Docs

Web Application Firewall

Document

What's new

Release notes

Product overview

What is Web Application Firewall

Features

Applicable scenarios

Instance specifications

Service region

Product billing

Quick Start

Overview of integration methods

Associate with WAF through CNAME record

Associate with through Load Balancing Listener

User guide

Security overview

View security dashboard

Export report

Configure custom charts

Protection policy

Introduction to protection strategies

Protection policy types

Protection modes and policy switches

Applicable action description

Advanced condition configuration instructions

Configure protection policy

Instructions on policy configuration for WebSocket requests

Configure access control policies

Configure geographic location access control policies

Configure custom response page policies

Configure CC protection policies

Configure vulnerability protection policies

Configure API protection policies

Configure policies to prevent sensitive information leakage

Configure web tamper protection policies

Configure Bot management policies

Policy priority

Priority of global policies

Priority of blocklist policies

Priority of rate limiting policies

Priority of vulnerability protection policies

Priority of bot management policies

Description of response data detection latency

Website settings

Comparison of website association methods

CNAME association

Associate with WAF through CNAME record

Allow access from the back-to-origin CIDR blocks

Verify the forwarding configuration

Modify DNS resolution record

Load Balancing Listener association

Associate with WAF through Application Load Balancer (ALB)

Associate with WAF through Layer 7 listener of Load Balancer (CLB)

View the information of the protected website

Modify the website protection mode

Ban management

View the blocked IP list

Add IP addresses to Allowlist or Blocklist

System management

Instance management

Create a WAF instance

Upgrade a WAF instance

Renew a WAF instance

Activate a free trial WAF instance

Free trial of WAF add-on features

View and associate certificates

Create and manage domain groups

Create and manage IP address groups

API reference

Call method

Website settings

CreateDomain - Associate with WAF through a CNAME record

ListDomain

DeleteDomain

UpdateWafServiceControl

ListLoadBalancer

ModifyServiceDefenceMode

BatchUpdateTLSFieldsConfig

Security overview

QueryAttackAnalysisTermsAggLb

QueryAttackAnalysisWithRuleAggLb

QueryAttackSecurityEvent

QueryFlowOverviewLb

QueryProtectionOverviewLb

Access control

Rate limiting

ListCCRulePriorityAvailable

Vulnerability protection

GetVulnerabilityConfig

UpdateVulnerabilityConfig

UpdateCustomSystemVulRule

Bot management

ListBotAnalyseProtectRulePriorityAvailable

Ban management

AddProhibitionWhite

DeleteProhibitionWhite

AddProhibitionBlack

DeleteProhibitionBlack

ListProhibition

Log management

ModifyTLSConfig

SearchLogs - Query Log Details

Instance management

UpdateInstanceCtl

Certificate management

ListWafServiceCertificate

IP address group management

Domain group management

SDK reference

Best practices

Best practices for configuring basic policies

Best practices for configuring policies against CC attacks

Best practices for configuring Bot protection policies to resist malicious Bot traffic

Configuring API auto-discovery and protection policies to enhance API security

Joint deployment of DDoS native protection and Web Application Firewall

FAQ

Documentation

Web Application Firewall

Best practices

Best practices for configuring Bot protection policies to resist malicious Bot traffic

Copy page

Download PDF

Best practices

Best practices for configuring Bot protection policies to resist malicious Bot traffic

Copy page

Download PDF

Best practices for configuring Bot protection policies to resist malicious Bot traffic

Last updated: 2025.06.30 16:25:33

Public security network record in Beijing: No. 11010802032137