{"id":"c7933ece-2539-4d36-b5df-2d85b33897ed","shortId":"Lw3HZq","kind":"skill","title":"azure-ddos-protection","tagline":"Expert knowledge for Azure DDos Protection development including troubleshooting, best practices, decision making, architecture & design patterns, security, and configuration. Use when enabling DDoS IP/Network Protection plans, parsing DDoS logs, using Rapid Response, or enforcin","description":"# Azure DDos Protection Skill\n\nThis skill provides expert guidance for Azure DDos Protection. Covers troubleshooting, best practices, decision making, architecture & design patterns, security, and configuration. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Troubleshooting | L34-L40 | Handling and investigating DDoS attacks: engaging Rapid Response, reading Defender for Cloud DDoS alerts, and analyzing DDoS Protection logs in Log Analytics for root cause and mitigation. |\n| Best Practices | L41-L48 | Guidance on DDoS Protection design, cost optimization, incident response planning, and safely running/simulating DDoS tests in Azure environments |\n| Decision Making | L49-L55 | Guidance on when to enable Azure DDoS Protection, comparing Standard tiers and pricing, and choosing the best tier for your app’s scale, risk, and cost requirements. |\n| Architecture & Design Patterns | L56-L61 | Reference architectures and design patterns for deploying Azure DDoS Protection, including integrating inline L7 protection with network virtual appliances (NVAs). |\n| Security | L62-L72 | How to deploy, enable, and manage Azure DDoS IP/Network Protection plans via portal, CLI, or PowerShell, including required permissions and configuration steps. |\n| Configuration | L73-L81 | Deploying and configuring Azure DDoS IP/Network Protection via ARM/Bicep, enabling monitoring and metrics, and enforcing protection using Azure Policy definitions. |\n\n### Troubleshooting\n| Topic | URL |\n|-------|-----|\n| Engage Azure DDoS Rapid Response during attacks | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-rapid-response |\n| Interpret Azure DDoS alerts in Defender for Cloud | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-view-alerts-defender-for-cloud |\n| Analyze Azure DDoS Protection logs in Log Analytics | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-view-diagnostic-logs |\n\n### Best Practices\n| Topic | URL |\n|-------|-----|\n| Optimize Azure DDoS Protection costs safely | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-optimization-guide |\n| Design an Azure DDoS incident response strategy | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-response-strategy |\n| Apply Azure DDoS Protection fundamental best practices | https://learn.microsoft.com/en-us/azure/ddos-protection/fundamental-best-practices |\n| Run Azure DDoS Protection simulation tests safely | https://learn.microsoft.com/en-us/azure/ddos-protection/test-through-simulations |\n\n### Decision Making\n| Topic | URL |\n|-------|-----|\n| Decide when and how to use Azure DDoS Protection | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-faq |\n| Compare pricing and choose Azure DDoS tiers | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-pricing-guide |\n| Choose the right Azure DDoS Protection tier | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-comparison |\n\n### Architecture & Design Patterns\n| Topic | URL |\n|-------|-----|\n| Use Azure DDoS Protection reference architectures | https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-reference-architectures |\n| Implement inline L7 DDoS protection with NVAs | https://learn.microsoft.com/en-us/azure/ddos-protection/inline-protection-glb |\n\n### Security\n| Topic | URL |\n|-------|-----|\n| Set up Azure DDoS IP Protection using Azure CLI | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-cli |\n| Enable Azure DDoS IP Protection in portal | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-portal |\n| Create and configure Azure DDoS Network Protection in portal | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection |\n| Configure Azure DDoS Network