Azure DDoS Protection

Create And Configure DDoS Protection

Create a New Plan

We can create an Azure resource group using the New-AzResourceGroup. Let us create a new resource group named CodingNinjas.

New-AzResourceGroup -Name CodingNinjas -Location "South Asia"

We can now create a new DDoS protection plan using the following code,

New-AzDdosProtectionPlan -ResourceGroupName CodingNinjas -Name NinjaDdosProtectionPlan -Location "South Asia"

Enable DDoS for Virtual Networks

We can enable DDoS for a new Virtual Network using the following commands,

#Fetch existing DDoS protection plan ID
$PlanID = Get-AzDdosProtectionPlan -ResourceGroupName CodingNinjas -Name NinjaDdosProtectionPlan

#Create a new virtual network
New-AzVirtualNetwork -Name VirtualNetwork -ResourceGroupName CodingNinjas -Location "South Asia" -AddressPrefix 10.0.0.0/16 -DdosProtectionPlan $PlanID -EnableDdosProtection

For an existing Virtual Network, we can use the following command,

#Fetch existing DDoS protection plan ID
$PlanID = Get-AzDdosProtectionPlan -ResourceGroupName CodingNinjas -Name NinjaDdosProtectionPlan

#Fetch existing version of the virtual network
$virtualNetwork = Get-AzVirtualNetwork -Name VirtualNetwork -ResourceGroupName CodingNinjas
$virtualNetwork.DdosProtectionPlan = New-Object Microsoft.Azure.Commands.Network.Models.PSResourceId

# Update and enable DDoS protection plan
$virtualNetwork.DdosProtectionPlan.Id = $PlanID.Id
$virtualNetwork.EnableDdosProtection = $true
$virtualNetwork | Set-AzVirtualNetwork

Validating and Testing

We can verify the details of the existing DDoS protection plan using the following command,

Get-AzDdosProtectionPlan -ResourceGroupName CodingNinjas -Name NinjaDdosProtectionPlan

We can further check the details of our Virtual Network and verify whether the plan is activated using the following command,

Get-AzVirtualNetwork -Name VirtualNetwork -ResourceGroupName CodingNinjas

Cleaning Resources

We can delete an existing resource group using the Remove-AzResourceGroup command.

(Note: Deleting the Azure resource group will also delete the Azure DDoS protection plan associated with it.)

Remove-AzResourceGroup -Name CodingNinjas

We can disable the Azure DDoS protection plan for a virtual network using the following set of commands,

$virtualNetwork = Get-AzVirtualNetwork -Name Virtual Network -ResourceGroupName CondingNinjas
$virtualNetwork.DdosProtectionPlan = $null
$virtualNetwork.EnableDdosProtection = $false
$virtualNetwork | Set-AzVirtualNetwork

Frequently Asked Questions

What is DDoS?

DDoS stands for Distributed Denial of Service. DDoS is a networking attack used to disturb the traffic to a dedicated server, network, or service by flooding the target with unwanted internet traffic.

What is the Azure DDoS Protection Plan?

Azure DDoS protection plan is a security measure that is used to provide an enhanced security measure against all sorts of DDoS attacks.

What is Azure?

Azure is one of the largest Cloud Services provided by Microsoft. Azure is generally used for application management. Azure provides the clients with Platform as a Service(PaaS), Software as a Service(SaaS), and Infrastructure as a Service(IaaS).

What is Cloud?

Cloud is nothing but the servers that are accessed over the internet. It also consists of the software and the database used to run these servers.

What is the pricing to set up the Azure DDoS protection plan?

The DDoS protection plans cost $2,944 per month for a hundred public IP addresses. Any additional resources can be added for $30 per month.

Conclusion

This blog covered all the necessary points about the Azure DDoS protection plan. We further looked at the features of the Azure DDoS protection plan. We also learned to set up Azure DDoS protection using Azure PowerShell.

Do check out our blogs on object-oriented programming and data structures. 

Don’t stop here. Check out Coding Ninjas for more unique courses and guided paths. Also, try Coding Ninjas Studio for more exciting articles, interview experiences, and fantastic Data Structures and Algorithms problems.