DDoS capabilities in Azure Front Door could certainly be improved. Although Microsoft states it comes with basic DDoS protections out of the box, I find it often ineffectual in mitigating thousands of requests from a single source in a short span of time. User then have to rely on the WAF module where users must configure rate-limiting rules, as it does not automatically sense malicious spikes in traffic. I believe Front Door should have an out-of-the-box premium DDoS protection that can automatically detect and block malicious traffic. I would appreciate improvements in the turnaround time for support, especially since issues with Azure Front Door are usually critical for businesses. If there is an issue, it often results in downtime for line of business applications. I have faced this situation multiple times as one of the largest financial institutions in India is hosted there, adhering to strict SLAs that require prompt responses.
