You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Customer intent: As a cloud administrator, I want to enable DDoS IP Protection on a public IP address using the CLI, so that I can enhance the security of my applications against distributed denial-of-service attacks.
11
11
---
@@ -41,9 +41,11 @@ To create a resource group, use [az group create](/cli/azure/group#az-group-crea
41
41
42
42
## Enable DDoS IP Protection on a public IP address
43
43
44
-
### New public IP address
44
+
You can enable DDoS IP Protection when creating a new public IP address or for an existing public IP address. Select the tab for your scenario.
45
45
46
-
You can enable DDoS IP Protection when creating a public IP address. In this example, we'll name our public IP address _myStandardPublicIP_:
46
+
# [New public IP address](#tab/new-ip)
47
+
48
+
In this example, we'll name our public IP address _myStandardPublicIP_:
47
49
48
50
```azurecli-interactive
49
51
az network public-ip create \
@@ -55,7 +57,7 @@ You can enable DDoS IP Protection when creating a public IP address. In this exa
55
57
--ddos-protection-mode Enabled
56
58
```
57
59
58
-
### Existing public IP address
60
+
#[Existing public IP address](#tab/existing-ip)
59
61
60
62
You can enable DDoS IP Protection on an existing public IP address.
61
63
@@ -66,7 +68,9 @@ You can enable DDoS IP Protection on an existing public IP address.
66
68
--ddos-protection-mode Enabled
67
69
```
68
70
69
-
### Disable DDoS IP Protection:
71
+
---
72
+
73
+
## Disable DDoS IP Protection for a public IP address
70
74
71
75
You can disable DDoS IP Protection on an existing public IP address.
Copy file name to clipboardExpand all lines: articles/ddos-protection/manage-ddos-ip-protection-portal.md
+10-5Lines changed: 10 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ author: AbdullahBell
5
5
ms.author: abell
6
6
ms.service: azure-ddos-protection
7
7
ms.topic: quickstart
8
-
ms.date: 03/17/2025
8
+
ms.date: 01/26/2026
9
9
ms.custom: template-quickstart
10
10
# Customer intent: "As a network administrator, I want to configure DDoS IP protection for my public IP address, so that I can safeguard my application from distributed denial-of-service attacks."
11
11
---
@@ -20,14 +20,16 @@ In this quickstart, you enable DDoS IP protection and link it to a public IP add
20
20
## Prerequisites
21
21
22
22
- Create a [free account](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn) before you begin.
23
-
- Sign in to the [Azure portal](https://portal.azure.com).
23
+
- Sign in to the [Azure portal](https://portal.azure.com).
24
24
25
25
## Enable DDoS IP Protection on a public IP address
26
26
27
+
You can enable DDoS IP Protection when creating a new public IP address or for an existing public IP address. Select the tab for your scenario.
28
+
27
29
> [!IMPORTANT]
28
30
> Ensure that your account is assigned to the [network contributor](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json#network-contributor) role or to a [custom role](../role-based-access-control/custom-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json) that is assigned the appropriate actions listed in the how-to guide on [Permissions](manage-permissions.md).
29
31
30
-
### Create a public IP address
32
+
#[New public IP address](#tab/new-ip)
31
33
32
34
1. Select **Create a resource** in the upper left corner of the Azure portal.
33
35
1. Select **Networking**, and then select **Public IP address**.
@@ -52,7 +54,7 @@ In this quickstart, you enable DDoS IP protection and link it to a public IP add
52
54
53
55
1. Select **Review + create** to review your settings and create the public IP address.
54
56
55
-
### Enable for an existing Public IP address
57
+
#[Existing public IP address](#tab/existing-ip)
56
58
57
59
1. In the search box at the top of the portal, enter **public IP Address**. Select **public IP Address**.
58
60
1. Select your Public IP address. In this example, select **myStandardPublicIP**.
@@ -62,14 +64,17 @@ In this quickstart, you enable DDoS IP protection and link it to a public IP add
62
64
63
65
1. In the **Configure DDoS protection** pane, under **Protection type**, select **IP**, then select **Save**.
64
66
65
-
### Disable for a Public IP address:
67
+
---
68
+
69
+
## Disable DDoS IP Protection for a public IP address
66
70
67
71
1. Enter the name of the public IP address you want to disable DDoS IP Protection for in the **Search resources, services, and docs box** at the top of the portal. When the name of public IP address appears in the search results, select it.
