Share via

DDOS Protection Costs Are Out of Control

Deshaun Jackson 20 Reputation points
2025-05-15T12:53:21.5166667+00:00

Hello.

I’m very concerned about the below images regarding DDOS protection, which is fully required for my news feed, which is growing more and more popular every day.

I was under the impression I would be paying $200 a month at the most when it was configured onto 1 IP address. Are you versed in this pricing, or can we loop in someone who is? The price is outrageous either way, but I need it to be as cheap as possible.

Screen Shot 2025-05-15 at 06.52.27 AM

Azure DDos Protection
Azure DDos Protection
An Azure service that provides defense against distributed denial-of-service (DDoS) attacks.
82 questions
0 comments
Accepted answer
  1. TP 125.8K Reputation points Volunteer Moderator
    2025-05-15T14:44:11.11+00:00

    Hi,

    From your screenshot it appears you've selected Azure DDoS Network Protection by mistake, which costs $2,944/month for up to 100 IPs. I'm assuming you only have one Azure subscription. Please let me know if my assumption is incorrect.

    As a first step I recommend you immediately Disable this on all virtual networks/public IPs and delete your DDoS Protection Plan to stop future billing. To do this please navigate to each one of your virtual networks in the Azure portal, on left click on Settings -- DDoS protection, and then on right select Disable and click Save button.

    To disable on individual public IPs please navigate to each one of your public IP addresses in portal, then click Properties tab on right, under DDoS protection click on link to change Protection type and choose Disable.

    User's image

    After disabling on your virtual networks/public IPs please navigate to your DDoS Protection Plan and click Delete and confirm. Please wait for notification message in upper right corner of portal and make sure it says the delete was successful.

    Once you think you have completed the above, please open Azure Cloud Shell (PowerShell mode) and execute below command:

    Get-AzPublicIpAddress|Select Name,ResourceGroupName -ExpandProperty DdosSettings

    This should give you list of public IPs in current subscription along with their DDoS Protection settings. Please post output here (block out any sensitive names if necessary). The purpose of this step is to confirm that none of your IPs have DDoS Protection Enabled (we will enable it again below).

    User's image

    In the sample output above web-prod-pip has DDoS IP Protection Enabled, resulting in $199/month charge. The other two are okay since they are either Disabled or in the case of web-uat-pip DdosProtectionPlan is blank.

    In your case you should only see Disabled or VirtualNetworkInherited with DdosProtectionPlan blank.

    Next please execute below command in your cloud shell to check if there are any DDoS Protection Plans in your subscription:

    Get-AzDdosProtectionPlan

    The output should be blank since you deleted your DDoS Protection Plan above.

    Finally, please navigate to the Public IP address that you would like to protect with Azure DDoS IP Protection. On Overview blade, click on Properties tab on right, under DDoS Protection click on Protection type, select IP specific to this IP address and click Save.

    I recommend you re-run above powershell commands to double-check that you only have DDoS Protection enabled on one IP and there are no DDoS Protection Plans.

    Please click Accept Answer and upvote if the above was helpful.

    Thanks.

    -TP

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. rvinnakota 4,760 Reputation points Moderator
    2025-05-15T15:35:40.9766667+00:00

    Hi @Deshaun Jackson
    I understand that you're facing some concerns about the costs associated with Azure DDoS protection, especially regarding your expectations for pricing.

    Here's a breakdown to help clarify things:

    1. DDoS Protection Tiers: There are two main tiers—the Network Protection tier (which covers resources in virtual networks) and the IP Protection tier (which is focused on public IP addresses).
    2. Pricing Examples:
      • For Network Protection, pricing starts around $29.50 per resource.
      • For IP Protection, it's about $199 per resource.
    3. Total Costs: Your expectation of paying $200 per month is closer to what you'd see if you had just that single public IP under the IP Protection plan. However, it’s important to note that costs can vary based on how many public IPs you have and which protection tier you choose. If you're using multiple public IPs, it could significantly increase your monthly bill.
    4. Cost Analysis: If you're expecting lower costs, it's worth conducting a cost analysis comparing both tiers (consider how many public IPs you have). Azure provides a pricing calculator where you can calculate potential costs based on your specific requirements.

    Kindly let us know if the above helps or you need further assistance on this issue.

    Please do consider to “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.