Training Course Professional

Quantum Security for Hyperscale Data Centre Network Infrastructure

Securing hyperscale network fabrics, inter-DC links, and peering infrastructure against quantum threats.

Full day (6 hours)
Certificate on completion

Proud to recommend our expert members

Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence
Qrypto Cyber
Eclypses
Arqit
QuantBond
Krown
Applied Quantum
Quantum Bitcoin
Venari Security
QuStream
BHO Legal
Census
QSP
IONQ - ID Quantique
Patero
Entopya
Belden
Atlant3D
Zenith Studio
Qudef
Aries Partners
GQI
Upperside Conferences
Austrade
Arrise Innovations
CyberRST
Triarii Research
QSysteme
WizzWang
DeepTech DAO
Xyberteq
Viavi
Entrust
Qsentinel
Nokia
Gopher Security
Quside
QIZ
Global Quantum Intelligence

Course Overview

For data centre network engineers and architects. Covers PQC migration for TLS termination at load balancers, inter-data-centre WAN encryption (MACsec, IPsec), BGP session authentication with RPKI PQC, and DPDK-accelerated PQC on SmartNIC and DPU hardware. Includes performance benchmarks for ML-KEM and ML-DSA on high-throughput switching infrastructure.

Curriculum

Course content is structured into sessions below. Each session is configurable to your organisation's environment, threat model, and objectives.

# Session Topics
1 The Quantum Threat to Data Centre Network Infrastructure Why hyperscale networks face unique PQC migration challenges
2 TLS Termination and Load Balancer Migration PQC at the internet-facing edge
  • TLS 1.3 hybrid key exchange (ML-KEM + X25519): handshake overhead at 100,000+ connections per second on F5, NGINX, and HAProxy load balancers
  • Certificate chain size impact: ML-DSA-65 leaf + intermediate + root certificates increase TLS ServerHello by approximately 8 KB versus ECDSA chains
  • Phased deployment: enabling hybrid TLS on ingress first, monitoring connection success rates, and handling client compatibility during transition
Break
3 Inter-Data-Centre WAN Encryption MACsec and IPsec migration for backbone traffic
  • MACsec (IEEE 802.1AE): PQC key agreement for point-to-point data centre interconnects, switch ASIC support timelines, and line-rate performance requirements
  • IPsec IKEv2 PQC: ML-KEM integration for SA establishment, hybrid mode configuration, and throughput benchmarks on existing VPN concentrators
  • Dark fibre and DWDM encryption: layer 1 encryption appliance PQC readiness and migration sequencing for optical transport networks
4 BGP Session Authentication and Routing Security Securing the control plane with post-quantum algorithms
  • BGP TCP-AO with PQC: replacing MD5-authenticated BGP sessions with ML-DSA-signed route announcements
  • RPKI PQC: post-quantum signatures on Route Origin Authorisations (ROAs) and router certificate validation
  • DNSSEC PQC: ML-DSA zone signing for authoritative DNS within data centre networks and response size implications
Break
5 SmartNIC, DPU, and Hardware Acceleration PQC performance on network offload hardware
  • DPDK-accelerated PQC: ML-KEM and ML-DSA performance on NVIDIA BlueField DPUs, Intel IPU, and AMD Pensando
  • Hardware cryptographic acceleration: FPGA-based PQC offload for line-rate encryption on 100/400 GbE interfaces
  • Performance budgets: CPU cycles per PQC handshake versus ECDH/ECDSA on commodity server NICs without offload
6 Migration Sequencing and Compliance Ordering the transition for internet-facing versus internal segments
  • Migration priority: internet-facing TLS termination, then inter-DC WAN, then BGP/control plane, then internal east-west traffic
  • NIST FIPS 203/204/205 compliance timelines, CNSA 2.0 deadlines, and CSA CCM v4 cloud security requirements
  • Rollback planning: maintaining classical fallback for each network segment during the transition period
7 Q&A and Migration Planning

Designed and Delivered By

Training courses are designed and delivered by QSECDEF in collaboration with subject specialists. All instructors have direct experience in quantum technologies and security.

QD

Quantum Security Defence

Course design and delivery

QSECDEF brings expertise in post-quantum cryptography, quantum computing strategy, and defence-grade security assessment. Our membership spans 900+ organisations and 1,500+ professionals working at the intersection of quantum technologies and critical infrastructure security.

Enquire About This Course

Get in touch to discuss scheduling, group pricing, and how this course can be configured to your organisation's needs.

Contact Us