# Azure Ddos Protection > Azure DDos Protection Skill - Skill: `comeonoliver/azure-ddos-protection` (Agent Skill) - Install (CLI): `npx skillmds@latest add comeonoliver/azure-ddos-protection` - Raw SKILL.md: https://api.skillmd.com/api/skills/comeonoliver/azure-ddos-protection/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: DevOps & Infra - Author: ComeOnOliver (https://skillmd.com/u/comeonoliver) - Updated: 2026-09-21 - Page: https://skillmd.com/skills/comeonoliver/azure-ddos-protection --- # Azure DDos Protection Skill This skill provides expert guidance for Azure DDos Protection. Covers troubleshooting, best practices, decision making, architecture & design patterns, security, and configuration. It combines local quick-reference content with remote documentation fetching capabilities. ## How to Use This Skill > **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file > **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md) This skill requires **network access** to fetch documentation content: - **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown. - **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown. ## Category Index | Category | Lines | Description | |----------|-------|-------------| | Troubleshooting | L34-L38 | How to contact and work with Azure DDoS Rapid Response during an active attack, including engagement process, prerequisites, and what support actions they can perform. | | Best Practices | L39-L45 | Guidance on planning DDoS incident response, applying core Azure DDoS Protection best practices, and safely running/assessing DDoS simulation tests. | | Decision Making | L46-L52 | Guidance on choosing and switching DDoS Protection tiers, comparing pricing, and optimizing coverage and cost for Azure resources | | Architecture & Design Patterns | L53-L58 | Reference architectures and design patterns for deploying Azure DDoS Protection, including inline L7 protection using Gateway Load Balancer and integration with existing network topologies. | | Security | L59-L69 | How to deploy, enable, and configure Azure DDoS IP/Network Protection using Portal, CLI, or PowerShell, and manage required permissions for DDoS protection plans. | | Configuration | L70-L82 | Configuring, deploying, and monitoring Azure DDoS Protection (IP/Network) using ARM/Bicep, alerts, logs, Azure Monitor, Defender for Cloud, and Azure Policy. | ### Troubleshooting | Topic | URL | |-------|-----| | Engage Azure DDoS Rapid Response during attacks | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-rapid-response | ### Best Practices | Topic | URL | |-------|-----| | Build a DDoS incident response strategy on Azure | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-response-strategy | | Apply Azure DDoS Protection fundamental best practices | https://learn.microsoft.com/en-us/azure/ddos-protection/fundamental-best-practices | | Run Azure DDoS Protection simulation tests | https://learn.microsoft.com/en-us/azure/ddos-protection/test-through-simulations | ### Decision Making | Topic | URL | |-------|-----| | Optimize Azure DDoS Protection costs and coverage | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-optimization-guide | | Evaluate and compare Azure DDoS Protection pricing | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-pricing-guide | | Choose appropriate Azure DDoS Protection tier | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-comparison | ### Architecture & Design Patterns | Topic | URL | |-------|-----| | Use Azure DDoS Protection reference architectures | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-reference-architectures | | Design inline L7 DDoS protection with Gateway Load Balancer | https://learn.microsoft.com/en-us/azure/ddos-protection/inline-protection-glb | ### Security | Topic | URL | |-------|-----| | Set up Azure DDoS IP Protection using Azure CLI | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-cli | | Enable Azure DDoS IP Protection in portal | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-portal | | Create and configure Azure DDoS Network Protection in portal | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection | | Configure Azure DDoS Network Protection using Azure CLI | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-cli | | Provision Azure DDoS Network Protection with PowerShell | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-powershell | | Configure Azure DDoS IP Protection with PowerShell | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-powershell-ip | | Configure Azure DDoS Protection plan permissions | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-permissions | ### Configuration | Topic | URL | |-------|-----| | Configure Azure DDoS Protection metric alerts | https://learn.microsoft.com/en-us/azure/ddos-protection/alerts | | Configure Azure DDoS diagnostic logging alerts | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-diagnostic-alert-templates | | View Azure DDoS alerts in Defender for Cloud | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-view-alerts-defender-for-cloud | | Access Azure DDoS Protection logs in Log Analytics | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-view-diagnostic-logs | | Deploy Azure DDoS IP Protection with ARM template | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-template | | Deploy Azure DDoS Network Protection with Bicep | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-bicep | | Configure Azure DDoS Network Protection via ARM template | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-template | | Monitor Azure DDoS Protection with Azure Monitor | https://learn.microsoft.com/en-us/azure/ddos-protection/monitor-ddos-protection | | Reference for Azure DDoS monitoring data | https://learn.microsoft.com/en-us/azure/ddos-protection/monitor-ddos-protection-reference | | Apply Azure Policy definitions for DDoS Protection | https://learn.microsoft.com/en-us/azure/ddos-protection/policy-reference |