{"id":2375,"date":"2022-02-13T14:31:07","date_gmt":"2022-02-13T14:31:07","guid":{"rendered":"https:\/\/exceedthecloud.com\/?p=2375"},"modified":"2022-02-13T14:37:43","modified_gmt":"2022-02-13T14:37:43","slug":"configure-ddos-protection-on-a-virtual-network-using-the-azure-portal","status":"publish","type":"post","link":"https:\/\/exceedthecloud.com\/?p=2375","title":{"rendered":"Configure DDoS Protection on a virtual network using the Azure portal"},"content":{"rendered":"\n
Being responsible for Exceedlabs\u2019s Network Security team, you are going to run a mock DDoS attack on the virtual network. The following steps walk you through creating a virtual network, configuring DDoS Protection, and creating an attack which you can observe and monitor with the help of telemetry and metrics.<\/p>\n\n\n\n
In this lab, you will:<\/p>\n\n\n\n
Task 1: Create a resource group<\/li>
Task 2: Create a DDoS Protection plan<\/li>
Task 3: Enable DDoS Protection on a new virtual network<\/li>
Task 4: Configure DDoS telemetry<\/li>
Task 5: Configure DDoS diagnostic logs<\/li>
Task 6: Configure DDoS alerts<\/li>
Task 7: Submit a DDoS service request to run a DDoS attack<\/li><\/ul>\n\n\n\n
Task 1: Create a resource group<\/strong><\/p>\n\n\n\n
Log in to your Azure account.<\/li>
On the Azure portal home page, select Resource groups<\/strong>.<\/li>
Select Create<\/strong>.<\/li>
On the Basics<\/strong> tab, in Resource group<\/strong>, enter ExceedlabsResourceGroup<\/strong>.<\/li>
In Region<\/strong>, select East US.<\/li>
Select Review + create<\/strong>.<\/li>
Select Create<\/strong>.<\/li><\/ul>\n\n\n\n
Task 2: Create a DDoS Protection plan<\/strong><\/p>\n\n\n\n
On the Azure portal home page, in the search box type DDoS<\/strong> and select DDoS protection plan<\/strong> when it appears.<\/li><\/ul>\n\n\n\n
<\/figure>\n\n\n\n
Select + Create<\/strong>.<\/li>
On the Basics<\/strong> tab, in the Resource group<\/strong> list, select the resource group you just created.<\/li><\/ul>\n\n\n\n
<\/figure>\n\n\n\n
In the Instance name<\/strong> box, type MyDdoSProtectionPlan<\/strong>, then select Review + create<\/strong>.<\/p>\n\n\n\n
<\/figure>\n\n\n\n
Select Create<\/strong>.<\/li><\/ul>\n\n\n\n
Task 3: Enable DDoS Protection on a new virtual network<\/strong><\/p>\n\n\n\n
Here you will enable DDoS on a new virtual network rather than on an existing one, so first you need to create the new virtual network, then enable DDoS protection on it using the plan you created previously.<\/p>\n\n\n\n
On the Azure portal home page, select Create a resource<\/strong>, then in the search box, type Virtual Network<\/strong>, then select Virtual Network<\/strong> when it appears.<\/li>
On the Virtual Network<\/strong> page, select Create<\/strong>.<\/li>
On the Basics<\/strong> tab, select the resource group you created previously.<\/li>
In the Name<\/strong> box, type MyVirtualNetwork<\/strong>, then click the Security<\/strong> tab.<\/li><\/ul>\n\n\n\n
<\/figure>\n\n\n\n
On the Security<\/strong> tab, next to DDoS Protection Standard<\/strong>, select Enable<\/strong>.<\/li>
In the DDoS protection plan<\/strong> drop-down list, select MyDdosProtectionPlan<\/strong>.<\/li><\/ul>\n\n\n\n
You create a Public IP address, and then set up telemetry in the next steps.<\/p>\n\n\n\n
On the Azure portal home page, select Create a resource<\/strong>, then in the search box, type public ip<\/strong>, then click Public IP address<\/strong> when it appears.<\/li>
On the Public IP address<\/strong> page, click Create<\/strong>.<\/li><\/ul>\n\n\n\n
<\/figure>\n\n\n\n
On the Create public IP address<\/strong> page, under SKU<\/strong>, select Basic<\/strong>.<\/li>
In the Name<\/strong> box, type MyPublicIPAddress<\/strong>.<\/li>
Under IP address assignment<\/strong>, select Static<\/strong>.<\/li>
In DNS name label<\/strong>, type mypublicdnsmn12022022<\/strong> (where xx is your initials to make this unique).<\/li>
Select your resource group from the list.<\/li><\/ul>\n\n\n\n
<\/figure>\n\n\n\n
