On-Prem

Networks

Yup, AMD's Elba and Giglio definitely sound like they work corporate security

Which is why Cisco is adding these Pensando DPUs to more switches


Cisco is cramming into more of its switches Pensando data processing units (DPUs) from AMD, which will be dedicated to handling security, storage, and other tasks.

Unveiled at Cisco Live Amsterdam on Tuesday, these latest DPU-infused "smart switches" join Switchzilla's existing Nexus 9300 family of appliances.

At the heart of the equipment is an all-new in-house ASIC from Cisco's Silicon One family called the E100 that'll provide up to 4.8 Tbps of network capacity. That bandwidth will be divvied up across your choice of either 24 x 100 Gbps ports or a top-of-rack (ToR) appliance with 48 x 25 Gbps ports, two 100 Gbps, and six 400 Gbps ports.

However, the switches' real party trick is the inclusion of those Pensando DPUs that, as their name suggests, are designed to offload data-intensive networking, security, or storage workloads from the rest of the appliance.

Traditionally, when we've talked about DPUs, we were referring to SmartNIC-type devices, such as Nvidia's BlueField or Marvell's Octeon family of network add-in cards. And while AMD also offers its Pensando DPUs in this form factor – an add-on card you and I can buy for servers and similar machines – its P4 processing engines can also be included in switches sold by the likes of Cisco.

One notable benefit to this approach of putting DPUs into switches is that data processing can be handled by the ToR box rather than requiring individual connected systems to be equipped with a pricey DPU card of their own.

In the case of Cisco's N9300 smart switches, its E100 switch ASIC will handle the bulk of the networking duty, while security and other services are offloaded to the included DPU.

Unfortunately, we aren't getting Pensando's latest and greatest Salina DPUs announced during AMD's Advancing AI event last October. Instead, Cisco tells us the 24-port Nexus 9324C will feature Pensando's older Elba generation of DPUs, which features 2 x 200 Gbps Ethernet interfaces, 144 match processing units, 16 Arm Cortex-A72 CPU cores, and dedicated encryption and storage offload engines.

The larger 56-port ToR switch, meanwhile, features a nearly identical DPU called Giglio which offers the same bandwidth capacity, and match unit and CPU core count, but has been optimized for lower power.

Cisco's Hypershield security platform will be among the first services embedded on its DPU-packed N9300 switches. Announced last year, Hypershield is Cisco's take on a hyperscale distributed security service that is designed to run across its portfolio of switches and servers, rather than relying on dedicated firewalls or load balancers to handle the job.

However, it should be noted that Pensando's DPUs are by no means limited to accelerating security workloads thanks to their P4 programmability. Cisco says its switches will be able to host and accelerate multiple services.

Cisco's 24-port N9300 switches are expected to begin shipping this (Northern Hemisphere) spring, while its larger 56-port ToR switch is slated for release this summer.

While these switches are the latest to integrate Pensando's P4 processing engines, they're by no means the first. Cisco and AMD previously teased [PDF] the 8102-28FH-DPU-O which paired a 12.8 Tbps Silicon One Q200L switch ASIC with up to 1.6 Tbps of data processing capacity by way of eight 200 Gbps Elba DPUs.

Prior to AMD's acquisition of the networking startup in 2022, Pensando partnered with Cisco-rival HPE to bake its P4 engines into select switches from Aruba. ®

Send us news
3 Comments

AMD looks to undercut Nvidia, win gamers' hearts with RX 9070 series

The question is whether we can find them in stock and at MSRP

Cisco says it’s already dug in to protect itself – and customers – if trade war breaks out

Also reckons it can dodge DOGE

How nice that state-of-the-art LLMs reveal their reasoning ... for miscreants to exploit

Blueprints shared for jail-breaking models that expose their chain-of-thought process

Tech jobs are now white-collar trades that need apprentices, not a career crawl

With a generation of networking engineers set to retire, is this how to give their successors a faster start?

Qualcomm pledges 8 years of security updates for Android kit using its chips (YMMV)

Starting with Snapdragon 8 Elite and 'droid 15

Malware variants that target operational tech systems are very rare – but 2 were found last year

Fuxnet and FrostyGoop were both used in the Russia-Ukraine war

Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes

Said bugs 'can have significant implications' – glad to hear that from Redmond

Drug-screening biz DISA took a year to disclose security breach affecting millions

If there's something nasty on your employment record, extortion scum could come calling

London is bottom in Europe for 5G, while Europe lags the rest of the world

Plus: Fandroid alert – Android devices sometimes say '5G' when connecting to 4G

Ivanti endpoint manager can become endpoint ravager, thanks to quartet of critical flaws

PoC exploit code shows why this is a patch priority

C++ creator calls for help to defend programming language from 'serious attacks'

Bjarne Stroustrup wants standards body to respond to memory-safety push as Rust monsters lurk at the door

Check out this free automated tool that hunts for exposed AWS secrets in public repos

You can find out if your GitHub codebase is leaking keys ... but so can miscreants