Advice on what services to use in my scenario

Question

I'm seeking advice on my planned setup for a web application:

• I need to host a .Net Core backend (App Service + Azure SQL Database)
• Handling multiple HTML pages that retrieve data from the backend through API calls (Storage Account, Blob)
• Each HTML page will have its own domain name (Storage Account, Custom Domain)
• The expected traffic is around 10,000 requests per day (App Service, Basic Tier + Azure SQL Database, Single DB-DTU-Standard Tier)
• The client has previously faced DDOS attacks, so I need to have a plan to mitigate DDOS attacks (Need advice)

Can anyone provide feedback on the plan and suggest any better solutions, especially regarding strategies to prevent DDOS attacks?

Answer 1

To the DDoS Part of the question , from a Microsoft/first-party perspective, consider Az Front Door + WAF and see the L7/App DDoS Protection page here. Front door is by it's design (edge PaaS service) highly elastic. Ensure that you lock down access between front door and any web app or API origin using either private link (for premium) or through App Service IP ACLs and front door id header check. As explained here.

Front door will also be useful from an edge caching perspective , and in general can provide better performance where the clients to your app are widely distributed.