• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.

The raw driver files can be obtained by extracting the Smart Component and then extracting the Emulex installer.  Use this command:

    elxdrvr-fc-version.exe /q2 extract=2

The extracted files are located:

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version

Each kit folder has subsequent architecture folders with subsequent OS folders.  For example,

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version\x64\win2022

The raw driver files can be obtained by extracting the Smart Component and then extracting the Emulex installer.  Use this command:

    elxdrvr-fc-version.exe /q2 extract=2

The extracted files are located:

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version

Each kit folder has subsequent architecture folders with subsequent OS folders.  For example,

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version\x64\win2022

The raw driver files can be obtained by extracting the Smart Component and then extracting the Emulex installer.  Use this command:

    elxdrvr-fc-version.exe /q2 extract=2

The extracted files are located:

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version

Each kit folder has subsequent architecture folders with subsequent OS folders.  For example,

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version\x64\win2022

The raw driver files can be obtained by extracting the Smart Component and then extracting the Emulex installer.  Use this command:

    elxdrvr-fc-version.exe /q2 extract=2

The extracted files are located:

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version

Each kit folder has subsequent architecture folders with subsequent OS folders.  For example,

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version\x64\win2022

Added Azure local 24H2 support

Added Azure local 24H2 support

• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.

• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.

• Added support for RSS with crypto offload enabling the NIC to parallelize packet processing across CPU cores while performing encryption/decryption in hardware. Additionally, introduced a new l4_type_ext parameter with values: 0 (None), 1 (TCP), 2 (UDP), 3 (ICMP).
• Added an extra validation for the payload_len field in incoming NC-SI messages. Previously, invalid packets might have been accepted; now, such packets are silently dropped.
• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

• Added support for RSS with crypto offload enabling the NIC to parallelize packet processing across CPU cores while performing encryption/decryption in hardware. Additionally, introduced a new l4_type_ext parameter with values: 0 (None), 1 (TCP), 2 (UDP), 3 (ICMP).
• Added an extra validation for the payload_len field in incoming NC-SI messages. Previously, invalid packets might have been accepted; now, such packets are silently dropped.
• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• Introduces a DOCA PCC device API that enables retrieval of the DSCP value associated with a PCC flow when PCC operates in QP mode (for example, when ROCE_CC_SHAPER_COALESCE_P1=2 and ROCE_CC_SHAPER_COALESCE_P2=2 are configured via mlxconfig).
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events. Refer to DSP0248 for details.
• Added a validation step during firmware updates to detect whether the BMC is asserting write protection, helping diagnose and prevent update failures.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• mlxlink show_links now reports the full PCIe identifier (domain/segment + BDF), improving device-to-link mapping and avoiding ambiguous/duplicate BDF entries on multi-domain systems.
• Implemented IB extended port telemetry counters via the NSM Type 1 Get Port Telemetry Counters command, adding counters 19 and 20: NSM_LINK_ERROR_RECOVERY_COUNTER_CNTR_ID and NSM_LINK_DOWNED_COUNTER_CNTR_ID.
• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• Introduces a DOCA PCC device API that enables retrieval of the DSCP value associated with a PCC flow when PCC operates in QP mode (for example, when ROCE_CC_SHAPER_COALESCE_P1=2 and ROCE_CC_SHAPER_COALESCE_P2=2 are configured via mlxconfig).
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events. Refer to DSP0248 for details.
• Added a validation step during firmware updates to detect whether the BMC is asserting write protection, helping diagnose and prevent update failures.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• mlxlink show_links now reports the full PCIe identifier (domain/segment + BDF), improving device-to-link mapping and avoiding ambiguous/duplicate BDF entries on multi-domain systems.
• Implemented IB extended port telemetry counters via the NSM Type 1 Get Port Telemetry Counters command, adding counters 19 and 20: NSM_LINK_ERROR_RECOVERY_COUNTER_CNTR_ID and NSM_LINK_DOWNED_COUNTER_CNTR_ID.
• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• Introduces a DOCA PCC device API that enables retrieval of the DSCP value associated with a PCC flow when PCC operates in QP mode (for example, when ROCE_CC_SHAPER_COALESCE_P1=2 and ROCE_CC_SHAPER_COALESCE_P2=2 are configured via mlxconfig).
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events. Refer to DSP0248 for details.
• Added a validation step during firmware updates to detect whether the BMC is asserting write protection, helping diagnose and prevent update failures.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• mlxlink show_links now reports the full PCIe identifier (domain/segment + BDF), improving device-to-link mapping and avoiding ambiguous/duplicate BDF entries on multi-domain systems.
• Implemented IB extended port telemetry counters via the NSM Type 1 Get Port Telemetry Counters command, adding counters 19 and 20: NSM_LINK_ERROR_RECOVERY_COUNTER_CNTR_ID and NSM_LINK_DOWNED_COUNTER_CNTR_ID.
• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.

• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• Introduces a DOCA PCC device API that enables retrieval of the DSCP value associated with a PCC flow when PCC operates in QP mode (for example, when ROCE_CC_SHAPER_COALESCE_P1=2 and ROCE_CC_SHAPER_COALESCE_P2=2 are configured via mlxconfig).
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events. Refer to DSP0248 for details.
• Added a validation step during firmware updates to detect whether the BMC is asserting write protection, helping diagnose and prevent update failures.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• mlxlink show_links now reports the full PCIe identifier (domain/segment + BDF), improving device-to-link mapping and avoiding ambiguous/duplicate BDF entries on multi-domain systems.
• Implemented IB extended port telemetry counters via the NSM Type 1 Get Port Telemetry Counters command, adding counters 19 and 20: NSM_LINK_ERROR_RECOVERY_COUNTER_CNTR_ID and NSM_LINK_DOWNED_COUNTER_CNTR_ID.
• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.

Added new RBSU option to configure the Intel Platform Communications Technology (PCT) feature for PCT-capable processors.

Added new RBSU option to configure the Intel Platform Communications Technology (PCT) feature for PCT-capable processors.

Added new RBSU option to configure the Intel Platform Communications Technology (PCT) feature for PCT-capable processors.

Added new RBSU option to configure the Intel Platform Communications Technology (PCT) feature for PCT-capable processors.

SuSE Linux Enterprise Server 15.7

Updated Driver version 10.02.14.00-k1

SuSE Linux Enterprise Server 15.7

Updated Driver version 10.02.14.00-k1

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Hardware Steering (HWS): Enabled HWS as a secondary option for the device steering mode. If Software Steering (SWS) is not supported, HWS will be used by default, assuming it is available. Firmware Steering (FW) will now serve as the default only when both SWS and HWS are unsupported.

• Hardware-Managed Flow Steering (HMFS): HMFS is a new approach to managing steering rules, where STEs are written to the ICM by hardware instead of software (as in software-managed steering). This enables a higher rate of rule insertion.

• Queue Affinity Bonding: Added support for 4-port bonding to allow users to add both p0 and p1 to a bond without requiring SSH access to the host or bringing down the driver beforehand.

• Multiple Doorbells per PF: Increased the number of doorbells from 1 to 8, distributing them in a round-robin manner across channel send and receive queues. This enhancement improves scalability on multi-core systems with high packet rates by reducing MMIO contention on doorbell addresses. In high packet-rate scenarios, Sub-NUMA Clustering is also required to maintain consistent channel packet rates.

• HQoS for Virtualization Solution: Added support for hierarchical group structures to enable multi-tier resource control, where parent groups enforce overall limits and child groups dynamically share available bandwidth. This design is essential for effective QoS enforcement, burst handling, and fair bandwidth allocation, ensuring workloads receive appropriate resources.

• Number of lanes Configuration when Auto-Negotiation is Disabled: Added support for specifying the number of lanes (protocol width) when auto-negotiation is disabled. Since each combination of speed and lane count corresponds to a unique link mode, this allows the user to select a specific link mode when auto-negotiation is off. This change aligns with a recent firmware update that requires the driver to provide a single link mode, rather than a bitmap based on the user-defined speed.

• Extend ODP Statistics with Operation Count: Added the following new page-granularity counters:
  • num_page_faults: counts the number of page fault events handled
  • num_invalidations: counts the number of page invalidation events handled

• Hardware Steering (HWS): Enabled HWS as a secondary option for the device steering mode. If Software Steering (SWS) is not supported, HWS will be used by default, assuming it is available. Firmware Steering (FW) will now serve as the default only when both SWS and HWS are unsupported.

