Docs

Web Application Firewall

Quick Start

Overview of integration methods

BytePlus Web Application Firewall service (WAF) routes the traffic of websites that require protection to the WAF cluster for cleansing, and then returns normal network request traffic to the origin server, thereby providing protection for the website. There are two ways for a website to integrate with the WAF cluster: CNAME integration and load balancer integration. You need to purchase an instance and perform the relevant configuration before your business can access the WAF service.

CNAME integration

CNAME integration refers to adding the domain name that requires protection to the corresponding WAF protection instance, and modifying the domain's DNS CNAME record to direct traffic accessing the original domain name to the WAF. After the traffic passes through the WAF instance for inspection and cleansing, it is then forwarded to your origin server to ensure protection. For detailed steps, refer to Integrate via CNAME.

Load balancer integration

Load balancing integration is suitable for scenarios where a BytePlus load balancing instance has already been purchased and integrated. By performing bypass detection and analysis on traffic that passes through load balancing, attack traffic is cleansed, enabling separation of business traffic forwarding and security protection. WAF supports integration with BytePlus load balancing instances and application load balancing instances to meet different business needs. For detailed steps, refer to:

Integrate via application load balancing (ALB)

Integrate via load balancing (CLB) Layer 7 listener

To learn more about the differences between integration methods, refer to Comparison of website integration methods.

Last updated: 2025.12.05 18:44:55