Compte désactivé : fausse alerte DDoS provenant du trafic interne du cluster Hadoop

Hello Jeathusan Kugathas, It sounds like you're facing a frustrating issue with your Azure student account being disabled due to a false DDoS alert triggered by internal traffic from your Hadoop/Spark project. This can sometimes happen with heavy workloads in Azure. Here are a few steps and suggestions to help you out:

1. Reactivating Your Account: The quickest way to reactivate your account after it has been disabled is to open a support ticket with Azure support. Provide as much detail as possible about the situation, including that the alert was a false positive due to the legitimate internal traffic from your project.
2. Preventing Future False Alerts:
   • Network Security Groups (NSGs): Consider adjusting NSG rules to allow more specific traffic patterns. By defining expected traffic profiles, you can minimize the likelihood of false positives.
   • Monitoring Configurations: Make sure you have configured alerts for activity that is legitimate for your workload. You may want to create activity log alerts specifically for your virtual network traffic. Check out this guide for creating alerts.
3. Documentation and Resources:
   • Review the Azure documentation on controlling network traffic and monitoring requirements for HDInsight clusters, as it provides guidance on traffic management and security configurations: Control network traffic in Azure HDInsight.
   • You might also find these resources useful:
     • Maintenance for Virtual Machines in Azure.
     • Service Healing - Auto-recovery of Virtual Machines.

Follow-Up Questions:

• Have you already opened a support ticket with Azure? If so, what updates have you received?
• Could you provide more details about the specific traffic patterns that were occurring when the DDoS alert was triggered?
• Are you using any specific configurations or third-party tools to monitor the network for your Hadoop/Spark workloads?

Hope this helps get you on the right path! Let me know if you have any other questions!