Deleting a Protected Website from WAF

This topic describes how to remove a website from WAF if you no longer need to protect it.

In cloud CNAME access mode, before removing a website from WAF, you need to resolve your domain name to the IP address of the origin server, or the traffic to your domain name cannot be routed to the origin server.

If you want to add a website you deleted before to WAF again, follow the process in Connecting a Website to WAF.

If you have enabled enterprise projects, ensure that you have all operation permissions for the project where your WAF instance locates. Then, you can select your enterprise project from the Enterprise Project drop-down list and delete protected domain names.

Prerequisites

The website you want to protect has been connected to WAF.

Impact on the System

In cloud mode, before removing a website from WAF, you need to resolve the domain name to the origin server IP address on the DNS platform, or the traffic to your domain name cannot be routed to the origin server.
If you select Forcible delete the WAF CNAME record., WAF will not check your domain name resolution and delete WAF CNAME record immediately. Before enabling this option, make sure you have resolved the domain name to the origin server, or your website will become inaccessible.

If you do not select Forcibly delete the WAF CNAME record, WAF will retain the CNAME record of the domain name for about 30 days before deleting it.
It takes about a minute to remove a website from WAF, but once this action is started, it cannot be cancelled. Exercise caution when removing a website from WAF.

Deleting a Protected Website from WAF

Log in to the management console.
Click in the upper left corner of the management console and select a region or project.
Click in the upper left corner and choose Web Application Firewall under Security.
In the navigation pane on the left, choose Website Settings.
Locate the row of the target domain name. In the Operation, click More > Delete.
In the displayed confirmation dialog box, confirm the deletion.
- Cloud mode
  - No proxy used
    Figure 1 Deleting a protected domain name (no proxy used)
    Ensure that related configurations are completed and select The CNAME of the domain name has been deleted from the DNS provider, and an A record has been configured to the origin server IP address, or services carried on the domain name have been brought offline.
    
    If you select Forcible delete the WAF CNAME record., WAF will not check your domain name resolution and delete WAF CNAME record immediately. Before enabling this option, make sure you have resolved the domain name to the origin server, or your website will become inaccessible.
    
    If you want to retain the policy bound to the domain name, select Retain the policy of this domain name.
  - Proxy used
    Figure 2 Deleting a protected domain name (proxy used)
    Ensure that related configurations are completed and select The domain name has been pointed to the origin server on the Advanced Anti-DDoS, CDN, or cloud acceleration product side, or services carried on the domain name have been brought offline.
    
    If you select Forcible delete the WAF CNAME record., WAF will not check your domain name resolution and delete WAF CNAME record immediately. Before enabling this option, make sure you have resolved the domain name to the origin server, or your website will become inaccessible.
    
    If you want to retain the policy bound to the domain name, select Retain the policy of this domain name.
- Dedicated mode
  If you want to retain the policy bound to the domain name, select Retain the policy of this domain name.
Click OK. If Domain name deleted successfully is displayed in the upper right corner, the domain name of the website was deleted.