0:16
Everyone, welcome back to SemiAnalysis Weekly.
Everyone, welcome back to SemiAnalysis Weekly.
We are here this week with a ClusterMAX 3. 0 review podcast.
I got Sam and Pratt we're going talk through everything that was included in the article that we pushed out on Wednesday, September twenty third.
We'll talk through the rankings as they are today, some of the statistics, like how many providers we actually tested, the methodology that we use to go through the testing over the last number of months and tease some upcoming projects such as EndpointX, PostTrainingX, HarnessX, SandboxX, we're gonna test everything.
And then talk about some of the trends that are affecting the neocloud industry, financing the move to Vera Rubin from Blackwell, security.
We had a previous article on that, agentic coding, how that's impacting infrastructure.
And maybe we'll get into some individual stories about specific topics.
But guys, welcome to the show.
How is the last three months, Sam?
You're coming out of your hole, man.
Yeah, it's my first time seeing sunlight today actually since testing began.
But yeah, I mean I'm a little sunburnt from it, but you know, I've had a few lifetimes worth of reps on Kubernetes and Slurm, so wouldn't trade for anything. Pratt how about you?
You feeling good after the testing period has come to a close?
Yep, feeling pretty good.
Was a lot of fun testing out these clusters, you know, always fun playing with big infra. So Awesome.
So headline news, I think the biggest thing is that there's a new addition of the platinum tier.
We've got Nebius up there joining CoreWeave.
In the gold tier, rounding it out, we've got Oracle and Google Cloud, Google joining Oracle.
On the silver side, Azure moves down, Firmus and Lambda stay, GMI moves up and TensorWave stays at silver.
And then into bronze, companies like AWS, Crusoe together all moving down.
Rounding out the list at a high level, this time we rank 77 providers.
We increase our market view to cover 323 total, which is available for subscribers to our neocloud model in great detail.
And we've now interviewed well over 200 end users of neoclouds as part of this research.
So let me pose a question to Sam to start.
Most interesting insight that comes to mind when you think about the labs that we've interviewed so far.
Like reliability, performance, ease of use, support.
What do you think is top of mind for people that are buying GPU clusters right now? Good question.
I mean, the first thing that comes to mind is just the ridiculous backwardation of the price curve at the moment.
So people are willing to pay just about anything for any chips that they can get in, you know, the next few weeks, especially.
You can get a big discount if you're willing to wait even a few months.
And yeah, I mean, that means that just about everyone in the industry looks like a genius right now.
If you have chips to sell, even if you know you're vibe-coded Kubernetes is completely broken, even if storage barely works.
If you've got GPUs, you're gonna find people willing to pay a pretty good margin to take them off your hands. Yeah, it's interesting.
We've talked about that trend a few times previously, which is like the providers that weren't able to sell their stuff early, typically that's a signal that they're not as high quality, but now they're actually closing these deals for significantly better margins, which is interesting. Pratt, how about you?
We're expanding a little bit beyond ClusterMAX in the future.
Things like serverless inference endpoints, posted like post training infrastructure for RL, harnesses, sandbox, you you've been digging in there.
When you're talking to the providers themselves about the roadmap, do you find it confusing that people can't get Slurm and Kubernetes right sometimes, but they're already ready to launch like four new products? I mean, I guess, right?
Because currently the margins on compute are so like high.
Of course, like as a neocloud, you do want to capitalize on that.
You can of course like SpaceX provides really good compute to Google.
They have tied like deals with Anthropic, and also several other neolabs.
However, neoclouds also want some of that, you know, like some of that cake.
So they're thinking, what is the most high margin business that we can enter right now.
Managed clusters of course was one of them, but it's a huge headache setting up the entire cluster.
So why don't we just go above that layer and sell actually hosted training?
Why don't we sell managed inference, you know?
So they're just in the end just expanding their market, trying to earn that little like good cash, which the labs are earning right now.
But everything points to centralization of compute.
That's the main thing I can say.
Centralization of compute. Makes sense. Sam, how about you?
Like, there's a few different providers who have been on the cluster max ranking system in the past and are either moving down the list or just moving to unavailable because they're either focused on bare metal or maybe they're focused on their inference endpoint business over clusters. But I don't know.
I talk to neolabs all the time, and a lot of people still need training clusters.
A lot of people host inference for themselves and they still need those clusters.
Like, do you think there's no more to be done on the product roadmaps for people that are building managed cluster experiences? Interesting.
As Pratt said, there is an interesting fluidity to the market right now where you know some of the better managed cluster providers know how to manage a cluster because they have teams internally who are trying to use these things and can give good feedback for you know what a good Slurm and Kubernetes layer looks like, how to set up health checks, that sort of thing.
So there definitely is a benefit to integrating these things in-house, in addition to just the fact that you have another service that you're offering on top where you can take margin from another layer.
I mean, we certainly see plenty of room for improvement from most of these players.
You know, I don't think that we're requesting super fancy bells and whistles on top of these managed clusters.
You know, there's a handful of genuinely interesting additions to the managed cluster experience, but mostly I think that there's plenty of work to do just to get Slurm and Kubernetes bulletproof to get health checks right.
And I think that everyone on this call would agree that it's quite lucrative for these companies to do a better job, be able to collect a few more cents on top of the GPU hour prices that they're charging just by doing a slightly better job at the software layer and, Okay.
Yeah, what you know, picking one lane and making it great.
okay, let's talk let's dig into health checks because this is something that we wrote a dedicated article about a little while ago called how much do GPUs really cost?
And in this one, ClusterMAX 3.
0, we go through in detail the methodology that we approach testing reliability with. Can you tell me a story?
Leading the witness here, about some providers that claim to have health checks.
And then when we test them or try to exercise them with them hand in hand, they're just like not really working or they're needing a lot of manual intervention.
Like what sets apart somebody that has health checks developed out to somebody that doesn't?
And maybe just basic level define a health check, right? Sure.
So there are basically two types of health checks active health checks and passive health checks.
So an active health check runs an actual workload or sort of a dummy workload when there's nothing else going on in the cluster.
This is normally preemptible.
So if I have an active health check running and then I decide that actually I have some training job I want to run, the health check gets interrupted and the actual workload begins.
The passive health check is just running in the background.
You know, you want to see as little a performance overhead as possible on the passive check.
And it doesn't it can be exactly zero.
