The encyclopedia of AI infrastructure
Key terms and core concepts
The world sits at the precipice of the Age of Intelligence, a defining and transformative moment for human capability. Just as the Industrial Revolution was powered first by steam and then by electricity, the Age of Intelligence is experiencing a transition from traditional infrastructure to an entirely new breed.
Delivering on that vision requires global cooperation and a rejection of zero-sum thinking. History shows us that proprietary, closed standards rarely win at scale. It took an industry-wide embrace of alternating current for electricity to travel vast distances, and it took an open protocol suite, TCP/IP, to become the foundational architecture of the Internet. The same lesson applies to AI infrastructure today, where deeper collaboration and shared standards, backed by an integrated global supply chain, are foundational to this next era.
Collaboration of this magnitude requires a shared vocabulary. The CFO weighing tokenomics, the CIO architecting for the next decade, the engineer optimizing a single kernel, and the newest hire encountering these concepts for the first time are all, in some sense, speaking different dialects of the same language. For organizations to move with speed and clarity, that gap needs to close.
Here is a starting point: a living encyclopedia, written by Googlers, so that everyone across an organization, regardless of title or tenure, can be conversationally fluent in today’s AI infrastructure jargon.
Want to ask Googlers a technical question without a sales pitch? Join our AMA: Ask Google Cloud: Scaling your infrastructure for the agentic AI era on October 14th, 2026.
10 terms to know today
If you only have a few minutes, these are the concepts dominating boardroom conversations right now.
1. Goodput: The percentage of your system’s power, hardware, and network that does useful work, versus time lost to system resets, hardware stalls, and background maintenance.
2. AI factory: A strategic shift from creating isolated AI experiments to building a fully integrated digital assembly line. By using integrated software platforms and specialized infrastructure, you can create AI systems that act as a single, tightly coupled supercomputing machine, achieving scale and performance impossible with individual parts.
3. Evaluating for co-design: Infrastructure co-design is the practice of designing multiple layers of a computing system—from algorithms and software runtimes down to silicon, physical servers, and data center facilities—simultaneously and collaboratively, rather than in isolated silos. Evaluating for co-design means building an AI stack consisting of multiple co-designed products, assuming it will mean less integration to deploy them.
4. Jevons paradox: Making a technology more efficient and cheaper makes the tech accessible, driving up usage.
5. Amdahl’s law: Adding more processors to a workload will not necessarily mean it runs faster. No matter how many chips you throw at a workload, your speed is hard-capped by the steps of your workflow that must be run sequentially.
6. Fallback lists: An automated backup plan for chip and storage selection. If your primary choice is unavailable, the software instantly provisions pre-approved secondary choices so jobs keep moving without human intervention.
7. Power usage effectiveness: A report card for data center energy efficiency that measures how much power goes directly to computing versus overhead like cooling—where 1.0 is a perfect score and lower is always better.
8. Time-to-first-token (TTFT): Measures AI system responsiveness. The delay between a user hitting ‘enter’ and the model outputting its initial token.
9. Agent sandboxing: A digital containment zone that isolates autonomous AI code—stopping experimental agents from accessing sensitive systems or networks.
10. Sim-to-real: An engineering methodology where AI models and robotic policies are trained inside high-speed virtual simulations before being deployed to physical hardware and environments.
Get everyone on the same page. Download the cheat sheet here.

9 laws of AI infrastructure
You’re building on the shoulders of giants—many well-established concepts from physics, mathematics, and economics can be applied to enterprise technology strategy. Review these foundational principles to inform strategic infrastructure investments and architectural decisions.
Key terms and concepts
Technical term | Definition | What it really means |
Amdahl’s Law | The theoretical speedup of a parallel computing system is strictly constrained by its sequential, non-parallelizable execution fraction, regardless of how many processing units are added. | Imagine 10 people packing shipping boxes at high speed, but only one supervisor is authorized to sign off on them. Hiring 100 more packers won't get shipments out the door any faster—the work will always be limited by how fast that single supervisor can sign. |
Conway's Law | System architectures inherently mirror the communication structures and team boundaries of the organizations that design them. | Your AI systems will only work as well as your teams communicate. If chip designers and software engineers work in silos, your AI infrastructure will be clunky and inefficient. |
Data gravity | As datasets accumulate in volume and mass, they exert an operational pull that attracts compute resources, applications, and analytic pipelines directly to their physical location to minimize transfer latency and bandwidth constraints. | Massive datasets require significant time and bandwidth to transfer. Running your AI models and computing tools in the same environment where your data already resides keeps processing fast and minimizes network costs. |
Gall’s Law | Every functioning complex system is found to have evolved from a simple working system; complex systems designed from scratch inevitably fail and cannot be patched to achieve stability. | Complex AI systems succeed when built step-by-step from simple, working components. Attempting to design and launch an intricate architecture all at once almost always fails. |
Jevons Paradox | Asserts that “lower costs cause new demand.” In economics, Jevons paradox occurs when the price elasticity of demand exceeds unity, causing the efficiency-driven reduction in unit cost to trigger an aggregate surge in consumption that outstrips the efficiency gains (a rebound effect). | Making a technology more efficient and cheaper also makes the tech more accessible, driving up usage. |
Koomey’s Law | The electrical efficiency of computing (computations per joule) doubled roughly every 1.57 years from 1946 to 2000, a rate that has since decelerated to approximately every 2.6–3 years due to the end of Dennard scaling. | Computers become more energy-efficient over time, delivering more calculations per watt of power. However, because our overall demand for AI is growing faster than efficiency gains, electricity supply and heat management remain major bottlenecks. |
Little’s Law | In a stable system, average active requests (𝐿) equals the average request arrival rate (𝜆) multiplied by the average time in system (where 𝑊 includes both queueing and processing time) (𝐿 = 𝜆 𝑊). | Think of a grocery store checkout line: the faster each cashier rings up a customer, the fewer checkout lanes the store needs to keep open to prevent long lines. |
Moore’s Law | The number of transistors on a microchip doubles roughly every two years. | Chipmakers historically managed to pack twice as many microscopic switches onto a silicon chip every two years, making computers progressively smaller, faster, and more capable. |
Spolsky’s Law | The software principle that all non-trivial abstractions will eventually fail to completely hide the underlying complexity they encapsulate, requiring engineers to understand low-level mechanical details when failure occurs. | Any system designed to hide complex technical details will eventually fail to hide them perfectly, forcing the user to understand what is happening under the hood. |

