Azure defence for public IP addresses against volumetric and protocol-level DDoS attacks. Paid tiers (DDoS Network Protection and DDoS IP Protection) build on the basic infrastructure protection that comes free.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Azure DDoS Protection in context, with comparison tables and the common traps.
Terms in this definition
- DDoS
Short for distributed denial of service: flooding an application with so much traffic that it can no longer serve anyone. Within Azure, the DDoS Protection service shields public IP addresses from this kind of attack.
- DDoS Network Protection
Plan enabled on virtual networks to shield their public IP addresses, bundling rapid-response support, cost protection and reduced WAF pricing.
- DDoS IP Protection
One of the paid tiers of Azure DDoS Protection, charged for each individual public IP it covers. Mitigation works the same way as in the Network Protection tier; what's missing is rapid response support, the cost protection benefit and reduced WAF pricing.
- Basic
Low-cost Log Analytics table plan where ingestion is cheap but each query is charged per GB and runs at workspace scope. Full KQL and simple log search alerts are supported; standard log search alerts are not.