Questions tagged [azure-ddos]

This tag is specific to Azure DDoS protection. It is not for generic DoS or DDoS usage.

Azure DDoS protection is described at https://review.learn.microsoft.com/en-us/azure/virtual-network/ddos-protection-overview.

DDoS Protection provides always-on network flow monitoring of the protected endpoints, and when a DDoS attack is detected, automatically applies mitigation to ensure only legitimate traffic reaches the service. DDoS Protection provides customers with the peace of mind that their services are protected from the impacts of DDoS attacks.

15 questions
7
votes
2 answers

Microsoft Azure DDOS protection

I am running an enterprise scale application in Microsoft Azure. I wanted to know what the recommendations are for DDOS projection in Microsoft Azure. The documentation clearly states that the platform is protected from DDOS with not much more…
Tariq
  • 1,449
  • 2
  • 14
  • 17
1
vote
1 answer

In the Azure portal where do I turn on DDoS IP protection for an azure app service? eg an API

I can't see in the portal where to enable this for my azure app service? I can see at the vnet level the option is there... but that will give me "Azure DDoS Network Protection" which is thousands of dollars per month. I just want to enable for the…
Andrew Duffy
  • 795
  • 2
  • 17
  • 37
1
vote
0 answers

Terraform: Destroying/Disabling azurerm_network_ddos_protection_plan

I manage a Azure environment via Terraform and each one of them has DDOS Protection Plan enabled. I was instructed to disable and delete DDOS on all non-prod environment. The code is ready and the plan shows that the…
Maki
  • 439
  • 1
  • 6
  • 17
1
vote
1 answer

How do you stop malicious requests in Azure APIM from repeatedly hitting your rate or quota limits?

You have an open facing Azure API Gateway that can be consumed by anyone and you want to protect yourself from the API being spammed by the same IP or the same individual behind multiple IP's. There are policies one can configure within API…
8protons
  • 3,591
  • 5
  • 32
  • 67
1
vote
1 answer

Azure managed service DDOS protection

I am working on project hosted in Azure, and that project uses Azure services under the hood, such as Device Provisioning Service and SignalR. So, question is quite simple - how to mitigate DDOS attacks to Azure SignalR and Device Provisioning…
vfabi
  • 11
  • 1
1
vote
1 answer

Microsoft Azure DDoS protection alert not recevied

I have implemented Azure DDos with standard(paid) and also setup alert. But I get 45,000 attack on my server and did not received any alert related to it. Can anyone tell where I have done any mistake or left configuration related to DDos. Let me…
1
vote
1 answer

Does the Azure Network Security Group (NSG) stateful firewall block all (UDP and TCP) reflection DDoS Attackss?

Based on my testing, the Azure Network Security Group (NSG) stateful firewall blocks all (UDP and TCP) reflection DDoS Attacks? I did my test by programmatically just creating an NSG incoming tcp port 80,443 allow rule. Is that all I need to do? …
Todd Booth
  • 267
  • 1
  • 3
  • 12
1
vote
1 answer

What would happen if Google changed their A Records to point to my Azure app service?

Purely hypothetical here, but I have been dealing with (accidental) DDoS attacks on one of our web servers in the recent past, and was always curious what would happen if you completely opened the flood gates. Obviously, anything hosted on that…
Keith
  • 5,311
  • 3
  • 34
  • 50
0
votes
1 answer

Details about DDoS protection for Azure Static Web App

We are using Azure Static Web App for hosting a web-precense. Right now I am asking myself, if/how an Azure SWA is DDos protected. As the SWA is not part of a VNET, the optional Azure DDoS Protection can not be applied. References I found so…
Markus Schulte
  • 4,171
  • 3
  • 47
  • 58
0
votes
1 answer

doesn't Azure AppService with WAF (non-isolated) still remains publicly accessible?

Assuming I'm using non-isolated app service, the recommendation to protect web app against ddos kind of attack is to put firewall in front of it. My Question: Even if I have done following: App Service (IP configured to allow WAF IPs only) -- WAF…
rahulga
  • 23
  • 2
0
votes
0 answers

Load Balancing in Azure - Subdomains AND SignalR

I am creating a standard multi-tenant site that has the following structure: example.com tenant1.example.com tenant2.example.com The hosting is Azure web apps. Tenants are generated dynamically (there could be many) and the site includes real-time…
0
votes
1 answer

Azure Logic Apps - Disable/Limit based on Runs Started

I have an Azure Logic App that provides a publicly accessible HTTPS URL to trigger the Azure logic app. The Logic App does a number of data manipulations and so on and then sends a response back to the requester. This is working well but I am…
wwalford
  • 3
  • 2
0
votes
0 answers

How to make ddos attack to my web application?

Hi I have developed web application in angular 5 and hosted in azure cloud. I am trying to prevent ddos attach to my application. I have added below code in my web.config.
Niranjan
  • 537
  • 2
  • 14
  • 31
0
votes
2 answers

Azure DDOS for web role?

Can Azure DDOS Standard protect a cloud service web role? My understanding is that Azure DDOS protection is on a Virtual Network basis, and Cloud Services can only be deployed to a Virtual Network "Classic", rather than the newer Resource-group…
user2977157
  • 91
  • 1
  • 5
-1
votes
1 answer

How to test dynamic ip restriction in Azure App?

Hi I have developed SPA web application in Angular. I am using VS2017 and I am using MVC template. I have deployed my app in azure. My project has some server side code as well. I have added below policy to restrict concurrent requests to my web…
Niranjan
  • 537
  • 2
  • 14
  • 31