Securing the Azure virtual network perimeter
A network perimeter is the outer boundary between the untrusted public internet and our Azure virtual network resources (Figure 6.1). This is where we have to start in any discussion regarding securing our Azure virtual networks. There are two main objectives of network perimeter security:
- To filter Distributed Denial of Service (DDoS) attacks before they can cause a denial of service for legitimate users of services hosted in our networks. The Azure platform has a service that we can use to achieve this objective – the Azure DDoS Protection service.
- To protect virtual network workloads against malicious ingress and egress network traffic originating from external networks. The Azure platform has various services that we can use to achieve this objective. The ones that we will cover in this chapter are the ones that we can use depending on our requirements: Azure Firewall, Azure Web Application Firewall, and Network Virtual...
