(Optional) Buying Expansion Packages

If you buy the standard, professional, or enterprise edition for cloud mode WAF, you can buy expansion packages of the corresponding edition. We provide domain name, QPS, and rule expansion packages for you.

You can estimate the service specifications and buy expansion packages when buying a cloud WAF instance.
You can also buy expansion packages separately if the quota is insufficient during WAF use and you do not want to increase the quota by upgrading the service edition.

Constraints

The starter edition does not offer any expansion packages.

Expansion Packages

WAF provides three types of expansion packages: domain name, QPS, and rule expansion packages.

A domain name expansion package is used to expand domain name quota beyond the basic package. A domain name expansion package supports 10 domain names.

If you buy a domain name expansion package, the available quotas with different service editions are different. For details, see Table 1.

**Table 1** Quotas supported by a domain name expansion package
Item	Standard Edition	Professional Edition	Enterprise Edition
Basic package	10 domain names	50 domain names	80 domain names
One domain expansion package	10 domain names
Available quota	20 domain names	60 domain names	90 domain names

If a domain name maps to different ports, each port is considered to represent a different domain name. For example, www.example.com:8080 and www.example.com:8081 are counted towards your quota as two distinct domain names.

A QPS expansion package is used to expand the service requests and service bandwidth beyond the basic package.

A QPS expansion package protects up to:

Service requests: 1,000 QPS
Service bandwidth:
- Origin servers deployed on Huawei Cloud: 50 Mbit/s
- Origin servers deployed outside Huawei Cloud: 20 Mbit/s

If you buy a QPS expansion package, the available quotas with different service editions are different. For details, see Table 2.

**Table 2** QPS and bandwidth quotas
Item	Standard Edition	Professional Edition	Enterprise Edition
Basic package	Service requests: 2,000 QPS Service bandwidth: Origin servers deployed on Huawei Cloud: 100 Mbit/s Origin servers deployed outside Huawei Cloud: 30 Mbit/s	Service requests: 5,000 QPS Service bandwidth: Origin servers deployed on Huawei Cloud: 200 Mbit/s Origin servers deployed outside Huawei Cloud: 50 Mbit/s	Service requests: 10,000 QPS Service bandwidth: Origin servers deployed on Huawei Cloud: 300 Mbit/s Origin servers deployed outside Huawei Cloud: 100 Mbit/s
One QPS expansion package	Service requests: 1,000 QPS Service bandwidth: Origin servers deployed on Huawei Cloud: 50 Mbit/s Origin servers deployed outside Huawei Cloud: 20 Mbit/s
Available quota	Service requests: 3,000 QPS Service bandwidth: Origin servers deployed on Huawei Cloud: 150 Mbit/s Origin servers deployed outside Huawei Cloud: 50 Mbit/s	Service requests: 6,000 QPS Service bandwidth: Origin servers deployed on Huawei Cloud: 250 Mbit/s Origin servers deployed outside Huawei Cloud: 70 Mbit/s	Service requests: 11,000 QPS Service bandwidth: Origin servers deployed on Huawei Cloud: 350 Mbit/s Origin servers deployed outside Huawei Cloud: 120 Mbit/s

How Many QPS Expansion Packages Do I Need?

Before buying WAF, you need to estimate the peak incoming and outgoing traffic of the website to be protected by WAF. Compare the total traffic with the specifications (from the basic package and QPS expansion package) of WAF editions. Select the edition with bandwidth and QPS specifications greater than the peak incoming or outgoing traffic, whichever is larger.

If the bandwidth and QPS exceed the limits during your use of WAF, you can buy QPS expansion packages separately.

Generally, the outgoing traffic is larger than the incoming traffic.

You can estimate the traffic by referring to the traffic statistics on the ECS console or using other monitoring tools.

Attack traffic must be removed in your estimations. For example, if your website is being accessed normally, WAF routes the traffic back to the origin ECS, but if your website is under attack, WAF blocks and filters out the illegitimate traffic, and routes only the legitimate traffic back to the origin ECS. The inbound and outbound traffic of the origin ECS you view on the ECS console is the normal traffic. If there are multiple ECSs, collect statistics on the normal traffic of all ECSs. For example, if you have six sites and the peak outbound traffic of each site does not exceed 2,000 QPS, then the total peak traffic volume does not exceed 12,000 QPS. In this case, you can buy the WAF enterprise edition.

What Happens If Website Traffic Exceeds the Bandwidth or Request Limit?

If your website normal traffic exceeds the bandwidth or QPS quota you have purchased, forwarding website traffic may be affected.

For example, traffic limiting and random packet loss may occur. Your website services may be unavailable, frozen, or respond very slowly. Sometimes, your customers may see "Website is under maintenance (Protected by WAF)" when visiting your website.

If you do not want to increase the bandwidth and QPS by upgrading the edition, you can buy a QPS expansion package to increase the protection bandwidth and QPS quotas.

Currently, rule expansion packages contain only the specifications of IP address blacklist and whitelist protection rules. A rule expansion package allows you to configure up to 10 IP address blacklist and whitelist rules.

If you buy a rule expansion package, the available quotas with different service editions are different. For details, see Table 3.

**Table 3** Quota of IP address blacklist and whitelist rules
Item	Standard Edition	Professional Edition	Enterprise Edition
Basic package	1,000	2,000	5,000
One rule expansion package	10
Available quota	1,010	2,010	5,010

Buying Expansion Packages When Buying Cloud Mode WAF

If you have estimated the quotas of domain names, bandwidth, QPS, and IP address blacklist and whitelist rules, you can select Domain Name Expansion Package, QPS Expansion Package, and Rule Expansion Package and set the quantity when buying cloud mode WAF. For details, see Buying Cloud Mode WAF.

Figure 1 Selecting expansion packages
Click to enlarge

Buying Expansion Packages During Your Use of WAF

If the number of domain names, bandwidth, QPS, or IP address blacklist/whitelist rules exceeded the quota, you can buy expansion packages separately.

For unused expansion package quotas, you unsubscribe from them by reducing the expansion package specifications. However, the number of expansion packages cannot be reduced to 0. To reduce the number of expansion packages to 0, submit a service ticket for unsubscription.

Log in to the management console.
Click in the upper left corner of the management console and select a region or project.
Click in the upper left corner and choose Web Application Firewall under Security & Compliance.
On the Dashboard page, click Details next to the service edition in the Product Details area.

Figure 2 Product Details
In the Expansion Packages area on the Cloud Mode Details panel, click Change next to the corresponding package.

Figure 3 Changing expansion package specifications
On the displayed page, set the quantity of domain name, QPS, and rule expansion packages you want to add.
Read the WAF disclaimer and check the box before "I have read and agree to WAF Disclaimer" if you want to continue and click Pay Now.

After the payment is complete, return to the Dashboard page and verify that the specifications in the Product Details area have increased.