Using Huawei Cloud WAF

Scenario

If you use Huawei Cloud Web Application Firewall (WAF) to secure a website whose domain name is resolved to a server deployed in the Chinese mainland, you must comply with the ICP filing requirements below.

You can see how WAF works to secure websites in Figure 1.

1. An enterprise adds the website domain name www.example.com to the WAF console, and enables WAF.

2. A user accesses the website using www.example.com, with traffic forwarded to the origin server through WAF, where traffic will be analyzed and any possible attacks intercepted.

If www.example.com is resolved to a server deployed in the Chinese mainland, you need to apply for an ICP filing from the server provider.

Figure 1 Web protection by Huawei Cloud WAF

ICP Filing for Domain Names

Table 1 describes the ICP filing information of website domain names.

Adding Huawei Cloud as a Service Provider for Domain Names

For websites that use Huawei Cloud WAF for web protection, if the origin is:

• Hosted on Huawei Cloud

  If a top-level domain name is hosted on Huawei Cloud, then you must apply for an ICP filing for the top-level domain name in the Huawei Cloud (Chinese mainland) ICP filing system.

• Not hosted on Huawei Cloud

  If neither the top-level domain name nor its sub-domain name is resolved to a server deployed on Huawei Cloud, you do not need to add Huawei Cloud as a new service provider through Huawei Cloud (Chinese mainland) ICP filing system.

  If the sub-domain name is resolved to a server deployed on Huawei Cloud, you shall add Huawei Cloud as a new service provider through Huawei Cloud (Chinese mainland) ICP filing system.