Protection using Azure CLI | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-cli |\n| Provision Azure DDoS Network Protection with PowerShell | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-powershell |\n| Configure Azure DDoS IP Protection with PowerShell | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-powershell-ip |\n| Configure permissions for Azure DDoS Protection plans | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-permissions |\n\n### Configuration\n| Topic | URL |\n|-------|-----|\n| Deploy Azure DDoS IP Protection with ARM template | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-template |\n| Deploy Azure DDoS Network Protection with Bicep | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-bicep |\n| Configure Azure DDoS Network Protection via ARM template | https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-template |\n| Configure monitoring for Azure DDoS Protection | https://learn.microsoft.com/en-us/azure/ddos-protection/monitor-ddos-protection |\n| Reference for Azure DDoS monitoring data | https://learn.microsoft.com/en-us/azure/ddos-protection/monitor-ddos-protection-reference |\n| Use Azure Policy definitions for DDoS Protection | https://learn.microsoft.com/en-us/azure/ddos-protection/policy-reference |","tags":["azure","ddos","protection","agent","skills","microsoftdocs","agent-skills","agentic-skills","agentskill","ai-agents","ai-coding","azure-functions"],"capabilities":["skill","source-microsoftdocs","skill-azure-ddos-protection","topic-agent","topic-agent-skills","topic-agentic-skills","topic-agentskill","topic-ai-agents","topic-ai-coding","topic-azure","topic-azure-functions","topic-azure-kubernetes-service","topic-azure-openai","topic-azure-sql-database","topic-azure-storage"],"categories":["Agent-Skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-ddos-protection","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add MicrosoftDocs/Agent-Skills","source_repo":"https://github.com/MicrosoftDocs/Agent-Skills","install_from":"skills.sh"}},"qualityScore":"0.698","qualityRationale":"deterministic score 0.70 from registry signals: · indexed on github topic:agent-skills · 497 github stars · SKILL.md body (6,307 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-04-22T06:53:31.261Z","embedding":null,"createdAt":"2026-04-18T21:58:49.219Z","updatedAt":"2026-04-22T06:53:31.261Z","lastSeenAt":"2026-04-22T06:53:31.261Z","tsv":"'/en-us/azure/ddos-protection/ddos-faq':466 '/en-us/azure/ddos-protection/ddos-optimization-guide':420 '/en-us/azure/ddos-protection/ddos-pricing-guide':476 '/en-us/azure/ddos-protection/ddos-protection-reference-architectures':500 '/en-us/azure/ddos-protection/ddos-protection-sku-comparison':486 '/en-us/azure/ddos-protection/ddos-rapid-response':385 '/en-us/azure/ddos-protection/ddos-response-strategy':430 '/en-us/azure/ddos-protection/ddos-view-alerts-defender-for-cloud':396 '/en-us/azure/ddos-protection/ddos-view-diagnostic-logs':407 '/en-us/azure/ddos-protection/fundamental-best-practices':440 '/en-us/azure/ddos-protection/inline-protection-glb':510 '/en-us/azure/ddos-protection/manage-ddos-ip-protection-cli':525 '/en-us/azure/ddos-protection/manage-ddos-ip-protection-portal':535 '/en-us/azure/ddos-protection/manage-ddos-ip-protection-template':602 '/en-us/azure/ddos-protection/manage-ddos-protection':547 '/en-us/azure/ddos-protection/manage-ddos-protection-bicep':612 '/en-us/azure/ddos-protection/manage-ddos-protection-cli':558 '/en-us/azure/ddos-protection/manage-ddos-protection-powershell':568 '/en-us/azure/ddos-protection/manage-ddos-protection-powershell-ip':578 '/en-us/azure/ddos-protection/manage-ddos-protection-template':623 '/en-us/azure/ddos-protection/manage-permissions':588 '/en-us/azure/ddos-protection/monitor-ddos-protection':632 '/en-us/azure/ddos-protection/monitor-ddos-protection-reference':641 '/en-us/azure/ddos-protection/policy-reference':651 '/en-us/azure/ddos-protection/test-through-simulations':450 '/microsoftdocs/mcp/blob/main/readme.md)':163 '3':134 'accept':202 'access':168 'agent':83,127,186,200 