Questions to ask your IT team

Building an enterprise AI strategy: essentials for CIOs
AI transformation succeeds or fails with architectural strategy. Moving from ad hoc experimentation to scalable production applications requires deliberate planning. Use these concepts to align your infrastructure strategy with your business objectives.
Key terms and concepts
Technical term | Definition | What it really means |
Adaptive applications | Software engineered to detect changes in its environment (like load, available hardware, or user behavior) and adjust its behavior or usage accordingly. | Applications that automatically adjust to changing conditions, instead of waiting for a human to step in. |
AI factory | An industrial compute architecture that treats AI infrastructure as a continuous, automated production facility where raw data is ingested, refined, and converted into trained weights and inference tokens through end-to-end hardware, networking, and software pipelines. | A way of setting up your infrastructure that treats AI development like a product line in a factory rather than a series of disconnected products. |
Clean-core architecture | The practice of isolating custom business logic and experimental AI agents from core enterprise databases (like ERP systems) so both layers can evolve independently without introducing operational fragility. | Building a protective wall between experimental AI tools and your company’s core business records, ensuring an AI glitch cannot alter or corrupt essential operational data. |
Dual run architecture | A mission-critical systems migration methodology where legacy infrastructure and a modern replacement platform run concurrently in production, ingesting identical transactional inputs to validate functional equivalence, output parity, and performance stability prior to decommissioning the legacy system. | Running your existing software system and your new AI system side by side on the exact same live tasks until you are confident the new system is reliable enough to take over completely. |
Dynamic infrastructure | Computing infrastructure that automatically allocates or scales physical and virtual hardware resources in real time based on active workload demand. | Your computing power automatically grows or shrinks based on demand, so you only pay for what you’re actually using. |
Evaluating for co-design | The practice of designing multiple layers of a computing system—from algorithms and software runtimes down to silicon, physical servers, and data center facilities—simultaneously and collaboratively, rather than in isolated silos. Evaluating for co-design means building an AI stack consisting of multiple co-designed products, assuming it will mean less integration to deploy them. | Investing in technology built to work together from day one instead of asking your engineers to stitch together disparate parts. |
Option value preservation | A strategic architectural framework that preserves the operational flexibility to migrate AI workloads across heterogeneous hardware and cloud providers by standardizing on open runtimes, container orchestrators, and open compiler abstractions, balancing platform portability against specialized vendor optimizations. | A strategy to prevent vendor lock-in by building on open platforms which allow you to easily switch cloud or hardware vendors when needed. |
Resilience engineering | A distributed systems discipline founded on the certainty of hardware, optical, and network faults at scale, implementing automated fault isolation, proactive node draining, dynamic topology rerouting, and rapid checkpoint restoration to ensure continuous workload execution. | Designing systems under the assumption that computer hardware will frequently break, using automated detours so damaged components do not take down the entire service. |
Responsive systems | Systems engineered to maintain predictable, low-latency response times and high availability, even under heavy load spikes or component failures. | A system that stays fast and stable, even when things get busy or unpredictable. |
Sovereign AI | The strategic doctrine and infrastructure capability of a nation, jurisdiction, or regulated enterprise to independently develop, govern, and deploy artificial intelligence using domestic compute infrastructure, local data, sovereign encryption, and autonomous operational controls. | Having ownership and verifiable control over your AI systems—from the physical servers and data to the models, agents, and applications, so your operations do not depend on external providers or sudden policy changes. |
Unit economics steering (cost per token) | A financial governance discipline that tracks, attributes, and manages AI infrastructure spend down to discrete operational units (such as cost per 1,000 prompt/decode tokens or cost per resolved transaction), directly aligning computational expenditure with revenue generation and gross margins. | A financial approach that puts a price tag on every individual AI task. By tracking costs down to the specific prompt or token, you can easily tell which features are generating real value and which are just driving up expenses. |

Questions to ask your IT team

AI infrastructure cost optimization
Poorly managed compute spend is the fastest route to blow your IT budget. Infrastructure teams can leverage new cost-efficient hardware to bring down costs, but hardware isn’t a complete solution. They also need ways to use it wisely, solving execution inefficiencies to enable more flexibility across the stack. Learn these concepts to spend smarter and deliver a better ROI for your business.
Key terms and concepts
Technical term | Definition | What it really means |
AI FinOps | An operational and cultural framework adapting cloud financial management to AI workloads, providing continuous visibility, granular attribution (per-token/per-model), and optimization of variable accelerator, storage, and API expenses across organizational cost centers. | A financial framework that tracks your AI costs down to the specific team, project, or model so managers can see exactly what they’re spending in real time, rather than dumping everything into a shared IT budget. |
Custom machine types (CMTs) | A cloud virtualization capability that permits independent configuration of virtual CPU (vCPU) counts and memory capacity within supported hypervisor boundaries, preventing the financial waste of overprovisioning rigid, predefined instance shapes. | Cloud servers customized with the exact memory and compute power you need, so you don’t have to pay for a bigger pre-packaged option. |
Dynamic LoRA | An inference serving optimization where a single immutable base foundation model remains resident in accelerator memory while task-specific low-rank adaptation (LoRA) adapter matrices are dynamically loaded and applied to the computation graph per request or batch. | Keeping one large, general-purpose AI brain loaded in computer memory, then snapping on small, interchangeable "skill cards" in milliseconds depending on the specific task requested. |
Fallback lists | Prioritized policy lists configured within cluster workload schedulers that automatically provision secondary hardware choices—such as alternative machine types, CPU families, or accelerator shapes—when the primary requested compute resource is temporarily unavailable. | A backup plan for chip and storage selection. If your primary choice is unavailable, the software automatically switches to pre-approved secondary choices so jobs keep moving without human intervention. |
Instance preemption | The involuntary reclamation and termination of discounted, ephemeral cloud compute instances by the cloud provider with short advance notice (typically 30 to 120 seconds, depending on the provider) when physical capacity is demanded by on-demand workloads. | Discounted cloud capacity with a catch. You get a much cheaper rate, but the provider can reclaim the servers at short notice when a full-paying customer needs them. |
On-demand | A cloud purchasing model that provides immediate access to compute instances with no upfront financial commitment or duration contract, billed at full baseline hourly rates. | The basic pay-as-you-go option. You pay an hourly rate for instant access, making it the default that all discount models are compared against. |
Workload priority preemption | A cluster scheduling policy where an orchestrator automatically evicts or suspends lower-priority batch or fine-tuning jobs to reallocate compute capacity to latency-critical, higher-priority workloads (such as production inference). | A way to use software to automatically pause low-priority background tasks so urgent tasks receive immediate compute capacity. |
Workload schedulers | Control-plane software (such as Slurm or Kubernetes with Kueue) that evaluates resource constraints, manages queues, and dispatches batch training and inference tasks across cluster nodes to optimize utilization and meet service-level objectives. | Traffic control for your computing jobs. It takes everyone’s requests, organizes them by priority, and makes sure each task gets sent to the right hardware at the right time. |

