{"id":7509,"date":"2023-02-16T00:00:00","date_gmt":"2023-02-16T00:00:00","guid":{"rendered":"https:\/\/azure.microsoft.com\/blog\/ddos-mitigation-with-microsoft-azure-front-door"},"modified":"2025-06-10T05:03:06","modified_gmt":"2025-06-10T12:03:06","slug":"ddos-mitigation-with-microsoft-azure-front-door","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/","title":{"rendered":"DDoS Mitigation with Microsoft Azure Front Door"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><em>This blog post was authored by Dave Burkhardt, Principal Product Manager, and co-authored by Harikrishnan M B, Program Manager, and Yun Zheng, Sr Program Manager.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Within the last few years, the complexity and size of distributed denial-of-service (DDoS) attacks have increased dramatically across the industry.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As we&nbsp;<a href=\"https:\/\/aka.ms\/ddostrends\" target=\"_blank\" rel=\"noopener\">reported previously<\/a>, TCP, UDP, and DNS-based attacks are still the most frequent, but layer 7\/HTTP(S) based attacks have been breaking traffic records across the industry in 2022. As a recent example, we successfully mitigated an attack with over 60 billion malicious requests that were directed at a customer domain hosted on&nbsp;<a href=\"https:\/\/azure.microsoft.com\/products\/frontdoor\/\" target=\"_blank\" rel=\"noopener\">Azure Front Door<\/a>&nbsp;(AFD).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Layer 7 attacks can affect any organization\u2014from media and entertainment companies to financial institutions. Initially, attacks were unencrypted HTTP-based traffic (such as&nbsp;<a href=\"https:\/\/en.wikipedia.org\/wiki\/Slowloris_(computer_security)\" target=\"_blank\" rel=\"noopener\">Slowloris<\/a>, and HTTP Flood), but the industry is now seeing an increase in weaponized&nbsp;<a href=\"https:\/\/en.wikipedia.org\/wiki\/Botnet\" target=\"_blank\" rel=\"noopener\">botnet<\/a>&nbsp;HTTPS-based attacks (like&nbsp;<a href=\"https:\/\/cybernews.com\/security\/weve-seen-just-the-tip-of-the-meris-botnet-iceberg\/\" target=\"_blank\" rel=\"noopener\">M\u0113ris<\/a>,&nbsp;<a href=\"https:\/\/en.wikipedia.org\/wiki\/Mirai_(malware)\" target=\"_blank\" rel=\"noopener\">Mirai<\/a>).&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"mitigation-techniques-utilizing-azure-front-door\">Mitigation techniques utilizing Azure Front Door<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Fortunately, there are battle-tested frameworks, services, and tools for organizations to utilize so they can mitigate against a potential DDoS attack. Here are some initial steps to consider:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">Content Delivery Networks (CDNs) such as\u00a0<a href=\"https:\/\/docs.microsoft.com\/azure\/frontdoor\/front-door-ddos\" target=\"_blank\" rel=\"noopener\">AFD<\/a>\u00a0are architected to redistribute HTTP(S) DDoS traffic away from your origin systems in the event of an attack. As such, utilizing AFD\u2019s 185+ edge POPs around the globe that leverage our massive private WAN will not only allow you to deliver your web applications and services faster to your users, but you will also be taking advantage of the AFD\u2019s distributed systems to mitigate against layer 7 DDoS attacks. Additionally, layer 3, 4, and 7 DDoS protection is included with\u00a0<a href=\"https:\/\/learn.microsoft.com\/azure\/frontdoor\/front-door-ddos\" target=\"_blank\" rel=\"noopener\">AFD<\/a>, and WAF services are included at no extra charge with\u00a0<a href=\"https:\/\/learn.microsoft.com\/azure\/frontdoor\/standard-premium\/tier-comparison\" target=\"_blank\" rel=\"noopener\">AFD Premium<\/a>.<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/azure\/frontdoor\/front-door-caching\" target=\"_blank\" rel=\"noopener\">Front Door&#8217;s caching capabilities<\/a>\u00a0can be used to protect backends from large traffic volumes generated by an attack. Cached resources will be returned from the Front Door edge nodes so they don&#8217;t get forwarded to your origins. Even short cache expiry times (seconds or minutes) on dynamic responses can greatly reduce the load on your origin systems. You can also learn more about how\u00a0<a href=\"https:\/\/techcommunity.microsoft.com\/t5\/fasttrack-for-azure\/how-azure-front-door-cache-can-help-protect-against-ddos-attacks\/ba-p\/3703272\" target=\"_blank\" rel=\"noopener\">AFD caching can protect you<\/a>\u00a0from DDoS attacks.