Skip to content
cccskills
FreePublished on GitHub

azure-ddos-protection

Expert knowledge for Azure DDoS Protection development including troubleshooting, best practices, decision making, architecture & design patterns, security, configuration, and integrations & coding patterns. Use when enabling DDoS IP/Network Protection, tuning policies, analyzing logs/metrics, or integrating NVAs and Azure Policy, and other Azure DDos Protection related development tasks. Not for Azure Firewall (use azure-firewall), Azure Firewall Manager (use azure-firewall-manager), Azure Web Application Firewall (use azure-web-application-firewall), Azure Virtual Network (use azure-virtual-network).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills
Works withAzure
See how to install

Files included (1)

  • SKILL.md7.7 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Azure DDoS Protection Skill

This skill provides expert guidance for Azure DDoS Protection. Covers troubleshooting, best practices, decision making, architecture & design patterns, security, configuration, and integrations & coding patterns. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL35-L41Handling and investigating DDoS attacks: engaging Rapid Response, reading Defender for Cloud DDoS alerts, and analyzing DDoS Protection logs in Log Analytics for root cause and mitigation.
Best PracticesL42-L49Guidance on DDoS Protection design, cost optimization, incident response planning, and running/evaluating attack simulations to validate and improve your protection strategy.
Decision MakingL50-L55Guidance on when to enable Azure DDoS Protection, comparing Standard tiers and pricing, and choosing the best tier for your app’s scale, risk, and cost requirements.
Architecture & Design PatternsL56-L61Reference architectures and design patterns for deploying Azure DDoS Protection, including integrating inline L7 protection with network virtual appliances (NVAs).
SecurityL62-L72Configuring and securing Azure DDoS IP/Network Protection using portal, CLI, and PowerShell, including permissions setup and hardening best practices.
ConfigurationL73-L85Configuring and deploying Azure DDoS IP/Network Protection (portal, ARM, Bicep, PowerShell), plus monitoring, metrics/logs, and Azure Policy for governance.
Integrations & Coding PatternsL86-L89Using Azure CLI to define, configure, and manage custom DDoS protection policies, including policy parameters, scopes, and deployment steps.

Troubleshooting

TopicURL
Engage Azure DDoS Rapid Response during attackshttps://learn.microsoft.com/en-us/azure/ddos-protection/ddos-rapid-response
Interpret Azure DDoS alerts in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/ddos-protection/ddos-view-alerts-defender-for-cloud
Analyze Azure DDoS Protection logs in Log Analyticshttps://learn.microsoft.com/en-us/azure/ddos-protection/ddos-view-diagnostic-logs

Best Practices

TopicURL
Optimize Azure DDoS Protection costs safelyhttps://learn.microsoft.com/en-us/azure/ddos-protection/ddos-optimization-guide
Design an Azure DDoS incident response strategyhttps://learn.microsoft.com/en-us/azure/ddos-protection/ddos-response-strategy
Apply Azure DDoS Protection fundamental best practiceshttps://learn.microsoft.com/en-us/azure/ddos-protection/fundamental-best-practices
Run and evaluate Azure DDoS protection simulationshttps://learn.microsoft.com/en-us/azure/ddos-protection/test-through-simulations

Decision Making

TopicURL
Compare pricing and choose Azure DDoS tiershttps://learn.microsoft.com/en-us/azure/ddos-protection/ddos-pricing-guide
Choose the right Azure DDoS Protection tierhttps://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-comparison

Architecture & Design Patterns

TopicURL
Use Azure DDoS Protection reference architectureshttps://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-reference-architectures
Implement inline L7 DDoS protection with NVAshttps://learn.microsoft.com/en-us/azure/ddos-protection/inline-protection-glb

Security

TopicURL
Set up Azure DDoS IP Protection using Azure CLIhttps://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-cli
Enable Azure DDoS IP Protection in portalhttps://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-portal
Create and configure Azure DDoS Network Protection in portalhttps://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection
Configure Azure DDoS Network Protection using Azure CLIhttps://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-cli
Provision Azure DDoS Network Protection with PowerShellhttps://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-powershell
Configure permissions for Azure DDoS Protection planshttps://learn.microsoft.com/en-us/azure/ddos-protection/manage-permissions
Harden and secure Azure DDoS Protection deploymentshttps://learn.microsoft.com/en-us/azure/ddos-protection/secure-ddos-protection

Configuration

TopicURL
Configure Azure DDoS custom policy in portalhttps://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-custom-policy-portal
Deploy Azure DDoS custom policy via ARM templatehttps://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-custom-policy-template
Deploy Azure DDoS IP Protection with ARM templatehttps://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-template
Deploy Azure DDoS Network Protection with Bicephttps://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-bicep
Configure Azure DDoS IP Protection with PowerShellhttps://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-powershell-ip
Configure Azure DDoS Network Protection via ARM templatehttps://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-template
Configure monitoring for Azure DDoS Protectionhttps://learn.microsoft.com/en-us/azure/ddos-protection/monitor-ddos-protection
Reference Azure DDoS Protection monitoring metrics and logshttps://learn.microsoft.com/en-us/azure/ddos-protection/monitor-ddos-protection-reference
Use Azure Policy definitions for DDoS Protectionhttps://learn.microsoft.com/en-us/azure/ddos-protection/policy-reference

Integrations & Coding Patterns

TopicURL
Create Azure DDoS custom policy using CLIhttps://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-custom-policy-cli

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

azure-active-directory-b2c

Free

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configuring IdPs/MFA, securing APIs, automating CI/CD, or monitoring with Sentinel, and other Azure Active Directory B2C related development tasks. Not for Azure Role-based access control (use azure-rbac), Azure Information Protection (use azure-information-protection), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-advisor

Free

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing Advisor alerts, digests, recommendation states, Resource Graph queries, or RBAC access, and other Azure Advisor related development tasks. Not for Cost Management (use azure-cost-management), Azure Monitor (use azure-monitor), Azure Policy (use azure-policy), Azure Security (use azure-security).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-ai-vision

Free

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Vision related development tasks. Not for Azure AI Custom Vision (use azure-custom-vision), Azure AI Video Indexer (use azure-video-indexer), Azure AI Document Intelligence (use azure-document-intelligence), Azure AI Immersive Reader (use azure-immersive-reader).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-aks-edge-essentials

Free

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when deploying AKS Edge/Hybrid with Arc, Azure Local, GitOps, IoT/OPC/ONVIF, or Key Vault-integrated workloads, and other Azure Kubernetes Service Edge Essentials related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure IoT Edge (use azure-iot-edge), Azure Stack Edge (use azure-stack-edge), Azure Container Apps (use azure-container-apps).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-analysis-services

Free

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-analytics), Azure SQL Database (use azure-sql-database), Azure SQL Managed Instance (use azure-sql-managed-instance), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-anyscale-on-azure

Free

Expert knowledge for Azure Anyscale On Azure development including limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when registering AKS as Anyscale clouds, wiring ACR images, enabling Private Link/RBAC, ARM-based deployments, or region checks, and other Azure Anyscale On Azure related development tasks. Not for Azure Databricks (use azure-databricks), Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Machine Learning (use azure-machine-learning), Azure HDInsight (use azure-hdinsight).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

See all skills by MicrosoftDocs

Report a problem with this skill