Hardware Prerequisites
This page covers the hardware requirements for both the NICo site controller and the compute systems it manages.
Site Controller
The site controller runs the NICo control plane on a Kubernetes cluster. A minimum of 3 nodes is required for high availability; 5 nodes are recommended for large GB200-class sites.
Operating system: Ubuntu 24.04 LTS, kernel 6.8+. Swap disabled (or minimal), NUMA enabled, virtualization/IOMMU enabled. Time sync: chrony or equivalent, synced to enterprise NTP.
Storage layout: Total local NVMe capacity should be 4 TiB or greater. Mount 1.7 TiB on / (root) on the NVMe OS disk (ext4 or xfs) — typical usage is 200–500 GiB. Mount /var/lib/containerd and /var/lib/kubelet on a separate NVMe data disk (1+ TiB, ext4/xfs, noatime). Consider a dedicated /var/log if there is heavy logging. Persistent app storage (SAN/NAS, Rook-Ceph) is not required for NICo itself.
DPUs on Site Controller (Optional)
DPUs on site controller nodes are optional and site-owned. If DPUs are installed, ensure the following requirements are met:
- Verify the correct DPU power cable has been ordered from the server vendor.
- For BF3 DPUs, verify link speed and optics: BF3 runs at 200 Gb, so match ports to 200 Gb-capable optics, fiber, or DACs.
- A basic onboard NIC for management is sufficient—no extra ConnectX NICs are needed.
Compute Systems (Managed Hosts)
Each managed host is a server paired with one or more NVIDIA BlueField DPUs. The DPU provides the primary data-plane connectivity and acts as the enforcement boundary for NICo.
The BlueField-3 B3220 P-Series DPU is suitable: 200GbE/NDR200 dual-port QSFP112 Network Adaptor (900-9D3B6-00CV-AA0). Other NICs on the host are automatically disabled during NICo installation.
NICo does not require any cabling or communication between the DPU and the host.
Supported Hardware
For a list of tested host machines, DPUs, and validated firmware versions, refer to the Hardware Compatibility List page.
BIOS/UEFI Settings
The following settings should be enabled on site controller and compute system BIOS/UEFI:
- UEFI + Secure Boot (with signed kernel/modules)
- VT-x / AMD-V + IOMMU
- SR-IOV (if using NIC VFs; otherwise leave off)
- NTP (locked to enterprise sources; clock drift alarms enabled)