Integrating Azure Front Door with Cloudflare for DDoS protection

@Cameron O'Rourke ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

Is there any document you are following to achieve this?

I don't think having 2 reverse proxies is a good idea.

• I have limited expertise over the 3rd party, so please let me know if I am misunderstood/incorrect.
• As mentioned by Dillon Silzer, AFD offers inbuilt DDOS Protection as described here

The reason for this is Host Name preservation

• See this : Incorrect absolute URLs
  • 
• Also, other problems include
  • Incorrect redirect URLs
  • Broken cookies

From the above, I am not sure if you will be able to route traffic to the AFD from the 3rd party with the host "constoso.com"

• Instead, I think the 3rd party would send requests as "contoso.zxxx.afd.net"
• i.e., the EndPoint's hostname would be used and not the custom domain

Wrt, "If I put it to DNS only, I am unsure if the domain is protected against DDoS attacks."

• Please check this with the vendor's forums or support

If you are still interested in using 2 reverse proxies,

• You can leverage AFD Access logs to see what was the incoming request in AFD
  • See : How to enable AFD logs
• And how AFD replied to that request (4xx or 5xx error response code and reason )
  • Especially "HostName" and the "HttpStatusCode" fields.

Kindly let us know if this helps or you need further assistance on this issue.

Thanks,

Kapil

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.