Questions to ask your IT team

AI infrastructure benchmarks and performance metrics
All optimization starts with accurate measurement. This glossary of AI performance metrics and benchmarks gives IT leaders a helpful overview of what they need to know to evaluate system efficiency, optimize token economics, maximize infrastructure ROI, and lead confident conversations with their engineering teams.
Key terms and concepts
Technical term | Definition | What it really means |
Checkpoint overhead | The proportion of total training cluster runtime consumed by pausing active computation to serialize model parameters, gradients, and optimizer states from volatile accelerator memory to persistent storage. | Time wasted from pausing your AI training to save your progress, done so a hardware crash won’t reset your work. |
Cold-start latency | The total elapsed duration required to instantiate an inference service from a zero-instance state. This comprises container provisioning, runtime and CUDA context initialization, model weight streaming into accelerator HBM/VRAM, and execution graph compilation. | The wait time required to wake up an idle server and load an AI model into memory before it can handle its first request. |
Cost per resolved task | An outcome-based economic metric that aggregates the total compute, token, memory, and API invocation costs incurred across an agent’s multi-step execution trajectory to achieve a verified, successful task resolution. | A measurement of the true price tag of getting a problem solved. It adds up all the background steps, tools, and tokens an AI consumed until the task was fully completed. |
Decode latency | The latency incurred per token during the autoregressive phase of language model inference, where each new token is generated sequentially in a step fundamentally constrained by memory bandwidth. | The time it takes for the AI to generate each subsequent word once it starts typing out an answer. |
Egress cost ratio | The financial ratio comparing data transfer fees incurred moving datasets between multi-cloud environments to baseline compute costs. | A comparison of how much you spend moving data across networks versus what you spend on actual processing power. |
Goodput | Good throughput. The actual percentage of compute time spent on productive, error-free machine learning operations versus time lost to checkpoint pauses, communication stalls, hardware faults, and recovery restarts. | If you pay for 100 hours of server time, Goodput measures how many of those hours were spent actively training the model, rather than wasted restarting crashed machines or waiting for data transfers. |
Hardware FLOPs utilization (HFU) vs. Model FLOPs utilization (MFU) | HFU measures the actual floating-point operations executed by the hardware (including activation rematerialization and pipeline padding) divided by theoretical peak FLOPS. MFU measures only the theoretical architectural minimum operations divided by peak FLOPS, quantifying algorithmic efficiency. | HFU tracks total hardware effort (including background overhead and repeated math), while MFU measures how much of that effort actually advances the AI model. |
Inter-token latency (ITL) vs. time per output token (TPOT) | Inter-token latency (ITL) represents the instantaneous delta between consecutive streaming tokens. Time per output token (TPOT) represents the average decode duration per generated token across the entire sequence. | Inter-token latency tracks the moment-to-moment delay between each word as it appears on screen. Time per output token measures the average generation speed across the entire response. |
Memory bandwidth utilization (MBU) | The percentage of an accelerator’s theoretical peak memory transfer speed (HBM/VRAM bandwidth in TB/s) achieved during memory-bound operations, measuring how effectively an algorithm saturates the memory bus. | A measurement of whether data is flowing from memory into the processor at maximum speed, or if an inefficient setup is causing a bottleneck. |
Model FLOPs utilization (MFU) | The ratio of observed computational throughput—calculated strictly using the theoretical minimum number of floating-point operations required by the model architecture per second—to the theoretical peak FLOPS of the accelerator hardware, excluding recomputed operations. | The percentage of a chip’s peak theoretical power that your AI software actually uses in practice. |
Network congestion and packet drops | A degraded network state occurring during synchronized collective communication (incast) where switch buffer exhaustion triggers packet drops or severe Priority Flow Control (PFC) pauses, stalling cluster-wide accelerator computation. | A digital traffic jam. When every chip tries to speak at once, the network gets overwhelmed and drops data, forcing expensive hardware to sit idle waiting for retransmissions. |
Power usage effectiveness (PUE) | The standard industry metric measuring data center energy efficiency, calculated as total facility energy divided by energy delivered directly to IT computing equipment. | A report card for data center energy efficiency that measures how much power goes directly to computing versus overhead like cooling—where 1.0 is a perfect score and lower is always better. |
Prefill latency | The elapsed time required for an inference chip to ingest an entire input prompt, execute a parallel forward pass, and compute initial key-value cache operations across all prompt tokens before generating the first token. | The time it takes the AI to read and process your initial prompt before it writes the first word. |
Tail latency (p95/p99) | Statistical percentile metrics indicating the response time threshold below which 95% (p95) or 99% (p99) of requests fall, measuring worst-case performance and latency variance. | The worst-case wait times experienced by your unluckiest customers—specifically, the slowest 1%–5% of all requests. |
Time-to-first-token (TTFT) | The latency elapsed between a client submitting an inference request and receiving the initial output token, encompassing network transit, gateway queuing, prompt prefill execution, and the first decode iteration. | The length of time a user spends staring at a loading screen before the AI actually begins typing its response. |
Tokens per second (TPS) | A throughput metric measuring token velocity, evaluated either as single-stream generation speed (tokens per second delivered to an individual user) or as aggregate cluster throughput (total prompt and decode tokens processed per second across all concurrent workloads). | The typing speed of the AI. It measures how fast text streams out for a single user, or the total volume of text your hardware processes per second. |

Questions to ask your IT team

AI hardware
Physical constraints dictate digital possibilities. Understanding compute, storage, networking, and data center technologies—such as liquid cooling—can help you understand the components that go into making an efficient system. Familiarize yourself with these fundamentals to make more informed infrastructure decisions and account for the complete systems behind every prompt.
Key terms and concepts
Technical term | Definition | What it really means |
Backend vs. frontend AI networking | The architectural partitioning of cluster networks: The frontend network handles external user queries, host management, and data ingestion. The backend network is a private, ultra-high-bandwidth, low-latency fabric reserved exclusively for inter-accelerator collective synchronization. | Frontend is the standard highway connecting users and storage to the AI cluster. Backend is the private, ultra-high-speed racetrack used exclusively by the AI chips to talk to each other. |
DRANET | An open-source network driver implementing the DRA specification to dynamically discover and allocate dedicated, high-performance network interfaces directly to Kubernetes pods. | An automated system that builds a direct, high-speed on-ramp right next to your AI chips. It pairs each processor with the closest network connection so data doesn't get stuck in internal traffic before hitting the main network. |
Dynamic resource allocation (DRA) | Dynamic resource allocation (DRA) is a Kubernetes API framework that enables fine-grained, stateful claim and scheduling of specialized hardware devices. | A smart dispatcher that assigns specialized AI processors to different workloads on the fly, maximizing how often your expensive hardware is actually doing useful work. |
GPUs (graphics processing units) vs. CPUs (central processing units) | GPUs are built with thousands of smaller cores optimized to perform many calculations simultaneously, making them well-suited to the parallel math behind gaming, high performance computing, and AI workloads. CPUs are general-purpose processors built to handle a wide range of tasks sequentially. | CPUs are generalists that handle step-by-step tasks. GPUs are built to perform thousands of simple math tasks simultaneously. |
High-bandwidth memory | A high-speed memory architecture composed of vertically stacked DRAM dies connected via through-silicon vias (TSVs) and mounted on a silicon interposer adjacent to compute ASICs, delivering terabytes per second of bandwidth for both AI training and inference. | Super-fast memory chips stacked like skyscrapers right next to the processor, feeding it massive streams of data with almost zero delay. |
InfiniBand vs. RoCE | Two high-throughput RDMA networking technologies: InfiniBand uses specialized host channel adapters, dedicated switches, and native credit-based link-level flow control. RoCEv2 encapsulates RDMA within standard UDP/IP ethernet packets, requiring lossless network configurations via priority flow control. | Both are high-speed ways to connect AI chips. InfiniBand relies on custom, purpose-built networking gear, while RoCE delivers similar performance over traditional ethernet infrastructure. |
Liquid cooling | A thermal management methodology that circulates liquid coolant through cold plates mounted directly on high-TDP processor packages (direct-to-chip) or submerges entire server blades in non-conductive dielectric fluid (immersion), dissipating thermal load. | Pumping chilled liquid directly over computer chips because modern AI processors generate so much heat that traditional air fans can no longer prevent them from overheating. |
Memory wall and arithmetic intensity | The memory wall is the physical performance barrier where processor arithmetic throughput outpaces memory transfer bandwidth; arithmetic intensity is the operational ratio of floating-point operations executed per byte of data transferred (FLOPs/byte), which determines whether a workload is memory-bound or compute-bound on the Roofline model. | The memory wall happens when super-fast AI chips sit idle because the memory system can’t feed them data fast enough. Arithmetic intensity measures how much actual calculating the chip squeezes out of each piece of data before needing more power, which tells you whether your AI is limited by raw computing power or slow data delivery. |
Optical circuit switching (OCS) | A reconfigurable networking fabric technology that uses micro-electromechanical systems (MEMS) mirrors to dynamically redirect optical light beams directly between fiber ports, establishing high-bandwidth circuit paths without optical-electrical-optical (O-E-O) conversions. | The use of tiny mirrors to bounce laser beams and instantly reroute connections between servers. This lets you bypass broken chips and reconfigure your network on the fly without ever touching a physical cable. |
Quantum computing | An advanced computing paradigm that uses the principles of quantum mechanics—such as superposition and entanglement—to process information. By leveraging specialized hardware like superconducting qubits alongside integrated software stacks, quantum systems perform complex operations far beyond the reach of classical supercomputers. | A specialized machine using subatomic physics to solve specific, hyper-complex calculations (like molecular chemistry or advanced encryption) that would take traditional supercomputers thousands of years to process. |
Rack power density (kW/rack) | The amount of electrical power consumed (and heat generated) within a single server cabinet, often exceeding 40–100 kW+ for high-density AI clusters. | The amount of electricity a single server cabinet consumes. Modern AI racks draw as much power as an entire neighborhood block, which is why they run so hot and require liquid cooling. |
Remote direct memory access (RDMA) and Falcon protocol | A networking technology that enables direct memory access between accelerators on remote nodes without involving the host operating system kernel or CPU. On Google Cloud, this is implemented via Falcon, a custom hardware-accelerated transport protocol designed for dynamic multipathing and rapid congestion control. | RDMA allows AI chips in different servers to pass data directly to each other’s memory without waiting on the main computer processor. Google Cloud’s custom version of RDMA is Falcon, designed to actively route around network traffic jams. |
Scale-up vs. scale-out networking | Scale-up networking refers to ultra-high-bandwidth, low-latency, memory-coherent interconnects (e.g., NVLink, TPU ICI) that link accelerators within a shared chassis or rack. Scale-out networking refers to high-speed packet-switched fabrics (e.g., RoCEv2, InfiniBand) that connect thousands of discrete nodes across the data center. | Scale-up networking is how chips talk to each other inside the same cabinet, communicating so fast they essentially share a single brain. Scale-out networking connects thousands of servers across an entire data center, coordinating them like a huge digital conference call. |
SRAM vs. DRAM | SRAM (static RAM) is ultra-fast, volatile on-chip memory built directly on the processor die using multi-transistor flip-flops for registers and caches. DRAM (dynamic RAM)—including HBM and DDR—is denser, off-chip or 2.5D-stacked memory storing bits in capacitors that require periodic refreshing, trading latency for massive storage capacity. | SRAM: The microscopic, ultra-fast “scratchpad” built directly inside the chip for instant math. DRAM: The nearby memory “backpacks” (like HBM) used to carry massive amounts of data for the chip to pull from. |
Thermal design power (TDP) | The maximum theoretical heat generated by a single processor or accelerator (CPU, GPU, TPU) under maximum real-world workload, which the component’s cooling subsystem is engineered to dissipate to avoid thermal throttling. | The power and heat threshold of an individual AI chip. Packing enough of these high-heat chips into a single server cabinet is what dictates the switch from traditional air cooling to advanced liquid cooling. |
TPUs (tensor processing units) | Custom application-specific integrated circuits (ASICs) developed by Google featuring 2D systolic array matrix multiply units (MXUs) and dedicated inter-chip interconnects (ICI) engineered specifically for tensor mathematics. | Google’s custom processors, purpose-built from the ground up for AI. |

Questions to ask your IT team

Securing AI infrastructure
AI agents require a new kind of security perimeter. When software agents can write code, execute tools, and access enterprise data, your security strategy needs to adapt. Apply these security ideas to lock down untrusted agent activity and keep your models and data safe.
Key terms and concepts
Technical term | Definition | What it really means |
Agent sandboxing (kernel-level isolation) | A security isolation mechanism (e.g., using user-space kernels like gVisor or microVMs like Firecracker) that intercepts untrusted, model-generated code execution at the system call boundary, preventing direct interaction with the host operating system kernel or enterprise network. | Isolating autonomous AI code inside a secure digital vault—stopping experimental agents from accessing sensitive systems or networks. |
Agent-to-agent (A2A) protocols | Standardized communication frameworks that enable autonomous software agents to cryptographically authenticate, discover capabilities, exchange conversational state, and safely delegate tasks across distributed environments. | The standard rules that allow different AI agents to safely talk, share information, and hand off tasks to one another. |
Confidential computing enclaves | Hardware-based trusted execution environments (TEEs) that secure sensitive model weights and enterprise data during active execution (“data in-use”) by encrypting memory at the silicon level and cryptographically isolating the workload from hypervisors, cloud operators, and root users. | A hardware-locked digital safe inside the processor that scrambles data while the chip works on it, preventing unauthorized users from viewing it. |
Cryptographic erasure | A data sanitization methodology (also known as crypto-shredding, per NIST SP 800–88) that renders encrypted model weights or datasets permanently irrecoverable by securely destroying the corresponding decryption keys, eliminating the need to overwrite physical storage blocks. | The split-second destruction of sensitive data by deleting its encryption key, rather than spending hours overwriting physical hard drives. |
Differential privacy in training | A mathematical framework applied during model optimization (commonly via differentially private SGD, or DP-SGD) that bounds per-sample gradients and injects calibrated noise, providing provable mathematical privacy guarantees that prevent models from memorizing or leaking individual training records. | Mathematical noise injected during training so the AI learns trends without memorizing individual secrets. |
Digital sovereignty and data boundaries | Cryptographic, network, and operational policies that legally and physically guarantee AI training datasets, model weights, prompts, and output telemetry remain exclusively confined within defined geopolitical boundaries and jurisdictions across all lifecycle states. | A strict digital border around your AI model and data that uses technical and legal locks to restrict data residency to your specified geopolitical boundaries. |
External key management (EKM) | A cryptographic architecture that enables enterprise organizations to store and manage their master encryption keys in independent, customer-controlled hardware security modules (HSMs) situated outside the cloud service provider's physical and logical boundaries. | A security setup that keeps your encryption keys in your own digital vault outside the cloud provider’s network. You hold the master key, meaning the cloud provider can never access or decrypt your data without your explicit permission. |
Hardware root of trust | Security microcontrollers embedded directly in physical silicon (e.g., Google’s Titan chip) that cryptographically verify system firmware integrity from boot to application layer. | A tamper-proof chip built directly into the server hardware. It checks your system software for tampering before the machine is ever allowed to turn on. |
Model context protocol (MCP) | An open-standard, JSON-RPC-based client-server protocol that standardizes how AI applications and agents expose, discover, and securely access external tools, document resources, and enterprise APIs. | A universal plug-and-socket standard that lets AI agents securely connect to your company’s databases, tools, and files without needing custom engineering for each one. |
Model weight watermarking and exfiltration protection | A defense mechanism that embeds imperceptible cryptographic markers or parameter perturbations directly into neural network weight tensors, combined with egress network monitoring, to track provenance and detect the unauthorized copying or theft of proprietary foundation models. | A digital fingerprint stamped onto your AI model to detect unauthorized copies and prove ownership. |
Prompt injection defense layer | A multi-tiered security layer that inspects and sanitizes text inputs and outputs to detect and neutralize both direct user jailbreaks and indirect prompt injections concealed within retrieved external documents, web pages, or database records. | A digital security filter that catches trick commands and hidden instructions designed to hijack an AI model. |
Safety and guardrail gateway (inference firewall) | An inline bidirectional proxy that intercepts incoming user prompts and outgoing model completions in real time to redact personally identifiable information (PII), filter toxic content, block prompt injection exploits, and enforce corporate compliance policies. | A digital security checkpoint that inspects all incoming prompts and outgoing AI answers to strip out sensitive data, toxic content, and policy violations before they cross your network. |
Zero-trust silicon attestation | A security protocol that leverages hardware-embedded cryptographic keys and measured boot signatures (e.g., SPDM, DICE) to independently authenticate the identity, microcode state, and physical integrity of every accelerator and server blade before sensitive AI workloads are scheduled. | An inspection of a chip’s unique digital ID to prove its security state and physical integrity before allowing sensitive AI workloads to run. |

