Azure Content Delivery Network DDoS Protection

Important

Azure CDN Standard from Microsoft (classic) will be retired on September 30, 2027. To avoid any service disruption, it's important that you migrate your Azure CDN Standard from Microsoft (classic) profiles to Azure Front Door Standard or Premium tier by September 30, 2027. For more information, see Azure CDN Standard from Microsoft (classic) retirement.

Azure CDN from Edgio was retired on January 15, 2025. For more information, see Azure CDN from Edgio retirement FAQ.

A content delivery network provides DDoS Protection by design. In addition to the global capacity to absorb volumetric attacks, Azure Content Delivery Network has extra DDoS Protection as outlined in this article, for no extra cost.

Azure Content Delivery Network from Microsoft

Azure Content Delivery Network from Microsoft is protected by Azure Basic DDoS. It's integrated into the Azure content delivery network from Microsoft platform by default and at no extra cost. The full scale and capacity of Azure Content Delivery Network from Microsoft's globally deployed network provides defense against common network layer attacks through always-on traffic monitoring and real-time mitigation. Basic DDoS Protection also defends against the most common, frequently occurring Layer 7 DNS Query Floods and Layer 3 and 4 volumetric attacks that target content delivery network endpoints. This service also has a proven track record in protecting Microsoft's enterprise and consumer services from large-scale attacks.

Next steps

Learn more about Azure DDoS.