Help Center/ Web Application Firewall/ Drawer/ Adding a Protected Object (Dedicated Mode)/ Protected Object
Updated on 2025-07-04 GMT+08:00
Share

Protected Object

Description

  • Protected Object: Enter the domain name of a website you want WAF to protect. You can enter a single domain name or a wildcard domain name.
    • If the server IP address of each subdomain name is the same, enter a wildcard domain name to be protected. For example, if the subdomain names a.example.com, b.example.com, and c.example.com have the same server IP address, you can add the wildcard domain name *.example.com to WAF to protect all three.
    • If the server IP addresses of subdomain names are different, add each subdomain name as a single domain name one by one.
  • A domain name can only be added to WAF once.

    Each combination of a domain name and a non-standard port is counted towards the domain name quota of the WAF edition you are using. For example, www.example.com:8080 and www.example.com:8081 use two domain names of the quota. If you want to protect web services over multiple ports with the same domain name, add the domain name and each port to WAF.

FAQs

Can WAF Protect Chinese Domain Names?

WAF cannot be used to protect Chinese domain names. A domain name WAF can protect can contain only letters, digits, hyphens (-), and underscores (_), and cannot exceed 63 characters.

Which Domain Type Should I Choose?

WAF supports single domain names and wildcard domain names.

If the domain name purchased from a DNS service provider is a single domain name (example.com), the domain name you can add to WAF can be example.com, a subdomain name (for example, a.example.com), or wildcard domain name (*.example.com). You can select a domain name type based on the following scenarios:
  • If services of a domain name to be protected are the same, enter a single domain name. For example, if all the services of www.example.com to be protected are services on port 8080, set Domain Name to a single domain name www.example.com.
  • If the server IP address of each subdomain name is the same, enter a wildcard domain name to be protected. For example, if the server IP addresses corresponding to a.example.com, b.example.com, and c.example.com are the same, Domain Name can be set to wildcard domain name *.example.com.
  • If the server IP addresses of subdomain names are different, add each subdomain name as a single domain name one by one.

Ensure that the domain name you added to WAF is the same as that on your DNS provider platform.

Can WAF Protect Different Domain Names That Point to the Same Origin Server?

Yes. If there are multiple domain names pointing to the same origin server, you can connect these domain names to WAF, and WAF will protect them all.

Can I Change the Domain Name That Has Been Added to WAF?

After a domain name is added to WAF, you cannot change its name. If you want to change the protected domain name, you are advised to delete the original one and add the domain name you want to protect.

If A Single Domain Name and A Wildcard Domain Name Are Added To WAF at The Same Time, Which Domain Name Will WAF Check First?

WAF first checks the domain name that points to a specific page. For example, if www.example.com, *.a.example.com, and *.example.com are added to WAF, WAF checks them in the following sequence: www.example.com > *.a.example.com > *.example.com.

Parent Topic: Adding a Protected Object (Dedicated Mode)