This is a frozen, versioned document. Contracts cite this exact version and it will not change. Newer requirements are published at a new version URL; this one remains available indefinitely.
Cluster Requirements
These requirements define the minimum a supplier-brought GPU cluster must meet to engage with the SF Compute Marketplace.
Every requirement is tagged with a Tier:
- Core — a hard requirement the cluster must meet.
- Nice-to-have — scored; a miss may be accepted as a tradeoff.
Requirements not met on a particular cluster are reviewed manually before acceptance. Acceptance is verified by SF Compute's validation suite (§10), which the cluster must pass. Contracts reference this document by version.
1. GPU server#
H100 / H200 HGX#
| Component | Requirement | Tier |
|---|---|---|
| Chassis | NVIDIA HGX reference platform (AMD or Intel baseboard). Validated OEM chassis: Dell PowerEdge XE9680, Supermicro HGX (other OEMs / SKUs upon review). | Core |
| GPU | 8× NVIDIA H100 80GB SXM5, or 8× NVIDIA H200 141GB SXM5 (no PCIe). | Core |
| CPU | 2× AMD EPYC 9004 series or newer, 2× Intel 4th gen Xeon (Sapphire Rapids) or newer, or 2× Intel 5th gen Xeon (Emerald Rapids) or newer. Listed generations are a minimum anchor, not a ceiling. | Core |
| Host RAM (CPU) | ≥ 1.0 TB ECC (H100); ≥ 2.0 TB ECC (H200). | Core |
B200 HGX#
| Component | Requirement | Tier |
|---|---|---|
| Chassis | NVIDIA HGX reference platform (AMD or Intel baseboard). Validated OEM chassis: Dell PowerEdge XE9680L, Aivres KR9288-X3, Supermicro HGX (other OEMs / SKUs upon review). | Core |
| GPU | 8× NVIDIA B200 180GB SXM6. | Core |
| CPU | 2× AMD EPYC 9005 series or newer, 2× Intel 5th gen Xeon (Emerald Rapids) or newer, or 2× Intel 6th gen Xeon (Granite Rapids) or newer. | Core |
| Host RAM (CPU) | ≥ 2.0 TB ECC. | Core |
B300 HGX#
| Component | Requirement | Tier |
|---|---|---|
| Chassis | NVIDIA HGX reference platform (AMD or Intel baseboard). Validated OEM chassis: Dell PowerEdge XE9780 / XE9780L, Supermicro HGX (other OEMs / SKUs upon review). | Core |
| GPU | 8× NVIDIA B300 288GB SXM6. | Core |
| CPU | 2× AMD EPYC 9005 series or newer, or 2× Intel 6th gen Xeon (Granite Rapids) or newer. | Core |
| Host RAM (CPU) | ≥ 3.0 TB ECC. | Core |
The BOM must state the chassis manufacturer, not just the GPU SKU. Every chassis must be an NVIDIA HGX reference platform and support bulk (non-GUI, non-USB) BIOS/firmware updates (§9). Off-list chassis — including the "upon review" entries — are accepted only after manual validation (§10) and a firmware-manageability review (§9).
Dell model numbers ending in "L" (e.g. XE9680L, XE9780L) are Dell's direct-liquid-cooled variants, listed for BOM accuracy — not a cooling mandate (see the Cooling row below).
Server cooling, network, storage, OS#
| Item | Requirement | Tier |
|---|---|---|
| Cooling | Air or liquid; no immersion or anything out-of-spec for HGX systems. The air-vs-liquid choice is not itself gated at the cluster level — facility cooling capacity and redundancy are gated in Colo §2 and must match the deployed build type. | Core |
| Cooling density | Liquid cooling preferred where higher rack density is required; per-rack density bars by cooling type live in Colo §1. | Nice-to-have |
| In-band NIC | Single dual-port BlueField-3 (ConnectX-6/7 acceptable), the two ports cabled to separate switches for switch-failure resilience. SF Compute does not require redundant NICs per node, so the in-band NIC is a single failure domain by design. BF-3 also enables bare-metal provisioning. | Core |
| GPU interconnect | 8× ConnectX-7 (400 Gbps NDR) per node (≈ 3.2 Tbit/s per node); 8× ConnectX-8 (800 Gbps XDR) per node for B300 (≈ 6.4 Tbit/s per node). BlueField-3 serves in-band only — it is not a GPU-interconnect option. | Core |
| Out-of-band management NIC | 1 Gbps. | Core |
| Boot storage | Mirrored boot drives — RAID-1 pair, ≥ 960 GB usable, NVMe (no SATA). | Core |
| Ephemeral storage | Local NVMe scratch; ≈ 30 TB target, ≥ 20 TB floor. BOM states per-node drive count, size, and RAID layout. | Core |
| Operating system | Ubuntu 22.04 or 24.04 pre-installed; re-imageable by SF Compute (see §9). | Core |
All NICs / HCAs must be SR-IOV-capable for VM passthrough (see §9).
