AI Workload Security Moves to the BlueField DPU
NVIDIA's Enterprise AI Factory design pushes security onto the BlueField DPU with Check Point, Fortinet, Palo Alto and Trend Micro — making AI workload security part of the fabric.
Tal
YouCC Technologies
AI Workload Security Is Moving Onto the BlueField DPU
While much of the industry is still discussing classic cloud security, AI workloads are changing the game — and security is becoming part of the infrastructure itself. NVIDIA has expanded its Enterprise AI Factory validated design, adding security and acceleration capabilities on top of the BlueField DPU together with partners including Check Point, Fortinet, Palo Alto Networks and Trend Micro.
What's new
The core idea is to move security functions off the server and onto an isolated infrastructure processor. Running these functions on the BlueField DPU delivers isolation and Zero Trust enforcement at high traffic rates, without consuming the CPU and GPU resources reserved for training and inference. As AI workloads grow, security and performance become the same conversation rather than two separate projects.
Why it matters
This brings the security world much closer to the network world. Policy and enforcement at the DPU level become part of the data center fabric, not just a layer sitting above the servers. The shift is also organizational: SecOps and Infrastructure teams start sharing KPIs such as line rate, latency and utilization, rather than treating security purely as a compliance exercise.
It also introduces a new dimension to risk management. The lifecycle of firmware, attestation and correct configuration of the isolated infrastructure layer become as critical as managing the servers themselves.
What to do
- Treat the DPU as a first-class security control plane — plan policy and enforcement at the infrastructure-processor level, not only at the host.
- Align SecOps and Infrastructure teams around shared performance and security metrics (line rate, latency, utilization).
- Build firmware lifecycle management, attestation and configuration validation into your operating model for the isolated layer.
- Evaluate the Enterprise AI Factory partner ecosystem (Check Point, Fortinet, Palo Alto Networks, Trend Micro) for offloading security onto BlueField as AI workloads scale.
Shared from the CSC - Cloud Security Community community, by Tal.
Want more like this? Join the CSC - Cloud Security Community → https://youcc.co.il/community