Help Center> Web Application Firewall> User Guide> Buying WAF> Changing the Edition and Specifications of a Cloud WAF Instance
Updated on 2024-04-17 GMT+08:00

Changing the Edition and Specifications of a Cloud WAF Instance

You can change the edition of your cloud instance to a higher or lower edition. Beyond that, you can subscribe to more or unsubscribe from some domain name, QPS, and rule expansion packages without changing the WAF edition you are using.

Prerequisites

  • You have obtained management console login credentials for an account with the WAF Administrator and BSS Administrator permissions.
  • You have purchased a cloud WAF instance.

Specification Limitations

  • Changing specifications does not change the billing mode or expiration date.
  • A domain package allows you to add 10 domain names to WAF, including one top-level domain and nine subdomains or wildcard domains related to the top-level domain.
  • The QPS limit and bandwidth limit of a QPS expansion package:
    • For web applications deployed on Huawei Cloud

      Service bandwidth: 50 Mbit/s

      QPS: 1,000 (Each HTTP GET request is a query.)

    • For web applications not deployed on Huawei Cloud

      Service bandwidth: 20 Mbit/s

      QPS: 1,000 (Each HTTP GET request is a query.)

    • If you want to use the ELB access mode, make sure you are using standard, professional, or platinum cloud WAF. When you are using cloud WAF, the quotas for the domain name, QPS, and rule extension packages are shared between the ELB access and CNAME access modes.
    • The bandwidth limit applies only to websites accessed in cloud mode. Websites accessed in ELB mode have no bandwidth limit but only QPS limit.
  • A rule expansion package allows you to configure up to 10 IP address blacklist and whitelist rules.

Constraints

  • Specifications of an expired WAF instance cannot be changed. To do that, renew the WAF instance first.
  • Changing WAF editions or specifications is not supported if you have used some functions of the WAF edition, or you have no extra domain name, QPS, or IP blacklist and whitelist rules to unsubscribe from.

Application Scenarios

  • Scenario 1: If the current cloud WAF edition does not support some functions, or cannot meet your protection requirements for domain names, QPS, or IP address blacklist and whitelist rules, you can use this function to upgrade service specifications. For details about WAF editions, see Edition Differences.
  • Scenario 2: If the WAF edition you are using has much more protection capabilities or domain name, bandwidth, QPS, and rule expansion packages than what you actually need, you can change the WAF edition to a lower one or unsubscribe from some packages.

Impact on the System

Changing a WAF edition or quantity of domain, QPS, or rule expansion packages has no impact on protected website services.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click in the upper left corner and choose Web Application Firewall under Security & Compliance.
  4. In the navigation pane on the left, choose Instance Management > Product Details.
  5. Click Change Specifications. The Change WAF Specifications page is displayed.

    • To change WAF edition: In the Edition row, click Change Edition in the Details column. In the displayed Change Edition pane, select an edition and click OK.
    • To change expansion packages: In the Details column of the Domain Name Quota, QPS Quota, and Rule Quota rows, increase or decrease the number of expansion packages, respectively.

      By default, the number of extension packages cannot be reduced to 0. To do so, click Unsubscribe.

    • Billing information: Changing specifications does not change the billing mode or expiration date.

  6. In the lower right corner of the page, click Next.
  7. Confirm the order details and click Pay Now.
  8. On the payment page, select a payment method and pay for your order or select a refund method to get your money refunded.