{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved/", "slug": "dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved", "url": "https://update.dsesecurity.com/updates/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved/" }, "title": "Treat proximity-placement intent as a compatibility constraint, not reserved capacity", "summary": "What does a proximity placement group's VM-size intent establish before deployment, and what remains unguaranteed?", "format": { "slug": "explainer", "name": "Explainer" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "network-infrastructure", "label": "Networks & infrastructure", "alt": "Resilient network core with engineered blue and gold data paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:31:21+00:00", "modified_at": "2026-09-10T00:32:00+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 266, "potentially_affected": "Teams placing Azure VMs of multiple sizes in a proximity placement group.", "dse_recommendation": "Declare the workload's complete intended VM-size combination and keep a separate plan for allocation failure.", "primary_source": { "name": "Proximity placement groups - Azure Virtual Machines | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/co-location", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

A proximity placement group constrains Azure compute resources to nearby physical placement. Its optional intent lists expected VM sizes so Azure can select a datacenter supporting their combination. Intent neither reserves capacity nor guarantees allocation; deployment can still fail if capacity is exhausted. Changing an existing group’s intent requires all its VMs to be deallocated; intent needs API version 2021-11-01 or later. A zone can accompany intent only at group creation, and that zone choice cannot later be changed. Microsoft Learn.

\n

Applicability

\n

Use this design check when a workload requires proximity across several VM sizes. Ask the application owner to justify that requirement with its own measurements. Identify the full size combination and any intended zone before approving the placement-group definition.

\n

DSE recommendation

\n

Declare the workload’s complete intended VM-size combination and keep a separate plan for allocation failure. Review an existing group’s intent before introducing a new size or redeploying a removed tier. Have the capacity and application owners agree on an acceptable alternate configuration rather than assuming that successful group creation proves the future deployment will fit. Record the zone choice as a deliberate design decision.

\n

Verification

\n

Deploy the agreed combination in an approved test and compare the actual resources with the declared intent. Capture any allocation error together with the group definition and requested sizes. Measure the application’s relevant latency rather than accepting proximity configuration as a measured outcome. Before a later size change, repeat the compatibility review and preserve the previous intent so the change can be explained and investigated.

\n

Official references

\n

Microsoft Learn: Proximity placement groups. Source reviewed September 9, 2026.

