The Default Rule Set, Microsoft's managed WAF rules that succeed OWASP CRS and defend against XSS, SQL injection and other frequent attacks. Single rules may be overridden or switched off.
Also called Default Rule Set.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains DRS in context, with comparison tables and the common traps.
Terms in this definition
- Web Application Firewall
Protection at layer 7 from OWASP Top 10 threats like XSS and SQL injection, available on Application Gateway or Front Door.
- OWASP
Short for Open Web Application Security Project. WAF rule sets are designed to block the critical web application risks this group lists in its OWASP Top 10.
- CRS
The OWASP Core Rule Set, on which the Application Gateway WAF bases its rules.
- XSS
A web attack in which harmful scripts are injected into pages that other users then view; a WAF blocks it.
- SQL injection
Smuggling SQL into the input an application accepts. NSGs cannot detect it; WAF managed rule sets, such as those on Application Gateway, stop it at the web tier, and Microsoft Defender for SQL alerts on it.
Related terms
- DRS Score
Shows how well each VM gets the resources it asks for. A cluster's figure averages VM values with weighting; DRS migrates VMs to lift it.
- migration threshold
Five-step DRS slider, Conservative through Aggressive, setting how keen DRS is to recommend or perform vMotion moves to balance load.
- Proactive HA
When a hardware vendor's monitoring reports degraded health on a host, for instance a dead power supply, this vSphere capability clears VMs off it and moves the host into quarantine or maintenance mode. DRS has to be enabled for it to work.
- resource pool
A way of splitting the CPU and memory of a host or DRS cluster into nested containers, each with limits, reservations and shares governing the VMs and sub-pools it holds.
- retreat mode
Switches vSphere Cluster Services (vCLS) off for a cluster, rather than relocating vCLS VMs ahead of datastore maintenance. As of vCenter 9.0, which deprecates vCLS, it is the recommended approach, and HA and DRS carry on unaffected.
- root resource pool
The implicit, hidden top of the resource hierarchy on each standalone host or DRS cluster, representing everything it has; any child pools are slices of it.
- vCLS
Agent VMs that keep DRS, HA and similar services of a cluster running while vCenter is down. They are deprecated as of version 9.0, with retreat mode now the recommended alternative.
- VM-Host affinity rule
DRS rule linking VMs to hosts by group, stating that the VMs must, should, must not or should not run there. Stretched vSAN clusters apply the 'should' kind to hold VMs in one site.