Implementing Azure Distributed Denial of Service (DDoS) Protection
A DDoS attack is a collection of attack types aimed at disrupting the availability of a target by overwhelming it with malicious traffic. The Azure DDoS protection service enables us to protect our internet-facing virtual network workloads from DDoS attacks before the availability of our service is impacted (Figure 6.1).
The service identifies malicious attempts to overwhelm the network and blocks them before they reach our Azure resources. Legitimate traffic from customers still flows into Azure without any interruption (Figure 6.1). It uses the scale and elasticity of Microsoft's global network to mitigate DDoS attacks at the Azure network edge.
Before we get into more details on this service, let's review the different categories of DDoS attacks so that we are clear on what this service protects against and what it does not. There are three main categories of common DDoS attacks:
- Volumetric...
