แก้ไข

แชร์ผ่าน

'DC' family general purpose VM size series

  • บทความ

Applies to: ✔️ Linux VMs ✔️ Windows VMs ✔️ Flexible scale sets ✔️ Uniform scale sets

The 'DC' series family are one of Azure's security focused general purpose VM instances. They're designed for confidential computing offering enhanced data protection and integrity with various hardware-based Trusted Execution Environments (TEEs). These VMs work well for many general computing workloads, e-commerce systems, web front ends, desktop virtualization solutions, sensitive databases, other enterprise applications and more.

Workloads and use cases

Data Protection: DC-series VMs are ideal for applications that manage, store, and process sensitive data, such as personal identifiable information (PII), financial data, health records, and other types of confidential information. The hardware-based encryption ensures that data is protected at rest and during processing.

Regulatory Compliance: For businesses that need to comply with stringent regulatory requirements for data privacy and security (like GDPR, HIPAA, or financial industry regulations), DC-series VMs provide a hardware-assured environment that can help meet these compliance demands.

Series in family

DCasv5 and DCadsv5-series

DCasv5-series VMs offer a combination of vCPU and memory for most production workloads. These confidential VMs use AMD's third-Generation EPYC™ 7763v processor in a multi-threaded configuration with up to 256 MB L3 cache. These processors can achieve a boosted maximum frequency of 3.5 GHz. Both series offer Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP). SEV-SNP provides hardware-isolated VMs that protect data from other VMs, the hypervisor, and host management code. Confidential VMs offer hardware-based VM memory encryption. These series also offer OS disk pre-encryption before VM provisioning with different key management solutions. These VMs with no local disk provide a better value proposition for workloads where you don't need a local temporary disk. For more information, see the FAQ for Azure VM sizes with no local temporary disk.

View the full DCasv5-series page.

Part Quantity
Count Units		 Specs
SKU ID, Performance Units, etc.
Processor 2 - 96 vCPUs AMD EPYC (Milan) [x86-64]
Memory 8 - 384 GiB
Local Storage None
Remote Storage 4 - 32 Disks 3750 - 80000 IOPS
82 - 1600 MBps
Network 2 - 8 NICs 3000 - 20000 Mbps
Accelerators None

DCesv5 and DCedsv5-series

The DCesv5-series are Azure confidential VMs that protect the confidentiality and integrity of code and data while it's being processed. Organizations can use these VMs to seamlessly bring confidential workloads to the cloud without any code changes to the application. These machines are powered by Intel® 4th Generation Xeon® Scalable processors with Base Frequency of 2.1 GHz, All Core Turbo Frequency of 2.9 GHz and Intel® AMX for AI acceleration.

Featuring Intel® Trust Domain Extensions (TDX), these VMs are hardened from the cloud virtualized environment by denying the hypervisor, other host management code and administrators access to the VM memory and state. It helps to protect VMs against a broad range of sophisticated hardware and software attacks.

These VMs have native support for confidential disk encryption meaning organizations can encrypt their VM disks at boot with either a customer-managed key (CMK), or platform-managed key (PMK). This feature is fully integrated with Azure KeyVault or Azure Managed HSM with validation for FIPS 140-2 Level 3.

The DCesv5 offer a balance of memory to vCPU performance that is suitable most production workloads. With up to 96 vCPUs, 384 GiB of RAM, and support for remote disk storage. If you require a local disk, please consider DCedsv5-series. These VMs work well for many general computing workloads, e-commerce systems, web front ends, desktop virtualization solutions, sensitive databases, other enterprise applications and more.

Important

These virtual machines are in public preview and not recommended for production usage. These VMs are available in West Europe, Central US, East US 2 and North Europe.

View the full DCesv5-series page.

