# 网络专题日跟踪 2026-09-03

## 摘要

**今日（2026-09-03）几乎没有标注当天的虚拟化网络新产品通稿。** 最强的公开页集中在 9 月 1 日前后：NVIDIA Network Operator **v26.7.0** 平台支持矩阵（文档页脚 Last updated on Sep 1, 2026）把 ConnectX-7/8/9、BlueField-3 NIC mode、Spectrum-X RA 2.3、KubeVirt SR-IOV 与 GPUDirect RDMA 写成可引用的认证表；BlueField-4 Scale-In 博文把南北向安全/存储/遥测从宿主 CPU 拆走。VMware Explore（8-31 起）仍把 NSX/vDefend 绑在 Private AI Cloud 上。国内侧无当天新版本号：Everoute / aNET / ZNS / FusionCube 网络页维持既有能力。

规划即时含义：本周对外不要发明「DPU 开箱 HCI」。短线替换继续打模块化微隔离；智算节点单独写 GPU 后端网与 NIC mode 清单；SR-IOV 虚机热迁按 NVIDIA 文档视为不支持。

## 原文摘录

### 1. NVIDIA Network Operator 26.7：网卡与 GPUDirect 矩阵（文档更新 2026-09-01）

- URL：https://docs.nvidia.com/networking/display/kubernetes2670/platform-support.html

> NVIDIA ConnectX-7 NIC | Yes | Yes | 400 Gb/s | IB RDMA, RoCE
> NVIDIA ConnectX-8 SuperNIC | Yes | Yes | 800 Gb/s | IB RDMA, RoCE
> NVIDIA ConnectX-9 SuperNIC | Yes | Yes | 800 Gb/s | IB RDMA, RoCE
> NVIDIA BlueField-3 DPU | Yes | No | 200 Gb/s | RoCE | NIC mode only
> NVIDIA BlueField-3 SuperNIC | Yes | No | 400 Gb/s | RoCE | NIC mode only

> Live migration is not supported for VMs that use SR-IOV VFIO passthrough.
> Host-side RDMA is not available for VFIO-passed VFs; RDMA inside the guest is provided by the mlx5_core driver shipped with the guest image.

> Supported NVIDIA GPU (Ampere, Hopper, Blackwell, or Rubin)
> Supported NVIDIA NICs (NVIDIA ConnectX or BlueField)
> Last updated on Sep 1, 2026

### 2. BlueField-4 Scale-In：基础设施离开宿主（厂商博文，近日公开）

- URL：https://developer.nvidia.com/blog/nvidia-bluefield-4-powers-new-scale-in-network-infrastructure-for-agentic-ai-factories/

> In NVIDIA Vera Rubin NVL72, NVIDIA ConnectX-9 SuperNICs carry tenant workload traffic over the Scale-Out network, while BlueField-4 runs and accelerates the infrastructure services that connect, secure, and manage each server.

> BlueField-4 accelerates NVMe-oF, file and object storage protocols over RDMA and TCP, storage virtualization, and data movement on dedicated infrastructure. Spectrum-X Ethernet provides the AI-optimized Ethernet fabric across the storage path, where congestion management and performance isolation help sustain high effective bandwidth across concurrent storage flows, up to 1.45x more storage throughput than off-the-shelf Ethernet.

> 64-core NVIDIA Grace CPU … Provides 6x more compute than its predecessor … Inline acceleration engines … Handle operations at up to 800 Gb/s … Compared with BlueField-3, BlueField-4 provides 4x more memory bandwidth and 2x more network bandwidth.

### 3. ESXi 上 BlueField-3 先切 NIC 模式（howto 页脚 2026-06-17）

- URL：https://networking-docs.nvidia.com/sol/howto-configure-nvidia-bluefield-3-to-nic-mode-on-vmware-vsphere-8-0

> This guide outlines configuring the NVIDIA® BlueField®-3 DPU to NIC Mode on VMware ESXi version 8.0.x.
> Set Internal Cpu Offload Engine setting to Disable (disable is NIC mode).
> Last updated: June 17, 2026

### 4. Proxmox SDN：IPv6 underlay 可以，双栈 underlay 不行（2026-01 开发补丁）

- URL：https://lore.proxmox.com/pve-devel/20260116110843.89615-3-h.laimer@proxmox.com/T/

> Adds support for VXLAN zones with an IPv6 uderlay. We don't support dual stack underlays. So we expect the peers list to be single-family, for fabrics we prefer IPv6 if the fabrics has both.
> A dual-stack underlay adds ambiguity and extra complexity in source selection and validation without a real use-case.

### 5. 深信服微隔离：DFW 预发布（产品博客，非今日稿）

- URL：https://www.sangfor.com.cn/blog/49a14c91c645469f901fb189c8308799

> 目前主要是国外厂商提供该能力，如illumio、Akamai Guardicore Segmentation、VMware等，国内仍然较少厂商支持。为了帮助用户解决这类困难，深信服在信服云6.10.0版本中提供微隔离策略推荐的能力。
> 分布式防火墙只需要开通虚拟网络(aNET)即可使用。
> 预发布状态的DFW规则，仅执行规则的匹配和记录，但不生效动作。

### 6. Nutanix Flow：策略跟负载，不跟 IP

- URL：https://www.nutanix.com/products/flow-network-security

> Flow Network Security (FNS) applies application‑centric microsegmentation using dynamic categories instead of static IP addresses. As workloads move or scale, security policies automatically follow them.

### 7. SmartX Everoute（能力页，非今日稿）

- URL：https://www.smartx.com/hk-mo/everoute/

> Everoute Distributed Firewall (DFW) is a security feature for SmartX’s ELF virtualization platform. Using a virtual distributed switch, it enforces zero-trust micro-segmentation, with unified east-west security policies for VMs and containers, including VM-level isolation.

### 8. 华为灵衢 / UBoE（HC 2025 路标，2026 落地窗口）

- URL：https://www.huawei.com/cn/news/2025/9/hc-xu-keynote-speech

> 在集群组网上，我们同时支持UBoE与RoCE两种协议，UBoE是把UB协议承载在以太网上，让客户能够利用现有以太交换机。相比传统RoCE，UBoE组网的静态时延更低、可靠性更高，交换机和光模块数量都更节省，所以，我们推荐UBoE。

## 出处

- https://docs.nvidia.com/networking/display/kubernetes2670/platform-support.html
- https://docs.nvidia.com/networking/display/kubernetes2670/spectrum-x/spectrum-x-configuration.html
- https://developer.nvidia.com/blog/nvidia-bluefield-4-powers-new-scale-in-network-infrastructure-for-agentic-ai-factories/
- https://networking-docs.nvidia.com/sol/howto-configure-nvidia-bluefield-3-to-nic-mode-on-vmware-vsphere-8-0
- https://lore.proxmox.com/pve-devel/20260116110843.89615-3-h.laimer@proxmox.com/T/
- https://www.sangfor.com.cn/blog/49a14c91c645469f901fb189c8308799
- https://www.nutanix.com/products/flow-network-security
- https://www.nutanix.com/tech-center/blog/enterprise-grade-network-security-policy-for-kubernetes-fns-comes-to-flow-cni
- https://www.smartx.com/hk-mo/everoute/
- https://www.huawei.com/cn/news/2025/9/hc-xu-keynote-speech
- https://www.intel.com/content/www/us/en/products/sku/246030/intel-ipu-adapter-e2200/specifications.html