Skip to content

Commit 964aaeb

Browse files
Merge pull request #294371 from AbdullahBell/ddos-image-deletion-article
Networking: DDoS Protection: Reducing screenshot usage: 6 articles
2 parents ef40af9 + ebf5606 commit 964aaeb

File tree

6 files changed

+24
-76
lines changed

6 files changed

+24
-76
lines changed

articles/ddos-protection/alerts.md

Lines changed: 12 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: ddos-protection
55
author: AbdullahBell
66
ms.service: azure-ddos-protection
77
ms.topic: tutorial
8-
ms.date: 07/17/2024
8+
ms.date: 02/10/2025
99
ms.author: abell
1010
---
1111

@@ -22,49 +22,41 @@ DDoS Protection metrics alerts are an important step in alerting your team throu
2222

2323
- An Azure account with an active subscription. [Create an account for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
2424
- [DDoS Network Protection](manage-ddos-protection.md) must be enabled on a virtual network or [DDoS IP Protection](manage-ddos-protection-powershell-ip.md) must be enabled on a public IP address.
25-
- DDoS Protection monitors public IP addresses assigned to resources within a virtual network. If you don't have any resources with public IP addresses in the virtual network, you must first create a resource with a public IP address.  
25+
- Azure DDoS Protection monitors public IP addresses assigned to resources within a virtual network. If your virtual network doesn't have any resources with public IP addresses, you need to create one first. 
2626

2727
## Configure metric alerts through portal
2828

29-
You can select any of the available Azure DDoS Protection metrics to alert you when there’s an active mitigation during an attack, using the Azure Monitor alert configuration.
29+
You can configure Azure Monitor to alert you using any available Azure DDoS Protection metrics. This notifies you when there's active mitigation during an attack.
3030

3131
1. Sign in to the [Azure portal](https://portal.azure.com/).
3232

3333
1. In the search box at the top of the portal, enter **Alerts**. Select **Alerts** in the search results.
3434

3535
1. Select **+ Create** on the navigation bar, then select **Alert rule**.
3636

37-
:::image type="content" source="./media/ddos-alerts/ddos-protection-alert-page.png" alt-text="Screenshot of DDoS Protection creating Alerts." lightbox="./media/ddos-alerts/ddos-protection-alert-page.png":::
38-
3937
1. On the **Create an alert rule** page, select **+ Select scope**, then select the following information in the **Select a resource** page.
4038

41-
:::image type="content" source="./media/ddos-alerts/ddos-protection-alert-scope.png" alt-text="Screenshot of selecting DDoS Protection attack alert scope." lightbox="./media/ddos-alerts/ddos-protection-alert-scope.png":::
42-
43-
4439
| Setting | Value |
4540
|--|--|
4641
|Filter by subscription | Select the **Subscription** that contains the public IP address you want to log. |
4742
|Filter by resource type | Select **Public IP Addresses**.|
4843
|Resource | Select the specific **Public IP address** you want to log metrics for. |
4944

5045
1. Select **Done**, then select **Next: Condition**.
51-
1. On the **Condition** page, select **+ Add Condition**, then in the *Search by signal name* search box, search, and select **Under DDoS attack or not**.
5246

53-
:::image type="content" source="./media/ddos-alerts/ddos-protection-alert-add-condition.png" alt-text="Screenshot of adding DDoS Protection attack alert condition." lightbox="./media/ddos-alerts/ddos-protection-alert-add-condition.png":::
47+
1. On the **Condition** tab, select **+ Add Condition**, then in the *Select a signal* search box, search, and select **Under DDoS attack or not**.
5448

5549
1. In the **Create an alert rule** page, select the following information.
5650

57-
:::image type="content" source="./media/ddos-alerts/ddos-protection-alert-signal.png" alt-text="Screenshot of adding DDoS Protection attack alert signal." lightbox="./media/ddos-alerts/ddos-protection-alert-signal.png":::
58-
5951
| Setting | Value |
6052
|--|--|
6153
| Threshold | Leave as the default *Static*. |
6254
| Aggregation type | Leave as default *Maximum*. |
6355
| Operator | Select **Greater than or equal to**. |
6456
| Unit | Leave as default *Count*. |
6557
| Threshold value | Enter **1**. For the *Under DDoS attack or not metric*, **0** means you're not under attack while **1** means you are under attack. |
66-
| Check every | Choose how often the alert rule will check if the condition is met. Leave as default *1 minute*. |
67-
| Lookback period | This is the lookback period, or the time period to look back at each time the data is checked. For example, every 1 minute you’ll be looking at the past 5 minutes. Leave as default *5 minutes*. |
58+
| Check every | Choose how often the alert rule checks if the condition is met. Leave as default *1 minute*. |
59+
| Lookback period | This is the lookback period, or the time period to look back at each time the data is checked. For example, every 1 minute you are looking at the past 5 minutes. Leave as default *5 minutes*. |
6860