Part Quantity
Count Units		 Specs
SKU ID, Performance Units, etc.
Processor 2 - 96 vCPUs Intel Xeon (Sapphire Rapids) [x86-64]
Memory 8 - 384 GiB
Local Storage None
Remote Storage 4 - 32 Disks 3750 - 80000 IOPS
80 - 2600 MBps
Network 2 - 8 NICs 3000 - 30000 Mbps
Accelerators None

DCas_cc_v5 and DCads_cc_v5-series

Confidential child capable VMs allow you to borrow resources from the parent VM you deploy, to create AMD SEV-SNP protected child VMs. The parent VM has almost complete feature parity with any other general purpose Azure VM (for example, D-series VMs). This parent-child deployment model can help you achieve higher levels of isolation from the Azure host and parent VM. These confidential child capable VMs are built on the same hardware that powers our Azure confidential VMs. Azure confidential VMs are now generally available. The DCas_cc_v5-series sizes offer a combination of vCPU and memory for most production workloads. These new VMs with no local disk provide a better value proposition for workloads that do not require local temp disk.

View the full DCas_cc_v5-series page.

Part Quantity
Count Units		 Specs
SKU ID, Performance Units, etc.
Processor 4 - 96 vCPUs AMD EPYC (Milan) [x86-64]
Memory 16 - 384 GiB
Local Storage None
Remote Storage 8 - 32 Disks 6400 - 80000 IOPS
144 - 1600 MBps
Network 2 - 8 NICs Mbps
Accelerators None

DCsv3 and DCdsv3-series

The DCsv3-series Azure Virtual Machines help protect the confidentiality and integrity of your code and data while they're being processed in the public cloud. By using Intel® Software Guard Extensions and Intel® Total Memory Encryption - Multi Key, customers can ensure their data is always encrypted and protected in use. These machines are powered by the latest 3rd Generation Intel® Xeon Scalable processors, and use Intel® Turbo Boost Max Technology 3.0 to reach 3.5 GHz. With this generation, CPU Cores have increased 6x (up to a maximum of 48 physical cores). Encrypted Memory (EPC) has increased 1500x to 256 GB. Regular Memory has increased 12x to 384 GB. All these changes substantially improve the performance and unlock entirely new scenarios.

View the full DCsv3-series page.

Part Quantity
Count Units		 Specs
SKU ID, Performance Units, etc.
Processor 1 - 48 Cores Intel Xeon (Ice Lake) [x86-64]
Memory 8 - 384 GiB
Local Storage None
Remote Storage 4 - 32 Disks
Network 2 - 8 NICs
Accelerators None

DCsv2-series

The DCsv2-series virtual machines help protect the confidentiality and integrity of your data and code while it’s processed in the public cloud. DCsv2-series leverage Intel® Software Guard Extensions (SGX), which enable customers to use secure enclaves for protection. These machines are backed by 3.7 GHz Intel® Xeon E-2288G (Coffee Lake) with SGX technology. With Intel® Turbo Boost Max Technology 3.0 these machines can go up to 5.0 GHz. Example confidential use cases include: databases, blockchain, multiparty data analytics, fraud detection, anti-money laundering, usage analytics, intelligence analysis and machine learning.

Note

Hyperthreading is disabled for added security posture. Pricing is the same as Dv5 and Dsv5-series per physical core

View the full DCsv2-series page.

Part Quantity
Count Units		 Specs
SKU ID, Performance Units, etc.
Processor 1 - 8 Cores Intel Xeon E-2288G (Coffee Lake) [x86-64]
Memory 4 - 32 GiB
Local Storage 1 Disk 50 - 400 GiB
Remote Storage 1 - 8 Disks
Network 1 NICs
Accelerators None

Previous-generation DC family series

For older sizes, see previous generation sizes.

Other size information

List of all available sizes: Sizes

Pricing Calculator: Pricing Calculator

Information on Disk Types: Disk Types

Next steps

Learn more about how Azure compute units (ACU) can help you compare compute performance across Azure SKUs.

Check out Azure Dedicated Hosts for physical servers able to host one or more virtual machines assigned to one Azure subscription.

Learn how to Monitor Azure virtual machines.