Buying Cloud Mode WAF

Prerequisites

IAM users for logging in to the WAF console must have the WAF Administrator and BSS Administrator permissions.

Constraints

• WAF supports protection for all regions. For details about supported regions, see
• Only one edition can be selected in a larger geographical region using the same account.
  • CN North: CN North-Beijing1, CN North-Beijing4, CN North-Beijing2, CN North-Ulanqab1, CN North-Ulanqab201, CN North-Ulanqab202, and CN North3
  • CN East: CN East-Shanghai1, CN East-Shanghai2, CN East-Qingdao, and CN East 2
  • CN South: CN South-Guangzhou and CN South-Shenzhen

Buying a Yearly/monthly Cloud WAF Instance

1. Log in to the WAF console.
2. Click in the upper left corner and select a region or project.
3. (Optional): Select an enterprise project from the Enterprise Project drop-down list.

   This option is only available if you have logged in using an enterprise account, or if you have enabled enterprise projects. To learn more, see Enabling the Enterprise Center. You can use enterprise projects to more efficiently manage cloud resources and project members.

   

   • Value default indicates the default enterprise project. Resources that are not allocated to any enterprise projects under your account are listed in the default enterprise project.
   • The default option is available in the Enterprise Project drop-down list only when you purchase WAF under the logged-in account.

4. In the upper right corner of the page, click Buy WAF.
5. On the Buy Web Application Firewall page, complete the following configurations.

   Table 1 Parameters for purchasing yearly/monthly cloud mode WAF.

   Parameter		Description	Example Value
   Basic Settings	WAF Mode	WAF mode you want to buy. If you select Cloud Mode, you can use Cloud Mode - CNAME Access to connect websites to WAF.	Cloud Mode
   	Billing Mode	Billing mode of WAF. Yearly/Monthly: a prepaid billing mode. Pay-per-use: a postpaid billing mode. For details about billing modes, see WAF Billing Overview.	Yearly/Monthly billing
   	Region	Region where the WAF instance will be deployed. Select a region from the Region drop-down list. Only one WAF edition can be purchased in a region. Generally, a WAF instance purchased in any region can protect web services in all regions. To make a WAF instance forward your website traffic faster, select the region nearest to your services.	EU-Dublin
   Edition	Edition	Select Basic course. WAF provides many tiered specifications, including Standard, Professional, and Enterprise editions, ranking from low to high specifications. For details service scale and function differences, see Edition Differences.	Professional edition
   	Expansion Packages	You can buy domain name, bandwidth, and rule expansion packages to increase quotas of domain names, bandwidth, and IP address blacklist and whitelist rules beyond the basic package. The editions of these packages are aligned with the basic package you buy. For more details, see Expansion Packages (Optional). The expansion package specifications are as follows: A domain name expansion package allows you to add 10 domain names to WAF, including only one top-level domain and nine subdomains or wildcard domains related to the top-level domain. A QPS expansion package protects up to: Service requests: 1,000 QPS Service bandwidth: 20 Mbit/s (for origin servers not deployed on Huawei Cloud) or 50 Mbit/s (for origin servers deployed on Huawei Cloud.) NOTE: The service bandwidth limit is only applied to websites using cloud mode CNAME access. A rule expansion package allows you to configure up to 10 IP address blacklist and whitelist rules.	Domain expansion packages: 1 Bandwidth expansion package: 1 Rule expansion packages: 1
   	Final Specifications	After you select Basic course, Advanced Functions, and Expansion Packages, WAF calculates the total number of selected quotas in real time.	--
   Usage Settings	Required Duration	Select the purchase duration. The duration ranges from one month to three years.	1 year
   	Auto-Renewal	Whether to automatically renew the WAF service when it expires. If you enable this, WAF will automatically renew the subscription upon expiration based on the required duration you configure. Hover over View Billing Rules and Renewal Durations and click Learn More. For details, see Auto-Renewal Rules.	Auto-renewal

6. Confirm the product details and click Buy Now.
7. On the Confirm Configuration page, confirm the order details, select I have read and agree to the WAF Disclaimer, and click Pay.
8. On the payment page, select a payment method and complete the payment.

   After WAF is enabled, you can go to the WAF console. In the navigation pane on the left, choose Instance Management > Product Details. On the product details page, view the details of purchased instances. For details, see Viewing Product Details.

Buying Pay-per-Use Cloud Mode WAF

1. Log in to the WAF console.
2. Click in the upper left corner and select a region or project.
3. In the upper right corner of the page, click Buy WAF.
4. On the Buy Web Application Firewall page, select Pay-per-use for Billing Mode and select a region.

   Generally, a WAF instance purchased in any region can protect web services in all regions. To make a WAF instance forward your website traffic faster, select the region nearest to your services.

   Figure 1 Pay-per-use
   

5. In the lower right corner of the page, click Next.
6. Click Back to Website Settings and add domain names of websites to be protected.

   If you want to disable WAF, choose Instance Management > Product Details, and click Disable Pay-Per-Use Billing next to Cloud Mode.

   • If you want to check the WAF edition in use and how long it will expire, choose Instance Management > Product Details in the navigation pane on the left and view details. For details, see Viewing Product Details.
   • If you no longer need WAF, click Disable Pay-Per-Use Billing next to the Cloud Mode column on the Product Details page.

Follow-up Operations

1. Connecting a Website to WAF: With cloud mode, you can use CNAME access to connect a website to WAF over website domain names or IP addresses.
2. Viewing Protection Events: After a domain name or IP address is connected to WAF, by default, WAF enables General Check in Basic Web Protection, with Protective Action set to Log only and Protection Level to medium, and enables Scanner in Anti-Crawler, with Protective Action set to Log only. You can view and handle protection events on the Events page.
3. Configuring Protection Policies: If default protection rules cannot meet your website security requirements, you can configure custom protection rules.
4. Querying a Protection Event: View website protection details.