ports and RoCE queues” and is paired with What Just Happened (WJH) for drop analysis.[1] The switch operating systems in the stack are Cumulus Linux and Pure SONiC.[4] The validated solution stack you will read in lesson 7.3 pins Cumulus for Spectrum-4 at exact versions per release.[9]
5Who does the endpoint work: BlueField-3 SuperNIC, ConnectX-8, ConnectX-9
NVIDIA defines SuperNICs as “a new class of network accelerators designed to supercharge hyperscale AI workloads in Ethernet-based clouds”, “Integrated with NVIDIA Spectrum-X Ethernet”. The portfolio is BlueField-3 SuperNIC “up to 400 Gb/s”, ConnectX-8 SuperNIC “up to 800 Gb/s” and ConnectX-9 SuperNIC “up to 1.6 Tb/s throughput per GPU”.[3]
The BlueField-3 SuperNIC is the Hopper-era endpoint: “up to 400Gb/s of RoCE network connectivity between GPU servers” with “deterministic and isolated performance between jobs and tenants”. These SKUs “natively run in network interface card (NIC) mode”, keep the large number of queue pairs in on-card memory “instead of using system memory”, and include DDP.[1] The modes-of-operation page agrees: “BlueField-3 SuperNIC SKUs are shipped in NIC Mode by default”, and in NIC mode the Arm cores are inactive and the device functions as a ConnectX adapter.[8]
ConnectX-8 is the Blackwell-era endpoint: “up to 800 gigabits per second” through a PCIe Gen6 64 GT/s x16 edge connector, with Socket-Direct extension options.[6] The HGX B300 reference architecture places “Eight NVIDIA ConnectX-8 SuperNICs on the HGX baseboard for the East/West” at “up to 800 Gb/s (2 x 400Gb/s Ethernet) per GPU”, “maintaining a 1:1 GPU-to-NIC ratio”.[5] ConnectX-9 is the Vera Rubin endpoint at 1.6 Tb/s per GPU and was declared in full production at GTC in March 2026.[3][7]
The validated stack tracks exactly these pairings: H200 rows pin BlueField-3 firmware, while B300 and GB300 rows pin ConnectX-8 firmware.[9] The DOCA 3.5.0 firmware table gives the three families as BlueField-3 32.50.1002, ConnectX-8 40.50.1002 and ConnectX-9 82.50.1002.[10] Note what is absent: the BlueField-3 DPU SKU (Arm active) is not an east-west device in the Blackwell design. Its job is north-south, which is lesson 7.2.
Customer statement: “Our ConnectX cards already do RoCE and our switches do ECMP. Spectrum-X is branding.”
- Identify the load-balancing mechanism. Ask: per-flow or per-packet? Generic ECMP is per-flow hashing on 3-tuple or 5-tuple. The whitepaper’s number for AI traffic under static load balancing is 60 percent of max throughput.[1]
- Identify why per-packet is impossible for them. A generic NIC needs RoCE packets in order. Spraying only works when the receiving NIC reorders by placement (DDP) and the sender marks eligible traffic. Both are SuperNIC functions.[1]
- Identify incast handling. Spectrum-X carries queue depth and port utilization in-band to the SuperNIC, which meters the sender at microsecond scale. Ask what their switches send and what their NICs do with it.[1]
- Write the gap table: mechanism, where it lives, present in the customer fabric (yes, no, unknown).
- Conclusion: the claim confuses the protocol (RoCE, which they have) with the co-designed switch and NIC behavior (which requires a Spectrum-X switch plus a SuperNIC from the portfolio: BlueField-3 SuperNIC, ConnectX-8 or ConnectX-9).[3]
Acceptance: each row of the gap table cites a specific whitepaper mechanism and a specific BOM part.
- Load balancing in a generic fabric is per-____ hashing; the whitepaper’s AI throughput under it is ____ percent of max.
- Per-packet spraying requires the receiving NIC to reorder by placement, called ____, and the sender to ____ eligible packets.
- Incast handling in Spectrum-X uses ____ telemetry from the switch and a congestion-control engine on the ____.
- Gap table columns: mechanism, ____, present in customer fabric.
- The customer’s claim confuses the ____ with the co-designed ____ and ____ behavior.
A customer runs H100 servers with ConnectX-7 adapters and SN5600 switches on Cumulus. They want to know which Spectrum-X mechanisms their fabric can and cannot deliver as-is. Using only the portfolio page and the whitepaper, write the three-row gap table and one sentence per row. Acceptance: you state whether ConnectX-7 appears in the SuperNIC portfolio, you name which of the three mechanisms depends on the NIC, and you do not quote any performance multiplier without its source.
Episode 1 closes — sunrise, one page, no multipliers
By the nine o’clock handover the gap table is one page. Adaptive routing lives on the switch, Direct Data Placement on the SuperNIC, congestion control on both — and their fabric has none of the three, because a generic NIC cannot accept an out-of-order RoCE packet.[1][3] You quote no multiplier without its source. What you say is the sentence he repeats to his director: “Your fabric is not slow. It is putting two of your eight big flows on the same cable, and only a NIC that reorders by placement lets the switch stop doing that.” He writes it down, turns the page: “If we buy the real thing, tell me which card goes in which slot.” Thursday, Round Rock, thirty-two servers on a quote — and line nine is wrong.