6961

7062
1. Select **Next: Actions** then select **+ Create action group**.
@@ -73,24 +65,19 @@ You can select any of the available Azure DDoS Protection metrics to alert you w
7365

7466
1. In the **Create action group** page, enter the following information, then select **Next: Notifications**.
7567

76-
:::image type="content" source="./media/ddos-alerts/ddos-protection-alert-action-group-basics.png" alt-text="Screenshot of adding DDoS Protection attack alert action group basics." lightbox="./media/ddos-alerts/ddos-protection-alert-action-group-basics.png":::
77-
7868
| Setting | Value |
7969
|--|--|
8070
| Subscription | Select your Azure subscription that contains the public IP address you want to log. |
8171
| Resource Group | Select your Resource group. |
8272
| Region | Choose these locations for the broadest set of Azure products and long-term capacity growth. |
8373
| Action Group | Provide an action group name that is unique within the resource group. For this example, enter **myDDoSAlertsActionGroup**. |
84-
| Display name | This display name will be shown as the action group name in email and SMS notifications. For this example, enter **myDDoSAlerts**. |
74+
| Display name | This display name is shown as the action group name in email and SMS notifications. For this example, enter **myDDoSAlerts**. |
8575

8676

8777
1. On the *Notifications* tab, under *Notification type*, select the notification type you wish to use. For this example, we select **Email/SMS message/Push/Voice**. In the *Name* tab, enter **myUnderAttackEmailAlert**.
8878

89-
:::image type="content" source="./media/ddos-alerts/ddos-protection-alert-action-group-notification.png" alt-text="Screenshot of adding DDoS Protection attack alert notification type." lightbox="./media/ddos-alerts/ddos-protection-alert-action-group-notification.png":::
9079

91-
1. On the *Email/SMS message/Push/Voice* page, select the **Email** check box, then enter the required email. Select **OK**.
92-
93-
:::image type="content" source="./media/ddos-alerts/ddos-protection-alert-notification.png" alt-text="Screenshot of adding DDoS Protection attack alert notification page." lightbox="./media/ddos-alerts/ddos-protection-alert-notification.png":::
80+
1. On the *Email/SMS message/Push/Voice* pane, select the **Email** check box, then enter the required email. Select **OK**.
9481

9582
1. Select **Review + create** and then select **Create**.
9683

@@ -99,11 +86,9 @@ You can select any of the available Azure DDoS Protection metrics to alert you w
9986
10087
### Continue configuring alerts through portal
10188

102-
1. Select **Next: Details**.
103-
104-
:::image type="content" source="./media/ddos-alerts/ddos-protection-alert-details.png" alt-text="Screenshot of adding DDoS Protection attack alert details page." lightbox="./media/ddos-alerts/ddos-protection-alert-details.png":::
89+
1. In the *Create an alert rule page*, select **Next: Details**.
10590

106-
1. On the *Details* tab, under *Alert rule details*, enter the following information.
91+
1. On the *Details* tab, under *Alert rule details* section, enter the following information.
10792

10893
| Setting | Value |
10994
|--|--|
@@ -113,8 +98,7 @@ You can select any of the available Azure DDoS Protection metrics to alert you w
11398
1. Select **Review + create** and then select **Create** after validation passes.
11499

115100
Within a few minutes of attack detection, you should receive an email from Azure Monitor metrics that looks similar to the following picture:
116-
117-
:::image type="content" source="./media/ddos-alerts/ddos-alert.png" alt-text="Screenshot of a DDoS attack Alert after a DDoS attack." lightbox="./media/ddos-alerts/ddos-alert.png":::
101+
:::image type="content" source="./media/ddos-alerts/ddos-alert.png" alt-text="Screenshot of a DDoS attack Alert after a DDoS attack." lightbox="./media/ddos-alerts/ddos-alert.png":::
118102

119103
You can also learn more about [configuring webhooks](/azure/azure-monitor/alerts/alerts-webhooks?toc=%2fazure%2fvirtual-network%2ftoc.json) and [logic apps](../logic-apps/logic-apps-overview.md?toc=%2fazure%2fvirtual-network%2ftoc.json) for creating alerts.
120104

@@ -123,11 +107,7 @@ You can keep your resources for the next tutorial. If no longer needed, delete t
123107

124108
1. In the search box at the top of the portal, enter **Alerts**. Select **Alerts** in the search results.
125109

126-
:::image type="content" source="./media/ddos-alerts/ddos-protection-alert-rule.png" alt-text="Screenshot of Alerts page within Azure for DDoS Protection." lightbox="./media/ddos-alerts/ddos-protection-alert-rule.png":::
127-
128-
1. Select **Alert rules**.
129-
130-
:::image type="content" source="./media/ddos-alerts/ddos-protection-delete-alert-rules.png" alt-text="Screenshot of Alert rules page within Azure for DDoS Protection." lightbox="./media/ddos-alerts/ddos-protection-delete-alert-rules.png":::
110+
1. Select **Alert rules** in the middle pane.
131111

