azure force consumption

Question

I want to configure an IP address for the SKU "basic", but I'm forced to use network DDoS protection. After referring to the documentation, it only states that the IP address of "basic" cannot be used for IP protection, but it doesn't mention that the protection cannot be disabled. You are forcing customers to consume!

Answer 1

Hello rongda lin ,

Thank you for reaching out on the Microsoft Q&A.

If you're being forced to enable DDoS protection for a Basic SKU public IP, it might be due to subscription or VNet-level settings rather than an Azure requirement.

• Basic SKU public IPs are not eligible for DDoS IP Protection (Docs)
• Azure provides default DDoS protection at no extra cost (Docs)
• Check if a DDoS Protection Plan is enabled at the subscription or VNet level

If the issue persists, try creating the IP via Azure CLI or PowerShell instead of the portal or contact Azure Support.

I hope this helps! If you have any further questions, feel free to ask.

If the information is useful, please accept the answer and upvote it to assist other community members.

Answer 2

Hi,

The option selected in your screenshot is not forcing you to use Azure DDoS protection. It is simply saying that it will inherit the setting from the Virtual Network.

For example, if the Virtual Network that the public IP is associated with has Azure DDoS protection enabled, then it will be used. Likewise if Azure DDoS protection is disabled on the VNet, then it will not be used.

Since Azure DDoS protection is Disabled on the VNet by default, that means it will not be used for your public IP address that you are creating. I'm assuming you have not created a protection plan and enabled Azure DDoS protection on any of your VNets.

You may verify Azure DDoS protection is Disabled on a Virtual Network by navigating to the Virtual Network in the portal and clicking Settings -- DDoS protection blade as shown below:

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP