Microsoft Elevates Azure with New Custom Chips for Speed and Security

Microsoft Unveils New Custom Chips for Azure Cloud and Security

Microsoft has rolled out its latest custom chips, set to enhance operations on its Azure cloud service and fortify security measures. Among these new developments is a unique hardware accelerator, particularly tailored for a plurality of tasks associated with data processing, networking, and storage.

Boosting Cloud Infrastructure with the Azure Boost DPU

The Azure Boost DPU, Microsoft's premier Data Processing Unit, is conceived for the optimization of data-centric workloads in terms of efficiency and reduction in power consumption. The tech giant foresees that the integration of the DPU in future Azure servers will enhance storage workload performance fourfold while slashing their power intake by a third. “Designed for scale-out, composable workloads on Azure, the Azure Boost DPU delivers unparalleled effectiveness for our cloud infrastructure across various domains such as storage, networking, and acceleration,” stated Microsoft.

Despite the absence of specific details on the precise elements that the Azure Boost DPU will impact or the existing hardware that it would outperform, it is a crucial addition to Microsoft's arsenal.

Spotlight on DPU Utilization

Though this may be Microsoft's maiden venture into DPUs, it is far from a novel concept in the industry. Data Processing Units are specialized hardware intended to administer specific data processing operations including security and network routing for data traffic.

Prominent tech companies such as Nvidia and AMD have been utilizing DPUs for some time. Nvidia, for instance, launched the BlueField line of DPUs in 2019, while AMD has been marketing its Pensando DPUs since 2022. Similarly, Amazon Web Services’ (AWS) Nitro cards provide DPU-like functions, and Google has collaborated with Intel to fabricate chips with parallel functionality to DPUs.

Additionally, it's pertinent to mention Fungible, a DPU fabricator Microsoft acquired last December. The Fungible team, spearheaded by former Apple and Juniper Networks engineers, is now part of Microsoft's infrastructure engineering division.

Reinforcing Security with Azure Integrated HSM

Apart from its boost to the company's Azure services, Microsoft also disclosed the Azure Integrated Hardware Security Module (HSM). This innovative security chip allows for the encryption and signature keys to be securely calibrated within the module “without compromising performance or escalating latency,” according to Microsoft's announcement.

Projected to be part of all new servers in Microsoft's data centers starting next year, the Azure Integrated HSM aims to augment protection across Azure's hardware fleet, encompassing both general-purpose and confidential workloads. This chip is Microsoft's bid to outdo its cloud rivals’ proprietary security solutions such as AWS' Nitro and Google's Titan, both of which are integrated into their respective cloud servers for robust security solutions.

The Nuances of Security in the Digital Age

Security has emerged as the cornerstone of Microsoft's strategy, especially in light of recent high-profile cyber attacks and subsequent governmental evaluation. However, custom silicon, while able to enhance security, isn't a cure-all. For example, in 2020 researchers discovered an irremediable flaw in Apple's T2 security chip, which left Macs susceptible to threats.

Nevertheless, Microsoft's CEO Satya Nadella steadfastly asserts the company's commitment to ramping up its security measures. In current times where new threats are continuously being forged and refined, “security must be top of mind,” said Vasu Jakkal, Microsoft's Chief Vice President of security. Despite no details being provided about the Azure Integrated HSM's vulnerability testing, the tech community expects a further announcement as the chip's launch draws closer.