2. Cluster networking#
| Network | Requirement | Tier |
|---|---|---|
| In-band / north-south Ethernet | Customer/tenant access, data, monitoring, and network-attached storage — storage rides this fabric (no separate storage network). Non-blocking. ≥ 25 Gb/s per GPU → ≥ 200 Gbps per node (H100/H200), ≥ 400 Gbps per node (B300-class). Dual-switch redundancy with a diverse path. CLOS / fat-tree. Preferred switches: NVIDIA SN5610 (Arista acceptable). | Core |
| GPU interconnect / back-end RDMA | ≥ 400 Gbps (H100/H200/B200), ≥ 800 Gbps (B300). Fat-tree or rail-optimized, non-blocking, high port count to avoid super-spines. InfiniBand NDR/XDR (reference architecture) or 400/800 Gbps RoCE v2. Redundant UFM servers. NVIDIA SuperPOD reference: two-level leaf-and-spine within a scalable unit (SU = 256 GPUs / 32 nodes, one node per SU reserved for UFM); larger pods add a third (core) tier and scale toward ~2,048 GPUs. Vendor: NVIDIA. | Core |
| Out-of-band management | BMC access. 1 Gbps. Isolated from the in-band network. | Core |
| Fabric topology visibility | Leaf / spine / core fabric topology is discoverable programmatically (e.g. via API), so SF Compute can map a tenant's GPUs to their fabric placement. | Nice-to-have |
| Public IPs | Each machine has a public IP, or sufficient access to set up BGP to advertise routes. | Core |
A separate storage network is not required — network-attached storage rides the in-band / north-south fabric. Storage sizing lives in §4.
Fabric QoS is not a gate: intra-cluster ECN/PFC tuning for RoCE is a per-deployment conversation, not a listing requirement.
3. Management compute#
| Requirement | Detail | Tier |
|---|---|---|
| Management nodes | 6× CPU-only (2× AMD EPYC or Xeon, 96 GB RAM, 100 GB disk, public IP). | Core |
These nodes run SF Compute's in-DC control plane (k8s control-plane + workers, UFM proxy, storage services); quorum services run on an odd subset. State both the node count and per-node RAM — undersized control nodes (e.g. 16 GB) do not qualify.
4. Network-attached storage#
State the NAS solution and its usable (not raw) capacity: high-performance filesystems (VAST/WEKA) only fill to ~80–90% before performance degrades, and VAST's minimum deployment is ~1 PB. Throughput is recorded against per-GPU reference tiers, not held as an SLA.
| Requirement | Detail | Tier |
|---|---|---|
| Usable capacity per GPU | ≥ 4 TB usable per GPU (≈ 2 PB for 512 GPUs; ≈ 8 PB for 2,048 GPUs). Primary sizing metric. | Core (information) |
| Capacity floor | ≥ 100 TB usable, NVMe-backed (shared-file protocols served on top), so small clusters still qualify when the per-GPU target would imply a tiny footprint. Vendors: VAST, WEKA (DDN, Pure Storage also acceptable). | Nice-to-have |
| Throughput per GPU | Recorded against per-GPU reference tiers — read 0.5 / 1.0 / 5.0 GB/s, write 0.25 / 0.5 / 2.5 GB/s — as a checkbox, not an SLA. Target ≥ the middle tier (read ≥ 1.0 GB/s, write ≥ 0.5 GB/s per GPU). | Nice-to-have |
| Resilience & growth | ≥ 20% of physical disks dedicated to parity; capacity expandable to 2× within 60 days without service interruption. | Nice-to-have |
5. Access & permissions#
| Requirement | Detail | Tier |
|---|---|---|
| Bare-metal delivery | No provider-imposed hypervisor or control-panel layer. SF Compute runs its own virtualization on top of bare metal (see §9). | Core |
| BMC access | On GPU, management, and DPU nodes. | Core |
Why we ask for BMC access#
SF Compute is first-line support for nodes sold on the Marketplace and needs BMC access for timely service and security at scale. Specifically, it is used for:
- Console output — view console output, especially during boot, when the network is unavailable, devices fail to enumerate, or the host OS fails to load.