It can just be, you know, reading logs from the CPU while the GPU does all its work.
And I mean there's a handful of basic things that we like to see in health checks that are not always respected.
I mean one like basic thing is like if you just diagram the health check on paper, is there any chance that it works?
So you know there's a million corner cases that you can come up with for like, you know, some obscure race condition that causes the health check to fail.
But you know, we've been through a few of these clusters where there's just no way it could possibly work.
One example I'm thinking of, and these are I guess health checks that are so bad they're worse than That's right.
no health checks, because they're like actively interfering with jobs.
On the Amazon HyperPod Slurm, the first time we tested, there is a health check that's scheduled in the auto remediation phase that needed the node to be healthy before it could run.
So this was like to make sure that the node had recovered its health.
And there was like an obvious contradiction that it could only run once the node was back in the fleet and it was needed to bring the node back into the fleet.
And there's I think there are probably five or ten examples of this throughout testing where the health check just never had a chance and you know it I don't know.
It makes you wonder whether these people are really putting it through the paces before they hand it off to customers, given that, you know, our simple little XID injection catches some basic failures of functionality. Yeah, it makes sense.
On the XID injection, maybe you can explain like a little example of the process that we go through to actually simulate a failure.
Because you know, it's different on managed clusters versus endpoints and you know, in terms of like how things can fail or how that affects a customer workload.
And when we go through the testing, I mean we're like for some of it we're doing custom stuff, but the basic way with DCGM inject.
It's using the basic documented approach that NVIDIA releases, right? Yeah.
It's nothing nearly as complicated as some of the other things that these companies handle in their day to day.
So I mean the most basic version is just you take a node as long as you have the requisite privileges, you write into the kernel ring buffer the message that exactly corresponds to the message that would be emitted in the event of a genuine GPU hardware failure.
This doesn't always work.
People have health checks configured in different ways, but normally you can like literally just read out the health check and figure out how it works and make sure that this is in fact tripping the wire that you need to trip.
Most of the time, this is exactly what you need to do.
So this springs into motion the health check exactly as it would run in production.
And yeah, I mean, once that happens, it's a bit of a Rube Goldberg machine sometimes.
Ideally, it's like straightforwardly quarantined.
There's some passive check that runs before it's auto remediated.
Everyone makes sure it's healthy.
You know, depending on the exact error that you get, you want to handle it in different ways.
But the sort of supported path is pretty straightforward in general.
And there's not that much to say on it.
It's taken out, you can't see it, it's validated, it's brought back in, and then you can schedule jobs onto it again.
In the meantime, because it was unhealthy, you want to make sure that you're not able to schedule jobs on it and slow down your workload.
But there's a lot that can go wrong in between the simulated failure and getting your node back into your fleet again. Yeah.
And that's exactly what we're doing, right?
Simulating a failure, testing the amount of time that it takes for the provider to identify that failure has occurred, followed by testing the amount of time it takes for them to drain the node, get it out of the cluster, replace it with a hot spare in the case of the HGX machines, or do some sort of thing like a reboot or repair workflow in the case of the NVL72 rack scale architectures.
Now this is when it comes to hardware failures on a cluster.
And I think the reason why we dig in here so much is that people are like actively paying money for these GPUs that they then can't use if they fail.
And that is basically the only way you can as a as a customer have any sort of recourse with the provider in the event of these failures is if you have SLAs enshrined in a contract that you both signed up for that say you're going to get this amount of credits if you have downtime.
You have to define the downtime.
You have to make sure that there's not a bunch of excuses from it.
And for this reason you should be contracting SemiAnalysis for access to our sample SLAs so that you can you know get these contracts to the industry standard for what other people do agree to with other you know customers.
Anyway, it makes me think about people paying money for things that they're not you know getting in return, right?
Or spending too much money more than they have to.
So Pratt, maybe you can tell us a little bit about your initial experience testing some of these providers endpoints as a bit of a teaser.
It's not included in the ClusterMAX experience put a you know in this initial article, but it's still something that we are you know tracking and we're gonna be writing more about soon.
So maybe give us a preview on like what you've experienced so far when we said and okay.
Initially when we said let's go into endpoint testing, it was like what's the difference?
It's just the API, everybody's API is gonna be the same.
But no, there's some real reliability challenges and some differences in cost that you've already teased out in like a week of testing, right? Yep.
Full disclosure, this is the preliminary test.
We are gonna do a huge test right after this, which I call the hero run, which is gonna test concurrencies up to like a thousand twenty-four or even more than that.
So from the preliminary runs, something that which is very interesting and as Jordan you said.
That a lot of people would assume that an endpoint just works.
An endpoint is like a Lambda function.
You just execute the function and you get an output. Like that, you know?
However, a lot of providers underneath have their hardware running in such a configuration, be it auto-scaling, be it their cache aware routing is not working, that the caches don't like deliver really.
So for one provider that we tested, and it's a very famous provider, I cannot name right now.
However, for the one provider for the one provider we tested, we got a cache hit rate of around like seventy-five percent.
Now you would say seventy-five percent seems wow, like seems decent, right?
Above like fifty percent is fine.
And for the other good providers, you'll see a cache hit rate of ninety nine percent.
FYI, this workload was around you could say eight hundred tokens for a trace.
So we just did replays on the single endpoint.
But that seventy five percent cache hit rate gave almost doubles the cost, doubles the total cost of running this replay.
And it's quite shocking, you know, you would assume that 75% is pretty decent. It's 75% is fine.
However, for these providers, even a 75% would double the cost.
So imagine like if you're paying $200, you'd be paying $400 for the same accuracy for probably even slower speeds, because again cache overriding affects speeds.
And again you'll have a huge bill for the same exact model, for the same exact accuracy. It's quite shocking.
Yeah, that's become a bit of a theme.
You know, getting shocked by the by what you're having to pay after you actually go through your time spent actually running on something, right?
Okay, let's talk a little bit more about some of the technical details on these tests that you ran on a lot of these clusters, Sam.
So beyond reliability and beyond pricing, let's say, there is change differences in performance or performance that you're able to realize out of the box with a reasonable amount of testing.
Let's start by talking about networking and then we can go into storage.
When it comes to getting good performance out of the network and it comes to troubleshooting this with customers, or you know, do you think there's specific providers that like stand out as being good at this?