Click Create<\/strong>.<\/li>
On the Azure home page, click All resources<\/strong>.<\/li>
In the list of your resources, click MyDdosProtectionPlan<\/strong>.<\/li>
Under Monitoring<\/strong>, select Metrics<\/strong>.<\/li>
Select the Scope<\/strong> box, then select the checkbox next to MyPublicIPAddress<\/strong>.<\/li><\/ul>\n\n\n\n
<\/figure>\n\n\n\n
Click Apply<\/strong>.<\/p>\n\n\n\n
<\/figure>\n\n\n\n
In the Metrics<\/strong> box, select Inbound packets dropped DDoS<\/strong>.<\/li>
In the Aggregation<\/strong> box, select Max<\/strong>.<\/li><\/ul>\n\n\n\n
On the Azure home page, click All resources<\/strong>.<\/li>
In the list of your resources, click MyPublicIPAddress<\/strong>.<\/li>
Under Monitoring<\/strong>, select Diagnostic settings<\/strong>.<\/li><\/ul>\n\n\n\n
<\/figure>\n\n\n\n
<\/figure>\n\n\n\n
Click Add diagnostic setting<\/strong>.<\/li>
On the Diagnostic setting<\/strong> page, in the Diagnostic setting name<\/strong> box, type MyDiagnosticSetting<\/strong>.<\/li>
Under Category details<\/strong>, select all 3 log<\/strong> checkboxes and the AllMetrics<\/strong> checkbox.<\/li>
Under Destination details<\/strong>, select the Send to Log Analytics workspace<\/strong> checkbox. Here, you could select a pre-existing Log Analytics workspace, but as you haven\u2019t set up a destination for the diagnostic logs yet, you will just enter the settings, but then discard them in the next step in this lab.<\/li><\/ul>\n\n\n\n
<\/figure>\n\n\n\n
Normally you would now click Save<\/strong> to save your diagnostic settings. Note that this option is still grayed out as we cannot complete the setting configuration yet.<\/li>
Click Discard<\/strong>, then click Yes<\/strong>.<\/li><\/ul>\n\n\n\n
In this step you will create a virtual machine, assign a public IP address to it, and then configure DDoS alerts.<\/p>\n\n\n\n
Create the VM<\/strong><\/p>\n\n\n\n
On the Azure portal home page, select Create a resource<\/strong>, then in the search box, type virtual machine<\/strong>, then click Virtual machine<\/strong> when it appears.<\/li>
On the Virtual machine<\/strong> page, click Create<\/strong>.<\/li>
On the Basics<\/strong> tab, create a new VM using the information in the table below.<\/li><\/ul>\n\n\n\n
Setting<\/strong><\/td>
Value<\/strong><\/td><\/tr><\/thead>
Subscription<\/td>
Select your subscription<\/td><\/tr>
Resource group<\/td>
ExceedlabsResourceGroup<\/strong><\/td><\/tr>
Virtual machine name<\/td>
MyVirtualMachine<\/strong><\/td><\/tr>
Region<\/td>
Your region<\/td><\/tr>
Availability options<\/td>
No infrastructure redundancy required<\/strong><\/td><\/tr>
Image<\/td>
Ubuntu Server 18.04 LTS – Gen 1<\/strong> (Select Configure VM Generation link if needed)<\/td><\/tr>
Size<\/td>
Select See all sizes<\/strong>, then choose B1ls<\/strong> in the list and choose Select<\/strong> (Standard_B1ls – 1 vcpu, 0.5 GiB memory<\/strong><\/td><\/tr>
![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img1-16-1024x455.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img2-16.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img3-15.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img4-15.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img5-15.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img6-14.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img7-14-1024x498.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img8-14-1024x411.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img9-14.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img10-14.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img11-13.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img12-12.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img12-13.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img13-13-1024x432.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img14-14.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img15-13-1024x456.png\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img16-13.png\")
<\/figure>\n\n\n\n