• Hardware-Managed Flow Steering (HMFS): HMFS is a new approach to managing steering rules, where STEs are written to the ICM by hardware instead of software (as in software-managed steering). This enables a higher rate of rule insertion.

• Queue Affinity Bonding: Added support for 4-port bonding to allow users to add both p0 and p1 to a bond without requiring SSH access to the host or bringing down the driver beforehand.

• Multiple Doorbells per PF: Increased the number of doorbells from 1 to 8, distributing them in a round-robin manner across channel send and receive queues. This enhancement improves scalability on multi-core systems with high packet rates by reducing MMIO contention on doorbell addresses. In high packet-rate scenarios, Sub-NUMA Clustering is also required to maintain consistent channel packet rates.

• HQoS for Virtualization Solution: Added support for hierarchical group structures to enable multi-tier resource control, where parent groups enforce overall limits and child groups dynamically share available bandwidth. This design is essential for effective QoS enforcement, burst handling, and fair bandwidth allocation, ensuring workloads receive appropriate resources.

• Number of lanes Configuration when Auto-Negotiation is Disabled: Added support for specifying the number of lanes (protocol width) when auto-negotiation is disabled. Since each combination of speed and lane count corresponds to a unique link mode, this allows the user to select a specific link mode when auto-negotiation is off. This change aligns with a recent firmware update that requires the driver to provide a single link mode, rather than a bitmap based on the user-defined speed.

• Extend ODP Statistics with Operation Count: Added the following new page-granularity counters:
  • num_page_faults: counts the number of page fault events handled
  • num_invalidations: counts the number of page invalidation events handled

• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.

• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.

• Added support for RSS with crypto offload enabling the NIC to parallelize packet processing across CPU cores while performing encryption/decryption in hardware. Additionally, introduced a new l4_type_ext parameter with values: 0 (None), 1 (TCP), 2 (UDP), 3 (ICMP).
• Added an extra validation for the payload_len field in incoming NC-SI messages. Previously, invalid packets might have been accepted; now, such packets are silently dropped.
• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

• Added support for RSS with crypto offload enabling the NIC to parallelize packet processing across CPU cores while performing encryption/decryption in hardware. Additionally, introduced a new l4_type_ext parameter with values: 0 (None), 1 (TCP), 2 (UDP), 3 (ICMP).
• Added an extra validation for the payload_len field in incoming NC-SI messages. Previously, invalid packets might have been accepted; now, such packets are silently dropped.
• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

Enhanced Asset Tag functionality to support up to 64 bytes.

Added support for ASIX USB to Ethernet adapter driver version 3.3.2, resolving PXE boot stability issues with ASIX AX88179A chipset adapters and eliminating system reboot loops during PXE operations.

Improved device name display for storage controllers and other devices in Japanese language mode.

Added PCIe prefetchable MMIO support and its default setting is Disabled . When enabled, the system will allocate both prefetchable and non-prefetchable MMIO resources for PCIe devices. This feature can also be controlled via Redfish at: /redfish/v1/systems/1/bios/oem/hpe/service/settings/PciPrefetchableMMIO

Note: With the prefetchable MMIO option enabled, downgrading to previous BIOS versions may cause the system to hang or reboot continuously. Users must disable the prefetchable MMIO option before downgrading. If the system becomes unstable after a downgrade, restore Manufacturing Defaults to recover.

Enhanced Asset Tag functionality to support up to 64 bytes.

Added support for ASIX USB to Ethernet adapter driver version 3.3.2, resolving PXE boot stability issues with ASIX AX88179A chipset adapters and eliminating system reboot loops during PXE operations.

Improved device name display for storage controllers and other devices in Japanese language mode.

Added PCIe prefetchable MMIO support and its default setting is Disabled . When enabled, the system will allocate both prefetchable and non-prefetchable MMIO resources for PCIe devices. This feature can also be controlled via Redfish at: /redfish/v1/systems/1/bios/oem/hpe/service/settings/PciPrefetchableMMIO

Note: With the prefetchable MMIO option enabled, downgrading to previous BIOS versions may cause the system to hang or reboot continuously. Users must disable the prefetchable MMIO option before downgrading. If the system becomes unstable after a downgrade, restore Manufacturing Defaults to recover.

