Compute 100Gb Ethernet Adapters for HPE

HPE ProLiant offers the industry’s most secure server platforms. Through its Root of Trust server design down to the Network Interface Card (NIC), these security features are built-in so you can deploy with confidence. HPE ProLiant servers will help prevent, detect and recover from cyberattacks such as denial of service and malware-infected firmware. Protecting applications, data, and infrastructure from security breaches through storage and networking security technologies is a first priority for HPE ProLiant Servers.

With Gen11 and Gen12 ProLiant Servers, HPE continues to offer industry-leading security and builds on Gen10 Plus features by adding support for SPDM security on select Ethernet Adapters.

Kit Contents

PCIe Ethernet Adapter Option Kits include:

• − HPE Ethernet Adapter (with Full-Height bracket installed)
• − Quick install card
• − Product warranty statement
• − Low Profile Bracket

OCP Ethernet Adapter Option Kits include:

• − HPE Ethernet Adapter
• − Quick install card
• − Product warranty statement

Audit Logs

Audit Logs are a forensics capability that provides traceability into authenticated firmware updates by capturing changes in standard system logs.

Authenticated Updates

Authenticated Updates brings cryptographic keys onto the NIC (for HW Authentication) to protect user and configuration data from unauthorized access and verify digitally signed firmware.

Auto-negotiation

Automatically senses the speed of the device to which it is attached. It also automatically configures for half or full duplex, depending on the duplex mode of the switch, hub, or router connected to the adapter.

DPDK

DPDK with benefit for packet processing acceleration and use in NFV deployments.

IPv6

IPv6 uses 128-bit addressing allowing for more devices and users on the internet. IPv4 supported 32-bit addressing.

iWARP RDMA

Delivers RDMA on top of the pervasive TCP/IP protocol. iWARP RDMA runs over standard network and transport layers and works with all Ethernet network infrastructure. TCP provides flow control and congestion management and does not require a lossless Ethernet network. iWARP is a highly routable and scalable RDMA implementation.

Network Partitioning (NPAR)

Network Partitioning (NPAR) allowing administrators to configure a 10 Gb port as four separate partitions or physical functions. Each PCI function is associated with a different virtual NIC. To the OS and the network, each physical function appears as a separate NIC port.

Optimized for Virtualization

I/O Virtualization support for VMware NetQueue and Microsoft VMQ helps meet the performance demands of consolidated virtual workloads.

Preboot eXecution Environment (PXE)

Support for PXE enables automatic deployment of computing resources remotely from anywhere. It allows a new or existing server to boot over the network and download software, including the operating system, from a management/ deployment server at another location on the network.

Additionally, PXE enables decentralized software distribution and remote troubleshooting and repairs.

Root of Trust

Root of Trust enables a chain of trust for Authenticating updates to firmware via signature validation. This blocks installation of rogue or corrupted firmware and ensures that the executing firmware is trusted.

RDMA

Remote Direct memory Access (RDMA) is an accelerated I/O delivery mechanism that allows data to be transferred directly from the user memory of the source server to the user memory of the destination server bypassing the operating system (OS) kernel. Because the RDMA data transfer is performed by the DMA engine on the adapter's network processor, the CPU is not used for the data movement, freeing it to perform other tasks such as hosting more virtual workloads (increased VM density). RDMA protocols include RoCEv1, RoCEv2 and iWARP. All of these protocols reduce overall latency to deliver accelerated performance for applications such as Microsoft Hyper-V Live Migration, Microsoft SQL and Microsoft SharePoint with SMB Direct.

Receive Side Scaling (RSS)

RSS resolves the single-processor bottleneck by allowing the receive side network load from a network adapter to be shared across multiple processors. RSS enables packet receive-processing to scale with the number of available processors.

Sanitization

Sanitization (Secure User Data Erase) renders User and configuration data on the NIC irretrievable so that NICs can be safely repurposed or disposed.

Secure Boot

Secure Boot safeguards the system and ensures no rogue drivers are being executed on start-up.

Single-Root I/O Virtualization

Single-Root I/O Virtualization (SR-IOV) provides a mechanism to bypass the host system hypervisor in virtual environments providing near metal performance and server efficiency. SR-IOV provides mechanism to create multiple Virtual Functions (VFs) to share single PCIe resources. The device is capable of SR-IOV, and requires Server BIOS support, controller firmware, and OS support.

TCP/UDP/IP

TCP/IP offloading techniques including: TCP/IP, UDP checksum offload (TCO) moves the TCP and IP checksum offloading from the CPU to the network adapter. Large send offload (LSO) or TCP segmentation offload (TSO) allows the TCP segmentation to be handled by the adapter rather than the CPU.

Tunnel Offload

Minimize the impact of overlay networking on host performance with tunnel offload support for VXLAN, NVGRE and GENEVE. By offloading packet processing to adapters, customers can use overlay networking to increase VM migration flexibility and virtualized overlay networks with minimal impact to performance. HPE Tunnel Offloading increases I/O throughput, reduces CPU utilization, and lowers power consumption. Tunnel Offload supports VMware's VXLAN, Microsoft's NVGRE solutions and Generic Network Virtualization Encapsulation (GENEVE) solutions.

VMware NetQueue and Microsoft Virtual Machine Queue (VMQ)

VMware NetQueue is technology that significantly improves performance of 10 Gigabit Ethernet network adapters in virtualized environments. Windows Hyper-V VMQ (VMQ) is a feature available on servers running Windows Server 2008 R2 with VMQ-enabled Ethernet adapters. VMQ uses hardware packet filtering to deliver packet data from an external virtual machine network directly to virtual machines, which reduces the overhead of routing packets and copying them from the management operating system to the virtual machine.

Wake-on-LAN

Wake-on-LAN (WoL) support through the PCI Express bus. A system that supports Wake-on-LAN can remain available to the systems administrator during its normal downtime. Once the machine is awakened, the systems administrator can remotely control, audit, debug, or manage the machine.