Lab
Read-only. The Dell lab has one BlueField-3 and no Spectrum-X switch, so adaptive routing and congestion control cannot be observed here; this lab records the endpoint facts you would compare against a Spectrum-X BOM.
- Inventory:
sudo mst start && sudo mst status -v. Record the device path (for example/dev/mst/mt41692_pciconf0) and the PCI address. If not:lspci | grep -i mellanoxto confirm the card enumerates. - Mode:
sudo mlxconfig -d /dev/mst/<dev> q INTERNAL_CPU_OFFLOAD_ENGINE.ENABLED(0)is DPU mode,DISABLED(1)is NIC mode. A card in the east-west SuperNIC role would read NIC mode; note which one the lab card is in and do not change it.[8] - Firmware:
sudo mlxfwmanager --query. Record the FW version and the PSID. Compare with the DOCA 3.5.0 table value for BlueField-3, 32.50.1002.[10] - Ports:
ip -br linkandethtool <netdev> | grep -i speedfor each BlueField netdev. Record the negotiated speed; a 400GbE SKU with a 100G optic will report 100000Mb/s. - Write two sentences: which SuperNIC generation this card corresponds to, and which switch and NetQ components would be needed to observe adaptive routing on it.[3][1]
- Reproduce the low-entropy problem with a toy model. Run:
python3 - <<'EOF'
import random
trials, flows, links = 10000, 8, 8
collide = 0
for _ in range(trials):
hashed = [random.randrange(links) for _ in range(flows)]
if len(set(hashed)) < flows:
collide += 1
print(f"{flows} flows on {links} uplinks: at least one collision in {100*collide/trials:.1f}% of trials")
EOFExpected: roughly 99 percent of trials have at least one collision. This is a model of per-flow hashing, not a measurement of any switch; the whitepaper’s real-world figure is 60 percent of max throughput.[1] If not: check python3 --version is 3.6 or newer.
- Write the five-step packet walk from Segment 2 in your own words, then compare to the diagram. Acceptance: your version names the sender mark, the least-loaded-queue decision, out-of-order arrival, and DDP.[1]
- Build the symptom-to-mechanism table: “some flows finish late while links sit idle” maps to adaptive routing plus DDP; “an unrelated job slows when another job’s all-to-all runs” maps to congestion control. Add the whitepaper page reference for each.[1]
- Fill the generation table from the portfolio page: BlueField-3 SuperNIC 400 Gb/s, ConnectX-8 800 Gb/s, ConnectX-9 1.6 Tb/s, with the GPU platform each pairs with (Hopper H100/H200, Blackwell B200/B300, Vera Rubin).[3][5][7]
Retrieval check
10 questions from memory. Answer before looking anything up; misses become flashcards.
Explain it to a Dell SE
Explain to a Dell SE, in four sentences, why a Spectrum-X fabric finishes an all-reduce faster than the same switches and NICs running plain RoCE with ECMP.
Sources
Facts in this lesson were checked against Spectrum-X architecture whitepaper (July 2024), NVIDIA Spectrum-X and SuperNIC product pages, HGX AI Factory RA components page, Spectrum-X Validated Solution Stack v2.3.1, DOCA 3.5.0 General Support — fetched 2026-09-06. Dates are when each page was fetched.
- NVIDIA Spectrum-X Network Platform Architecture whitepaper (July 2024; third-party mirror of the NVIDIA PDF) · fetched 2026-09-06
- NVIDIA Spectrum-X Ethernet Platform for Giga-Scale AI · fetched 2026-09-06
- NVIDIA SuperNICs (BlueField-3 / ConnectX-8 / ConnectX-9) · fetched 2026-09-06
- NVIDIA Spectrum-X available from Dell, HPE, Lenovo (Nov 20 2023) · fetched 2026-09-06
- NVIDIA HGX AI Factory Enterprise Reference Architecture — Components · fetched 2026-09-06
- NVIDIA ConnectX-8 SuperNIC User Manual — Introduction · fetched 2026-09-06
- NVIDIA Vera Rubin Opens Agentic AI Frontier (GTC, Mar 16 2026) · fetched 2026-09-06
- BlueField Modes of Operation · fetched 2026-09-06 · DOCA 3.5.0
- NVIDIA Spectrum-X Validated Solution Stack · fetched 2026-09-06 · DOCA 3.5.0
- DOCA General Support (firmware table) · fetched 2026-09-06 · DOCA 3.5.0
The same idea elsewhere
Other lessons that cover this ground, sometimes from another course's angle.
- Scenario: 'the fabric is slow and adaptive routing does nothing'Spectrum-X course · Same ground: congestion, netq and SuperNIC
- Why spraying needs a SuperNIC: reordering and direct data placementSpectrum-X course · Same ground: SuperNIC, Direct Data Placement and firmware
- Telemetry-based congestion control: three loops, not oneSpectrum-X course · Same ground: numbers, SuperNIC and congestion