Added multi-language support (Chinese and Japanese) for RBSU setup menus, Boot Configuration, NVMe-oF configuration, Secure Boot configuration, Key Manager, and Factory Options.

Added logic to prevent personally identifiable information (PII) from being written to AHS logs while retaining visibility on the serial console.

Added BootNext and CQTBOOTNEXT synchronization to ensure the iLO One-Time Boot option is cleared after the selected UEFI target has been launched, preventing unintended repeat boots.

Updated SMBIOS Type 9, Type 16, and Type 203 records to report CXL 2.X devices, enabling iLO and management tools to identify CXL memory controllers and slots.

Added a new RBSU option to configure the Intel Platform Communications Technology (PCT) feature.

Updated integrated NIC firmware.

Ported C-state ACPI table generation to align behavior across Gen12 platforms.

Updated SMBIOS Type 4 Maximum Processor Speed to 3500 MHz for DL110 Gen12 per specification.

Updated SMBIOS Type 234 to carry DPLL module serial and part number from FRU data for Rev.B modules on DL110/EL140 Gen12.

Improved device name display: RBSU now falls back to the English device name for option ROMs that do not provide multi-language strings.

Updated GPIO specification support to version 18 for Gen12 platforms.

Added multi-language support (Chinese and Japanese) for RBSU setup menus, Boot Configuration, NVMe-oF configuration, Secure Boot configuration, Key Manager, and Factory Options.

Added logic to prevent personally identifiable information (PII) from being written to AHS logs while retaining visibility on the serial console.

Added BootNext and CQTBOOTNEXT synchronization to ensure the iLO One-Time Boot option is cleared after the selected UEFI target has been launched, preventing unintended repeat boots.

Updated SMBIOS Type 9, Type 16, and Type 203 records to report CXL 2.X devices, enabling iLO and management tools to identify CXL memory controllers and slots.

Added a new RBSU option to configure the Intel Platform Communications Technology (PCT) feature.

Updated integrated NIC firmware.

Ported C-state ACPI table generation to align behavior across Gen12 platforms.

Updated SMBIOS Type 4 Maximum Processor Speed to 3500 MHz for DL110 Gen12 per specification.

Updated SMBIOS Type 234 to carry DPLL module serial and part number from FRU data for Rev.B modules on DL110/EL140 Gen12.

Improved device name display: RBSU now falls back to the English device name for option ROMs that do not provide multi-language strings.

Updated GPIO specification support to version 18 for Gen12 platforms.

Updated vRAN workload profile settings in align with Intel FlexRAN Reference Guide specifications 2.4.1.

Updated vRAN workload profile settings in align with Intel FlexRAN Reference Guide specifications 2.4.1.

Added new RBSU option to configure the Intel Platform Communications Technology (PCT) feature for PCT-capable processors.

Added new RBSU option to configure the Intel Platform Communications Technology (PCT) feature for PCT-capable processors.

None

Firmware Dependencies:

None

Enhancements/New Features:

This is the initial verison of the firmware.

Known Issues:

None

None

Firmware Dependencies:

None

Enhancements/New Features:

This is the initial verison of the firmware.

Known Issues:

None

SUSE Linux Enterprise Server 16

Updated to version 14.4.731.6

SUSE Linux Enterprise Server 16

Updated to version 14.4.731.6

• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.

• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.