I mean, obviously platinum gold tier, silver even is where the good providers are sitting in this ranking.
But what stops somebody from giving us a cluster and us being able to realize full performance on a training job or a like micro benchmark on the network out of the box.
Yeah, it's a good question.
I think that you know, people hear about GPUs and you know, the top line number that's normally quoted for a new generation is the flop spec.
But it turns out that this is something that basically doesn't distinguish cloud providers.
It's you know, reliability is the first thing.
Obviously, if you can't use the chips at all, then that's a bad deal.
But networking is probably the next most important thing that we check.
And I mean, basically the simplest advice we can give to providers is like, make sure there's a golden recipe for NCCL.
That NCCL being the NVIDIA communications library that's sort of used by default on these clusters.
Make sure there's a golden recipe for NCCL that gives me reasonable perf out of the box.
So I don't want to have to go hunting down, you know, strange interface configurations.
You see pretty frequently that they're like pathological message sizes.
So for whatever reason on this cluster, you get a huge dip at 128 kilobytes, or maybe even at excessively small message sizes, it actually won't go through at all.
So there's like a fairly straightforward test that you just like sweep all the message sizes.
You sweep in multiples of two the number of nodes that you have on the cluster.
You wanna see monotonic increases.
In throughput as the message size increases.
There's a bit of detail to contend with here because actually NVIDIA's default library isn't perfect out of the box.
And sometimes due to just bad software, bad heuristics by the routing, you'll get dips in performance.
But basically you should see a smooth logistic curve.
And I shouldn't have to, you know, go into nccl.
conf and rename things or you know figure out how exactly this interface is exposed to Kubernetes.
I just want to have like, yeah, somewhere waiting for me on the cluster, something that I can hit enter and get a reasonably good starting point to hill climb on.
I can tune that to my heart's content depending on what model I'm serving and you know what my parallelism strategy is and so on.
But something that we think all providers should do is just provide a golden recipe for anyone as soon as they get on the box.
Yeah, and I we saw a big win actually out of this from Google, which is that they built this into the NVIDIA NGC containers now so that their custom networking, which does not use NVIDIA's silicon in the switches or in the network cards, is still able to work out of the box with NCCL.
And they don't have to do a bunch of, you know controls in the versioning that where they have to keep track of every single parameter that NCCL can tune in that container, how it changes over time and then tune their network to accommodate it.
It just kind of works out of the box there.
On the alternative side, I think a lot of people felt like with you know agentic coding, software is going be free.
And so therefore EFA from AWS is going to be easier to use.
But I think what's happened is that instead of everybody sticking with NCCL and just making, you know, the defaults easier to use, which to be fair, EFA out of the box with NCCL is easier to use than the last time we tested it.
What you've now seen is that collective libraries like DeepEP or Mooney P are actually built on top of NVSHMEM, a lower level library than NCCL to get extra performance.
And this is just like completely not supported by EFA out of the box.
So maybe you can talk about like the headache of the or the double edged sword that is a provider trying to save some money by controlling the network, designing it custom in their way, while then actually having to make it work for customers out of the box.
Yeah, we've had our fair share of conversations in Slack about EFA.
I mean the bottom line is that you know, our InferenceX team and the people that they collaborate with and people throughout the industry are working really high really hard on hill climbing these performance metrics for scale out networking.
You know, the DeepSeek collectives libraries stand out.
There's a handful of other ones that the InferenceX guys could tell you all about.
And you want to be able to take advantage of all that work by the open source community.
And just take their recipes and use them on your cluster, take their recipes and improve them in some way that is important to your workload.
I mean we could have Dan on the pod to explain to you basically how the bomb breaks down when you're building out a big cluster.
But something like and Jordan you can fact check me on this as well, something like seventy-five or eighty percent of it comes down to stuff other than networking.
Like scale out certainly matters.
If you can save a few percent, it's nice.
But if you save a few percent and like keep people from using modern workloads because you know, they can't use the DeepSeek communications recipe that they like.
That's absolutely not worth it.
You know, we've seen some cool blog posts by people at Perplexity and elsewhere explaining how to get reasonable perf out of EFA.
But I mean, yeah, you can see the money that they've saved by building their own custom scale out is being paid instead to engineers who have to spend extra hours making sure that the workloads run reasonably well on their weird scale out that nobody actually wants to use.
So yeah, it would just be so much better if the industry's best player used a stack hardware and software that made use of everything else going on in the field. Yeah.
And this is not to say that like open source software is the be all end all.
I mean, going back to inference endpoints, maybe Pratt, you can chime in and say, like, everybody wants to use vLLM and SGLang, but what we've seen from these endpoint providers is that you actually need to build a whole bunch on top of open source just to get this stuff to work correctly.
You can't just expect to plug GPUs in, turn on, install the open source software, and then it all just like works and you have this great business.
Like you need to actually do a bunch of extra work too. Wait, no way.
I thought you could just earn like eighty percent margins on the inference business, right?
Inference endpoint business.
But just kidding, just kidding.
You're right, you're right.
But maybe if your company policy is to never give anybody a discount for getting a cache hit, then you can earn the employees, right? Yeah.
But yeah, Jordan, you're absolutely right.
A lot of people think we have this cluster.
A lot of neoclouds right now think that we have this cluster.
We are shit on ClusterMAX, so might as well create a managed inference endpoint, you know?
So they go out, get vLLM, try running models on it, and it runs pretty fine.
But as you start serving these workloads, as you start scaling these workloads to bigger customers, you'll realize that the base just like basic vLLM SGLang is just not good enough.
That's why companies like RadixArk, companies like the folks who created vLLM, they also have a company I've I forgot the name, it's on Inferact, yeah.
Inferact, all those folks.
That's why they're creating companies in order to make kernels as well as develop mega kernels, which reduces this launch kernel time, in fact giving faster inference like inference latencies, you know?
So of course, you cannot just go out install vLLM.
Again, that's also like a huge pain to do for a lot of people, but you just cannot go out, install vLLM, run it on a cluster and map like assume to make eighty percent margins, you know?
As well as like making sure like your cache-aware routing is in place, et cetera, et cetera.
So there's a lot of things.
There are a lot of moving parts here. Okay.
Can you tell me about coming up to speed on using clusters and the relationship that you have with agentic coding at this point?
Because what we've heard from providers is that agentic coding has been like very difficult for them to contend with.