68
72
1. Under **Properties** in the overview pane, select **DDoS Protection**.
69
73
1. Under **Protection type** select **Disable**, then select **Save**.
70
74
71
75
> [!NOTE]
72
76
> When changing DDoS IP protection from **Enabled** to **Disabled**, telemetry for the public IP resource will no longer be active.
77
+
73
78
## Validate and test
74
79
75
80
First, check the details of your public IP address:
Copy file name to clipboardExpand all lines: articles/ddos-protection/manage-ddos-protection-cli.md
+9-5Lines changed: 9 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ author: AbdullahBell
6
6
ms.service: azure-ddos-protection
7
7
ms.topic: quickstart
8
8
ms.custom: devx-track-azurecli
9
-
ms.date: 03/17/2025
9
+
ms.date: 01/26/2026
10
10
ms.author: abell
11
11
# Customer intent: As a network administrator, I want to create and configure a DDoS protection plan using Azure CLI, so that I can enhance the security of my virtual networks against DDoS attacks.
12
12
---
@@ -51,9 +51,11 @@ az network ddos-protection create \
51
51
52
52
## Enable DDoS protection for a virtual network
53
53
54
-
### Enable DDoS protection for a new virtual network
54
+
You can enable DDoS protection when creating a new virtual network or for an existing virtual network. Select the tab for your scenario.
55
55
56
-
You can enable DDoS protection when creating a virtual network. In this example, we'll name our virtual network _MyVnet_:
56
+
# [New virtual network](#tab/new-vnet)
57
+
58
+
In this example, we'll name our virtual network _MyVnet_:
### Enable DDoS protection for an existing virtual network
71
+
#[Existing virtual network](#tab/existing-vnet)
70
72
71
73
When [creating a DDoS protection plan](#create-a-ddos-protection-plan), you can associate one or more virtual networks to the plan. To add more than one virtual network, list the names or IDs, space-separated. In this example, we'll add _MyVnet_:
72
74
@@ -91,7 +93,9 @@ az network vnet update \
91
93
--ddos-protection true
92
94
```
93
95
94
-
### Disable DDoS protection for a virtual network
96
+
---
97
+
98
+
## Disable DDoS protection for a virtual network
95
99
96
100
Update a given virtual network to disable DDoS protection:
# Customer intent: As a cloud engineer, I want to enable DDoS IP protection for a public IP address using PowerShell, so that I can strengthen my infrastructure against potential DDoS attacks.
11
11
---
@@ -30,7 +30,11 @@ In this QuickStart, you'll enable DDoS IP protection and link it to a public IP
30
30
31
31
## Enable DDoS IP Protection for a public IP address
32
32
33
-
You can enable DDoS IP Protection when creating a public IP address. In this example, we'll name our public IP address _myStandardPublicIP_:
33
+
You can enable DDoS IP Protection when creating a new public IP address or for an existing public IP address. Select the tab for your scenario.
34
+
35
+
# [New public IP address](#tab/new-ip)
36
+
37
+
In this example, we'll name our public IP address _myStandardPublicIP_:
Copy file name to clipboardExpand all lines: articles/ddos-protection/manage-ddos-protection-powershell.md
+10-5Lines changed: 10 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ services: ddos-protection
5
5
author: AbdullahBell
6
6
ms.service: azure-ddos-protection
7
7
ms.topic: quickstart
8
-
ms.date: 03/17/2025
8
+
ms.date: 01/26/2026
9
9
ms.author: abell
10
10
ms.custom: devx-track-azurepowershell, mode-api
11
11
# Customer intent: "As a cloud administrator, I want to create and configure a DDoS protection plan using PowerShell, so that I can secure my virtual networks against distributed denial-of-service attacks effectively."
Copy file name to clipboardExpand all lines: articles/ddos-protection/manage-ddos-protection.md
+17-16Lines changed: 17 additions & 16 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,23 +1,20 @@
1
1
---
2
-
title: 'QuickStart: Create and configure Azure DDoS Network Protection using - Azure portal'
2
+
title: 'Quickstart: Create and configure Azure DDoS Network Protection using the Azure portal'
3
3
description: Learn how to use Azure DDoS Network Protection to mitigate an attack.
4
4
author: AbdullahBell
5
5
ms.author: abell
6
6
ms.service: azure-ddos-protection
7
7
ms.topic: quickstart
8
-
ms.date: 03/17/2025
9
-
ms.custom: template-quickstart
8
+
ms.date: 01/26/2026
10
9
# Customer intent: As a network administrator, I want to create and configure a DDoS protection plan for my virtual networks, so that I can safeguard my resources from distributed denial-of-service attacks.
11
10
---
12
11
13
-
# QuickStart: Create and configure Azure DDoS Network Protection using the Azure portal
12
+
# Quickstart: Create and configure Azure DDoS Network Protection using the Azure portal
14
13
15
-
Get started with Azure DDoS Network Protection by using the Azure portal.
14
+
In this Quickstart, you create a DDoS protection plan and link it to a virtual network.
16
15
17
16
A DDoS protection plan defines a set of virtual networks that have DDoS Network Protection enabled, across subscriptions. You can configure one DDoS protection plan for your organization and link virtual networks from multiple subscriptions under a single Microsoft Entra tenant to the same plan.
18
17
19
-
In this QuickStart, you create a DDoS protection plan and link it to a virtual network.
20
-
21
18
:::image type="content" source="./media/manage-ddos-protection/ddos-network-protection-diagram-simple.png" alt-text="Diagram of DDoS Network Protection." lightbox="./media/manage-ddos-protection/ddos-network-protection-diagram-simple.png":::
22
19
23
20
## Prerequisites
@@ -44,7 +41,8 @@ In this QuickStart, you create a DDoS protection plan and link it to a virtual n
1. Select **Create a resource** in the upper left corner of the Azure portal.
50
48
1. Select **Networking**, and then select **Virtual network**.
@@ -58,27 +56,28 @@ In this QuickStart, you create a DDoS protection plan and link it to a virtual n
58
56
| Region | Enter **East US**. |
59
57
60
58
1. In the *Security* pane, select **Enable** on the **Azure DDoS Network Protection** radio.
61
-
1. Select **MyDdosProtectionPlan** from the **DDoS protection plan** pane. The plan you select can be in the same, or different subscription than the virtual network, but both subscriptions must be associated to the same Microsoft Entra tenant.
62
-
1. Select **Next**. In the IP address pane, select **Add IPv4 address space** and enter the following values. Then select **Add**.
59
+
1. Select **MyDdosProtectionPlan** from the **DDoS protection plan** pane or create a new plan. The plan you select can be in the same, or different subscription than the virtual network, but both subscriptions must be associated to the same Microsoft Entra tenant.
60
+
1. Select **Next**. In the **IP addresses** pane, update the IP address space with the following values.
63
61
64
62
| Setting | Value |
65
63
| --------- | --------- |
66
-
| IPv4 address space | Enter **10.1.0.0/16.**|
67
-
| Subnet name | Under **Subnet name**, select the **Add subnet** link and enter **mySubnet.**|
68
-
| Subnet address range | Enter **10.1.0.0/24.**|
64
+
| IPv4 address space | Enter **10.1.0.0/16**. |
65
+
| Subnet name | Under **Subnets**, select the **default** link and update the name to **mySubnet**. |
1. Create a DDoS protection plan by completing the steps in [Create a DDoS protection plan](#create-a-ddos-protection-plan), if you don't have an existing DDoS protection plan.
77
76
1. Enter the name of the virtual network in the **Search resources, services, and docs** box at the top of the Azure portal. When it appears in the search results, select it.
78
77
1. Under **Settings**, select **DDoS protection**.
79
78
1. Select **Enable**. Under **DDoS protection plan**, choose an existing plan or the one you created in step 1, then select **Save**. The plan can be in the same or a different subscription than the virtual network, but both must be associated with the same Microsoft Entra tenant.
80
79
81
-
### Add Virtual Networks to an existing DDoS protection plan
You can also enable the DDoS protection plan for an existing virtual network from the DDoS Protection plan itself. This is useful if you have multiple virtual networks to protect with the same plan.
84
83
@@ -87,6 +86,8 @@ You can also enable the DDoS protection plan for an existing virtual network fro
87
86
1. Under **Settings**, select **Protected resources**.
88
87
1. Select **Add**, choose the subscription, resource group, and virtual network, then select **Add** again.
89
88
89
+
---
90
+
90
91
## Configure an Azure DDoS Protection Plan using Azure Firewall Manager
91
92
92
93
Azure Firewall Manager is a platform to manage and protect your network resources at scale. You can associate your virtual networks with a DDoS protection plan within Azure Firewall Manager. See [Configure an Azure DDoS Protection Plan using Azure Firewall Manager](../firewall-manager/configure-ddos.md).
0 commit comments