What is Azure DDoS Protection?
Azure DDoS Protection protects applications from volumetric, protocol-based, and application layer attacks. The service uses machine learning for adaptive detection and automatic mitigation.
Core Features
- Always-on traffic monitoring
- Adaptive tuning based on application profile
- Attack analytics and reporting
- Cost guarantee for DDoS-related scale costs
- Integration with Azure Monitor and Security Center
Typical Use Cases
- Protection of publicly accessible web applications
- Gaming platforms with high traffic
- Financial service providers with compliance requirements
Benefits
- No performance impact during normal operation
- Automatic detection without manual configuration
- Cost guarantee for DDoS-related additional costs
- Native integration with Azure network services
Integration with innFactory
As a Microsoft Solutions Partner, innFactory supports you with Azure DDoS Protection: architecture review, implementation, incident response, and optimization of protection profiles.
Frequently Asked Questions
What is the difference between Basic and Standard?
Basic is free and protects Azure infrastructure. Standard offers application-specific protection, adaptive detection, attack analytics, and cost guarantee.
How does adaptive detection work?
Machine learning analyzes normal traffic patterns of your application and detects anomalies. Protection is automatically activated when attacks are detected.
What does the cost guarantee cover?
With Standard, DDoS-related scale-out costs (VMs, App Services, bandwidth) are reimbursed. Up to 100% of additional costs are covered.
How quickly does the protection respond?
Attacks are detected and mitigated within seconds. There are no manual interventions or wait times.
