DOS Protection in Azure Web APP

人盡茶涼 提交于 2020-05-25 08:21:09

问题


We are using Azure Web APP for for our FrontEnd site. Recently we have discovered DOS attack on our website. When I googled around I got to know solution for Azure Cloud Services. Is there any way, Azure Web APP can be protected with out of box support..


回答1:


Azure Web Sites enabled the Dynamic IP Restrictions module for IIS8.You can protect your Azure Web App from DDOS Attacks by configuring Dynamic Ip Security under System.WebServer in your App's web.config file as follows.

   <security>
  <dynamicIpSecurity denyAction="NotFound">
  <!--<denyByConcurrentRequests enabled="true" maxConcurrentRequests="20" />-->
    <denyByRequestRate enabled="true" maxRequests="20" requestIntervalInMilliseconds="5000"/>     
  </dynamicIpSecurity>
</security>

Read Reference For More Information https://azure.microsoft.com/fr-fr/blog/confirming-dynamic-ip-address-restrictions-in-windows-azure-web-sites/




回答2:


As I know, we can configure Static/Dynamic IP Restrictions to protect our Azure web app:

1) For Configuring Dynamic IP Address Restrictions in Windows Azure Web App, please refer to this article.
2) For configure Static IP Address Restrictions in Windows Azure Web App, please refer to this article.

You could also read this video to get started.



来源:https://stackoverflow.com/questions/39370217/dos-protection-in-azure-web-app

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!