Does one DDOS network protection plan cover multiple virtual networks in different regions or will i be charged for each network that i want to protect?

Question

Hi Guys,

i had a question about Azure's DDOS network protection plan. once i purchase one plan (eg. in UK South region), does it cover multiple virtual networks or will i be charged for each network that i want to protect?

in my scenario i have multiple VNET is different regions and each of them have Virtual machines with public IPs. less than 100 vms. So does one plan (costing ~$3k) cover all of them?

Answer 1

Hi Prashant,

Yes, one DDoS Network Protection Plan covers multiple different regions. If you have less than 100 Public IP addresses then it would be $2,944/month to cover all of them.

Excerpt from documentation:

Although DDoS Protection Plan resources needs to be associated with a region, users can enable DDoS protection on Virtual Networks in different regions and across multiple subscriptions under a single Microsoft Entra tenant.

Please also see pricing examples at bottom of pricing page:

Azure DDoS Protection pricing

https://azure.microsoft.com/en-us/pricing/details/ddos-protection/

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP