Microsoft has confirmed that several of its services were affected by a global outage due to a massive Distributed Denial of Service (DDoS) attack on July 30, 2024. Services such as Azure App Services, Application Insights, Azure IoT Central, Azure Log Search Alerts, Azure Policy, and Azure Interface were severely affected by the attack. Additionally, subsets of Microsoft 365 and Microsoft Purview services also felt the impact.
Details of the Deduction
The incident occurred between 11:45 UTC and 19:43 UTC. During this time, an unexpected spike in usage caused the performance of Azure Front Door (AFD) and Azure Content Delivery Network (CDN) components to degrade. This led to problems such as intermittent errors, timeouts, and increased latency. Although Microsoft’s DDoS protection mechanisms were active, a failure to implement these defenses amplified the impact of the attack.
Microsoft's Response
Microsoft's response team investigated the issue and took the following actions:
- Network configuration changes have been made to support DDoS protection efforts.
- Failovers to alternative network paths were implemented to provide relief.
- The updated mitigation approach was implemented across regions in Asia Pacific, Europe, and the Americas.
Initial network configuration changes mitigated most of the impact by 14:10 UTC. However, some customers reported that services were not fully available by 18:00 UTC. By 19:43 UTC, the incident was fully mitigated and failure rates returned to pre-event levels.