132112
1. In the Alert rules page, select your subscription.
133113

articles/ddos-protection/ddos-diagnostic-alert-templates.md

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: ddos-protection
55
author: AbdullahBell
66
ms.service: azure-ddos-protection
77
ms.topic: tutorial
8-
ms.date: 07/17/2024
8+
ms.date: 02/10/2025
99
ms.author: abell
1010
---
1111

@@ -88,12 +88,8 @@ You can keep your resources for the next guide. If no longer needed, delete the
8888

8989
1. In the search box at the top of the portal, enter **Alerts**. Select **Alerts** in the search results.
9090

91-
:::image type="content" source="./media/ddos-diagnostic-alert-templates/ddos-protection-alert-rule.png" alt-text="Screenshot of Alerts page." lightbox="./media/ddos-diagnostic-alert-templates/ddos-protection-alert-rule.png":::
92-
9391
1. Select **Alert rules**, then in the Alert rules page, select your subscription.
9492

95-
:::image type="content" source="./media/ddos-diagnostic-alert-templates/ddos-protection-delete-alert-rules.png" alt-text="Screenshot of Alert rules page." lightbox="./media/ddos-diagnostic-alert-templates/ddos-protection-delete-alert-rules.png":::
96-
9793
1. Select the alerts created in this guide, then select **Delete**.
9894

9995
## Next steps

articles/ddos-protection/ddos-switch-ddos-protection-tier.md

Lines changed: 1 addition & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: abell
55
ms.author: abell
66
ms.service: azure-ddos-protection
77
ms.topic: how-to
8-
ms.date: 07/17/2024
8+
ms.date: 02/10/2025
99
---
1010

1111
# How to switch Azure DDoS Protection tiers using Azure portal
@@ -29,13 +29,8 @@ Services must be added to the DDoS protection plan to be protected by Network Pr
2929
1. In the search box at the top of the portal, enter **DDoS protection plans**. Select your DDoS protection plan.
3030
1. In the **Settings** pane, select the **Protected Resources** tab, then select **Add**.
3131

32-
:::image type="content" source="./media/ddos-switch-ddos-protection/ddos-add-protected-resources.png" alt-text="Screenshot of adding protected resources to DDoS protection plan.":::
33-
3432
1. In the **Add virtual network to DDoS plan** pane, select the **Subscription** and **Resource group** that contains the virtual network, then select the **Virtual network** that contains the protected resources. Select **Add**.
3533

36-
:::image type="content" source="./media/ddos-switch-ddos-protection/ddos-add-virtual-network.png" alt-text="Screenshot of adding virtual network to DDoS protection plan.":::
37-
38-
3934
#### [IP Protection](#tab/ip-protection)
4035

4136
### Switch to IP Protection
@@ -51,8 +46,6 @@ You can switch from Network Protection to IP Protection using the Azure portal.
5146

5247
1. In the **Configure DDoS protection** pane, under **Protection type**, select **IP**, then select **Save**.
5348

54-
:::image type="content" source="./media/ddos-switch-ddos-protection/ddos-protection-select-status.png" alt-text="Screenshot of selecting IP Protection in Public IP Properties.":::
55-
5649

5750
### Disable Network Protection
5851

@@ -64,8 +57,6 @@ The DDoS protection plan must be disassociated from the protected resources befo
6457
1. In the search box at the top of the portal, enter **DDoS protection plans**. Select your DDoS protection plan.
6558
1. In the **Settings** page, select the **Protected Resources** tab, then select the **Dissociate** icon next to the virtual network that contains the resources you're protecting. When prompted, select **Yes** to confirm.
6659

67-
:::image type="content" source="./media/ddos-switch-ddos-protection/ddos-remove-protected-resources.png" alt-text="Screenshot of removing protected resources to DDoS protection plan.":::
68-
6960
---
7061

7162
### Validate DDoS Protection status
@@ -78,8 +69,6 @@ To validate the status of your protected resource follow the steps below.
7869
1. In the **Overview** page, select the **Properties** tab in the middle of the page, then select **DDoS protection**.
7970
1. View **Protection status** and verify your public IP is protected.
8071

81-
:::image type="content" source="./media/ddos-switch-ddos-protection/ddos-protection-view-status.png" alt-text="Screenshot showing view of Public IP Properties." lightbox="./media/ddos-switch-ddos-protection/ddos-protection-view-status.png":::
82-
8372
## Next steps
8473

8574
- Learn how to [configure diagnostic logging](diagnostic-logging.md).

