Azure DDoS Protection

AzureSecurityFree tier available

Managed Distributed Denial-of-Service protection for Azure resources with always-on traffic monitoring, adaptive real-time tuning, cost-guarantee protection against scale-out attacks, and integration with Azure Monitor for attack analytics and telemetry

Jurisdictional exposure

Provider HQ
USRedmond, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations
APACCNEEAEUUKUSOther74 regions across 7 jurisdictions
Sovereign option
Yes — 13 sovereign-flagged regions available

Attributes

SLA Uptime
99.99%

Sub-services (3)

Network Protection (free tier)

Always-on passive protection included free with every Azure subscription

IP Protection

Paid per-IP protection with adaptive tuning and DDoS response team access

Network Protection

Paid VNet-scope protection bundling analytics, cost protection, and WAF discount

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

74 regions
36 countries
13sovereign
Sovereign regions (13)
  • Australia Central · CanberraAzure Australia Government
  • Australia Central 2 · CanberraAzure Australia Government
  • US Gov Virginia · VirginiaAzure Government (US)
  • US Gov Arizona · ArizonaAzure Government (US)
  • US Gov Texas · TexasAzure Government (US)
  • US DoD East · VirginiaAzure Government (US DoD regions)
  • US DoD Central · IowaAzure Government (US DoD regions)
  • China North (Beijing) · BeijingMicrosoft Azure operated by 21Vianet
  • China East (Shanghai) · ShanghaiMicrosoft Azure operated by 21Vianet
  • China North 2 · BeijingMicrosoft Azure operated by 21Vianet
  • China East 2 · ShanghaiMicrosoft Azure operated by 21Vianet
  • China North 3 · HebeiMicrosoft Azure operated by 21Vianet
  • China East 3 · ShanghaiMicrosoft Azure operated by 21Vianet
Commercial regions (61)

Europe (21)

  • Austria East
  • Belgium Central
  • Denmark East
  • Finland Central
  • France South
  • France Central
  • Germany North
  • Germany West Central
  • Greece Central
  • North Europe
  • Italy North
  • West Europe
  • Norway East
  • Norway West
  • Poland Central
  • Spain Central
  • Sweden Central
  • Switzerland West
  • Switzerland North
  • UK West
  • UK South

North America (13)

  • Canada East
  • Canada Central
  • Mexico Central
  • West US
  • East US 3
  • North Central US
  • Central US
  • West US 3
  • South Central US
  • East US
  • East US 2
  • West US 2
  • West Central US

South America (3)

  • Brazil Southeast
  • Brazil South
  • Chile Central

Asia (14)

  • East Asia
  • South India
  • India South Central
  • Jio India West
  • West India
  • Jio India Central
  • Central India
  • Indonesia Central
  • Japan West
  • Japan East
  • Malaysia West
  • Southeast Asia
  • Korea South
  • Korea Central

Oceania (3)

  • Australia East
  • Australia Southeast
  • New Zealand North

Middle East (5)

  • Israel Central
  • Qatar Central
  • Saudi Arabia Central
  • UAE Central
  • UAE North

Africa (2)

  • South Africa West
  • South Africa North

Tags

Equivalent services on other platforms

ProlexicAkamai

Network-layer DDoS protection that routes customer traffic through Akamai scrubbing centres, on demand via BGP or always on, to defend data centres and internet-facing infrastructure

Anti-DDoSAlibaba

DDoS mitigation family covering free Anti-DDoS Origin basic protection, Anti-DDoS Origin for cloud assets and Anti-DDoS Proxy (including outside mainland China) for scrubbing volumetric and application-layer attacks

AWS ShieldAWS

Managed DDoS protection service with always-on Standard tier for CloudFront and Route 53 edge, and Advanced tier adding 24/7 DDoS Response Team access, cost protection, and enhanced Layer 7 detection

Catalyst Cloud Ingress ProtectionCatalyst

Layer 3/4 volumetric DDoS mitigation powered by Cloudflare that flags excessive inbound traffic and blocks its sources. The Basic tier is included free with all accounts.

Cloudflare Magic TransitCloudflare

L3 DDoS scrubbing and IP transit for enterprise data centres — BGP advertises customer prefixes from Cloudflare's edge, clean traffic flows back via GRE / IPsec / private peering. Sub-3-second time-to-mitigation with no rerouting on the customer side.

Cloudflare SpectrumCloudflare

L4 TCP / UDP reverse proxy through Cloudflare's edge for any protocol — SSH, RDP, game servers, FTP, MQTT, custom binary. DDoS protection and edge acceleration applied to non-HTTP traffic that the CDN proxy can't see.

Cloudflare DDoS ProtectionCloudflare

Automatic, unmetered DDoS detection and mitigation at layers 3/4 and 7 on every Cloudflare plan, including Free, with managed rulesets that can be tuned per zone or account.

Cloud Temple Anti-DDoSCloud Temple

Always-on protection against volumetric DDoS attacks, with automatic real-time detection and mitigation upstream of customer infrastructure and up to 1 Tb/s absorption capacity; included with Internet access via Private Backbone

Gcore DDoS ProtectionGcore

Network DDoS protection with a free Basic mode (ACL filtering and null-routing for Gcore-hosted resources) and paid Advanced always-on scrubbing against L3/L4/L7 attacks, onboarded via GRE tunnels with sub-second detection

Cloud ArmorGCP

Edge DDoS protection and web application firewall with managed rule sets for OWASP Top 10, adaptive bot protection, and reCAPTCHA Enterprise integration

IBM Cloud Internet ServicesIBM

Edge delivery and security bundle powered by Cloudflare, offering DNS, global load balancing, WAF, DDoS protection, CDN, rate limiting, and Page Rules through a single IBM Cloud-native control plane

IONOS DDoS ProtectIONOS

Always-on volumetric and protocol-level DDoS mitigation at the network edge, with automatic detection and scrubbing for L3/L4 attacks targeting Compute Engine, Load Balancer, and Public IP resources

Pricing

Pricing model:freemium