It doesn't it's not a free lunch where you everything just works out of the box and the model can solve everything, though it can be quite helpful for debugging.
I guess the high level lead-in for you is that agentic coding is like resulting in a different type of stress on the system.
Because you can just like have these coding models get away from you in terms of what they're launching on these clusters.
Do you have some of that experience that you can share? For sure.
It's very interesting because a lot of our ClusterMAX testing, we lead with our CLI, CMAX CLI. Please check it out. It's open source.
Feel free to try it out on your managed cluster. Play around with it.
Check if you want to contribute, feel free to contribute.
Make sure to read it before contributing.
But of course, of course, we do test our we do use agentic coding for testing all these clusters.
And the workload is very different.
The workload is very stressful on these systems, you know?
So that's why like we have CMAX CLI as a front, you can say like a front end, and like the agent is just like a wrap around it.
So if there are any issues which CMAX CLI faces, the agent in turn like debugs into it and understands what's going on.
But yeah, that's like the main use of agentic coding, even in like day to day like of my work.
We'll love to hear what Sam does.
He also is a huge user of Astra, right?
Is is that is that right? Are you Astra or Fable?
I'm a five point six soul guy. Five points. Yeah.
I find Astra just so badly undercooked.
I get more done with five six right now.
But certainly not Claude.
The word on the street is that they fix the writing, but I'll believe it when I see it.
Yeah, I mean anyone Wild take.
who's used these tools extensively has an idea of how frustrating they can be.
And I think that cluster orchestration is like the perfect sweet spot of like close enough for the agents to be superficially useful and far enough that they'll just blow your foot off every single time.
So it's not quite like yeah, Jordan's laughing the laugh of a man who's had you know late night sessions where Claude is reliably leading him astray.
I'm not saying And use some products and use some vibe-coded products, vibe-coded infrastructure products, which is you know, I shouldn't be laughing at too much because it's not like I've been able to produce any reliable dashboards so far.
Mine are plenty brittle themselves.
But yeah, it's just funny.
It's funny to me to think about like getting tagged by Pratt in Slack of like, what do you think of this run?
Well, let's check with computer what we think it'll cost on the endpoints, and it comes back and goes, yeah, this'll range from three hundred thousand to four hundred thousand dollars. If That was insane.
we do a full sweep across everyone, like yeah, let's hold off on this one Hey, that's light work.
That's light work for SemiAnalysis.
Four hundred K, what's that? for now, man.
Let's just make sure we're bulletproof before we start launching some of these runs.
So anyway, yeah, it gives you a sort of a false sense of confidence and you need to maintain the discipline to actually try to understand how these systems work.
And I think what we've seen is that the providers themselves have developed some products that they seem to not understand as deeply as they did a year ago, despite the fact that the product is not meaningfully more complicated than the one that they were providing a year ago.
It's like there's no we're reaching this wall with clusters where the top providers, there's not that many more features that they can add.
They need to contend with bringing online the latest and greatest GPUs fastest, which is complicated in and of itself.
But the expansion opportunity is, you know, bare metal datacenters becoming a construction company or like an operations company, basically.
Inference endpoints, RL training infrastructure, which we can talk about a little bit.
But spin up a few VMs and create a Kubernetes cluster should be a solved problem, despite the fact that, well, the agents haven't quite solved it yet. Yeah.
Yeah, I think that's right.
I mean, there's a handful of somewhat high margin offerings that we can think of, you know, some good providers not yet offering.
I guess performance storage or block storage are the two main ones that are not offered by everyone that seem like, you know, a easy way for them to expand, in sort of their current shape.
But I completely agree that There's plenty of infra that yeah, feels like it should be right in the sweet spot of the models.
There's you know, it's like plausibly properly configured, but if you spend as much time on clusters as we have, we know exactly how we want it.
Or at least we know exactly how we don't want it.
And we see plenty of setups that we don't like.
And I think that honestly putting the ClusterMAX write up that we have here into your agent's context and telling it to rearrange your orchestration is better than anything else I could think to mention.
Because, you know, there's like a lot of good Slurm patterns in the training data.
There's a lot of ones that just don't work for the use case that we're speaking about right now.
Same for Kubernetes, same for, you know, NCCL configuration.
And I think that yeah, there's a lot of people who have sort of outkicked their coverage trying to set up stuff that they don't actually have experience with.
They haven't spoken to customers, you know, it's not easy to Google what the right way to set up this part of a Slinky cluster is.
And your agent will do it for you better than you could have done on your own, but it will do it incorrectly. Yeah.
And let me give like a real example of where this kind of manifests with a little quick demo of our dashboard and just some troubleshooting.
So not gonna pick too hard on these guys, but Firmus was a company that we worked, you know, pretty hard with on the GB300 to actually get it working.
And what I've got on screen is one of the example dashboards that we track, which is a NCCL performance curve that Sam was describing earlier.
On here I'm highlighting Firmus, which is like there's two runs.
One that we did after a bunch of work together and one that was done earlier.
And so the chart on screen shows time, which is like the latency for a message to actually pass over the network in this all-to-all collective. And more time is bad. So lower the better.
And this is clearly an issue with the network configuration that we identified.
What happens is that if we get a collective constrained workload, which we do have here, and I can go down to our TorchTitan GPT-OSS training job, which is run with expert parallelism and is communications bound, is that you see the performance on Firmus out of the box was 1,455 tokens per second per GPU, whereas the others on some testing were up around thirty five hundred.
So way, way less performance out of the box, like fifty percent, which is an issue.
And if you drill down into these steps with some of our profiling, this yellow bar here is exposed communication time that you're not supposed to be seeing.
And so just like backing out and showing all of these providers highlighted together, like Firmus, obviously on a per step basis, is just taking way longer.
And that's because all of these exposed comms are actually being shown in there.
So anyway, this is not a bad provider.
This is a company that has stood up thousands and thousands of GB300s, they have happy customers.
They were eventually able to fix this with us after we did some testing.
But it's an example of like a company that has not built the battle scars of working through that back and forth with a customer is not gonna have an idea of how to set up a network correctly for the GPUs out of the box.
And you know, we just default to trusting people who have experience with the GPUs that you care about the most.
And that's the latest and greatest GB200, GB300 system.
Who are you going to trust for your Vera Rubin going into next year?
