Thanks for posting your question in the Microsoft Q&A forum.
Azure Application Gateway WAF uses a sliding window rate limiting algorithm, allowing requests up to a defined threshold within a rolling time frame—useful for mitigating DoS attacks regionally. In contrast, Azure Front Door WAF uses a fixed window
approach, where requests are counted within a static interval , and excess traffic is blocked until the window resets. App Gateway supports more granular grouping, while Front Door typically limits by IP at a global edge level. Both offer protection against high-volume traffic but differ in scope, algorithm behavior, and enforcement precision.
Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful