Can I use ‘Azure DDoS Protection’ as a DDoS Protection solution for B2C services running on AWS or GCP?

Question

Hi 'Microsoft Q&A' community.

I could find an answer for the case of 'on-premises' as below.

Can I protect my on-premises resources using DDoS Protection? You need to have the public endpoints of your service associated to a VNet in Azure to be enabled for DDoS protection. Example designs include:

• Web sites (IaaS) in Azure and backend databases in on-premises datacenter.
• Application Gateway in Azure (DDoS protection enabled on App Gateway/WAF) and websites in on-premises datacenters. For more information, see Azure DDoS Protection reference architectures.

Answer 1

@Kyung Cheon Min

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you would like to know if you could use Azure DDOS protection for your custom solution/application in 3rd party cloud.

The FAQ section you have shared basically answers your question.

The 3rd party cloud can be considered as "OnPrem" as long as

• you have taken care of connectivity between the 3rd party cloud and Azure.
• You are able to add the service in the 3rd party cloud behind an Azure Load Balancer (Public IP comes from Azure and users use this for connecting to your service)

If you look at the What is Azure DDoS Protection?

• It is just providing security (DDOS protection) to services that are exposed to Internet via Azure (like Public IP or App Gateway or Load Balancer)
• The backend can be anywhere, as long as it's only accessible via an Azure resource.
• So, by providing DDOS protection to this Azure resource, we are ensuring the protection of the entire application

Hope this addresses your query.

Let me know if you require further information

Cheers,

Kapil

Answer 2

@Kyung Cheon Min

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you would like to know if you could use Azure DDOS protection for your custom solution/application in 3rd party cloud.

The FAQ section you have shared basically answers your question.

The 3rd party cloud can be considered as "OnPrem" as long as

• you have taken care of connectivity between the 3rd party cloud and Azure.
• You are able to add the service in the 3rd party cloud behind an Azure Load Balancer (Public IP comes from Azure and users use this for connecting to your service)

If you look at the What is Azure DDoS Protection?

• It is just providing security (DDOS protection) to services that are exposed to Internet via Azure (like Public IP or App Gateway or Load Balancer)
• The backend can be anywhere, as long as it's only accessible via an Azure resource.
• So, by providing DDOS protection to this Azure resource, we are ensuring the protection of the entire application

Cheers,

Kapil

---

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.