Questions to ask your IT team

AI training
Training foundation models is an exercise in extreme coordination. Read these training concepts to understand how training runs work and how IT teams maximize their performance and efficiency.
Key terms and concepts
Technical term | Definition | What it really means |
Accelerators | The umbrella term for specialized hardware, like GPUs and TPUs, designed to speed up machine learning and high-performance computing workloads beyond what general-purpose processors can achieve on their own. | Specialized chips—like GPUs and TPUs—built from the ground up to execute complex calculations at high speed. |
Checkpointing | The automated serialization of model weights, optimizer states, and training progress from volatile accelerator memory to persistent storage, allowing training runs to resume after hardware or network interruptions. | Saving a snapshot of an AI's progress at regular intervals, like hitting "save game" while playing a long video game. |
Cluster orchestration (Kubernetes vs. Slurm) | Platforms that allocate and coordinate cluster compute: Kubernetes is an extensible cloud-native platform using declarative APIs to manage containerized applications and dynamic AI workloads. Slurm is an HPC workload manager optimized for large-scale, static batch jobs executing tightly synchronized parallel tasks. | Cluster orchestration is the automated management of a large network of interconnected computers (called a cluster) to run software applications efficiently and without interruption. Kubernetes is common for dynamic cloud apps like websites or streaming services, while Slurm runs heavy, supercomputer-scale batch workloads. |
Collective communication primitives (all-reduce/reduce-scatter) | Standardized distributed communication algorithms (e.g., all-reduce, reduce-scatter, all-gather, all-to-all) implemented in collective libraries (NCCL, RCCL, TPU collectives) that allow clusters of accelerators to synchronize gradients, tensor shards, and weights across high-speed fabrics. | The network rules chips use to constantly trade and merge their training results. |
I/O bottlenecks | A failure state where data loaders and network drives cannot stream data to accelerator chips fast enough, forcing expensive processors to sit idle. | When fast AI chips sit idle because storage can’t feed them data fast enough. |
Data pipelines | The automated, distributed infrastructure pipeline responsible for ingesting petabytes of raw multimodal data, performing quality filtering, deduplication, and PII masking, tokenizing text sequences, and sharding outputs into binary storage formats for accelerator ingestion. | The automated assembly line that cleans, formats, and feeds raw data to an AI model. |
Frameworks | Software libraries and toolkits, such as PyTorch or JAX, that provide the building blocks developers use to design, train, and run machine learning models without writing underlying mathematical operations manually. | Pre-built software toolkits that let developers build AI models without coding complex math from scratch. |
Fully sharded data parallel (FSDP) | A memory-efficient distributed data-parallel training technique (implementing the ZeRO-3 paradigm) that shards model parameters, gradients, and optimizer states across all data-parallel workers, dynamically reconstructing layer parameters via all-gather collective operations immediately before execution. | A training technique that slices an AI model and its memory across hundreds of chips so giant models fit. |
Gradient accumulation | Calculating gradients over multiple micro-batches before updating weights, enabling large effective batch sizes on limited memory. | The process of running multiple small batches and adding up results before making a single model update. |
Hybrid parallelism / 3D parallelism | A distributed training strategy that combines three orthogonal partitioning dimensions: tensor parallelism (splitting individual matrix multiplications across chips within a layer), pipeline parallelism (partitioning sequential layers across stages of nodes), and data parallelism (replicating the model across micro-batches). | A combination of three distinct techniques—slicing data, model layers, and math—to run massive AI workloads across thousands of chips at once. |
Mixed-precision training (FP8/FP4/bfloat16) | A training technique that accelerates throughput and conserves memory by executing matrix multiplications and activations in lower-precision formats (bfloat16, FP8) while maintaining primary model weights and optimizer state accumulations in 32-bit precision (FP32) to prevent numerical underflow and instability. | A training technique that uses shorter numbers for calculations to speed up training while preserving model quality. |
Parallel file systems | High-performance distributed file storage systems capable of delivering multiple terabytes per second of read/write throughput across thousands of training compute nodes simultaneously. | Advanced storage networks that blast massive datasets to thousands of chips simultaneously without creating data bottlenecks. |
Pods and clusters | In AI hardware topology, a pod is a tightly coupled physical group of accelerators interconnected via dedicated high-speed inter-chip links (such as TPU ICI) that acts as a single logical supercomputer. A cluster is the larger data center network aggregating multiple pods, host nodes, storage, and spine-leaf networking. | A pod is a tightly wired group of AI chips acting as a single giant supercomputer. A cluster is the broader network linking multiple pods, servers, and storage together. |
Pre-training vs. post-training | The two main model development phases: pre-training on petabytes of raw data to build base knowledge, and post-training to refine instruction following and safety. | Pre-training is sending the AI to school to read the internet; post-training is giving it job training to follow instructions safely. |
Silent data corruption | Undetected hardware or interconnect execution errors (e.g., transient bit flips or marginal silicon arithmetic faults) that produce mathematically incorrect results without triggering hardware exceptions, leading to corrupted weight updates or loss divergence during training. | Hardware glitches that silently alter calculations without triggering a system error. |
Transformer architecture | A foundational neural network architecture that eliminates recurrence and convolutions, relying entirely on stacked multi-head self-attention mechanisms and feed-forward layers to model relationships across sequential tokens in parallel. | The design behind modern AI that reads complete blocks of data simultaneously, allowing the model to grasp full context rather than word-by-word. |

