Purchasing EdgeSec

Prerequisites

You have purchased Huawei Cloud Content Delivery Network (CDN) or Whole Site Acceleration (WSA).

EdgeSec works on the basis of Content Delivery Network (CDN) sites. To use EdgeSec, you need to purchase CDN or WSA.

Specification Limitations

A domain package allows you to add 10 domain names, including one top-level domain and nine subdomains or wildcard domains related to the top-level domain.

• If only one top-level domain can be added to a WAF instance, you can add one top-level domain and subdomain or wildcard domain names related to the top-level domain. For example, you can add one top-level domain name example.com and a maximum of nine sub-domains or generic domains, for example, www.example.com, *.example.com, mail.example.com, user.pay.example.com, and x.y.z.example.com. Each of these domain names (including the top-level domain name example.com) is counted toward a domain name quota in the domain name package.
• If a domain name maps to different ports, each port is considered to represent a different domain name. For example, www.example.com:8080 and www.example.com:8081 are counted towards your quota as two distinct domain names.

Procedure

1. Log in to the management console.
2. Click in the upper left corner of the page and choose Security & Compliance > Edge Security.
3. By default, the page for purchasing EdgeSec is displayed. Set the product type and region.
   • Enterprise Project: Select an enterprise project from the drop-down list.

     This option is only available if you have logged in using an enterprise account, or if you have enabled enterprise projects. To learn more, see Enabling Enterprise Center. You can use enterprise projects to more efficiently manage cloud resources and project members.

     

     • Value default indicates the default enterprise project. Resources that are not allocated to any enterprise projects under your account are displayed in the default enterprise project.
     • The default option is available in the Enterprise Project drop-down list only after you purchase EdgeSec under the logged-in account.
   • Resource: Edge WAF is selected by default. Select Edge Anti-DDoS as required.
     • Edge WAF provides web threat detection capabilities to effectively identify malicious features of service traffic, prevent website servers from being intruded, and ensure web service security and stability.
     • Edge anti-DDoS detects and cleans abnormal DDoS attack traffic in real time to protect your resources.

4. Parameters for purchasing EdgeSec describes the parameters related to Edge WAF and Edge Anti-DDoS.

   Table 1 Parameters for purchasing EdgeSec

   Product Type	Parameter	Description
   Edge WAF	Edition	Select edition specifications. For details about service edition differences, see Service Edition Differences. Base: perfect for small-and medium-sized websites. Professional: perfect for medium-and large-scale websites. Enterprise: perfect for large-scale websites that require customized rules.
   	Charge Mode	By request: number of HTTP/HTPPS requests protected by Edge WAF.
   	Domain Expansion Package	A domain package allows you to add 10 domain names, including one top-level domain and nine subdomains or wildcard domains related to the top-level domain. For example, if you are using basic edition, 10 domain names can be protected, including only one top-level domain name. If you want to protect three top-level domain names, you can purchase two domain name expansion packages to increase the quota. EdgeSec editions offer different domain quotas. Base: A maximum of 10 domain names can be protected, including only one top-level domain name. Professional: A maximum of 50 domain names can be protected, including five top-level domain names. Enterprise: A maximum of 80 domain names can be protected, including eight top-level domain names. NOTE: If only one top-level domain can be added to a WAF instance, you can add one top-level domain and subdomain or wildcard domain names related to the top-level domain. For example, you can add one top-level domain name example.com and a maximum of nine sub-domains or generic domains, for example, www.example.com, *.example.com, mail.example.com, user.pay.example.com, and x.y.z.example.com. Each of these domain names (including the top-level domain name example.com) is counted toward a domain name quota in the domain name package. If a domain name maps to different ports, each port is considered to represent a different domain name. For example, www.example.com:8080 and www.example.com:8081 are counted towards your quota as two distinct domain names.
   	Rule Expansion Package	A rule expansion package allows you to configure up to 10 IP address blacklist and whitelist rules. If the quota for IP address whitelist and blacklist rules cannot meet your requirements, you can purchase rule expansion packages under the current instance edition to increase such quota.
   Edge Anti-DDoS	Charge Mode	By traffic: You are charged based on the hourly normal access traffic of CDN services protected by Edge DDoS.

5. Set Required Duration. You can select one month, two months, or three months.
   

   The Auto-renew option enables the system to renew your service by the purchased period when the service is about to expire.

6. Confirm the product details and click Next.
7. Confirm the order details and click Pay Now.