title: Azure DDOS for web role?
body: <p>Can Azure DDOS Standard protect a cloud service web role?</p>
  
  <p>My understanding is that Azure DDOS protection is on a Virtual Network basis, and Cloud Services can only be deployed to a Virtual Network "Classic", rather than the newer Resource-group types (unless that has changed?).  There is no information I could find on whether DDOS standard could apply to the classic Virtual Networks.</p>
  
  <p>We could also migrate the site to an App Service.. but there is also little information out there as to whether these are supported either.  Any enlightenment would be welcomed.</p>
  
  <p>(This is not an enterprise application, so enterprise-scale solutions are a non-starter...)</p>