Updated on 2024-03-11 GMT+08:00

Overview

Only yearly/monthly WAF instances can be renewed. If you use pay-per-use WAF instances, you only need to ensure that your account has a valid payment method configured or a top-up account with a sufficient balance.

Introduction

If you do not renew a yearly/monthly-billed cloud WAF instance upon its expiration, a retention period is available for you.

  • During this period, WAF only forwards traffic but does not check it against your protection policies.
  • When this period ends, resources will be cleared, that is, all configurations of your domain names will be deleted. During the clearing period, domain names are pointed back to origin severs by default. However, services on your domain names may not run properly because there may be inconsistencies between your configured protocols and ports.

To prevent security issues from occurring, it is recommended that you renew the cloud WAF instance before its retention period expires. If the cloud WAF instance expires, it does not impact other services.

Renewal Functions

Table 1 lists the functions related to renew yearly/monthly-billed WAF instance.

Table 1 Renewal-related functions

Features

Description

Manually Renewing WAF

You can renew a yearly/monthly WAF instance on the WAF console anytime as long as it has not been deleted automatically.

Auto-renewing WAF

After auto-renewal is enabled, WAF automatically renews the subscription before the subscription expires. This prevents resources from being automatically deleted if you forget to manually renew the subscription.

In different phases of the lifecycle of a yearly/monthly WAF instance, you can choose a renewal mode best fits your needs. For details, see Figure 1.

Figure 1 WAF instance lifecycle
  • WAF is running properly from the time it was purchased to the time it expires. The working mode is Enabled.
  • If you do not renew your subscription before the instance expires, the instance enters the grace period first.
  • If it still failed to be renewed when the grace period expires, the instance enters the retention period. If you do not renew it within the retention period, the resource will be deleted automatically.

Auto-renewal can be enabled before your WAF instance expires. The system will automatically renew your WAF instance at 3:00 a.m. on the seventh day before it expires. If the auto-renewal fails, the system will try again at 3:00 a.m. every day until WAF expires or the renewal is successful. Renewing resources 7 days before expiration is a default value. You can change it if needed.