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Leverage Azure Web Application Firewall (<a href=\"https:\/\/learn.microsoft.com\/azure\/web-application-firewall\/afds\/afds-overview\" target=\"_blank\" rel=\"noopener\">Azure WAF<\/a>) integration with Azure Front Door to mitigate malicious activities, and prevent DDoS and bot attacks. Here are the key Azure WAF areas to explore before (ideally) or during a DDoS attack:\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">Enable\u00a0<a href=\"https:\/\/learn.microsoft.com\/azure\/web-application-firewall\/afds\/waf-front-door-rate-limit\" target=\"_blank\" rel=\"noopener\">rating limiting<\/a>\u00a0to block the number of malicious requests that can be made over a certain time period.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Utilize\u00a0<a href=\"https:\/\/learn.microsoft.com\/azure\/web-application-firewall\/afds\/afds-overview\" target=\"_blank\" rel=\"noopener\">Microsoft Managed Default Rule Set<\/a>\u00a0for an easy way to deploy protection against a common set of security threats. Since such rulesets are managed by Microsoft and backed by Microsoft Threat Intel team, the rules are updated as needed to protect against new attack signatures.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Enable the\u00a0<a href=\"https:\/\/learn.microsoft.com\/azure\/web-application-firewall\/afds\/afds-overview#bot-protection-rule-set\" target=\"_blank\" rel=\"noopener\">Bot Protection Ruleset<\/a>\u00a0to block known bad bots responsible for launching DDoS attacks. This ruleset includes malicious IPs sourced from the Microsoft Threat Intelligence Feed and updated frequently to reflect the latest intel from the immense Microsoft Security and Research organization.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Create\u00a0<a href=\"https:\/\/learn.microsoft.com\/azure\/web-application-firewall\/afds\/waf-front-door-custom-rules\" target=\"_blank\" rel=\"noopener\">Custom WAF rules<\/a>\u00a0to automatically block conditions that are specific to your organization.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Utilize our\u00a0<a href=\"https:\/\/techcommunity.microsoft.com\/t5\/azure-network-security-blog\/detect-traffic-anomalies-and-auto-mitigate-spikes-with-azure-waf\/ba-p\/3217404\" target=\"_blank\" rel=\"noopener\">machine learning-based anomaly detection<\/a>\u00a0to automatically block malicious traffic spikes using Azure WAF integrated with Azure Front Door.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Enable\u00a0<a href=\"https:\/\/learn.microsoft.com\/azure\/web-application-firewall\/afds\/waf-front-door-geo-filtering\" target=\"_blank\" rel=\"noopener\">Geo-filtering<\/a>\u00a0to block traffic from a defined geographic region, or\u00a0<a href=\"https:\/\/learn.microsoft.com\/azure\/web-application-firewall\/afds\/waf-front-door-configure-ip-restriction\" target=\"_blank\" rel=\"noopener\">block IP addresses and ranges<\/a>\u00a0that you identify as malicious.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Determine all of your attack vectors. In this article, we mainly talked about layer 7 DDoS aspects and how Azure WAF and AFD caching capabilities can help prevent those attacks. The good news is AFD will protect your origins from layer 3 and 4 attacks if you have these origins configured to only receive traffic from AFD. This layer 3 and 4 protection is included with AFD and is a managed service provided by Microsoft\u2014meaning, this service is turned on by default and is continuously optimized and updated by the Azure engineering team. That said, if you have internet-facing Azure resources that don\u2019t utilize AFD, we strongly recommend you consider leveraging\u00a0<a href=\"https:\/\/learn.microsoft.com\/azure\/ddos-protection\/ddos-protection-overview\" target=\"_blank\" rel=\"noopener\">Microsoft\u2019s Azure DDOS Protection product<\/a>. Doing so will allow customers to receive additional benefits including cost protection, an SLA guarantee, and access to experts from the DDoS Rapid Response Team for immediate help during an attack.