{"id":3473,"date":"2017-09-25T00:00:00","date_gmt":"2017-09-25T00:00:00","guid":{"rendered":"https:\/\/azure.microsoft.com\/blog\/azure-ddos-protection-service-preview"},"modified":"2025-06-25T07:05:36","modified_gmt":"2025-06-25T14:05:36","slug":"azure-ddos-protection-service-preview","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/azure-ddos-protection-service-preview\/","title":{"rendered":"Azure DDoS Protection Service preview"},"content":{"rendered":"\n

This blog post was co-authored by JR Mayberry, Principal PM Manager & Anupam Vij, Senior Program Manager, Azure Networking.<\/em><\/p>\n\n\n\n

Distributed Denial of Service (DDoS) attacks are one of the top availability and security concerns voiced by customers moving their applications to the cloud. These concerns are justified as the number of documented DDoS attacks grew 380% in Q1 2017 over Q1 2016 according to data from Nexusguard. In October 2016, a number of popular websites were impacted by a massive cyberattack<\/a> consisting of multiple denial of service attacks. It\u2019s estimated that up to one third of all Internet downtime incidents are related to DDoS attacks.<\/p>\n\n\n\n

As the types and sophistication of network attacks increases, Azure is committed to providing our customers with solutions that continue to protect the security and availability of applications on Azure. Security and availability in the cloud is a shared responsibility. Azure provides platform level capabilities and design best practices for customers to adopting and apply into application designs meeting their business objectives.<\/p>\n\n\n\n

Today we’re excited to announce the preview of Azure DDoS Protection Standard<\/strong>. This service is integrated with Virtual Networks and provides protection for Azure applications from the impacts of DDoS attacks.  It enables additional application specific tuning, alerting and telemetry features beyond the basic DDoS Protection which is included automatically in the Azure platform.<\/p>\n\n\n\n

Azure DDoS Protection Service offerings<\/h2>\n\n\n\n
\"Azure<\/figure>\n\n\n\n

Azure DDoS Protection Basic service<\/h3>\n\n\n\n

Basic protection is integrated into the Azure platform by default and at no additional cost. The full scale and capacity of Azure\u2019s globally deployed network provides defense against common network layer attacks through always on traffic monitoring and real-time mitigation. No user configuration or application changes are required to enable DDoS Protection Basic.<\/p>\n\n\n\n

\"global-ddos-mitigation-presence\"<\/figure>\n\n\n\n

Azure DDoS Protection Standard service<\/h3>\n\n\n\n

Azure DDoS Protection Standard<\/strong> is a new offering which provides additional DDoS mitigation capabilities and is automatically tuned to protect your specific Azure resources. Protection is simple to enable on any new or existing Virtual Network and requires no application or resource changes. Standard utilizes dedicated monitoring and machine learning to configure DDoS protection policies tuned to your Virtual Network. This additional protection is achieved by profiling your application\u2019s normal traffic patterns, intelligently detecting malicious traffic and mitigating attacks as soon as they are detected. DDoS Protection Standard provides attack telemetry views through Azure Monitor, enabling alerting when your application is under attack. Integrated Layer 7 application protection can be provided by Application Gateway WAF.<\/p>\n\n\n\n

\"azure-ddos-protection\"<\/figure>\n\n\n\n

Azure DDoS Protection Standard service features<\/h2>\n\n\n\n

Native Platform Integration<\/h3>\n\n\n\n

Azure DDoS Protection is natively integrated into Azure and includes configuration through the Azure Portal and PowerShell when you enable it on a Virtual Network (VNet).<\/p>\n\n\n\n

Turn Key Protection<\/h3>\n\n\n\n

Simplified provisioning immediately protects all resources in a Virtual Network with no additional application changes required.<\/p>\n\n\n\n

\"create-virtual-network\"<\/figure>\n\n\n\n

Always on monitoring<\/h3>\n\n\n\n

When DDoS Protection is enabled, your application traffic patterns are continuously monitored for indicators of attacks.<\/p>\n\n\n\n

Adaptive tuning<\/h3>\n\n\n\n

DDoS protection understands your resources and resource configuration and customizes the DDoS Protection policy to your Virtual Network. Machine Learning algorithms set and adjust protection policies as traffic patterns change over time. Protection policies define protection limits, and mitigation is performed when actual network traffic exceeds the policies threshold.<\/p>\n\n\n\n

\"internet-traffic\"<\/figure>\n\n\n\n

L3 to L7 Protection with Application Gateway<\/h3>\n\n\n\n

Azure DDoS Protection service in combination with Application Gateway Web application firewall<\/a> provides DDoS Protection for common web vulnerabilities and attacks.<\/p>\n\n\n\n