Questions to ask your IT team

AI reinforcement learning
Model intelligence is made during post-training. Modern reinforcement learning—or fine-tuning—systems turn raw foundation models into safe and capable reasoning engines. These methods show you how to do it efficiently, so your model is smarter and cheaper to serve.
Key terms and concepts
Technical term | Definition | What it really means |
Asynchronous training | A distributed training architecture where workers compute gradients independently and update global parameters without synchronizing, maximizing hardware utilization at the cost of potential optimization instability from stale gradients. | Letting servers update the model at their own pace without waiting for other servers to finish their tasks—maximizing speed, but risking outdated data. |
Group relative policy optimization (GRPO) | An efficient reinforcement learning algorithm that samples a group of candidate outputs per prompt and calculates relative advantages by normalizing rewards against the group’s mean and standard deviation, completely eliminating the need for a separate critic (value function) model. | Instead of hiring a separate, expensive AI "tutor" to grade every answer, the computer generates a small group of answers to the same question, compares them against each other, and rewards whichever one performed best. |
Inter-node latency | The delay in transmitting data between separate physical nodes in a cluster, rather than delay experienced by an end user. This is a key factor limiting the speed of distributed training and inference. | A server-to-server network delay—the hidden speed bump that slows down an entire cluster. |
Learner nodes | High-performance compute nodes in distributed reinforcement learning that ingest evaluated rollout trajectories, execute forward and backward passes, compute policy and value gradients, and update model parameters. | The heavy-duty servers that process field performance data to calculate and apply the model’s updates. |
Outcome-supervised reward models | Evaluator models or automated verifiers that score a model's generated output based solely on the final answer or terminal result, assigning a single scalar reward without evaluating intermediate reasoning steps. | AI judges that score the model based purely on whether the final answer is right or wrong—zero partial credit for the steps along the way. |
Process-supervised reward models (PRMs) | Evaluator models trained to assess and score each step in chain-of-thought reasoning, catching errors at the step level rather than relying on evaluating only the final answer. | Automated graders that force the AI to “show its work” and score each step so it can’t get lucky with flawed reasoning. |
Proximal policy optimization (PPO) vs. direct preference optimization (DPO) | PPO is an online reinforcement learning algorithm that stabilizes policy updates via clipped surrogate objectives using separate actor, critic, and reward models. DPO is an offline preference optimization algorithm that mathematically bypasses reinforcement learning and reward models entirely, optimizing model weights directly on paired preference data via binary cross-entropy. | Two ways to teach AI good behavior: PPO builds an active coaching system to score outputs on the fly; DPO hands the AI a simple study guide comparing right answers against wrong ones. |
Reinforcement learning from AI feedback (RLAIF) | An alignment methodology (pioneered in constitutional AI) that uses advanced foundation models guided by explicit principles or rubrics to generate automated preference comparisons and reward signals, replacing human annotators. | A way of giving an AI referee a strict set of rules to grade other models automatically, replacing armies of human reviewers. |
Reinforcement learning from human feedback (RLHF) | The alignment methodology of using reward models trained on human preferences to fine-tune foundation model behavior. | A fine-tuning process using human feedback so the AI learns real-world taste, nuance, and safety. |
Reinforcement learning vs. supervised learning | Two core post-training methodologies: Supervised learning trains a model on curated prompt-completion demonstrations via cross-entropy loss. Reinforcement learning trains a policy model to explore actions and optimize behaviors based on scalar rewards or verifier feedback. | Supervised learning trains the model to imitate high-quality examples, while reinforcement learning pushes it to discover superior logic through trial and reward. |
Replay buffer | A memory storage mechanism used in off-policy reinforcement learning that stores past experience tuples (state, action, reward, next state), allowing training algorithms to sample random batches repeatedly to break temporal correlation in data. | An instant-replay archive that the model can re-examine and learn from repeatedly. |
Reward hacking and policy drift | Reward hacking occurs when a policy learns unintended shortcuts that maximize the reward function’s scalar score without achieving the true objective. Policy drift is the degradation or collapse of a model’s foundational capabilities as parameter updates pull it too far from its original reference pre-trained distribution. | Reward hacking: The AI finds an unintended loophole to get a top score without actually solving the problem. Policy drift: Specialized coaching causes the AI to wander so far from its base training that it loses its general capabilities. |
Rollout workers | Distributed compute workers that execute batched inference using the active policy model to sample responses, query environments or tools, and collect rollout trajectories for reward evaluation. | Background workers that run trial scenarios with the AI, collecting real-time performance data to guide model improvements. |
Sim-to-real (Sim2Real) and real-to-sim | Sim-to-real is the methodology of training models or policies in synthetic simulation and transferring them to physical environments while overcoming the “reality gap.” Real-to-sim uses real-world physical telemetry to calibrate simulation physics and visual fidelity. | Sim-to-real: Training models in virtual worlds before deploying them onto physical hardware. Real-to-sim: Using real-world data to calibrate and upgrade virtual simulations. |
Simulation vs. optimization | Simulation models how a system behaves under given conditions, to understand or predict outcomes. Optimization searches for the best possible configuration or decision within a system, often using simulation as one of its tools. | Simulation shows you what could happen. Optimization finds the best possible way to make it happen. |
Test-time compute | An inference approach that dynamically scales compute resources while processing a query—allocating extra FLOPs to generate internal chain-of-thought reasoning tokens, evaluate parallel candidate paths, or execute self-verification before returning a final response. | A technique where an AI model is given extra computing power and time to think before it answers a question. |
Vectorized environments | A software architecture that runs multiple independent simulation or environment instances concurrently across parallel CPU threads or GPU kernels, enabling high-throughput batched state transitions for RL agents. | An architecture that runs hundreds of virtual scenarios at once so the model gains months of experience in minutes. |

