Securing the Azure virtual network perimeter
A network perimeter is a boundary that separates the public internet and our private virtual networks in Azure (see Figure 8.1). The objectives of securing the network perimeter are to keep out bad traffic, such as DDoS attacks, and to protect our network from unauthorized access and threats coming from an external network.
Azure offers several services to help with this, including the DDoS Protection service, Azure Firewall, Azure Web Application Firewall, and third-party security Network Virtual Appliance options.
Figure 8.1 – Azure network perimeter security
Figure 8.1 shows the main perimeter security services that we will talk about in this chapter and how they fit into an Azure network architecture. We will begin by discussing the Azure DDoS protection service in the next section.
