Rediger

ECesv5 and ECedsv5-series confidential VMs

  • Artikkel

Applies to: ✔️ Linux VMs ✔️ Windows VMs

Important

These virtual machines are in public preview and not recommended for production usage. These VMs are available in West Europe, Central US, East US 2 and North Europe.

The ECesv5-series and ECedsv5-series are Azure confidential VMs that can be used to protect the confidentiality and integrity of your code and data while it's being processed in the public cloud. Organizations can use these VMs to seamlessly bring confidential workloads to the cloud without any code changes to the application.

These machines are powered by Intel® 4th Generation Xeon® Scalable processors with Base Frequency of 2.1 GHz, All Core Turbo Frequency of reach 2.9 GHz and Intel® Advanced Matrix Extensions (AMX) for AI acceleration.

Featuring Intel® Trust Domain Extensions (TDX), these VMs are hardened from the cloud virtualized environment by denying the hypervisor, other host management code and administrators access to the VM memory and state. It helps to protect VMs against a broad range of sophisticated hardware and software attacks.

These VMs have native support for confidential disk encryption meaning organizations can encrypt their VM disks at boot with either a customer-managed key (CMK), or platform-managed key (PMK). This feature is fully integrated with Azure KeyVault or Azure Managed HSM with validation for FIPS 140-2 Level 3.

Note

There are some pricing differences based on your encryption settings for confidential VMs.

Note

Certain applications which are time sensitive may experience asynchronous time at VM boot. Whilst a long-term fix is in development, a workaround is available for Linux and Windows customers today. If you need additional support, please create a support request.

ECesv5 and ECedsv5-series feature support

Supported features in ECesv5-series VMs:

Unsupported features in ECesv5-series VMs:

ECesv5-series

The ECesv5 VMs offer even higher memory to vCPU ratio and an all new VM size with up to 128 vCPUs and 768 GiB of RAM. If you require a local disk, please consider ECedsv5-series. These VMs are ideal for memory intensive applications, large relational database servers, business intelligence applications, and critical applications that process sensitive and regulated data.

This series supports Standard SSD, Standard HDD, and Premium SSD disk types. Billing for disk storage and VMs is separate. To estimate your costs, use the Pricing Calculator.

ECesv5-series specifications

Size vCPU RAM (GiB) Temp storage (SSD) GiB Max data disks Max temp disk throughput IOPS/MBps Max uncached disk throughput IOPS/MBps Max burst uncached disk throughput: IOPS/MBps Max NICs Max Network Bandwidth (Mbps)
Standard_EC2es_v5 2 16 RS* 4 N/A 3750/80 10000/1200 2 3000
Standard_EC4es_v5 4 32 RS* 8 N/A 6400/140 20000/1200 2 5000
Standard_EC8es_v5 8 64 RS* 16 N/A 12800/300 20000/1200 4 5000
Standard_EC16es_v5 16 128 RS* 32 N/A 25600/600 40000/1200 8 10000
Standard_EC32es_v5 32 256 RS* 32 N/A 51200/860 80000/2000 8 12500
Standard_EC48es_v5 48 384 RS* 32 N/A 76800/1320 80000/3000 8 15000
Standard_EC64es_v5 64 512 RS* 32 N/A 80000/1740 80000/3000 8 20000
Standard_EC128es_v5 128 768 RS* 32 N/A 80000/2600 120000/4000 8 30000

*RS: These VMs have support for remote storage only

ECedsv5-series

The ECedsv5 VMs offer even higher memory to vCPU ratio and an all new VM size with up to 128 vCPUs and 768 GiB of RAM, as well as up to 2.8 TB local disk storage. These VMs are ideal for memory intensive applications, large relational database servers, business intelligence applications, and critical applications that process sensitive and regulated data.

This series supports Standard SSD, Standard HDD, and Premium SSD disk types. Billing for disk storage and VMs is separate. To estimate your costs, use the Pricing Calculator.

ECedsv5-series specifications

Size vCPU RAM (GiB) Temp storage (SSD) GiB Max data disks Max temp disk throughput IOPS/MBps Max uncached disk throughput IOPS/MBps Max burst uncached disk throughput: IOPS/MBps Max NICs Max Network Bandwidth (Mbps)
Standard_EC2eds_v5 2 16 47 4 9300/100 3750/80 10000/1200 2 3000
Standard_EC4eds_v5 4 32 105 8 19500/200 6400/140 20000/1200 2 5000
Standard_EC8eds_v5 8 64 227 16 38900/500 12800/300 20000/1200 4 5000
Standard_EC16eds_v5 16 128 463 32 76700/1000 25600/600 40000/1200 8 10000
Standard_EC32eds_v5 32 256 935 32 153200/2000 51200/860 80000/2000 8 12500
Standard_EC48eds_v5 48 384 1407 32 229700/3000 76800/1320 80000/3000 8 15000
Standard_EC64eds_v5 64 512 2823 32 306200/4000 80000/1740 80000/3000 8 20000
Standard_EC128eds_v5 128 768 2832 32 459200/4000 80000/2600 120000/4000 8 30000

Size table definitions

  • Storage capacity is shown in units of GiB or 1024^3 bytes. When you compare disks measured in GB (1000^3 bytes) to disks measured in GiB (1024^3) remember that capacity numbers given in GiB may appear smaller. For example, 1023 GiB = 1098.4 GB.

  • Disk throughput is measured in input/output operations per second (IOPS) and MBps where MBps = 10^6 bytes/sec.

  • Data disks can operate in cached or uncached modes. For cached data disk operation, the host cache mode is set to ReadOnly or ReadWrite. For uncached data disk operation, the host cache mode is set to None.

  • To learn how to get the best storage performance for your VMs, see Virtual machine and disk performance.

  • Expected network bandwidth is the maximum aggregated bandwidth allocated per VM type across all NICs, for all destinations. For more information, see Virtual machine network bandwidth.

    Upper limits aren't guaranteed. Limits offer guidance for selecting the right VM type for the intended application. Actual network performance will depend on several factors including network congestion, application loads, and network settings. For information on optimizing network throughput, see Optimize network throughput for Azure virtual machines. To achieve the expected network performance on Linux or Windows, you may need to select a specific version or optimize your VM. For more information, see Bandwidth/Throughput testing (NTTTCP).

Next steps

Create a confidential VM in Azure Portal Create a confidential VM in Azure CLI