• Added support for RSS with crypto offload enabling the NIC to parallelize packet processing across CPU cores while performing encryption/decryption in hardware. Additionally, introduced a new l4_type_ext parameter with values: 0 (None), 1 (TCP), 2 (UDP), 3 (ICMP).
• Added an extra validation for the payload_len field in incoming NC-SI messages. Previously, invalid packets might have been accepted; now, such packets are silently dropped.
• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

• Added support for RSS with crypto offload enabling the NIC to parallelize packet processing across CPU cores while performing encryption/decryption in hardware. Additionally, introduced a new l4_type_ext parameter with values: 0 (None), 1 (TCP), 2 (UDP), 3 (ICMP).
• Added an extra validation for the payload_len field in incoming NC-SI messages. Previously, invalid packets might have been accepted; now, such packets are silently dropped.
• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

SuSE Linux Enterprise 15 SP 7

Updated to version 14.4.473.26

SuSE Linux Enterprise 15 SP 7

Updated to version 14.4.473.26

Red Hat Enterprise Linux 10.0

Updated to version 14.4.473.24

Red Hat Enterprise Linux 10.0

Updated to version 14.4.473.24

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Hardware Steering (HWS): Enabled HWS as a secondary option for the device steering mode. If Software Steering (SWS) is not supported, HWS will be used by default, assuming it is available. Firmware Steering (FW) will now serve as the default only when both SWS and HWS are unsupported.

• Hardware-Managed Flow Steering (HMFS): HMFS is a new approach to managing steering rules, where STEs are written to the ICM by hardware instead of software (as in software-managed steering). This enables a higher rate of rule insertion.

• Queue Affinity Bonding: Added support for 4-port bonding to allow users to add both p0 and p1 to a bond without requiring SSH access to the host or bringing down the driver beforehand.

• Multiple Doorbells per PF: Increased the number of doorbells from 1 to 8, distributing them in a round-robin manner across channel send and receive queues. This enhancement improves scalability on multi-core systems with high packet rates by reducing MMIO contention on doorbell addresses. In high packet-rate scenarios, Sub-NUMA Clustering is also required to maintain consistent channel packet rates.

• HQoS for Virtualization Solution: Added support for hierarchical group structures to enable multi-tier resource control, where parent groups enforce overall limits and child groups dynamically share available bandwidth. This design is essential for effective QoS enforcement, burst handling, and fair bandwidth allocation, ensuring workloads receive appropriate resources.

• Number of lanes Configuration when Auto-Negotiation is Disabled: Added support for specifying the number of lanes (protocol width) when auto-negotiation is disabled. Since each combination of speed and lane count corresponds to a unique link mode, this allows the user to select a specific link mode when auto-negotiation is off. This change aligns with a recent firmware update that requires the driver to provide a single link mode, rather than a bitmap based on the user-defined speed.

• Extend ODP Statistics with Operation Count: Added the following new page-granularity counters:
  • num_page_faults: counts the number of page fault events handled
  • num_invalidations: counts the number of page invalidation events handled

• Hardware Steering (HWS): Enabled HWS as a secondary option for the device steering mode. If Software Steering (SWS) is not supported, HWS will be used by default, assuming it is available. Firmware Steering (FW) will now serve as the default only when both SWS and HWS are unsupported.

• Hardware-Managed Flow Steering (HMFS): HMFS is a new approach to managing steering rules, where STEs are written to the ICM by hardware instead of software (as in software-managed steering). This enables a higher rate of rule insertion.

• Queue Affinity Bonding: Added support for 4-port bonding to allow users to add both p0 and p1 to a bond without requiring SSH access to the host or bringing down the driver beforehand.

• Multiple Doorbells per PF: Increased the number of doorbells from 1 to 8, distributing them in a round-robin manner across channel send and receive queues. This enhancement improves scalability on multi-core systems with high packet rates by reducing MMIO contention on doorbell addresses. In high packet-rate scenarios, Sub-NUMA Clustering is also required to maintain consistent channel packet rates.

• HQoS for Virtualization Solution: Added support for hierarchical group structures to enable multi-tier resource control, where parent groups enforce overall limits and child groups dynamically share available bandwidth. This design is essential for effective QoS enforcement, burst handling, and fair bandwidth allocation, ensuring workloads receive appropriate resources.

• Number of lanes Configuration when Auto-Negotiation is Disabled: Added support for specifying the number of lanes (protocol width) when auto-negotiation is disabled. Since each combination of speed and lane count corresponds to a unique link mode, this allows the user to select a specific link mode when auto-negotiation is off. This change aligns with a recent firmware update that requires the driver to provide a single link mode, rather than a bitmap based on the user-defined speed.

