I am looking for alternative options to Azure DDoS protection for protecting my Azure hosted web applications. Azure DDoS is $2944/month which is too pricey for us.
We currently have several web apps hosted in Azure sitting behind an Azure App Gateway (with WAF). Would it be possible to add DDoS protection from a 3rd party vendor such as AWS Shield or Cloudflare without reconfiguring our web apps to use a new layer 7 gateway? Or is the only option to replace the Azure App Gateway with a different vendor gateway? Is the DDoS solution generally tied to whichever layer 7 gateway is being used?
Ideally I would like to be able to enable a DDoS layer of protection without having to restructure our Azure services if that's at all possible.