Azure DDoS Protection
Always-on network-layer DDoS mitigation plan attached to virtual networks or public IPs.
- Provider
- azure
- Category
- Security
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| adaptiveThresholds | boolean | — | no | — | ▸ true |
| alwaysOn | boolean | — | no | — | ▸ true |
| costProtection | boolean | — | no | false | inherited |
| infrastructureProtection | boolean | — | no | true | inherited |
| managed | boolean | — | no | false | ▸ true |
| mitigationPolicies | integer | — | no | 3 | inherited |
| protectedResourceCount | integer | — | no | — | inherited |
| rapidResponseSupport | boolean | — | no | false | inherited |
| scope | enum | network | application | both | no | — | ▸ network |
| telemetry | boolean | — | no | — | ▸ true |
| tier | enum | network-protection | ip-protection | no | — | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "ddos-protection", component: "azure-ddos-protection" }Anti-DDoS Originalibaba-anti-ddos-originAnti-DDoS Proalibaba-anti-ddos-proGame Shieldalibaba-game-shieldAWS Shieldaws-shieldCloudflare DDoS Protectioncloudflare-ddos-protectionCloudflare Magic Transitcloudflare-magic-transitGeneric DDoS protection planddos-protectionNETSCOUT Arbor DDoSnetscout-arborRadware DefenseProradware-defenseproDigitalOcean DDoS Protectiondigitalocean-ddos-protection
# yaml-language-server: $schema=../../schema/component.schema.json # Azure DDoS Protection: layer 3 and 4 protection plan attached to virtual networks or public IPs. # "Azure DDoS Protection Overview": always-on traffic monitoring 24x7, adaptive real-time tuning, # three auto-tuned mitigation policies (TCP SYN, TCP, UDP) per protected public IP, plus telemetry. schemaVersion: "1" type: "component" id: "azure-ddos-protection" kind: "ddos-protection" provider: "azure" docs: "https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview" defaults: managed: true scope: "network" alwaysOn: true adaptiveThresholds: true telemetry: true properties: tier: type: "enum" values: ["network-protection", "ip-protection"] mitigationPolicies: type: "integer" default: 3 infrastructureProtection: type: "boolean" default: true rapidResponseSupport: type: "boolean" default: false costProtection: type: "boolean" default: false