NVIDIA AI Cloud-Ready at Rack Scale: Rafay on GB200 NVL72 with NVIDIA Infra Controller

November 3, 2026
Rafay Team
Rafay Team
No items found.

The rack is becoming the unit of AI compute

AI infrastructure is moving from the server to the rack. NVIDIA GB200 NVL72 connects 72 NVIDIA Blackwell GPUs and 36 NVIDIA Grace™ CPUs in a single NVIDIA NVLink™ domain, so the whole rack behaves like one very large accelerator, which raises the bar for the software that runs it. The control plane now has to understand the rack: verify hardware before handoff, carve fabrics into isolated tenant slices, place workloads with topology in mind, and return every node to a clean state between tenants.

That's the bar Rafay is now testing against at rack scale. Rafay is recognized as an NVIDIA AI Cloud-Ready validation partner and implements NVIDIA Infra Controller (NICo) on a GB200 NVL72 rack in the NVIDIA validation lab, extending its validation work from single systems to full racks.

Where NVIDIA Grace Blackwell racks are landing

NVIDIA positions GB200 NVL72 for real-time inference and training of trillion-parameter and mixture-of-experts models, and GB300 NVL72 for AI reasoning. Three groups of operators are deploying these systems:

  • Neoclouds selling rack-scale capacity to AI labs and model builders.
  • Sovereign AI clouds, such as Australia's Sharon AI, which agreed with NVIDIA in June 2026 to deploy up to 40,000 GB300 GPUs.
  • Enterprises, telcos, and research institutions building private AI factories.

They share one business problem. A liquid-cooled rack drawing well over 100 kW is a large capital commitment, so every idle week is expensive. Rafay is already helping close that gap: in July 2026, Rafay and Singapore-based neocloud Aolani announced the NVIDIA DSX OS deployments on GB200 NVL72. The same rack-scale design carries forward to GB300 and NVIDIA Vera Rubin NVL72, so these capabilities apply to the racks operators are planning next.

A software standard, extended to rack scale

NVIDIA AI Cloud-Ready does for AI cloud software what the NVIDIA Cloud Partner reference design does for hardware. Stacks are assessed against the NCP Software Reference Guide, and results are reviewed jointly with NVIDIA.

In May 2026, Rafay announced that the Rafay Platform, integrated with NICo, achieved AI Cloud-Ready validation, and Rafay is listed among the initiative's first-ever validated partners. This round extends that work to rack-scale systems.

What is being tested

NICo is NVIDIA's open-source, API-based microservice for site-local, zero-trust, bare-metal lifecycle management. Rafay builds on it to deliver self-service consumption, multi-tenancy with governance, and Kubernetes lifecycle management. Rafay deployed this stack directly on the rack's bare metal, so the tests exercise real NVLink switches, real fabrics, and real rack hardware.

What makes rack-scale multi-tenancy hard is isolation. The traditional approach configures tenant boundaries at the switch, with VPCs and subnets carved through switch-level APIs, and that complexity compounds with every new tenant and every new rack. NICo moves the boundary onto the host itself, enforced by the NVIDIA BlueField™ DPU on each server. The DPU runs in zero-trust mode: the host OS can't reconfigure it, so it stays owned by the operator even after the host is handed to a tenant. If a tenant's workload or OS is ever compromised, the network and management planes stay isolated.

Rafay's multi-tenancy, RBAC, and quota enforcement sit directly on this host-level model, which is why the validation treats attestation, per-tenant isolation, and sanitization as first-class checks.

‍Figure 1. Moving the tenant boundary from the switch to the host

The validation focuses on network management, compute provisioning, and workload orchestration. The rack-scale tests probe these areas:

‍Figure 2. How a node moves from ingest to reuse, including break-fix

‍

AreaWhat the suite checksWhy operators care
Hardware ingestionAll hardware is discovered and matches declared inventoryThe basis for billing and capacity planning
AttestationFirmware, BIOS, OS image, and TPM settings are verifiedTenants receive trusted nodes
Bare-metal lifecyclePower operations without rebuilds; DPU health at instantiationFaster recovery
Topology and fabricTopology-based placement; tenant isolation on the TAN (north-south), CIN (east-west), InfiniBand (partition keys) and NVLink (partitions)Performance and isolation
NetworkingHealthy switches; platform-managed IP addressingPredictable tenant networks
SanitizationLow-level sanitization on deleteClean reuse between tenants

What it means for operators

Validation on the same class of hardware shortens the distance between racking a system and selling it.

  • Neoclouds reduce integration risk and turn new racks into self-service, multi-tenant offerings sooner.
  • Sovereign AI clouds get evidence of attestation, isolation, and sanitization on rack-scale hardware.
  • Enterprises and telcos get a control plane aligned with the NVIDIA reference stack, without assembling and testing it themselves.

What comes next

The goal is the same at every scale: let operators run AI infrastructure, from a single server to a full NVL72 rack, as a governed, self-service platform from day one.

To learn how Rafay can help you bring rack-scale capacity to market, talk to Rafay.

Share this post

Want a deeper dive in the Rafay Platform?

Book time with an expert.

Book a demo

You might be also be interested in...

Product

NVIDIA Dynamo in Practice: Scaling Disaggregated Inference on Rafay Token Factory

Inference now defines AI infrastructure economics. See how NVIDIA Dynamo splits prefill and decode across GPU pools, and how Rafay Token Factory turns it into a priced, multi-tenant service.

Read Now

Product

How the Rafay Platform Integrates with NVIDIA DSX OS Across the AI Factory

From workload scheduling and inference to GPU fleet health, the Rafay Platform integrates with NVIDIA DSX OS across the layers operators run every day, and turns the reference stack into services operators can sell.

Read Now

Product

Governed Agents, Protected Tokens: Open Agent Safety Platform Meets the Sovereign Token Factory

Hosted AI agents raise two security questions: what the agent can do, and what the platform sees of its data. NVIDIA OpenShell, Protopia AI, and Rafay together let NeoClouds and sovereign AI providers sell governed Agent-as-a-Service and protected Tokens-as-a-Service on shared GPUs.

Read Now