Probably the people who have been through this battle scars before and know what they can trust from NVIDIA, what they can trust from their other vendors in the documentation, what they maybe they can't.
Okay, let's move on from networking and talk a little bit about storage.
Sam, you had a fun experience with one of the providers trying to get them to get their storage to work correctly, which specifically led to a conversation about security.
Maybe you can tell us a little story about that experience. Sure.
This is a story with multiple layers, I guess.
We got an email notification.
This is the one that you're thinking of, Jordan.
We got an email notification for a node down.
So as mentioned earlier, we do synthetic injections of XIDs to test the health checks, but we normally do this at the end of testing just in case it doesn't come back.
We don't want to run shorthanded for all of testing.
So we got a email notification that a node was down pretty early on.
So screenshot it, put it in the Slack. Is this anyone? Nope, it's not me.
So Jordan, are you messing with my cluster? No, man, that's real. Yeah. yeah.
Jordan, what do you what are you doing, dude?
We're only gonna have three nodes here for the rest of testing.
Turned out that it was an actual failure.
And it was a pretty fun failure.
There's some way that like working on ClusterMAX is the exact opposite of being a performance engineer in a lab.
Because if you're a performance engineer at a lab, you just want everything to work.
And here, like we want bugs, otherwise we have nothing to do.
So this is like one of the better bugs that we saw in training.
Yeah, I think if I like met an actual perf engineer and shook hands with him, we would both disappear.
Engineer with anti engineer.
So got on the cluster and there's a lot of logs to dig through.
This is, you know, an example of agentic coding being helpful.
We weren't sure exactly what happened.
No one was actually running anything on the cluster.
It turned out, long story slightly shorter, that there was an error with the Linux kernel.
So the Linux kernel had a hard time dealing with reassigning dirty inodes.
So you know, you have a bunch of stuff written in the writeback cache.
And you need and they change it changes ownership.
So in our case, this was like an old Slurm job that was ending.
So we needed to deprecate it.
This is like the behind the scenes stuff of an operating system that no one ever cares about or wants to care about.
This was a very old Linux version, you know, about I think the kernel that we were dealing with was a couple of years old and had bugs that had been solved fairly long ago.
But there's like a bad, I won't go into all the details of it, but a bad quadratic time algorithm that was dealing with reassigning all these bad these dirty pages in memory.
This locked up the CPU, all the cores corresponding to that NUMA node.
I'm not sure exactly why I was constrained to one NUMA node.
But it locked up all the CPUs corresponding to that NUMA node as it was tearing down this Slurm job.
The client for storage couldn't get any CPU time.
So there's an ordinary request like, hey, are you still alive, to the Lustre client. It didn't respond.
So that triggered the health check.
It said, you know, storage is failing.
But the health check couldn't actually complete its work.
Because the CPU was frozen up.
So it took a couple of hours for that job to complete.
Finally, the CPU actually returned to healthy because it was done doing its laundry.
And as soon as it returned to healthy, it was like the cops were waiting outside its door and it got health checked.
So that was the cause of the email.
And yeah, I mean the last thing that you want is a node that's getting taken from your fleet, not because the GPU is actually unhealthy, but because of a health check failure for your file system that was due to a failure with your CPU.
So that was a fairly obscure corner case with a file system.
It meant that you know I was burning all kinds of Codex tokens over the weekend, setting goal to try to figure out exactly the right workload to recreate this bug.
But in any case, yeah we want the storage client to get CPU time is one way of summarizing our conclusion from that event. Yeah.
And this actually this turned into a security issue too, right?
Which I've talked about on a couple of episodes previously now about the asymmetric nature of like when you're trying to find a bug.
If other people have more powerful models than you, you can't defend yourself.
Pratt, maybe you can tell us a little bit about digging into security on a couple of these clusters where you're trying to identify if you were protected against a given vulnerability and in order to even start asking questions, a lot of the models would just completely refuse to help you, right?
Yeah, I mean that's one part of it.
But the other part of it is that and this is something I've noticed, is that frontier models especially just don't want to like exploit vulnerabilities.
They just have a tendency of like showing false positives, being like, Yeah, everything's perfect.
Like the other day I was testing out like a cluster and basically just playing with it, making sure there was a vulnerability that I wanted to exploit and I was using I believe one of the frontier models for that.
And the model said, yeah, we have this bug, we can exploit it, and we can actually get host access, host access to the control plane of that cluster.
So I was like overjoyed, you know.
I was like, this perfect, perfect chance for me to like show that the CVE is actually a really real big thing.
However, the model actually produced a false POC.
And after like two hours of debugging, the model said, yeah, actually my bad.
Like this was something I accidentally like said.
This is this cannot be exploited.
No, you could think like those two hours were wasted, but I would say I learned learnt a lot at the same time.
And this is something that the frontier models especially do.
They just want you to believe in like false positives.
And that makes me realize that is are hallucinations gone. Most likely yes.
But are false positives gone? Definitely not.
So that's my fun experience testing these clusters and just exploiting these CVEs, you know? Yeah, man.
Lots more work to be done there.
Sam, what's coming to mind when it comes to security?
We've talked about this on a previous episode, but a few things have happened since then, including OpenAI being hacked.
Part of a bug bounty program.
The Hacktron AI guys open a PR in their internal repo.
Seems like they're vibe coding because their monorepo had 1.
1 million PRs or something.
So they put the million and month PR up to prove that they had full access.
A little crazy, but they are one of many that are actively pursuing the these bug bounty programs, which not a lot of these neoclouds are participating in right now. Yeah.
I certainly have a rant about this loaded, maybe I'll keep it in my pocket for the time being.
I think that you know, whatever your opinions about AI Doom or about, you know, whether we should keep pushing full speed ahead.
The fact of the matter is that these are extremely valuable, extremely powerful pieces of equipment that are very badly secured in many cases, very carelessly secured.
You know, there's nothing like a standard set of tests that you can run to make sure that your cluster is properly configured.
You know, things are moving very quickly.
And I understand that there's, you know, a million things on the to-do list of the people working at these companies.
At the same time, we see, you know, CVEs that are two years old that apply to like the basic software that that's running on these things.
You know, we're not asking for super fancy things when we want tenant isolation.
You know, we want not to be able to see what's going on in the Grafana of our neighbors.
And we don't want, you know, CUDA Toolkit 12. 1 when 13.
