Hey everyone! I just signed up for Azure and I'm currently on the free tier, working on a simple portfolio site. I'm planning to add a contact form and possibly link it to Azure Functions. However, I'm a bit worried about potential DDoS or brute-force attacks. Can anyone tell me if Azure Static Web Apps provide any rate limiting by default to help protect against these types of attacks? If not, how can I implement some protection while still staying within the free tier?
2 Answers
If you're looking for low-cost protection, consider using Cloudflare. It can help shield your site for free! Plus, your static web app is likely to handle typical traffic without any major issues before you start racking up costs.
I've run several free tier static web apps without any issues like DDoS attacks. You're probably worrying too much. But in case you get targeted, Azure's infrastructure provides basic protection against DDoS attacks. Just keep in mind, while your app may have lower rate limits, Azure does offer some level of safety against heavy traffic.
Here's a link with more details: [Microsoft DDoS Protection FAQ](https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-faq?utm_source=chatgpt.com#are-services-unsafe-in-azure-without-the-service-).
What about using a captcha on the form? Wouldn't that help prevent abuse too?