Questions to ask your IT team

AI inference
Inference is where AI models meet your customers and where the vast majority of ongoing spend occurs. Serving models at enterprise scale requires decoupling prompt processing from token generation to maintain low latency under peak concurrent demand. Review these concepts to make your models faster to respond to and cheaper to run at scale.
Key terms and concepts
Technical term | Definition | What it really means |
Accuracy and drift | Accuracy measures the statistical rate of correct predictions relative to ground truth. Drift is the degradation of model performance over time, categorized as covariate drift (shifts in the input data distribution) or concept drift (shifts in the underlying real-world relationships being modeled). | Accuracy is how good the model is right now. Drift is the model losing accuracy as the world around it changes. |
Chunked prefill | An inference scheduling technique that breaks long input prompts into fixed-size token chunks and processes them alongside active decoding steps within shared forward passes, preventing large prompt arrivals from stalling active streaming sessions. | A scheduling technique which breaks up large documents into smaller pieces, preventing users who paste 50-page documents from freezing the server for everyone else waiting on quick chat responses. |
Compute-bound vs. memory-bound | Hardware execution limits defined by the Roofline model. A process is compute-bound when its throughput is limited by the raw arithmetic capability (FLOPS) of processing cores (e.g., parallel prefill). It is memory-bound when speed is limited by data transfer bandwidth across memory (e.g., sequential autoregressive decoding). | Sometimes raw chip speed is the bottleneck (compute-bound); sometimes it’s how fast data can move (memory-bound). Prompt-reading is limited by chip speed, while word-by-word typing is limited by data movement. |
Distillation | A model compression technique where a compact “student” model is trained to replicate the output probability distribution (soft logits) or synthetic reasoning outputs of a larger “teacher” model, retaining the teacher’s capabilities at reduced latency and memory footprint. | A model compression technique where a small, fast AI model is trained to mimic a massive, highly intelligent AI model. The goal is to copy the smarts of the giant model—the "Teacher"—and squeeze it into a compact, lightweight model—the "Student"—so it can run faster, use less energy, and fit onto smaller hardware like smartphones or laptops. |
Distributed / disaggregated serving | An inference setup that separates prompt processing from token generation onto specialized hardware clusters. Because processing prompts requires heavy computing while generating tokens demands high memory bandwidth, isolating them and streaming the key-value cache state across high-speed connections keeps the two phases from competing for resources. | Splitting jobs so one group of chips specializes in reading the prompt and another specializes in typing out the answer. |
FlashAttention | An exact attention algorithm that optimizes memory access by breaking input sequences into tiles and computing softmax incrementally in on-chip SRAM, reducing round-trip reads and writes to high-bandwidth memory (HBM). | A faster way to run complex AI math by being smarter about how data moves between a chip's fast temporary memory and main storage. |
Inference vs. serving | Inference is the computational process of a trained model generating a prediction or output. Serving is the broader infrastructure that delivers that output to users reliably and at low latency, often across large volumes of concurrent requests. | Inference is the AI calculating an answer. Serving is the cloud network getting that answer to thousands of users simultaneously. |
Key-value cache memory wall | The physical hardware bottleneck where the storing key and value activation tensors for long-context requests exhausts available accelerator HBM or VRAM, severely limiting the number of concurrent streaming sessions. | A hardware bottleneck that causes the system to run out of chip memory because a conversation or document gets too long to fit all at once. |
Latency | The general term for the time delay between a request being made and a response being returned. | The lag between asking an AI to do something and getting the response back. |
LLM-aware routing (predictive latency boost) | An intelligent load-balancing mechanism within inference gateways that inspects prompt prefixes and routes incoming queries to specific backend worker replicas that already hold matching key-value cache blocks in memory, maximizing prefix cache hits and minimizing TTFT. | Smart traffic routing that sends your follow-up to the exact chip that already remembers your chat, significantly reducing TTFT and prefill latency. |
PagedAttention | An attention memory management algorithm (introduced in vLLM) that partitions the key-value cache into non-contiguous, fixed-size physical memory blocks managed via virtual page tables, reducing memory fragmentation from up to 80% to near zero. | A smarter way to organize an AI’s short-term memory so less space goes to waste and servers handle more requests at once. |
Prefix caching | An inference optimization that stores and reuses pre-computed key-value cache states for shared prompt prefixes (system instructions, few-shot examples, multi-turn conversation history, or documents) across requests, eliminating redundant prefill computation. | Saving pre-read copies of common templates, rules, or documents kept in memory so the AI doesn’t waste time re-reading them on every request. |
Prompt caching / hierarchical KV caching | A multi-tiered caching architecture that stores pre-computed key-value cache tensors across memory tiers (accelerator HBM, host CPU DRAM, and local NVMe storage), allowing multi-turn dialogues and repeated prompts to be restored across tiers without prefill recomputation. | Remembering earlier parts of a conversation so the AI doesn’t waste time and money re-reading the whole chat on every prompt. |
Pruning | A model compression technique that eliminates redundant parameters from a neural network, either by zeroing out individual weights (unstructured pruning) or by removing entire channels, attention heads, or layers (structured pruning) to speed up execution on standard hardware. | Trimming the parts of a model that rarely get used, making it smaller, faster, and cheaper to run. |
Quantization | The execution of inference forward passes using low-bit numerical representations (e.g., FP4, INT8, INT4) for model weights and/or activations, dramatically reducing memory bandwidth pressure and accelerating autoregressive decoding throughput. | A compression method that simplifies an AI model’s math so it runs on fewer chips and answers faster without a noticeable drop in quality. |
Retrieval-augmented generation (RAG) architecture | An architectural pattern that enriches user prompts by querying external structured or unstructured data sources, retrieving semantically relevant text chunks via dense vector or hybrid search, and injecting that context into the model’s prompt prior to generation. | An architecture that gives the AI an “open-book test”—fetching up-to-date company data and placing it in front of the model right before it generates an answer. |
Speculative decoding | An inference acceleration algorithm where a smaller, fast draft model generates candidate tokens, and a larger target model verifies the sequence in a single parallel forward pass. Using modified rejection sampling, it speeds up generation while mathematically preserving the target model’s original output distribution. | Having a small, fast AI write a rough draft, then letting a larger model double-check its work all at once. |
Throughput | The volume of work, such as requests or tokens, a system can process within a given period of time. | The total volume an AI handles per second—measuring overall output rather than how fast it finishes one response. |
Vector database / embedding search | Specialized database systems engineered to store, index, and query high-dimensional vector embeddings using approximate nearest neighbor (ANN) algorithms (e.g., HNSW, ScaNN), enabling low-latency semantic similarity search across millions of unstructured records. | A specialized filing cabinet that finds information based on concepts and meaning, rather than exact keyword matches. |

Questions to ask your IT team

Put these concepts into action
Power your most demanding AI applications
Speed up development and boost responsiveness without sacrificing reliability. Discover how to run your models safely and cost effectively on the AI Hypercomputer.
See why Google was named Leader in Gartner® Magic Quadrant™ for AI Infrastructure
Discover why Gartner recognized Google as a Leader, and learn how a co-designed stack provides the foundation for agentic success.