2 or whatever it is is the most recent one.
So I mean, yeah, apocalyptic scenarios aside, they're like just very straightforward ways that you can see this being a tinderbox for these tools that are only getting more powerful.
Yeah, we talk about agentic AI being needed to be used to defend against agentic AI attackers, which certainly seems real when you go through the details of the Hugging Face incident, and also feels real when I'm trying to understand the details of that incident
or anything else that we're working on security side, where it's just like the speed at which we have to move means you have to use these models to understand what's actually going on and comb through logs and all of that stuff. But there's also some stuff Yeah. I would that you can do that's pretty straightforward,
But there's also some stuff Yeah.
I would that you can do that's pretty straightforward, right? yeah, I agree with that.
I was gonna push back a touch.
I mean I understand that in the case of the Hugging Face incident, I need to stop using the euphemism supplied by OpenAI's lawyers Hugging Face incident.
It was the Hugging Face cyber attack by OpenAI, yeah.
And it's strange Yeah, yeah.
to me that we've forgotten this in favor of this anodyne phrase.
The Hugging Face cyber attack consisted of dozens of very mundane misconfigurations by OpenAI, almost inexplicably mundane misconfigurations by OpenAI.
Sure you have petabytes or whatever it is of chain of thought to dig through if you're interested in understanding qualitatively this novel model behavior.
But you don't need an LLM to understand that you shouldn't have an applicable CVE to your Linux kernel, which is what the was the first thing that the agents used to escalate their privilege.
You shouldn't over you should be careful about managing permissions on the Kubernetes layer, which is another thing that the agents exploited.
If you want to sandbox your agents, you should make sure that you have alerting if they have unmitigated access to the internet, which OpenAI did not have.
So I think certainly agents can be helpful.
There are, you know, ways that you can only fight slop with slop.
But there's also just a lot of basic things that OpenAI didn't do and that these providers are not doing.
And I don't think that we should allow them to have the excuse of, you know, it's a brave new world.
You know, we're not the most skilled people with Qwen 3, so you can't blame us for having bad infra.
It's a lot more basic than that.
And that's, you know, the fairly low bar that we're trying to hold everyone to. Nice take.
Pratt, you ready to fight slop with slop? I'm down. Slop against slop. Let's do it. Right.
What's coming to mind guys?
What have we not covered on this one so far?
Any stories that you think we should be talking about?
Can we cover the financing?
Like I believe it would be good for the audience to understand why is ClusterMAX even important?
Are we just going testing out clusters, giving them feedback and calling it a day?
Like, why is ClusterMAX so necessary for this like seven trillion dollar build out which is gonna happen or happening, I guess? Good question. I'll take that one. Yeah.
I mean financing is like the biggest topic from everybody because everybody like whatever you were doing three years ago, everybody is being asked to do it a hundred times bigger right now.
Everybody's being asked that question of like, can you take what you did at 10 megawatts and try to do it at a gigawatt scale?
And what's going to break if we try and go that size.
The thing that is breaking right now is that people there is more money than good investment opportunities, except the money is still concerned about quality.
And there's two big reasons why somebody might be concerned about the financing of a neocloud.
One is if they're late delivering on their contract, so they don't build everything fast enough, they can't get it online fast enough, and they can't hand it over and have the customer start paying, so they can't pass acceptance.
And then the second one is if there's so much of violations of the SLA, so much downtime that the customer has a cancellation right, wants to cancel their contract.
And so the simple dynamic that's happening right now is that people are trying to insure against these things.
They're trying to insure against delays and they're trying to insure against contract cancellation.
This is both the debt providers as well as the neoclouds themselves that want to have insurance against these things happening in their customer contracts.
And there are products for this.
Companies like Parametrix and others that you know we're aware of are involved in providing insurance.
They're underwriting the parametric risk of these contracts.
And in order to do that, they need actuarial input.
they need actuarial input. So they need to have some sort of information about the cluster that people have, things like redundant power at the site level, redundant cooling, redundant internet connections, that they have the ability to mitigate failures,
that they have designed things up to the performance standard that meets these performances, that they have a parts depot nearby so that if there's a bunch of failures, they can actually get things back online,
that they have their correct amount of people on site, that the site is not, you know, in a floodplain or about to get taken up by a hurricane or something. And if it is, that they have the requisite insurance against those natural disasters
And if it is, that they have the requisite insurance against those natural disasters and there's force majeure clauses in the contract that protect them. And anyway, on and on.
And so the point is that we have developed a number of example SLAs and example contracts that we are circulating with customers of neoclouds and but both the clouds and the labs want this industry standard.
Like they want some standardization so that they can make some customizations, but they know what the definitions of important terms are within these contracts.
What is the definition of node versus rack versus sites versus cluster, what is downtime, what is force majeure and et cetera, et cetera.
There's all sorts of specific things.
And because we've seen so many of these deals happen and so many of these contracts were able to, I think, provide a level of certainty both the lenders and to the providers and to the buyers that, you know, they can get these deal done deals done and that people aren't going to be having a bunch of issues later.
With that said, the motivation for this is concerning.
The fact that we've seen a bunch of people sue each other.
We don't want this to happen, guys.
Like at a very basic level, when companies raise hundreds of millions of dollars sometimes, and they spend I've I know companies who have spent literally 100% of their seed round on compute because it's a couple of guys that have equity in the business and they're not taking a salary yet.
So they just get the check from the VCs and they turn it around and spend it directly on neocloud capacity.
This is the most critical decision you can make in the life cycle of your company.
So it really depends who you choose to trust.
So, you know, the offering from SemiAnalysis is really to provide a technical assessment of all of these providers, the decisions that they've made, their ability to respond to things.
This includes hands-on experience.
It includes visiting sites, it includes like doing the dirty work to get those details flushed out.
And yeah, clustermax@semianalysis.
com if you want to engage us for that technical assessment.
So you can underwrite your deal or you can move forward with confidence.
But that's sort of the backdrop on financing.
Maybe the other big conversation is that SemiAnalysis is launching a credit and markets model covering really the entire backstop universe that's going on right now.
We had a great article that Dan put out covering these details.
NVIDIA's backstop universe off balance sheet has grown to be over $588 billion that they are backstopping in the current like at the end of FY27 basically.
So the current or soon to be current fiscal year.