'alert':228,389 'analyt':236,404 'analyz':230,397 'app':290 'appli':431 'applianc':321 'architectur':18,58,297,304,487,497 'arm':598,619 'arm/bicep':361 'attack':219,382 'avail':153 'azur':2,8,39,49,263,275,310,333,356,370,377,387,398,413,423,432,442,461,471,480,493,516,521,527,539,549,554,560,570,582,593,604,614,627,635,643 'azure-ddos-protect':1 'best':14,54,242,286,408,436 'bicep':609 'capabl':75 'categori':86,94,110,206,208 'caus':239 'choos':284,470,477 'cli':340,522,555 'cloud':226,393 'combin':65 'compar':278,467 'configur':23,63,347,349,355,538,548,569,579,589,613,624 'content':70,172 'cost':252,295,416 'cover':52 'creat':536 'data':638 'ddos':3,9,27,32,40,50,218,227,231,249,260,276,311,334,357,378,388,399,414,424,433,443,462,472,481,494,504,517,528,540,550,561,571,583,594,605,615,628,636,647 'decid':455 'decis':16,56,265,451 'defend':224,391 'definit':372,645 'deploy':309,329,353,592,603 'descript':210 'design':19,59,251,298,306,421,488 'develop':11 'doc':178 'document':73,171 'e.g':98,114 'enabl':26,274,330,362,526 'enforc':367 'enforcin':38 'engag':220,376 'environ':264 'expert':5,46 'fallback':190 'fetch':74,170,179,192 'file':104,112,119,124 'fundament':435 'github.com':162 'github.com/microsoftdocs/mcp/blob/main/readme.md)':161 'guid':160 'guidanc':47,247,270 'handl':215 'implement':501 'import':81,125 'incid':254,425 'includ':12,313,343 'index':87,207 'inlin':315,502 'instal':157,159 'integr':314 'interpret':386 'investig':217 'ip':518,529,572,595 'ip/network':28,335,358 'knowledg':6 'l120':101 'l34':213 'l34-l40':212 'l35':100 'l35-l120':99 'l40':214 'l41':245 'l41-l48':244 'l48':246 'l49':268 'l49-l55':267 'l55':269 'l56':301 'l56-l61':300 'l61':302 'l62':325 'l62-l72':324 'l7':316,503 'l72':326 'l73':351 'l73-l81':350 'l81':352 'latest':142 'learn':185,199 'learn-agent-skil':184,198 'learn.microsoft.com':384,395,406,419,429,439,449,465,475,485,499,509,524,534,546,557,567,577,587,601,611,622,631,640,650 'learn.microsoft.com/en-us/azure/ddos-protection/ddos-faq':464 'learn.microsoft.com/en-us/azure/ddos-protection/ddos-optimization-guide':418 'learn.microsoft.com/en-us/azure/ddos-protection/ddos-pricing-guide':474 'learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-reference-architectures':498 'learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-comparison':484 'learn.microsoft.com/en-us/azure/ddos-protection/ddos-rapid-response':383 'learn.microsoft.com/en-us/azure/ddos-protection/ddos-response-strategy':428 'learn.microsoft.com/en-us/azure/ddos-protection/ddos-view-alerts-defender-for-cloud':394 'learn.microsoft.com/en-us/azure/ddos-protection/ddos-view-diagnostic-logs':405 'learn.microsoft.com/en-us/azure/ddos-protection/fundamental-best-practices':438 'learn.microsoft.com/en-us/azure/ddos-protection/inline-protection-glb':508 'learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-cli':523 'learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-portal':533 'learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-template':600 'learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection':545 'learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-bicep':610 'learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-cli':556 'learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-powershell':566 'learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-powershell-ip':576 'learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-template':621 'learn.microsoft.com/en-us/azure/ddos-protection/manage-permissions':586 'learn.microsoft.com/en-us/azure/ddos-protection/monitor-ddos-protection':630 'learn.microsoft.com/en-us/azure/ddos-protection/monitor-ddos-protection-reference':639 'learn.microsoft.com/en-us/azure/ddos-protection/policy-reference':649 'learn.microsoft.com/en-us/azure/ddos-protection/test-through-simulations':448 'line':96,108,209 'link':113,122 'local':66 'locat':90 'log':33,233,235,401,403 'make':17,57,266,452 'manag':332 'markdown':189,205 'mcp':148,175 'metadata.generated':129 'metric':365 'microsoft':177 'microsoftdoc':149,176 'mitig':241 