- Programmatic rebooting — reboot a node via IPMI without a support ticket.
- Host OS re-imaging — re-image nodes to keep them current and to reset between tenants.
- Security verification — confirm BIOS configurations are secure and the latest firmware is installed.
- Performance optimization — tune BIOS parameters for optimal performance.
To keep this access responsible, we recommend the provider place SF Compute on a separate management VLAN, issue separate credentials, secure the BMC behind a VPN, and allowlist the IPs permitted onto the management network. In return, SF Compute will notify before persistent BIOS changes, request approval before flashing firmware/BIOS, and provide an export of the original BIOS settings so they can be restored.
6. Outside connectivity#
| Requirement | Detail | Tier |
|---|---|---|
| DIA / ISP connections | At least 2 route-diverse connections, < 50 ms ping to AWS S3 or Cloudflare R2. Routing is redundant across physically diverse paths with automatic failover — no single point of failure. The failover mechanism is the provider's choice; we don't pin BGP, but the diverse-path and dual-connection redundancy is non-negotiable. | Core |
| Internet uplink capacity | Aggregate external uplink ≥ the greater of (a) 2× 100 Gbps and (b) 125 Mbps per GPU (≈ 1 Gbit/s per 8-GPU node). This is oversubscribed internet-facing capacity, not a per-tenant guarantee. For clusters > 256 nodes, the floor is negotiated rather than mechanically scaled. | Core |
| Firewall | HA pair with automatic failover, supporting multiple 100 Gbps connections. | Core |
| Ingress / egress | No restrictions or metering. | Core |
7. Data center & environment#
Facility detail (power density, cooling, certifications, physical security) lives in the Colo Requirements spec; this is the cluster-side summary.
| Requirement | Detail | Tier |
|---|---|---|
| Tier & power redundancy | Minimum Tier III; ≥ N+1 generator redundancy; on-site fuel under a continuous-replenishment / resupply contract (see Colo §1 for generator and fuel detail). | Core |
| 2N redundancy | 2N power / cooling distribution where available. | Nice-to-have |
| Power | Adequate provisioning confirmed at 100% load. | Core |
| Cooling | Adequate capacity and ≥ N+1 redundancy confirmed at maximum thermal output, with airflow clearance where applicable (see Colo §2). | Core |
| rPDUs | Redundant pair per rack. | Core |
| Physical security | Measures preventing unauthorized entry into the DC hall and access to hardware. | Core |
| Inspection | Physical or virtual inspection on request: neat cabling, hot/cold separation (blanking panels + baffles), clean space, reverse-airflow switches not co-located with forward-airflow switches. | Core |
8. Support#
| Requirement | Detail | Tier |
|---|---|---|
| Remote hands | 24/7. | Core |
| Initial response time | 30 minutes or better. | Core |
| OEM support contract | Active OEM hardware support / warranty, minimum 3-year next-business-day (NBD); required for HGX. SF Compute keeps no cold-spare chassis — chassis go to OEM RMA or on-site OEM repair. | Core |
| Spare-parts strategy | Documented. On-hand spares locker of 1–3% of high-failure-rate FRUs (PSUs, RAM, GPUs) — ~1% at scale, up to ~3% for small clusters — scaled to cluster size and OEM self-service provisions. | Core |
| SLA | Per contract. | Core |
9. Machine state & provisioning configuration#
These settings let SF Compute provision, virtualize, and operate the cluster on bare metal. A node can pass every §10 performance test and still be unusable if these are not met.
Exact BIOS values, version floors, and provisioning steps are validated internally and aren't part of this spec — the rows below state the capability required, not the recipe.
| Requirement | Detail | Tier |
|---|---|---|
| BMC + power-cycle | BMC with power-cycle and console, via API or portal; remote reboot/console/BIOS/reimaging preferred. | Core |
| BIOS virtualization | VT-x / AMD-SVM; x2APIC + interrupt remapping; IOMMU (VT-d); SR-IOV enabled globally and per InfiniBand adapter; "Above 4G decoding" + Resizable BAR; a kexec-capable BIOS. | Core |
| BIOS standardization | Validated against a known-good "golden BIOS"; full per-node export (Redfish or on-node IPMI/Redfish), standardized across machines. | Core |
| Supermicro BIOS | Updated to ≥ 5.32 (e.g. SYS-821GE-TNHR-LCC). | Core |
| Mellanox firmware | ATC enabled on each card. | Core |
| Firmware management | Out-of-band flashing of BMC, baseboard, and NVIDIA-card firmware; vendor-published firmware bundles; a bulk BIOS/firmware update tool — no per-node GUI or USB-stick flashing. Manageability at scale is a hard fleet gate. | Core |
| Bare-metal handoff | Vanilla Ubuntu 22.04 on bare metal with BMC access; SF Compute re-images nodes with its own provisioning system and brings its own OS/driver image. | Core |
| Networking | Consistent, stable per-host IPs (static routed /31 or DHCP); per-VM IPv4 reachability. | Core |
| Storage auth | VAST / WEKA API credentials where shared storage is offered. | Core (when storage offered) |
| Tenant isolation (RDMA) | Hard isolation so no tenant can reach another tenant's GPU memory or traffic. SF Compute administers fabric partitioning, so the supplier grants SF Compute administrative control of the subnet manager / UFM and enables subnet-manager virtualization (ib sm virt enable) where applicable. Isolation is security-critical. | Core |
10. Performance, burn-in & acceptance#
Suppliers must provide proof of a successful burn-in, or allow time for SF Compute to run one. SF Compute validates before delivery and does not rely on a vendor's attestations alone. Burn-in detects hardware faults (bad GPUs, marginal optics, weak DIMMs, miscabled rails) while remediation is still the supplier's responsibility, and establishes a performance baseline.
Sev-1 criteria are Core (a node/cluster must pass them). Sev-2 criteria are scored (Nice-to-have) — a miss is accepted only with a documented disposition.
Methodology#
Burn-in runs in two tiers, with continuous monitoring across both (XID events, PCIe AER events, IB counter deltas, thermal/power throttling, node liveness) that can fail either tier independently. Cluster-wide burn-in does not begin until per-host burn-in is clean. The cluster-wide tier is skipped for single-node / VM instances (no shared fabric to validate).
| Stage | Scope | Duration |
|---|---|---|
| Per-host | CPU, RAM, local NVMe, individual GPUs | 16–24 h / node (24 h minimum for GPU soak) |
| Cluster-wide | NVLink, NCCL collectives, InfiniBand fabric, sustained soak | 24 h – 5 days (default 48 h; scaled to fleet confidence and the customer SLA) |
Per-host acceptance#
Tooling: DCGM, gpu-burn, stressapptest, stress-ng, memtester, fio.
| Criterion | Threshold | Severity |
|---|---|---|
dcgmi diag -r 4 on every GPU, pre- and post-soak | 0 failures or warnings | Sev-1 |
| Uncorrectable ECC errors (volatile + aggregate) | 0 | Sev-1 |
| Correctable ECC errors | Within threshold | Sev-2 |
GPU row-remap (nvidia-smi -q) | Clean, no pending/failed remaps | Sev-1 |
| Gating XID events (hardware-implicating) | 0 | Sev-1 |
| Thermal / power throttling under sustained GPU load | Not asserted; clocks/power sustained at TDP | Sev-1 |
| Host memory stress (stressapptest / memtester) | 0 errors | Sev-1 |
| CPU stress (stress-ng) | 0 errors; no MCEs; no thermal throttle | Sev-1 |
| Logical CPU count vs. spec (SMT/core config) | Matches PO/BOM (e.g. 128, not 64) | Sev-1 |
| Local NVMe (fio) | ≥ 100k read IOPS / ≥ 100k write IOPS per node (symmetric); throughput within SKU spec | Sev-2 |
Cluster-wide acceptance#
Tooling: nccl-tests, ClusterKit / perftest (ib_write_bw, ib_read_bw). Soak: NCCL all-reduce loop (default) or Megatron-LM / HPL LINPACK, 24 h – 5 days (default 48 h).