The forecasts if this continues is for this off balance sheet backstops to grow to over two trillion dollars by the end of twenty thirty one.
And this includes a whole bunch of detail that, you know, we published when it comes to actually building a site and who is being backstopped, what do they need to actually build?
What is the likelihood that it all comes through?
What's the likelihood that you have some issues actually raising the capital or delivering on the commitment to the paying customer and things like that?
But maybe the point is like if you're interested in the financing of this buildup, go read that article, NVIDIA Backstop Universe, and contact us about the credit markets model because the amount of capital that's flowing into this ecosystem is worth paying attention to. Let's leave it at that. Yeah.
NVIDIA I believe and I might get these numbers wrong, but are backstopping approximately eight hundred and twenty-seven billion projected according to our model.
Eight hundred and twenty-seven billion in fiscal year thirty-one only for the supply chain for like HBM, et cetera.
This does not include like LPS.
This does not include actually like the stuff that like the datacenter build out, etcetera.
This is purely just the supply chain that they're backstopping, like HBM providers, etcetera, which is quite insane.
It's eight hundred and twenty seven billion dollars. Yeah, yeah.
There's With the B a lot of there's a lot of stuff happening in the physical world in order for this stuff to be turned on, especially on time.
But there's I think it's not just NVIDIA.
Maybe the another point to make here is just that Amazon's doing this, Google is doing this, a lot of companies are putting their balance sheet to work.
Because they want to be exposed to the upside without actually taking up a whole bunch of the not necessarily risk because they're taking on some risk, but the quantity of risk that others are taking.
And so a lot of companies are benefiting from this because they don't necessarily need to have a business built on having investment grade off takers like NVIDIA.
They just need to have that backstop where NVIDIA has confidence that these customers are going to show up and be ready to pay.
And if they don't, you know, they'll take the capacity for themselves.
But it's a pretty it's a track record of companies showing up to pay right now.
And companies that don't necessarily have the funding raised today.
Who wanna commit to a thousand GPU contract for a year, don't have the money to do it for three, four, five years.
But when they train that model in the first year, they're expecting to be able to raise more money and things are gonna work.
And a lot of these companies have to work for this to work out. But so far, so good.
We are seeing a lot of companies across all sorts of different industries, you know, robotics, drug discovery, material science, like they're producing incredible results, let alone the coding agents.
So there's some there's something important going on here and I think it's worth digging into and understanding the full extent to which NVIDIA is backstopping things.
Maybe the other thing to end on is just how much we are seeing old GPUs be used.
Like lots of people want to give us H100s today, which are three or four years old at this point.
Some moving into five years next year when we get Rubin, we're gonna have five-year-old H100s on the market.
This is, you know, not going the way that Dr.
Burry said it was going to when he started criticizing everybody's depreciation schedules. Okay.
There are four-year contracts being signed today for H100 capacity.
OpenAI has never given up an A100 GPU that they've gotten. Those came back in 2020.
So those are six plus years old.
And maybe the question on everybody's mind and for the finance side is terminal value.
How can you underwrite the terminal value at five years or six years on some of these chips when these contracts expire? So far, so good.
If demand continues to outstrip supply, we will expect that these prices are going to continue to rise and people are going to continue to pay for even the old GPUs so long as they can be turned on.
Tune in more when we have another follow-up coming up soon about 800 volt DC and all of the modifications to datacenters.
If somebody if people are going to turn on Grace Blackwell GB300, they're running racks that are 140 kilowatts, approaching 200 kilowatts at peak demand, right?
This is way different than an H100 rack at 30 kilowatts, where the entire facility is built for 30 to 40 kilowatts.
It can't accept any of the new Vera Rubins that are coming next year.
And so these facilities, like what are they gonna do other than host these GPUs?
Maybe rip them out and put in new CPU servers for the sandboxes, maybe install some storage, but likely they just keep running the h100s that are so valuable until they expire.
Anyway guys, what where do we go from here?
Lots to talk about beyond finance.
So you wanna talk about sandboxes or harnesses or RL stuff, Pratt?
What are you gonna be testing in X?
Should we talk about hosted training? Yeah, hosted training. Like the Let's go.
thing I didn't realize until this week is that RL seemed like smaller because it's smaller than pre-training, but it's on a reliability perspective and like a correctness perspective, it's actually way harder because you're combining all the hard parts of inference with all the hard parts of training and then you need to sync them up.
Plus you add this thing called an environment or a sandbox that you also need to figure out how to deploy.
So there's like three components that sync up as opposed to like just one thing you can reason about.
Even if the post training clusters are not necessarily so big.
So what do you think about hosted training?
Is it gonna be a real thing that when people we're not necessarily seeing everybody nail Kubernetes in Slurm.
So now they gotta do Kubernetes and then do a whole bunch of stuff on top of it? What do you think?
I mean, hosted training is very interesting, you know, we've been talking to lot of people.
I still don't think there's a market for it yet.
I said yet, you know, so please don't come back to me if there is a market.
But of course, one common thing you can think is that your IP, your intellectual property that you're training these models on, has to remain to yourself.
It has to remain for yourself rather than going to like a third party like OpenAI or Anthropic.
This could be a completely different case when OpenAI or Anthropic just deliver a better product and you're just like, I need a better product over like protecting my IP.
So I think that's gonna be a good discussion to have in the near future.
Another thing I want to discuss about hosted training is how infrastructure intensive it is, you know?
We have been I was talking to this other evaluation slash like this RL environments lab the other day and they mentioned they literally have like server farms just running environments, you know?
And just a whole room full of server farms just running environments.
And you would assume that why don't we just run Docker, which of course they do.
They do virtualization to a decent extent.
But at the same time you also need to run it on like different hardware like iPhones, Android phones, etc.
So which is quite interesting, you know, like it's so infrastructure like intensive that is it that once you take hosted training, you're just managing more infrastructure than you did when you were like doing managed clusters.
Because now you have to auto-scale the environments, you have to auto-scale the inference nodes, you have to auto-scale the trainer nodes, and at the same time, doing all of this, you have to make sure that there is no trainer inference mismatch.
So it's a million things to take care of.
We should give more credit to these hosted training providers.
That there are like a billion things they have to manage.
And my hot take is that managed hosted training is only gonna become big if your company, if your startup is handling literally everything.
And once you handle every single part from environment creation, literally sitting with your customer, deploying forward engineers, building environments.
