Edit

Quickstart: Create and configure Azure DDoS IP Protection using Azure portal

  • Article

Get started with Azure DDoS IP Protection by using the Azure portal. In this quickstart, you'll enable DDoS IP protection and link it to a public IP address.

Diagram of DDoS IP Protection protecting the Public IP address.

Prerequisites

Enable DDoS IP Protection on a public IP address

Important

Ensure that your account is assigned to the network contributor role or to a custom role that is assigned the appropriate actions listed in the how-to guide on Permissions.

Create a public IP address

  1. Select Create a resource in the upper left corner of the Azure portal.

  2. Select Networking, and then select Public IP address.

  3. Select Create.

  4. Enter or select the following values.

    Setting Value
    Subscription Select your subscription.
    Resource group Select Create new, enter MyResourceGroup.
    Select OK.
    Region Select your region. In this example, we selected (US) East US.
    Name Enter your resource name. In this example, we selected myStandardPublicIP.
    IP Version Select IPv4 or IPv6. In this example, we selected IPv4.
    SKU Select Standard. DDoS IP Protection is enabled only on Public IP Standard SKU.
    Availability Zone You can specify an availability zone in which to deploy your public IP address. In this example, we selected zone-redundant.
    Tier Select Global or Regional. In this example, we selected Regional.
    IP address assignment Locked as Static.
    Routing Preference Select Microsoft network or Internet. In this example, we selected Microsoft network.
    Idle Timeout (minutes) Keep a TCP or HTTP connection open without relying on clients to send keep-alive messages. In this example, we'll leave the default of 4.
    DNS name label Enter a DNS name label. In this example, we left the value blank.

    Screenshot of create standard IP address in Azure portal.

  5. Select Create.

Enable for an existing Public IP address

  1. In the search box at the top of the portal, enter public IP Address. Select public IP Address.

  2. Select your Public IP address. In this example, select myStandardPublicIP.

  3. In the Overview pane, select the Properties tab, then select DDoS protection.

    Screenshot showing view of Public IP Properties.

  4. In the Configure DDoS protection pane, under Protection type, select IP, then select Save.

    Screenshot of selecting IP Protection in Public IP Properties.

Disable for a Public IP address:

  1. Enter the name of the public IP address you want to disable DDoS IP Protection for in the Search resources, services, and docs box at the top of the portal. When the name of public IP address appears in the search results, select it.

  2. Under Properties in the overview pane, select DDoS Protection.

  3. Under Protection type select Disable, then select Save.

    Screenshot of disabling IP Protection in Public IP Properties.

Note

When changing DDoS IP protection from Enabled to Disabled, telemetry for the public IP resource will no longer be active.

Validate and test

First, check the details of your public IP address:

  1. Select All resources on the top, left of the portal.

  2. Enter public IP address in the Filter box. When public IP address appear in the results, select it.

  3. Select your public IP Address from the list.

  4. In the Overview pane, select the Properties tab in the middle of the page, then select DDoS protection.

  5. View Protection status and verify your public IP is protected.

    Screenshot of status of IP Protection in Public IP Properties.

Clean up resources

You can keep your resources for the next article. If no longer needed, delete the MyResourceGroup resource group. When you delete the resource group, you also remove DDoS IP Protection and all its related resources.

Warning

This action is irreversible.

  1. In the Azure portal, search for and select Resource groups, or select Resource groups from the Azure portal menu.

  2. Filter or scroll down to find the MyResourceGroup resource group.

  3. Select the resource group, then select Delete resource group.

  4. Type the resource group name to verify, and then select Delete.

Next steps

To learn how to configure metric alerts through the Azure portal, continue to the next article.

Configure Azure DDoS Protection metric alerts through portal