'monitor':363,625,637 'month':135 'network':167,319,541,551,562,606,616 'nvas':322,507 'old':136 'optim':253,412 'pars':31 'pattern':20,60,299,307,489 'permiss':345,580 'plan':30,256,337,585 'polici':371,644 'portal':339,532,544 'powershel':342,565,575 'practic':15,55,243,409,437 'prefer':173 'price':282,468 'protect':4,10,29,41,51,232,250,277,312,317,336,359,368,400,415,434,444,463,482,495,505,519,530,542,552,563,573,584,596,607,617,629,648 'provid':45 'provis':559 'pull':140 'queri':181,195 'quick':68 'quick-refer':67 'rang':97 'rapid':35,221,379 'read':103,118,223 'refer':69,123,303,496,633 'relev':91 'remot':72 'repositori':146 'requir':166,296,344 'respons':36,222,255,380,426 'return':188,204 'right':479 'risk':293 'root':238 'run':441 'running/simulating':259 'safe':258,417,447 'scale':292 'section':92 'secur':21,61,323,511 'security.md':115,116 'set':514 'simul':445 'skill':42,44,80,165,187,201 'skill-azure-ddos-protection' 'source-microsoftdocs' 'specifi':107 'standard':279 'step':348 'strategi':427 'string':182,196 'suggest':137,154 'templat':599,620 'test':261,446 'text/markdown':203 'tier':280,287,473,483 'tool':150 'topic':374,410,453,490,512,590 'topic-agent' 'topic-agent-skills' 'topic-agentic-skills' 'topic-agentskill' 'topic-ai-agents' 'topic-ai-coding' 'topic-azure' 'topic-azure-functions' 'topic-azure-kubernetes-service' 'topic-azure-openai' 'topic-azure-sql-database' 'topic-azure-storage' 'troubleshoot':13,53,211,373 'url':375,411,454,491,513,591 'use':24,34,78,84,102,117,174,191,369,460,492,520,553,642 'user':139,156 'version':143 'via':338,360,618 'virtual':320 'webpag':193","prices":[{"id":"7f25ca6f-3179-4a74-a6fc-e10edf73f801","listingId":"c7933ece-2539-4d36-b5df-2d85b33897ed","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"MicrosoftDocs","category":"Agent-Skills","install_from":"skills.sh"},"createdAt":"2026-04-18T21:58:49.219Z"}],"sources":[{"listingId":"c7933ece-2539-4d36-b5df-2d85b33897ed","source":"github","sourceId":"MicrosoftDocs/Agent-Skills/azure-ddos-protection","sourceUrl":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-ddos-protection","isPrimary":false,"firstSeenAt":"2026-04-18T21:58:49.219Z","lastSeenAt":"2026-04-22T06:53:31.261Z"}],"details":{"listingId":"c7933ece-2539-4d36-b5df-2d85b33897ed","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"MicrosoftDocs","slug":"azure-ddos-protection","github":{"repo":"MicrosoftDocs/Agent-Skills","stars":497,"topics":["agent","agent-skills","agentic-skills","agentskill","ai","ai-agents","ai-coding","azure","azure-functions","azure-kubernetes-service","azure-openai","azure-sql-database","azure-storage","azure-virtual-machine","claude-code","github-copilot","microsoft-learn","openai-codex","skills"],"license":"cc-by-4.0","html_url":"https://github.com/MicrosoftDocs/Agent-Skills","pushed_at":"2026-04-22T01:37:27Z","description":"Curated Agent Skills for Microsoft & Azure – giving AI coding assistants structured, real-time expertise from Microsoft Learn docs.","skill_md_sha":"90e6be5fc4d138130a849a943bc6d99a3e3c3394","skill_md_path":"skills/azure-ddos-protection/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-ddos-protection"},"layout":"multi","source":"github","category":"Agent-Skills","frontmatter":{"name":"azure-ddos-protection","description":"Expert knowledge for Azure DDos Protection development including troubleshooting, best practices, decision making, architecture & design patterns, security, and configuration. Use when enabling DDoS IP/Network Protection plans, parsing DDoS logs, using Rapid Response, or enforcing Azure Policy, and other Azure DDos Protection related development tasks. Not for Azure Firewall (use azure-firewall), Azure Web Application Firewall (use azure-web-application-firewall), Azure Virtual Network (use azure-virtual-network), Azure Virtual Network Manager (use azure-virtual-network-manager).","compatibility":"Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation."},"skills_sh_url":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-ddos-protection"},"updatedAt":"2026-04-22T06:53:31.261Z"}}