Distributed Denial of Service (DDoS) attacks are some of the largest availability and security concerns global IT is facing at that time and while moving their applications to the cloud. A DDoS attacker attempts to exhaust an application's resources as long and as high with the result to make the application unavailable to legitimate users. DDoS attacks can be targeted at any endpoint that is publicly reachable through the internet or even if the attacker was able to corrupt a private network, from private network resources of bigger networks.

Azure DDoS protection together with application design by best practices will provide a defense against DDoS attacks. With Azure DDoS protection provides the following service tiers are available:

• Basic: Automatically enabled as part of the Azure platform and services. In includes Always-on traffic monitoring and real-time mitigation of common network-level attacks it provide the same defenses utilized by Microsoft's online services like Office 365, Outlook.com, Xbox, Azure SQL. The entire scale and resources of Azure's global network can be used to distribute and mitigate attack traffic across regions and with that, protect customers and workload against attacks. Protection is either available for IPv4 and IPv6 Azure public IP addresses. 
• Standard: Provides additional mitigation capabilities over the Basic service tier that are tuned specifically to Azure virtual network resources. It enables customers to customize and optimize their DDoS protection to their Workloads within the VNet.