articles/ddos-protection/ddos-view-diagnostic-logs.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: ddos-protection
55
author: AbdullahBell
66
ms.service: azure-ddos-protection
77
ms.topic: tutorial
8-
ms.date: 07/17/2024
8+
ms.date: 02/10/2025
99
ms.author: abell
1010
---
1111

@@ -49,9 +49,7 @@ For more information on log schemas, see [View diagnostic logs](ddos-view-diagno
4949
1. Under the **Log analytics workspaces** blade, select your log analytics workspace.
5050

5151

52-
1. On the left side pane, select **Logs**.
53-
54-
:::image type="content" source="./media/ddos-attack-telemetry/ddos-workspace-diagnostic-logs.png" alt-text="Screenshot of log query in Log analytics workspaces.":::
52+
1. On the left side pane, select **Logs**. Here you see the query explorer.
5553

5654
1. In Query explorer, type in the following Kusto Query and change the time range to Custom and change the time range to last three months. Then hit Run.
5755

articles/ddos-protection/manage-ddos-ip-protection-portal.md

Lines changed: 5 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -5,20 +5,20 @@ author: AbdullahBell
55
ms.author: abell
66
ms.service: azure-ddos-protection
77
ms.topic: quickstart
8-
ms.date: 07/17/2024
8+
ms.date: 02/10/2025
99
ms.custom: template-quickstart
1010
---
1111

1212
# QuickStart: Create and configure Azure DDoS IP Protection using Azure portal
1313

1414
Get started with Azure DDoS IP Protection by using the Azure portal.
15-
In this quickstart, you'll enable DDoS IP protection and link it to a public IP address.
15+
In this quickstart, you enable DDoS IP protection and link it to a public IP address.
1616

1717
:::image type="content" source="./media/manage-ddos-ip-protection-portal/ddos-ip-protection-diagram.png" alt-text="Diagram of DDoS IP Protection protecting the Public IP address." lightbox="./media/manage-ddos-ip-protection-portal/ddos-ip-protection-diagram.png":::
1818

1919
## Prerequisites
2020

21-
- If you don't have an Azure subscription, create a [free account](https://azure.microsoft.com/free/?WT.mc_id=A261C142F) before you begin.
21+
- Create a [free account](https://azure.microsoft.com/free/?WT.mc_id=A261C142F) before you begin.
2222
- Sign in to the [Azure portal](https://portal.azure.com).
2323

2424
## Enable DDoS IP Protection on a public IP address
@@ -45,13 +45,11 @@ In this quickstart, you'll enable DDoS IP protection and link it to a public IP
4545
| Tier | Select *Global* or *Regional*. In this example, we selected **Regional**. |
4646
| IP address assignment | Locked as **Static**. |
4747
| Routing Preference | Select *Microsoft network* or *Internet*. In this example, we selected **Microsoft network**. |
48-
| Idle Timeout (minutes) | Keep a TCP or HTTP connection open without relying on clients to send keep-alive messages. In this example, we'll leave the default of **4**. |
48+
| Idle Timeout (minutes) | Keep a TCP or HTTP connection open without relying on clients to send keep-alive messages. In this example, we leave the default of **4**. |
4949
| DNS name label | Enter a DNS name label. In this example, we left the value blank. |
5050

5151

52-
:::image type="content" source="./media/manage-ddos-ip-protection-portal/ddos-protection-create-ip.png" alt-text="Screenshot of create standard IP address in Azure portal.":::
53-
54-
1. Select **Create**.
52+
1. Select **Review + create** to review your settings and create the public IP address.
5553

5654
### Enable for an existing Public IP address
5755

@@ -63,16 +61,12 @@ In this quickstart, you'll enable DDoS IP protection and link it to a public IP
6361

6462
1. In the **Configure DDoS protection** pane, under **Protection type**, select **IP**, then select **Save**.
6563

66-
:::image type="content" source="./media/manage-ddos-ip-protection-portal/ddos-protection-select-status.png" alt-text="Screenshot of selecting IP Protection in Public IP Properties.":::
67-
6864
### Disable for a Public IP address:
6965

7066
1. Enter the name of the public IP address you want to disable DDoS IP Protection for in the **Search resources, services, and docs box** at the top of the portal. When the name of public IP address appears in the search results, select it.
7167
1. Under **Properties** in the overview pane, select **DDoS Protection**.
7268
1. Under **Protection type** select **Disable**, then select **Save**.
7369

74-
:::image type="content" source="./media/manage-ddos-ip-protection-portal/ddos-protection-disable-status.png" alt-text="Screenshot of disabling IP Protection in Public IP Properties.":::
75-
7670
> [!NOTE]
7771
> When changing DDoS IP protection from **Enabled** to **Disabled**, telemetry for the public IP resource will no longer be active.
7872
## Validate and test

0 commit comments

Comments
 (0)