Trace Id is missing
Skip to main content
Azure

Azure DDoS Protection

Protect your Azure resources and prevent distributed denial-of-service (DDoS) attacks.
Get started with Azure
OVERVIEW

Apply always-on monitoring and automatic DDoS network attack mitigation

  • Apply adaptive threat intelligence that automatically detects and mitigates even the most complex DDoS attacks.
    A person with short hair is focusing on a screen in front of them. They are indoors and wearing a dark green top.
  • Utilize massive DDoS mitigation capacity that scrubs traffic at the network edge before it impacts applications.
    Two men stand together in a modern office, looking at a computer screen and smiling.
  • Enable full visibility into DDoS attacks with actionable insights for quick responses.
    Screenshot of Azure DDoS Protection workbook
  • Execute easy-to-deploy, multilayered DDoS protection immediately helping safeguard all resources on Azure virtual networks upon enablement.
    Screenshot of a page to create a DDoS Protection plan.
FEATURES

Secure your network with Azure DDoS Protection

Monitor your app traffic patterns for anomalies

Use adaptive tuning that compares actual traffic against thresholds defined in your DDoS policy.

Set up multilayer DDoS protection in minutes

Defend against a comprehensive set of network layer (layer 3/4) attacks, and from common application layer (layer 7) attacks with powerful and easy-to-enable tools.

Interoperate seamlessly with other Azure services

Provide comprehensive protection and performance with Azure Monitor, Microsoft Defender for Cloud, Microsoft Sentinel, and the full suite of Microsoft security services.

Eliminate critical business impact with rapid response

Call on the DDoS Protection rapid response team to help with investigation, custom mitigation, and analysis—within a 15-minute SLA.

Avoid unforeseen costs of DDoS attacks

Help reduce the costs of DDoS-related usage spikes, such as app-scaling charges and bandwidth surges.

Choose the service that’s right for you

Meet the protection and cost needs of your organization—whether it’s a small to medium-sized business or an enterprise—with Network Protection or IP Protection.
Security

Built-in security and compliance 

Microsoft has committed to investing $20 billion in cybersecurity over five years.
We employ more than 8,500 security and threat intelligence experts across 77 countries.
Azure has one of the largest compliance certification portfolios in the industry.
Learn more about security on Azure
A person with short, curly hair uses a tablet in a clothing store.
PRICING

Explore Azure DDoS pricing

Help protect your Azure resources from DDoS attacks, with no upfront commitments, no termination fees, and cost that scales with your cloud deployment.
See Azure DDoS Protection pricing

Azure Firewall

Protect your resources with a managed, cloud-based network security service.
Learn more

Azure Firewall Manager

Get centralized configuration and management across multiple Azure Firewall instances.
Learn more

Azure Web Application Firewall

Protect web apps from common web-hacking techniques and security vulnerabilities with this cloud-native service.
Learn more

Azure Network Watcher

Enhance network performance with this monitoring and diagnostics solution.
Learn more

Azure Bastion

Protect your virtual machines with more secure remote access.
Learn more
Back to RELATED PRODUCTS & SERVICES section

Plan infrastructure tailored to you

Build your network with purpose with a secure, performant, and cost-effective solution for your business needs.
Learn more
CUSTOMER STORIES

See what customers are doing with Azure DDoS Protection

  1. Logo for VECOZO, featuring text in blue capital letters and three slanted bars to the left: two blue and one yellow.
  2. A logo with the text "CIVIA" in black capital letters. The dots above the "i" are green.
Two men sit at a desk, one wearing glasses and pointing at something on a computer screen.
Logo for VECOZO, featuring text in blue capital letters and three slanted bars to the left: two blue and one yellow.
“In our on-premises environment, each security layer was standalone, presented in several dashboards. In Azure, we wanted to focus not only on the available solutions, but also combining their functionalities into a single easy-to-deploy, easy-to-manage, highly secure environment.”
André Beerendonk, Team Manager for IT Operations, VECOZO
Aerial view of a valley with a partially frozen lake, surrounded by snow-capped mountains, forests, and a town background.
A logo with the text "CIVIA" in black capital letters. The dots above the "i" are green.
“We need providers like Microsoft that we can trust so we can focus on the business. We use Azure DDoS Network Protection and Azure Web Application Firewall on Azure Application Gateway to protect our business-critical workloads and data streams across our environment.”
Marius Matonis, Senior Technical Lead, Elvia
Back to CUSTOMER STORIES section
RESOURCES

Get started with Azure DDoS Protection

  1.
A man wearing glasses and an orange sweater works at a desk with papers and a laptop in a modern office space.
Documentation

Dive deeper into DDoS Protection

Learn about DDoS Network Protection and DDoS IP Protection.
Learn more
A woman sitting at a desk in an office, reading documents. The background shows another person working at a separate desk.
Service level agreement

Read the SLA

Discover more about the financially backed service level agreement for Azure DDoS Protection.
Learn more
Four people sitting at a round table in a cozy cafe, engaged in conversation.
Service status

See the current DDoS Protection status

Visit the Azure Status page to check current service health.
View status
A woman wearing glasses and a black leather jacket sits at a table, working on an open laptop.
Regions

Check regional availability

Find out if Azure DDoS Protection is available in your region.
See availability
Three people engaged in a discussion around a table, with one woman in a grey blazer gesturing while speaking.
Azure updates

Check for DDoS updates.

Read the most recent news about Azure DDoS Protection.
Learn more
Back to RESOURCES section
FAQ

Frequently asked questions

  • Distributed denial of service (DDoS) is a type of attack where an attacker sends more requests to an application than the application is capable of handling. This depletes resources, affecting the application's availability and its ability to service customers. Over the past few years, companies have experienced a sharp increase in these attacks, which are becoming more sophisticated and larger in magnitude. DDoS attacks can target any endpoint that's publicly reachable through the internet.
  • DDoS Protection products, combined with application design best practices, provide enhanced DDoS mitigation features to defend against DDoS attacks. It's automatically tuned to help protect your specific Azure resources in a virtual network. It has several advantages over the default platform-level DDoS protection, including logging, alerting, and telemetry. See DDoS Network Protection Overview for more details.   
  • DDoS Protection is zone-resilient by default, and managed by the service itself. No customer configuration is necessary to enable zone resiliency.
  • Use the Azure DDoS Protection service in combination with a web application firewall (WAF) for protection both at the network layer (layer 3 and 4, offered by DDoS Protection) and at the application layer (layer 7, offered by a WAF). Offerings include Application Gateway WAF and other web application firewall apps available in Azure Marketplace.
  • Public IPs in an Azure Resource Manager-based Azure Virtual Network are currently the only type of protected resource. Platform as a Service (PaaS) services (multitenant) are not supported. See About Azure DDoS Protection tier comparison for details.
  • The metrics of an attack should be visible on the portal within 5 minutes. If your resource is under attack, other metrics will start showing up on portal within 5 to 7 minutes.
Two people are sitting at a table with open laptops, discussing the contents on the screen
Account signup

Get started with a free account

Start with $200 Azure credit.
Try Azure for free
A person wearing glasses and a green sweater works on a laptop at a desk with a small potted plant and a cup of pencils.
Account signup

Get started with pay-as-you-go pricing

There’s no upfront commitment—cancel anytime.
Create a pay-as-you-go account
AI-powered assistant