Azure Based DDOS Mitigation, Azure Based Firewall?

I'd like to mitigate DDOS attacks, for an Azure vm server (just TCP ports 80 and 443). Azure appears to be a great solution. I can't find any Azure documentation, as to if there is an Azure firewall, which I can configure, in front of my Azure vm server. For example, if there is a 10 Gigabit/second UDP attack, I don't want those packets to hit my Azure vm server. Is there some Azure firewall, which will prevent those UDP packets from hitting my Azure vm server?