| Criterion | Threshold | Severity |
|---|---|---|
| NVLink / NVSwitch via intra-node NCCL all-reduce | Within 5% of SKU reference | Sev-1 |
| Cluster-scale NCCL all-reduce busbw (ClusterKit) | ≥ 0.93 bandwidth tolerance (btol); latency within 2.1× (ltol) | Sev-1 |
| Run-to-run variance on cluster collectives | ≤ 3% | Sev-2 |
| All IB ports up at expected speed and width | 100% | Sev-1 |
| Per-port IB bandwidth (ClusterKit / perftest) | ≥ 95% of line rate | Sev-1 |
| Bisection bandwidth across cluster | ≥ 90% of theoretical | Sev-1 |
| IB link recoveries / flaps during burn-in | 0 | Sev-1 |
| NIC negotiated link speed (per node) | Asserted at expected line rate | Sev-1 |
| Soak: node uptime / GPU enumeration / IB stability | 100% / 0 dropouts / 0 flaps | Sev-1 |
| Soak: performance drift end vs. start | < 2% | Sev-2 |
GPU count and SKU, host RAM, NVMe, NIC count/speed/model, and firmware must match the PO and BOM (mismatches are Sev-1). The firmware baseline (BIOS, BMC, GPU VBIOS) is pinned and recorded per node as an acceptance artifact.
Per-node reference tests#
A node that passes all of the following is considered working. The NCCL and DCGM checks are identical across SKUs; the NVLink and InfiniBand bandwidth targets vary by SKU (see the reference table below).
- Single-node NCCL — on every node:
NCCL_DEBUG=INFO python3 -m torch.distributed.run --standalone --nproc_per_node=8 nccl-test.py - Multi-node NCCL — concurrently across nodes (rendezvous on node 0):
NCCL_DEBUG=INFO python3 -m torch.distributed.run --nproc_per_node 8 --nnodes NUM_NODES \ --rdzv-backend c10d --rdzv-endpoint HOST-0:8888 nccl-test.py - NVLink P2P bandwidth — per-SKU target below, via
p2pBandwidthLatencyTest(P2P enabled). - InfiniBand inter-node bandwidth — per-SKU target below, via
ib_write_bw -d mlx5_0 --use_cuda 0 -a --report_gbits. - DCGM —
sudo dcgmi diag -r 4passes.
| SKU | NVLink P2P (uni / bidi) | InfiniBand per port (line rate / real) |
|---|---|---|
| H100 / H200 | ~375 / ~740 GB/s | 400 Gbit/s NDR / ~390 Gbit/s |
| B200 | ~750 / ~1,480 GB/s | 400 Gbit/s NDR / ~390 Gbit/s |
| B300 | ~750 / ~1,480 GB/s | 800 Gbit/s XDR / ~750 Gbit/s |
Line rates are firm. Measured NVLink P2P and real IB throughput are references (fleet-confirmed), not hard SLAs.
Deliverables & sign-off#
On completion the customer receives: a per-node / per-GPU hardware inventory matched against the PO; a tooling manifest (image digests, driver/CUDA/OFED versions, pinned firmware baseline); and a signed acceptance certificate referencing this document by version. Acceptance is achieved when all Sev-1 (Core) criteria pass on all nodes, all Sev-2 findings have a documented disposition (remediated, waived with reason, or scheduled), and the customer countersigns. A Sev-1 failure triggers remediation and a re-run of the affected tier; remediation is the supplier's responsibility during burn-in.
11. Documentation#
| Requirement | Tier |
|---|---|
| Full bill of materials (BOM) | Core |
| Rack elevation diagrams | Core |
| Network architecture diagram | Core |
12. Customer experience & accepted contracts#
An Accepted Contract requires that the GPU node is paid for, provisioned for customer access, and confirmed fully operational and usable — per our Marketplace Terms of Service.
Appendix — Hardware specification questionnaire#
Suppliers provide the following alongside the BOM during onboarding. SF Compute validates the responses — this is an intake, not a self-certification.
- General — BOM; rack elevation; network diagram.
- Hardware — access to non-GPU nodes (and whether VMs, with specs); shared storage filesystem (type, quota, access method); tested virtualization (and GPU passthrough); per-node dedicated public IP (static/dynamic, or how inbound is handled).
- Ingress / egress & networking — datacenter/location; total cluster bandwidth; number of uplinks; bandwidth shared vs. dedicated; measured speed to S3 us-west-1 and nearest S3 zone; public IP per machine.
- Access & OOB — direct OOB/BMC access; BMC portal reboots / console / BIOS / reimaging.
- Responsibilities — who configures InfiniBand partitioning / UFM / SM (and whether SM virtualization can be enabled); who configures Ethernet partitioning/isolation (and method); who configures BIOS; who handles OS install, driver install, and firmware versioning.