- What's New
- Function Overview
- Service Overview
- Getting Started
-
User Guide
- Creating a User Group and Granting Permissions
- Checking the Dashboard
- Purchasing and Changing the Specifications of CFW
- Enabling Internet Border Traffic Protection
- Enabling VPC Border Traffic Protection
-
Configuring Access Control Policies to Control Traffic
- Access Control Policy Overview
- Configuring Protection Rules to Block or Allow Traffic
- Adding Blacklist or Whitelist Items to Block or Allow Traffic
- Viewing Protection Information Using the Policy Assistant
- Managing Access Control Policies
- Managing IP Address Groups
- Domain Name Management
- Service Group Management
- Attack Defense
- Viewing Traffic Statistics
- Viewing CFW Protection Logs
- System Management
- Viewing Audit Logs
- Viewing Monitoring Metrics
-
Best Practices
- CFW Best Practice Summary
- Purchasing and Querying CFW via API
- Migrating Security Policies to CFW in Batches
- Configuration Suggestions for Using CFW with WAF, Advanced Anti-DDoS, and CDN
- Allowing Internet Traffic Only to a Specified Port
- Allowing Outbound Traffic from Cloud Resources Only to a Specified Domain Name
- Using CFW to Defend Against Network Attacks
-
API Reference
- Before You Start
- API Overview
- API Calling
-
API
- Domain Name Management
- VPC Protection
- Rule Hit Count
- IPS Switch Management
- East-west Protection
- ACL Rule Management
- Blacklist and Whitelist Management
- Log Query Management
- Protection Mode Management
- Cloud Firewall Information Management
- Service Group Management
- Service Group Member Management
- EIP Management
- Address Group Member Management
- Address Group Management
- Appendix
- Change History
- SDK Reference
-
FAQs
-
About the Product
- Does CFW Support Off-Cloud Servers?
- Can CFW Be Shared Across Accounts?
- What Are the Differences Between CFW and WAF?
- What Are the Differences Between CFW, Security Groups, and Network ACLs?
- How Does CFW Control Access?
- What Are the Priorities of the Protection Settings in CFW?
- Can WAF and CFW Be Deployed Together?
- How Long Are CFW Logs Stored by Default?
- Regions and AZs
- Troubleshooting
-
Network Traffic
- How Do I Calculate the Number of Protected VPCs and the Peak Protection Traffic at the VPC Border?
- How Does CFW Collect Traffic Statistics?
- What Is the Protection Bandwidth Provided by CFW?
- What Do I Do If My Service Traffic Exceeds the Protection Bandwidth?
- What Are the Differences Between the Data Displayed in Traffic Trend Module and the Traffic Analysis Page?
- How Do I Verify the Validity of an Outbound HTTP/HTTPS Domain Protection Rule?
- Billing
-
About the Product
- Videos
Purchasing a Pay-per-Use CFW
Pay-per-use billing is a postpaid billing mode. A pay-per-use CFW can be provisioned and deleted at any time. CFW instances are billed by second. The system generates a bill every hour based on the protected traffic and deducts the billed amount from the account balance.
You can purchase multiple firewalls in a region and assign them different resources and policies.
Prerequisites
The current account has the BSS Administrator and CFW FullAccess permissions.
Constraints
- CFW can be used only in the region where it was purchased. To use CFW in another region, switch to that region and purchase it. For details about the regions where CFW is available, see Function Overview.
- A maximum of 1 Gbit/s bandwidth traffic (total traffic passing through the firewall) can be protected.
- Only the professional edition supports the pay-per-use billing mode.
Purchasing a Pay-per-Use Professional CFW
- Log in to the management console.
- Click
in the upper left corner of the management console and select a region or project.
- In the navigation pane on the left, click
and choose Security & Compliance > Cloud Firewall. The Dashboard page will be displayed.
- Click Buy CFW and configure parameters. For details, see Table 1.
Table 1 Parameters for purchasing pay-per-use CFW Parameter
Description
Billing Mode
If you select Pay-per-use, you will be charged for the protection on your workloads from purchase to unsubscription.
Region
Region where the CFW is to be purchased.
NOTICE:CFW can be used in the selected region only. To use CFW in another region, switch to the corresponding region and then purchase it. For details about the regions where CFW is available, see Can CFW Be Used Across Clouds or Regions?
Edition
Currently, only the professional edition is supported.
Firewall Name
Firewall name.
It must meet the following requirements:- Only letters (A to Z and a to z), numbers (0 to 9), spaces, and the following characters are allowed: -_
- The value can contain 1 to 48 characters.
Enterprise Project
In the drop-down list, select the enterprise project that you belong to. The purchased CFW then belongs to that enterprise project and protects all resources in that project.
This option is only available if you have enabled enterprise projects, or if you are logged in using an enterprise master account. To use this function, enable Enterprise Center. You can use an enterprise project to centrally manage your cloud resources and members by project.
NOTE:
Value default indicates the default enterprise project. Resources that are not allocated to any enterprise projects under your account are displayed in the default enterprise project.
Tags
It is recommended that you use the TMS predefined tag function to add the same tag to different cloud resources.
- Confirm the information and click Buy Now.
- Confirm the order details, select I have read and agreed to the Huawei Cloud Firewall Service Statement, and click Next.
- Select a payment method and pay for your order.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.