DCesv5 and DCedsv5-series confidential VMs

Applies to: ✔️ Linux VMs ✔️ Windows VMs

Important

These virtual machines are in public preview and not recommended for production usage. These VMs are available in West Europe, Central US, East US 2 and North Europe.

The DCesv5-series and DCedsv5-series are Azure confidential VMs that can be used to protect the confidentiality and integrity of your code and data while it's being processed in the public cloud. Organizations can use these VMs to seamlessly bring confidential workloads to the cloud without any code changes to the application.

These machines are powered by Intel® 4th Generation Xeon® Scalable processors with Base Frequency of 2.1 GHz, All Core Turbo Frequency of reach 2.9 GHz and Intel® Advanced Matrix Extensions (AMX) for AI acceleration.

Featuring Intel® Trust Domain Extensions (TDX), these VMs are hardened from the cloud virtualized environment by denying the hypervisor, other host management code and administrators access to the VM memory and state. It helps to protect VMs against a broad range of sophisticated hardware and software attacks.

These VMs have native support for confidential disk encryption meaning organizations can encrypt their VM disks at boot with either a customer-managed key (CMK), or platform-managed key (PMK). This feature is fully integrated with Azure KeyVault or Azure Managed HSM with validation for FIPS 140-2 Level 3.

Note

There are some pricing differences based on your encryption settings for confidential VMs.

Note

Certain applications which are time sensitive may experience asynchronous time at VM boot. Whilst a long-term fix is in development, a workaround is available for Linux and Windows customers today. If you need additional support, please create a support request.

DCesv5 and DCedsv5-series feature support

Supported features include:

Unsupported features include:

DCesv5-series

The DCesv5 offer a balance of memory to vCPU performance that is suitable most production workloads. With up to 96 vCPUs, 384 GiB of RAM, and support for remote disk storage. If you require a local disk, please consider DCedsv5-series. These VMs work well for many general computing workloads, e-commerce systems, web front ends, desktop virtualization solutions, sensitive databases, other enterprise applications and more.

This series supports Standard SSD, Standard HDD, and Premium SSD disk types. Billing for disk storage and VMs is separate. To estimate your costs, use the Pricing Calculator.

DCesv5-series specifications

Size vCPU RAM (GiB) Temp storage (SSD) GiB Max data disks Max temp disk throughput IOPS/MBps Max uncached disk throughput IOPS/MBps Max burst uncached disk throughput: IOPS/MBps Max NICs Max Network Bandwidth (Mbps)
Standard_DC2es_v5 2 8 RS* 4 N/A 3750/80 10000/1200 2 3000
Standard_DC4es_v5 4 16 RS* 8 N/A 6400/140 20000/1200 2 5000
Standard_DC8es_v5 8 32 RS* 16 N/A 12800/300 20000/1200 4 5000
Standard_DC16es_v5 16 64 RS* 32 N/A 25600/600 40000/1200 8 10000
Standard_DC32es_v5 32 128 RS* 32 N/A 51200/860 80000/2000 8 12500
Standard_DC48es_v5 48 192 RS* 32 N/A 76800/1320 80000/3000 8 15000
Standard_DC64es_v5 64 256 RS* 32 N/A 80000/1740 80000/3000 8 20000
Standard_DC96es_v5 96 384 RS* 32 N/A 80000/2600 120000/4000 8 30000

*RS: These VMs have support for remote storage only

DCedsv5-series

The DCedsv5 offer a balance of memory to vCPU performance that is suitable most production workloads. With up to 96 vCPUs, 384 GiB of RAM, and support for up to 2.8 TB of local disk storage. These VMs work well for many general computing workloads, e-commerce systems, web front ends, desktop virtualization solutions, sensitive databases, other enterprise applications and more.

This series supports Standard SSD, Standard HDD, and Premium SSD disk types. Billing for disk storage and VMs is separate. To estimate your costs, use the Pricing Calculator.

DCedsv5-series specifications

Size vCPU RAM (GiB) Temp storage (SSD) GiB Max data disks Max temp disk throughput IOPS/MBps Max uncached disk throughput IOPS/MBps Max burst uncached disk throughput: IOPS/MBps Max NICs Max Network Bandwidth (Mbps)
Standard_DC2eds_v5 2 8 47 4 9300/100 3750/80 10000/1200 2 3000
Standard_DC4eds_v5 4 16 105 8 19500/200 6400/140 20000/1200 2 5000
Standard_DC8eds_v5 8 32 227 16 38900/500 12800/300 20000/1200 4 5000
Standard_DC16eds_v5 16 64 463 32 76700/1000 25600/600 40000/1200 8 10000
Standard_DC32eds_v5 32 128 935 32 153200/2000 51200/860 80000/2000 8 12500
Standard_DC48eds_v5 48 192 1407 32 229700/3000 76800/1320 80000/3000 8 15000
Standard_DC64eds_v5 64 256 2823 32 306200/4000 80000/1740 80000/3000 8 20000
Standard_DC96eds_v5 96 384 2823 32 459200/4000 80000/2600 120000/4000 8 30000

Size table definitions

  • Storage capacity is shown in units of GiB or 1024^3 bytes. When you compare disks measured in GB (1000^3 bytes) to disks measured in GiB (1024^3) remember that capacity numbers given in GiB may appear smaller. For example, 1023 GiB = 1098.4 GB.

  • Disk throughput is measured in input/output operations per second (IOPS) and MBps where MBps = 10^6 bytes/sec.

  • Data disks can operate in cached or uncached modes. For cached data disk operation, the host cache mode is set to ReadOnly or ReadWrite. For uncached data disk operation, the host cache mode is set to None.

  • To learn how to get the best storage performance for your VMs, see Virtual machine and disk performance.

  • Expected network bandwidth is the maximum aggregated bandwidth allocated per VM type across all NICs, for all destinations. For more information, see Virtual machine network bandwidth.

    Upper limits aren't guaranteed. Limits offer guidance for selecting the right VM type for the intended application. Actual network performance will depend on several factors including network congestion, application loads, and network settings. For information on optimizing network throughput, see Optimize network throughput for Azure virtual machines. To achieve the expected network performance on Linux or Windows, you may need to select a specific version or optimize your VM. For more information, see Bandwidth/Throughput testing (NTTTCP).

Next steps