Training helping your customers train their models.
And once a customer develops this, you know, like develops this basically gets educated on how to like really work with this, then only you can take your hands back and like that entire run like happens.
So this is the Yeah, so hot take I have, you know, you have to basically just carry their hand throughout the process.
Yeah, so dig into that a little bit more. In the pre yeah.
Training world, there's like basically no examples where the provider that's selling the cluster actually really understands pre training.
You know, it's not like you contract a cluster with CoreWeave and they're like giving you tips on, you know, data mixes and architecture and like, hey, I heard this stuff about sparsity, they're going to work on the infrastructure layer, which means performance, which means reliability.
So, what's the analogy on RL?
Not only is the infrastructure harder, you also need to have forward-deployed engineers and understand this company's business and guarantee that the model you're training is going to work.
That was never a commitment that CoreWeave had to make or Nebius had to make to one of their customers that like the training job was going to work well.
Yeah, I mean it's an interesting thing, you know?
Like they didn't it's people assume that host training is gonna be very easy.
Honestly I assume that too.
I like, you just train the model.
The generator generates the model, generates the trajectories and just train the trainer on these trajectories.
Voila, you're done, right?
But turns out the real valuable tasks in day to day work which we do is way more complicated than just like generating like trajectories or like building environments.
I think building environments is a very hard task.
And especially that's why like Anthropic bought the most environments last year.
That's why their coding model was so damn good.
Is because it's a hard thing and they paid a lot of money for that.
You know, so that's why they didn't expect it.
A lot of host training providers basically thought that it's like manage endpoints or manage inference that you just provide an endpoint, which still, of course, is not like an amazing experience.
But they basically thought that you just provide like you just provide the infrastructure and the client like enjoys it.
But there's a lot of education to be done.
Of course, Rome wasn't built in a day. We still have more time.
We're just in the beginning of this revolution.
So yeah, we'll wait and watch what happens.
Last question about post training.
In the inference world, if you're making an analogy to that, there was some open source frameworks that just dominated.
And so vLLM and SGLang kind of simplified things for everybody.
We got some really high quality experiences really quickly.
And then people built a whole bunch of more complicated stuff over time with, you know, pre filled decode disaggregation, training speculators, quantization stuff, you know.
Cache-aware routing, all this, you know, extra bells and whistles beyond what the basic recipe from the, you know, beyond the kernels, like perform beyond great performance out of the open source models.
Let's compare that to frameworks in RL.
Slime, Miles, verl, PrimeRL.
What are you seeing people use?
It's there's a lot of them out there right now.
And some of the hosted training providers kind of abstract that away too, where you don't even know what framework you're using.
You're just bringing your data set or even you don't even know about that because the forward deployed researcher, FDR, not FDE. Right. FDR. FDR.
We can't be telling these RL guys they're engineers and FDEs, right? They are FDRs.
So yeah, well tell me about framework wars and what you think is gonna actually show up there.
Yeah, framework wars are very interesting because it's a very funny thing that all these inference providers, they started with providing amazing frameworks, you know, like SGLang, vLLM, et cetera.
But the next market, the next market that they started expand was basically just hosted training.
That's why you can see like RadixArk capitalizing on Miles, which is absolutely amazing by the way.
They have made it very agent friendly that you can just set it up like in one shot. It's pretty decent.
Of course, like you have to set the hyperparameters, so it's not like that easy of a task to just train a model.
But they have done a very good job.
PrimeRL is another very good one.
When I was GPU poor before joining SemiAnalysis, shout out, join SemiAnalysis.
I did run like a lot of runs on PrimeRL and that was also a pretty pleasant experience.
Over time my experience with these frameworks have gone better.
Of course they're these teams have put in a lot of investments and ho like building these training frameworks is way harder than people think.
I suggest the audience who read the Human SAN blog, where they basically show how native NVFP4 training is done at such a large scale.
And because trainer inference mismatch compounds over steps and as your trajectories get longer.
You do want the optimizer to learn more technically right so you have to take a bit more steps and if your trainer inference mismatch com compounds over like a hundred steps you'll realize that your model is diverging a lot and that collapses training so shout out you shout out to all these framework providers putting in work day and night sending in PRs even though it might be just pure slop but you shout out to them. Slop PRs. Shout out. Shout out slopers. Slop PRs.
We got a term yeah, yeah, yeah.
We got a term slop PRs like SLARS or something, you know, like neoclouds, you know.
So Yeah, I was at MLSys earlier this year and the one of the talks, Roger from Inferact, shout out Roger, was basically like, if you want us to merge your PR, you gotta message us in Slack because we're not reading every single one of your slop PRs anymore.
I was like, all right, good advice. Respect, respect. Good to know.
Let's move to wrap here, guys.
Sam, what's on your mind as we finish up talking about neoclouds?
Where do we go from here, buddy? What's next?
Sam, you want to talk about Azure?
No, we don't need to run it back. Talk about Azure.
Go company by company and criticize their internal organization, beginning with Azure and AWS. Well.
I want fewer obscure bugs.
I want nothing to write about in ClusterMAX 4.
0 the better the cluster, the less there is to say.
So I want to log on to Slinky and just have it all work, have topology awareness, not blow my foot off every single time I try to see whether the health checks work.
And yeah, I hope that all my performance engineer friends get good clusters that they never have to think about.
No more providers randomly wiping your nodes, randomly rebooting them, randomly deciding that kubectl is gonna go down for three days.
We've heard some horror stories from guys, right? So Yeah.
Protect yourself what's up?
with a good SLA, but better than that just go with a good provider.
You'd rather not be fighting to get back your whatever, five percent because it was down for three weeks out of the year. Yeah, trust people.
Let's give everybody a way in which you can trust everybody else.
Join hands and sing Kumbaya.
Thanks everybody for joining this podcast, listening to us talk about ClusterMAX and we'll see a ClusterMAX 4.
0 after we get some Vera Rubins in these datacenters.
Looking forward to it, guys. What about TPUs? Are we doing it? TPUs on ClusterMAX.
Ooh, you're giving away too many secrets, TPUs on ClusterMAX. Pratt. Too many secrets.
TPUs, Trainium, some other Trainium.
novel accelerators that are being deployed in datacenters across the country right now and around the world.
Check back in, everybody. I already cut that whole