Abstract

Broadcom’s Emulex LPe38102 64G SecureHBA is positioned as a Fibre Channel host bus adapter built to address both modern security requirements and high-performance storage workloads. In Tolly’s evaluation, the adapter was compared with the Marvell QLogic QLE2872, with emphasis on zero-trust security, in-flight encryption, and 64G FC performance. The report concludes that the Emulex adapter combines a broader security feature set with stronger database and microbenchmark results, even when encryption is enabled. 

On the security side, the Emulex SecureHBA supports SPDM device attestation, Silicon Root of Trust, secure boot, digitally signed drivers, and autonomous in-flight encryption using session-based keys. It also supports both CNSA 1.0 and CNSA 2.0 requirements, including post-quantum cryptography under CNSA 2.0. By contrast, the QLogic QLE2872 lacks SPDM support and does not provide the same autonomous in-flight encryption model, instead requiring key-management software for encryption-related workflows. Tolly frames these capabilities as especially relevant in light of 2025 regulatory and best-practice shifts around zero trust, encryption, and stronger device validation.   

Performance testing used both low-level FIO microbenchmarks and HammerDB with Oracle Database 19c. In FIO testing, the Emulex adapter, with encryption enabled, was able to drive over 92.4% of 64G FC link maximum at 4K and 8K block sizes, which are especially relevant for transaction-heavy database workloads. The report notes that the competing QLogic adapter reached only 32% of theoretical maximum at 4K and 58% at 8K, indicating a processing ceiling that limits effective use of 64G Fibre Channel for smaller block sizes. 

In HammerDB Oracle testing, the Emulex SecureHBA delivered 51% greater transactions per minute, 67% better CPU efficiency, and 46% lower 95th percentile stored procedure latency than QLogic. Tolly also found negligible performance impact from enabling Emulex EDIF encryption, reinforcing the product’s core message: stronger security without sacrificing storage performance. The test environment included an Intel Granite Rapids server, Oracle 19c, a Brocade G720 64GFC switch, and a 64G all-flash FC target configuration.