DDoS Protection for Azure is the service for preventing, detecting and responding to DDoS attacks against your web applications. The protection is provided by Microsoft through a shared IP address space that covers all customers who subscribe to this service. This shared IP address space allows the traffic from different customers to be routed via the same route, hence if some customer originates malicious traffic, this traffic will be received by all other customers in the same network, which reduces the impact on each customer individually.