Azure DDoS Protection pricing

Protect your Azure resources from denial of service threats

DDoS Protection enables you to protect your Azure resources from denial of service (DoS) attacks with always-on monitoring and automatic network attack mitigation. There is no upfront commitment, and your total cost scales with your cloud deployment.

Pricing details

The DDoS Protection service will have a fixed monthly charge. The fixed monthly charge includes protection for 100 resources. Protection for additional resources will be charged on a monthly per-resource basis.

Price
Monthly price for DDoS Protection (includes protection for 100 resources) $2944/month
Overage charges (more than 100 resources) $30 per resource per month

DDoS Protection is enabled at the Virtual Network level. All protected resource types within the Virtual Network will be automatically protected when DDoS Protection is enabled on the Virtual Network. The WAF discount applies to Application Gateway WAF instances deployed into protected Virtual Networks.

Pricing Examples

Example 1 DDoS Protection Standard Plan in a single subscription and multiple VNETs

Let’s assume you have only 1 subscription in your tenant. You create DDoS Plan in that subscription. That subscription will be billed $2944/month. Now the same DDoS Plan can be linked to any number of VNET in that subscription to the same plan.

Total monthly bill for DDoS Standard will be $2944/month = $2944/month.

Example 2 DDoS Protection Standard Plan across the tenant (multiple subscriptions) and multiple VNETs

Let’s assume you have 10 subscriptions in your tenant. You create DDoS Plan in subscription # 1. The subscription # 1 will be billed $2944/month. The same plan can now be linked to any VNET across all your 10 subscriptions and across different regions.

Total monthly bill for DDoS Standard will be $2944/month = $2944/month.

Example 3 DDoS Protection Standard Plan across the tenant (multiple subscriptions) and multiple VNETs with more than 100 Public IPs.

Let’s assume you have 10 subscriptions in your tenant. You create DDoS Plan in subscription # 1. The subscription # 1 will be billed $2944/month. The same plan can now be linked to any VNET across all your 10 subscriptions and across different regions. Let’s assume that there are total 110 public IPs that are protected by DDoS Std. (DDoS Plan). For each public IP above 100, there’s a $30 per resource per month charge.

Total monthly bill for DDoS Standard will be $2944/month + $295 per resource per month (10 public IPs above 100) = $3238/month.

If the resource is protected with DDoS Protection Standard, any scale out costs during a DDoS attack are covered and customer will get the cost credit back for those scaled out resources.

Examples of resources:

  • Data process (ingress/egress) for Azure firewall, AppGW/WAF
  • Scale out of VMs, AKS
  • Data egress for network bandwidth-happens during an amplification attack when DDoS impacted app makes outbound connections.
  • Scale out of backend PaaS resources like SQL, CosmosDB, Storage, App Services etc.

Support & SLA

  • We provide technical support for all Azure services released to general availability, including VPN Gateway, through Azure Support, starting at $29/month. Billing and subscription management support is provided at no cost.
  • SLA—To learn more about our SLA, please visit the SLA page

FAQ

  • Resources are counted at the enrollment level. Monthly price for DDoS Protection and overage charges will be billed against the subscription that is associated with the DDoS Protection Plan. Data processing charges will be billed against their corresponding subscriptions.
  • A resource is a Public IP attached to an IaaS VM, Load Balancer (Classic & Standard Load Balancers), Application Gateway (including WAF) cluster, Service Fabric or an IaaS based Network Virtual Appliance (NVA). Additional protected resources may be added in the future.
  • If your DDoS Protection service is active for the entire month, you will be charged the monthly fee regardless of usage. However, if your service was active only for a portion of the month, you would only receive a prorated bill for the hours used and data transfer overage incurred.

Resources

Estimate your monthly costs for Azure services

Review Azure pricing frequently asked questions

Learn more about Azure DDoS Protection

Review technical tutorials, videos, and more resources

Added to estimate. Press 'v' to view on calculator

Get started with DDoS Protection