• Extend ODP Statistics with Operation Count: Added the following new page-granularity counters:
  • num_page_faults: counts the number of page fault events handled
  • num_invalidations: counts the number of page invalidation events handled

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Hardware Steering (HWS): Enabled HWS as a secondary option for the device steering mode. If Software Steering (SWS) is not supported, HWS will be used by default, assuming it is available. Firmware Steering (FW) will now serve as the default only when both SWS and HWS are unsupported.

• Hardware-Managed Flow Steering (HMFS): HMFS is a new approach to managing steering rules, where STEs are written to the ICM by hardware instead of software (as in software-managed steering). This enables a higher rate of rule insertion.

• Queue Affinity Bonding: Added support for 4-port bonding to allow users to add both p0 and p1 to a bond without requiring SSH access to the host or bringing down the driver beforehand.

• Multiple Doorbells per PF: Increased the number of doorbells from 1 to 8, distributing them in a round-robin manner across channel send and receive queues. This enhancement improves scalability on multi-core systems with high packet rates by reducing MMIO contention on doorbell addresses. In high packet-rate scenarios, Sub-NUMA Clustering is also required to maintain consistent channel packet rates.

• HQoS for Virtualization Solution: Added support for hierarchical group structures to enable multi-tier resource control, where parent groups enforce overall limits and child groups dynamically share available bandwidth. This design is essential for effective QoS enforcement, burst handling, and fair bandwidth allocation, ensuring workloads receive appropriate resources.

• Number of lanes Configuration when Auto-Negotiation is Disabled: Added support for specifying the number of lanes (protocol width) when auto-negotiation is disabled. Since each combination of speed and lane count corresponds to a unique link mode, this allows the user to select a specific link mode when auto-negotiation is off. This change aligns with a recent firmware update that requires the driver to provide a single link mode, rather than a bitmap based on the user-defined speed.

• Extend ODP Statistics with Operation Count: Added the following new page-granularity counters:
  • num_page_faults: counts the number of page fault events handled
  • num_invalidations: counts the number of page invalidation events handled

• Hardware Steering (HWS): Enabled HWS as a secondary option for the device steering mode. If Software Steering (SWS) is not supported, HWS will be used by default, assuming it is available. Firmware Steering (FW) will now serve as the default only when both SWS and HWS are unsupported.

• Hardware-Managed Flow Steering (HMFS): HMFS is a new approach to managing steering rules, where STEs are written to the ICM by hardware instead of software (as in software-managed steering). This enables a higher rate of rule insertion.

• Queue Affinity Bonding: Added support for 4-port bonding to allow users to add both p0 and p1 to a bond without requiring SSH access to the host or bringing down the driver beforehand.

• Multiple Doorbells per PF: Increased the number of doorbells from 1 to 8, distributing them in a round-robin manner across channel send and receive queues. This enhancement improves scalability on multi-core systems with high packet rates by reducing MMIO contention on doorbell addresses. In high packet-rate scenarios, Sub-NUMA Clustering is also required to maintain consistent channel packet rates.

• HQoS for Virtualization Solution: Added support for hierarchical group structures to enable multi-tier resource control, where parent groups enforce overall limits and child groups dynamically share available bandwidth. This design is essential for effective QoS enforcement, burst handling, and fair bandwidth allocation, ensuring workloads receive appropriate resources.

• Number of lanes Configuration when Auto-Negotiation is Disabled: Added support for specifying the number of lanes (protocol width) when auto-negotiation is disabled. Since each combination of speed and lane count corresponds to a unique link mode, this allows the user to select a specific link mode when auto-negotiation is off. This change aligns with a recent firmware update that requires the driver to provide a single link mode, rather than a bitmap based on the user-defined speed.

• Extend ODP Statistics with Operation Count: Added the following new page-granularity counters:
  • num_page_faults: counts the number of page fault events handled
  • num_invalidations: counts the number of page invalidation events handled

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.

Added new RBSU option to configure the Intel Platform Communications Technology (PCT) feature for PCT-capable processors.

Added new RBSU option to configure the Intel Platform Communications Technology (PCT) feature for PCT-capable processors.

Red Hat Enterprise Linux 10

Updated Driver version 10.02.14.00-k1

Red Hat Enterprise Linux 10

Updated Driver version 10.02.14.00-k1