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Fortify your origins hosted in Azure by only allowing them to connect to AFD via\u00a0<a href=\"https:\/\/learn.microsoft.com\/azure\/frontdoor\/private-link\" target=\"_blank\" rel=\"noopener\">Private Link<\/a>. When Private Link is utilized, traffic between Azure Front Door and your application servers is delivered through a private network connection. As such, exposing your origins to the public internet is no longer necessary. In the event you do not utilize Private Link, origins that are connected over the public IPs could be exposed to DDOS attacks and our recommendation is to enable Azure DDOS Protection (<a href=\"https:\/\/learn.microsoft.com\/azure\/ddos-protection\/ddos-protection-sku-comparison\" target=\"_blank\" rel=\"noopener\">Network or IP SKUs<\/a>).\u00a0<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Monitor traffic patterns: Regularly monitoring traffic patterns can help identify unusual spikes in traffic, which could indicate a DDoS attack. As such, set up the following alerting to advise your organization of anomalies:\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">Configure\u00a0<a href=\"https:\/\/learn.microsoft.com\/azure\/service-health\/resource-health-overview\" target=\"_blank\" rel=\"noopener\">Resource Health<\/a>\u00a0alerts within AFD.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Utilize\u00a0<a href=\"https:\/\/learn.microsoft.com\/azure\/azure-monitor\/alerts\/alerts-create-new-alert-rule?tabs=metric\" target=\"_blank\" rel=\"noopener\">Azure Monitor Alerts<\/a>\u00a0to contact you for anomalies noted within Azure WAF\/AFD logs.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Consider leveraging\u00a0<a href=\"https:\/\/azure.microsoft.com\/products\/microsoft-sentinel\/#overview\" target=\"_blank\" rel=\"noopener\">Microsoft&#8217;s Sentinel<\/a>, a 2022 recognized\u00a0<a href=\"https:\/\/www.gartner.com\/doc\/reprints?id=1-2AHCXAHG&amp;ct=220701&amp;st=sb\" target=\"_blank\" rel=\"noopener\">Gartner SIEM leader<\/a>\u00a0to help you collect, detect, investigate, and respond to anomalies.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Create\u00a0<a href=\"https:\/\/www.nist.gov\/news-events\/news\/2016\/12\/nist-guide-provides-way-tackle-cybersecurity-incidents-recovery-plan\" target=\"_blank\" rel=\"noopener\">playbooks<\/a>\u00a0to document how you will respond to a DDoS attack and other cybersecurity incidents.<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/docs.microsoft.com\/azure\/ddos-protection\/test-through-simulations\" target=\"_blank\" rel=\"noopener\">Run fire drills<\/a>\u00a0to determine potential gaps and fine-tune.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"learn-more-about-afd\">Learn more about AFD<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">Information about\u00a0<a href=\"https:\/\/azure.microsoft.com\/products\/frontdoor\/#overview\" target=\"_blank\" rel=\"noopener\">the Azure Front Door Content Delivery Network<\/a>.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Read<a href=\"https:\/\/engineering.linkedin.com\/blog\/2022\/accelerating-the-linkedin-experience-with-azure-front-door\" target=\"_blank\" rel=\"noopener\">\u00a0LinkedIn\u2019s case study<\/a>\u00a0on how they utilized AFD to scale and reduce latency at a global level.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Check out the Quickstart guide on how to\u00a0<a href=\"https:\/\/learn.microsoft.com\/azure\/frontdoor\/quickstart-create-front-door\" target=\"_blank\" rel=\"noopener\">set up high availability with Azure Front Door<\/a>.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">See the\u00a0<a href=\"https:\/\/azure.microsoft.com\/pricing\/details\/frontdoor\/\" target=\"_blank\" rel=\"noopener\">Azure Front Door pricing page<\/a>.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Within the last few years, the complexity and size of distributed denial-of-service (DDoS) attacks have increased dramatically across the industry.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ms_queue_id":[],"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","_alt_title":"","footnotes":"","msx_community_cta_settings":[]},"categories":[1457,1459],"tags":[],"audience":[3053,3056],"content-type":[1481],"product":[1562],"tech-community":[],"topic":[],"coauthors":[1713],"class_list":["post-7509","post","type-post","status-publish","format-standard","hentry","category-networking","category-security","audience-it-decision-makers","audience-it-implementors","content-type-thought-leadership","product-azure-front-door","review-flag-1680286581-295","review-flag-1680286581-364","review-flag-3-1680286581-173","review-flag-4-1680286581-250","review-flag-7-1680286581-146","review-flag-gartn-1680286585-730","review-flag-lever-1680286579-649","review-flag-machi-1680286585-314","review-flag-microsofts","review-flag-new-1680286579-546"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>DDoS Mitigation with Microsoft Azure Front Door | Microsoft Azure Blog<\/title>\n<meta name=\"description\" content=\"Within the last few years, the complexity and size of distributed denial-of-service (DDoS) attacks have increased dramatically across the industry.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DDoS Mitigation with Microsoft Azure Front Door | Microsoft Azure Blog\" \/>\n<meta property=\"og:description\" content=\"Within the last few years, the complexity and size of distributed denial-of-service (DDoS) attacks have increased dramatically across the industry.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Azure Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/microsoftazure\" \/>\n<meta property=\"article:published_time\" content=\"2023-02-16T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-10T12:03:06+00:00\" \/>\n<meta name=\"author\" content=\"Dave Burkhardt\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@azure\" \/>\n<meta name=\"twitter:site\" content=\"@azure\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Dave Burkhardt\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/\"},\"author\":[{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/dave-burkhardt\/\",\"@type\":\"Person\",\"@name\":\"Dave Burkhardt\"}],\"headline\":\"DDoS Mitigation with Microsoft Azure Front Door\",\"datePublished\":\"2023-02-16T00:00:00+00:00\",\"dateModified\":\"2025-06-10T12:03:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/\"},\"wordCount\":953,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\"},\"articleSection\":[\"Networking\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/\",\"name\":\"DDoS Mitigation with Microsoft Azure Front Door | Microsoft Azure Blog\",\"isPartOf\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#website\"},\"datePublished\":\"2023-02-16T00:00:00+00:00\",\"dateModified\":\"2025-06-10T12:03:06+00:00\",\"description\":\"Within the last few years, the complexity and size of distributed denial-of-service (DDoS) attacks have increased dramatically across the industry.\",\"breadcrumb\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog home\",\"item\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Networking\",\"item\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/category\/networking\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"DDoS Mitigation with Microsoft Azure Front Door\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#website\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\",\"name\":\"Microsoft Azure Blog\",\"description\":\"Get the latest Azure news, updates, and announcements from the Azure blog. From product updates to hot topics, hear from the Azure experts.\",\"publisher\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\",\"name\":\"Microsoft Azure Blog\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp\",\"contentUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Azure Blog\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/microsoftazure\",\"https:\/\/x.com\/azure\",\"https:\/\/www.instagram.com\/microsoftdeveloper\/\",\"https:\/\/www.linkedin.com\/company\/16188386\",\"https:\/\/www.youtube.com\/user\/windowsazure\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/person\/c702e5edd662b328b49b7e1180cab117\",\"name\":\"shakir\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g7664e653ea371ce16eaf75e9fa8952c4\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g\",\"caption\":\"shakir\"},\"sameAs\":[\"https:\/\/azure.microsoft.com\"],\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/shakir\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"DDoS Mitigation with Microsoft Azure Front Door | Microsoft Azure Blog","description":"Within the last few years, the complexity and size of distributed denial-of-service (DDoS) attacks have increased dramatically across the industry.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/","og_locale":"en_US","og_type":"article","og_title":"DDoS Mitigation with Microsoft Azure Front Door | Microsoft Azure Blog","og_description":"Within the last few years, the complexity and size of distributed denial-of-service (DDoS) attacks have increased dramatically across the industry.","og_url":"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/","og_site_name":"Microsoft Azure Blog","article_publisher":"https:\/\/www.facebook.com\/microsoftazure","article_published_time":"2023-02-16T00:00:00+00:00","article_modified_time":"2025-06-10T12:03:06+00:00","author":"Dave Burkhardt","twitter_card":"summary_large_image","twitter_creator":"@azure","twitter_site":"@azure","twitter_misc":{"Written by":"Dave Burkhardt","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/#article","isPartOf":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/"},"author":[{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/dave-burkhardt\/","@type":"Person","@name":"Dave Burkhardt"}],"headline":"DDoS Mitigation with Microsoft Azure Front Door","datePublished":"2023-02-16T00:00:00+00:00","dateModified":"2025-06-10T12:03:06+00:00","mainEntityOfPage":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/"},"wordCount":953,"commentCount":0,"publisher":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization"},"articleSection":["Networking","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/","name":"DDoS Mitigation with Microsoft Azure Front Door | Microsoft Azure Blog","isPartOf":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#website"},"datePublished":"2023-02-16T00:00:00+00:00","dateModified":"2025-06-10T12:03:06+00:00","description":"Within the last few years, the complexity and size of distributed denial-of-service (DDoS) attacks have increased dramatically across the industry.","breadcrumb":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/ddos-mitigation-with-microsoft-azure-front-door\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog home","item":"https:\/\/azure.microsoft.com\/en-us\/blog\/"},{"@type":"ListItem","position":2,"name":"Networking","item":"https:\/\/azure.microsoft.com\/en-us\/blog\/category\/networking\/"},{"@type":"ListItem","position":3,"name":"DDoS Mitigation with Microsoft Azure Front Door"}]},{"@type":"WebSite","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#website","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/","name":"Microsoft Azure Blog","description":"Get the latest Azure news, updates, and announcements from the Azure blog. From product updates to hot topics, hear from the Azure experts.","publisher":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/azure.microsoft.com\/en-us\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization","name":"Microsoft Azure Blog","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp","contentUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp","width":512,"height":512,"caption":"Microsoft Azure Blog"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/microsoftazure","https:\/\/x.com\/azure","https:\/\/www.instagram.com\/microsoftdeveloper\/","https:\/\/www.linkedin.com\/company\/16188386","https:\/\/www.youtube.com\/user\/windowsazure"]},{"@type":"Person","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/person\/c702e5edd662b328b49b7e1180cab117","name":"shakir","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g7664e653ea371ce16eaf75e9fa8952c4","url":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g","caption":"shakir"},"sameAs":["https:\/\/azure.microsoft.com"],"url":"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/shakir\/"}]}},"msxcm_display_generated_audio":false,"msxcm_animated_featured_image":null,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Azure Blog","distributor_original_site_url":"https:\/\/azure.microsoft.com\/en-us\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/7509","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/comments?post=7509"}],"version-history":[{"count":1,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/7509\/revisions"}],"predecessor-version":[{"id":41183,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/7509\/revisions\/41183"}],"wp:attachment":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/media?parent=7509"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/categories?post=7509"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/tags?post=7509"},{"taxonomy":"audience","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/audience?post=7509"},{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/content-type?post=7509"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/product?post=7509"},{"taxonomy":"tech-community","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/tech-community?post=7509"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/topic?post=7509"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/coauthors?post=7509"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}