Docs

Web Application Firewall

API reference

API release history

API release history

This document introduces the release updates of the Web Application Firewall API.

May 2026

API	Release date	Change log	Related features
updateCreateCCRule	2026-05-25	Added QPS limit Added WebSocket configuration Added advanced condition request characteristics, statistical objects, and operator types	Rate limiting
updateUpdateCCRule
updateListCCRule
updateDeleteCCRule				Added QPS limit
addListCCRulePriorityAvailable				Added an API for querying available rate limiting rule priorities.
addSetSmartCCConfig				Added an API for configuring smart rate limiting policies.
addBatchCopyCCRule				Added an API for copying existing rate limiting rules to other protected domains or domain groups.
addGetSmartCCConfig				Added an API to query the smart rate limiting configuration for a specified domain.
addAdjustCCRulePriority				Added an API to modify the effective priority of the current rate limiting rule.

July 2025

API	Release date	Change log	Related features
updateUpdateDomain	2025-07-07	When updating protected website information, if the TLSEnable field is not filled, it will be reset to disabled (default state).	Website settings
updateCreateAclRule			Update the Property parameter description, specifying that when Opretar is set to 17, 18, 19, 20, or 21, enter the fixed value 5; for all other cases, enter the fixed value 0.	Access control
updateUpdateAclRule
updateCreateCustomPage
updateUpdateCustomPage
updateCreateCCRule - create rate limiting rules					Rate limiting
updateUpdateCCRule - update rate limiting rules					Rate limiting
updateCreateCustomBotConfig					Bot management
updateCreateBotAnalyseProtectRule
updateUpdateBotAnalyseProtectRule
updateUpdateCustomBotConfig
updateListBotAnalyseProtectRulePriorityAvailable			Description of the mapping between BotSpace (rule type) and StatisticalType(statistical method): BotSpace=BotFrequency corresponds to StatisticalType as 1(access frequency). BotSpace=BotRepeat corresponds to StatisticalType as 2(repeat count) or 3(repeat ratio).
updateListBotAnalyseProtectRule

December 2024

API	Release date	Change log	Related features
updateGetTLSConfig	2024-12-03	Updated interface, version updated to 2023-12-25 (supports compatibility with historical versions), added ProjectName parameter.	Log management
updateModifyTLSConfig	2024-12-03		Log management	Updated API, version updated to 2023-12-25 (supports compatibility with historical versions), added ProjectName parameter.

November 2024

API	Release date	Change log	Related features
updateQueryAttackSecurityEvent	2024-11-21	Updated interface, version updated to 2023-12-25 (supports compatibility with historical versions). Parameters unchanged, request structure changed.	Security overview
updateQueryFlowOverviewLb
updateQueryProtectionOverviewLb
updateQueryAttackAnalysisTermsAggLb
updateQueryAttackAnalysisWithRuleAggLb
addCreateAclRule			Added interface to create access control rules and manage access for specified IP addresses.	Access control
addUpdateAclRule			Added interface to modify access control rules.
addListAclRule			Added an API to query detailed information about access control rules.
addDeleteAclRule			Added an API to delete the corresponding access control rule based on rule ID and access control type.
addAddHostGroup			Added interface to add domains already integrated with WAF to the created domain group, enabling centralized creation of access control policies.	Domain group management
addListHostGroup			Added an API to query domain group information, including domain details within the group, associated rule IDs, and other information.
addUpdateHostGroup			Added interface to update specified domain group information, including domain group name, domain group list, and more.
addDeleteHostGroup			Added interface to delete domain groups corresponding to specified IDs, supports deleting multiple domain groups at once.

Last updated: 2026.05.26 13:02:19