Purpose-built for AI infrastructure, NVIDIA BlueField DPUs combine high-performance networking, programmable compute, hardware acceleration, and advanced security capabilities into a single platform embedded into every AI factory compute node. Unlike traditional security approaches that rely on host system software, BlueField establishes a hardware-enforced, in-silicon, and workload-independent security layer. Operating within its own trusted execution domain, BlueField isolates infrastructure and security services from the host system. Monitoring, policy enforcement, and telemetry operate eve
Advancing AI Infrastructure for Agentic AI with NVIDIA DOCA In-Silicon Security | NVIDIA Technical BlogDOCA Flow is a foundational library within the DOCA software platform that enables developers and cybersecurity providers to create high-performance, hardware-accelerated packet processing pipelines on BlueField processors. Through a programmable API, developers can define packet processing “pipes” that execute directly in networking hardware, offloading networking and security operations from the host CPU while maintaining ultra-low latency and high throughput. By executing packet inspection, encryption, filtering, and policy enforcement directly in silicon, DOCA Flow enables network security
Advancing AI Infrastructure for Agentic AI with NVIDIA DOCA In-Silicon Security | NVIDIA Technical Blog… DOCA Flow enables cybersecurity providers to accelerate advanced security services directly on BlueField. This includes Layer 7 firewalls, AI security gateways, application-aware inspection, and policy enforcement services purpose-built for accelerated infrastructure and agentic AI environments. …
… It incorporates policy-based privacy and security guardrails, giving you control over your agents’ behavior and data handling. …
… The network policy is code, not a prompt. policy.yaml declares every allowed destination, port, HTTP verb, and binary. …
… In traditional networking, endpoints often operate independently, making their own routing, resource, and policy decisions. This lack of centralized oversight can lead to misconfigurations, inconsistent policies, and security vulnerabilities. …
… Key security features include network and filesystem isolation managed by OpenShell, real-time policy approval for external access, and full local inference to ensure that no data leaves the device during agent operation. …
… The interesting security properties are: Reliability as a security property . Restricting the action surface can decrease uncertainty in the action space. Policy encoded as syntax . …
… How to secure local agents with Microsoft eXecution Containers and NVIDIA OpenShell At Microsoft Build, Microsoft announced a set of security primitives to allow agents to execute code, operate on files, and orchestrate tasks across systems with built-in identity and policy execution. …
… Before joining NVIDIA, Manuel worked for Microsoft and Fraunhofer AISEC on cloud computing, private containers, operating systems, and security. He has received a PHD in IT-security from Technical University of Munich. …
… View all posts by Sayali Kandarkar View all posts by Sayali Kandarkar About Daniel Major Daniel is a distinguished security architect at NVIDIA, where he provides security leadership for areas such as code signing, device PKI, ML deployments, and mobile operating systems. …
… Security posture must be auditable, and compliance evidence must be producible on demand. The framework treats security as a first-class requirement throughout. …