", "content_text": "Source facts\nA proximity placement group constrains Azure compute resources to nearby physical placement. Its optional intent lists expected VM sizes so Azure can select a datacenter supporting their combination. Intent neither reserves capacity nor guarantees allocation; deployment can still fail if capacity is exhausted. Changing an existing group’s intent requires all its VMs to be deallocated; intent needs API version 2021-11-01 or later. A zone can accompany intent only at group creation, and that zone choice cannot later be changed. Microsoft Learn.\nApplicability\nUse this design check when a workload requires proximity across several VM sizes. Ask the application owner to justify that requirement with its own measurements. Identify the full size combination and any intended zone before approving the placement-group definition.\nDSE recommendation\nDeclare the workload’s complete intended VM-size combination and keep a separate plan for allocation failure. Review an existing group’s intent before introducing a new size or redeploying a removed tier. Have the capacity and application owners agree on an acceptable alternate configuration rather than assuming that successful group creation proves the future deployment will fit. Record the zone choice as a deliberate design decision.\nVerification\nDeploy the agreed combination in an approved test and compare the actual resources with the declared intent. Capture any allocation error together with the group definition and requested sizes. Measure the application’s relevant latency rather than accepting proximity configuration as a measured outcome. Before a later size change, repeat the compatibility review and preserve the previous intent so the change can be explained and investigated.\nOfficial references\nMicrosoft Learn: Proximity placement groups. Source reviewed September 9, 2026.", "content_markdown": "## Source facts\n\nA proximity placement group constrains Azure compute resources to nearby physical placement. Its optional intent lists expected VM sizes so Azure can select a datacenter supporting their combination. Intent neither reserves capacity nor guarantees allocation; deployment can still fail if capacity is exhausted. Changing an existing group’s intent requires all its VMs to be deallocated; intent needs API version 2021-11-01 or later. A zone can accompany intent only at group creation, and that zone choice cannot later be changed. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/co-location).\n\n## Applicability\n\nUse this design check when a workload requires proximity across several VM sizes. Ask the application owner to justify that requirement with its own measurements. Identify the full size combination and any intended zone before approving the placement-group definition.\n\n## DSE recommendation\n\nDeclare the workload’s complete intended VM-size combination and keep a separate plan for allocation failure. Review an existing group’s intent before introducing a new size or redeploying a removed tier. Have the capacity and application owners agree on an acceptable alternate configuration rather than assuming that successful group creation proves the future deployment will fit. Record the zone choice as a deliberate design decision.\n\n## Verification\n\nDeploy the agreed combination in an approved test and compare the actual resources with the declared intent. Capture any allocation error together with the group definition and requested sizes. Measure the application’s relevant latency rather than accepting proximity configuration as a measured outcome. Before a later size change, repeat the compatibility review and preserve the previous intent so the change can be explained and investigated.\n\n## Official references\n\n[Microsoft Learn: Proximity placement groups](https://learn.microsoft.com/en-us/azure/virtual-machines/co-location). Source reviewed September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved/", "url": "https://update.dsesecurity.com/updates/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Treat proximity-placement intent as a compatibility constraint, not reserved capacity", "item": "https://update.dsesecurity.com/updates/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved/", "url": "https://update.dsesecurity.com/updates/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved/", "headline": "Treat proximity-placement intent as a compatibility constraint, not reserved capacity", "description": "What does a proximity placement group's VM-size intent establish before deployment, and what remains unguaranteed?", "abstract": "What does a proximity placement group's VM-size intent establish before deployment, and what remains unguaranteed?", "articleBody": "Source facts\nA proximity placement group constrains Azure compute resources to nearby physical placement. Its optional intent lists expected VM sizes so Azure can select a datacenter supporting their combination. Intent neither reserves capacity nor guarantees allocation; deployment can still fail if capacity is exhausted. Changing an existing group’s intent requires all its VMs to be deallocated; intent needs API version 2021-11-01 or later. A zone can accompany intent only at group creation, and that zone choice cannot later be changed. Microsoft Learn.\nApplicability\nUse this design check when a workload requires proximity across several VM sizes. Ask the application owner to justify that requirement with its own measurements. Identify the full size combination and any intended zone before approving the placement-group definition.\nDSE recommendation\nDeclare the workload’s complete intended VM-size combination and keep a separate plan for allocation failure. Review an existing group’s intent before introducing a new size or redeploying a removed tier. Have the capacity and application owners agree on an acceptable alternate configuration rather than assuming that successful group creation proves the future deployment will fit. Record the zone choice as a deliberate design decision.\nVerification\nDeploy the agreed combination in an approved test and compare the actual resources with the declared intent. Capture any allocation error together with the group definition and requested sizes. Measure the application’s relevant latency rather than accepting proximity configuration as a measured outcome. Before a later size change, repeat the compatibility review and preserve the previous intent so the change can be explained and investigated.\nOfficial references\nMicrosoft Learn: Proximity placement groups. Source reviewed September 9, 2026.", "datePublished": "2026-09-10T00:31:21+00:00", "dateModified": "2026-09-10T00:32:00+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-035-treat-proximity-placement-intent-as-a-compatibility-constraint-not-reserved/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Treat proximity-placement intent as a compatibility constraint, not reserved capacity" }, "articleSection": [ "IT", "Networks & Infrastructure" ], "keywords": [ "IT", "Networks & Infrastructure", "Explainer", "Information priority" ], "genre": "Explainer", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 266, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Proximity placement groups - Azure Virtual Machines | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/co-location" } } ] } }