none
Azure Security Group Incoming Traffic Pricing, if any RRS feed

  • Question

  • Let’s say that I have a Azure instance with a security group, for example, that denies all UDP traffic.  Suppose that there is a UDP DDoS attack, with very high UDP bandwidth.  Do I pay for that security group filtered traffic (denied DDoS UDP) or is the filtered traffic considered as no additional charge?  Thanks!

    Sunday, October 13, 2019 10:24 PM

All replies

  • Greetings,

    NSGs are Azure’s basic network firewall feature.  They are non-billable network resources.  NSGs are groups of firewall rules that specify what’s allowed or denied into and out of a vNet. If an NSG is assigned to a subnet its rules will apply to all VMs whose vNICs are part of this subnet.  Alternatively, NSGs can be assigned directly to a vNIC.  In that case, the NSG firewall rules will apply to this single VM only and Azure charges only depending on traffic whether it is ingress or egress.

    Regards,
    Subhash


    Monday, October 14, 2019 1:49 PM
    Moderator
  • Hi,

    Just checking in if you have had a chance to see the previous response. If this answers your query, do click “Mark as Answer” and "Up-Vote" for the same.

    Regards,
    Subhash


    Tuesday, October 22, 2019 5:03 AM
    Moderator