RTX PRO 6000 Blackwell 96GB: The Local LLM Workstation Buyer's Guide
A workload-first reasoning guide to the 96 GB single-address-space card: what genuinely fits, where MoE models break it, and when a cluster or rental wins.
Author
AI security researcher
Covers AI application security, model risk, and agentic system abuse.
A workload-first reasoning guide to the 96 GB single-address-space card: what genuinely fits, where MoE models break it, and when a cluster or rental wins.
A 135 GB model against a 128 GB box forces a cluster. Here is the decision order, the parallelism maths, and what the interconnect really costs per token.
A mechanism-first breakdown of the runtime that wraps a model: the loop, tool schemas, sandboxing, context strategy, permissions, and injection defence.
Paged KV, radix-tree prefix sharing and ahead-of-time compilation all pull in different directions. Work out which one your own workload should pay for.
A model that fits can still die on one long prompt. Here is the arithmetic behind the second allocation that grows with context, and how to shrink it.
Weights are only one of four memory buckets, and past roughly 115k tokens the KV cache costs more than the model does. Here is the arithmetic in full.
Prefill is compute-bound, decode is bandwidth-bound, and KV cache is what really caps concurrency. The metrics, memory maths and tradeoffs behind serving.
The same 320B model is 328 GB in FP8 and near 135 GB at 4 bits. Bytes-per-parameter math, per-format tradeoffs, and how to size a box that actually fits.