Gateway Load Balancer enables the protection of such workloads by ensuring the relevant NVAs are injected into the ingress path of the internet traffic. Once chained to a Standard Public Load Balancer frontend or IP configuration on a virtual machine, no additional configuration is needed to ensure traffic to and from the application endpoint is sent to the Gateway Load Balancer.
Easily deploy inline DDoS protection with partner network virtual appliances
Deployment of inline DDoS NVA can be done in a few easy steps:
1. Find your virtual appliance in Azure Marketplace.
2. Deploy the NVA instances.
3. Create a Gateway Load Balancer and place the NVA instances in the backend pool.
4. Chain the Gateway Load Balancer to your public IP or Standard Load Balance frontend.
Gateway Load Balancer provides transparent flow (bump in the wire) using an overlay network with low latency, preserving the health of the host as well as the NVAs during the DDoS attacks.
Inbound traffic is always inspected with the NVAs in the path and the clean traffic is returned to the backend infrastructure (gamer servers).
Traffic flows from the consumer virtual network to the provider virtual network and then returns to the consumer virtual network. The consumer virtual network and provider virtual network can be in different subscriptions, tenants, or regions enabling greater flexibility and ease of management.