Azure Front Door
A global CDN and load-balancing service on the Microsoft Azure cloud platform, providing DDoS protection, traffic management and application acceleration.
Timeline (last 90 days)
The Azure Front Door team shifted to a holistic protection approach: monitoring the correlation between system resource usage and incoming traffic, rather than targeting individual attack vectors.
This holistic DDoS protection scheme recently went live internally within Azure Front Door, but no public announcement was made.
The Azure Front Door team uses probabilistic data structures to track Top K customers, quickly locating the small number of customers contributing 80% of traffic (following the 80/20 rule).
The team introduced Microsoft threat intelligence to group IPs into "good bots," "bad bots" and unknown non-bots.
The team uses TLS/HTTP signatures such as JA4 to profile traffic and determine whether requests come from real browsers or automated scripts.
From design to rollout to all related services, the scheme took about a year.
A patent has been filed for the related DDoS defense technology.
All Facts (7)
The team introduced Microsoft threat intelligence to group IPs into "good bots," "bad bots" and unknown non-bots.
50%UnverifiedA patent has been filed for the related DDoS defense technology.
50%UnverifiedThe Azure Front Door team uses probabilistic data structures to track Top K customers, quickly locating the small number of customers contributing 80% of traffic (following the 80/20 rule).
50%UnverifiedThe Azure Front Door team shifted to a holistic protection approach: monitoring the correlation between system resource usage and incoming traffic, rather than targeting individual attack vectors.
50%UnverifiedThe team uses TLS/HTTP signatures such as JA4 to profile traffic and determine whether requests come from real browsers or automated scripts.
50%UnverifiedFrom design to rollout to all related services, the scheme took about a year.
50%UnverifiedThis holistic DDoS protection scheme recently went live internally within Azure Front Door, but no public announcement was made.
50%