What Data Is Required for Connecting a Domain Name/IP Address to WAF?

Prepare information required for connecting a domain name or IP address to WAF based on the mode of WAF instance you plan to buy.

• Cloud - CNAME

  Table 1 Domain name information required

  Information	Parameter	Description	Example
  Whether a proxy is used for the domain name	Proxy	This parameter must be set to Layer-7 proxy if a layer-7 web proxy, such as CDN and cloud acceleration service, has been deployed for your website before you connect the website to WAF.	-
  Configuration parameters	Domain Name	The domain name is used by visitors to access your website. A domain name consists of letters separated by dots (.). It is a human readable address that maps to the machine readable IP address of your server.	www.example.com
  	Protected Port	The service port corresponding to the domain name of the website you want to protect. Standard ports 80: default port when the client protocol is HTTP 443: default port when the client protocol is HTTPS Non-standard ports Ports other than ports 80 and 443 NOTICE: If your website uses a non-standard port, check whether the WAF edition you plan to buy can protect the non-standard port before you make a purchase. For details, see Which Non-Standard Ports Does WAF Support?	80
  	HTTP/2	HTTP/2 can be used only for access between the client and WAF on the condition that at least one origin server has HTTPS used for Client Protocol.	-
  	Client Protocol	Protocol used by a client (for example, a browser) to access the website. WAF supports HTTP and HTTPS.	HTTP
  	Server Protocol	Protocol used by WAF to forward requests from the client (such as a browser). The options are HTTP and HTTPS.	HTTP
  	Server Address	Public IP address or domain name of the origin server for a client (such as a browser) to access. Generally, a public IP address maps to the A record of the domain name configured on the DNS, and a domain name to the CNAME record.	XXX.XXX.1.1
  (Optional) Certificate	Certificate Name	If you set Client Protocol to HTTPS, you are required to configure a certificate on WAF and associate the certificate with the domain name. NOTICE: Only .pem certificates can be used in WAF. If the certificate is not in PEM format, convert it into pem format by referring to How Do I Convert a Certificate into PEM Format?	-

• Cloud -Load balancer

  Table 2 Domain name or IP address details required

  Parameter	Description	Example Value
  Domain Name/IP Address	Domain name: used by visitors to access your website. A domain name consists of letters separated by dots (.). It is a human readable address that maps to the machine readable IP address of your server. IP: IP address of the website.	www.example.com

• Dedicated mode

  Table 3 Domain name or IP address details required

  Information	Parameter	Description	Example
  Configuration parameters	Protected Object	Domain name: used by visitors to access your website. A domain name consists of letters separated by dots (.). It is a human readable address that maps to the machine readable IP address of your server. IP: IP address of the website.	www.example.com
  	Protected Port	The service port corresponding to the domain name of the website you want to protect. Standard ports 80: default port when the client protocol is HTTP 443: default port when the client protocol is HTTPS Non-standard ports Ports other than ports 80 and 443 NOTICE: If your website uses a non-standard port, check whether the WAF edition you plan to buy can protect the non-standard port before you make a purchase. For details, see Which Non-Standard Ports Does WAF Support?	80
  	Client Protocol	Protocol used by a client (for example, a browser) to access the website. WAF supports HTTP and HTTPS.	HTTP
  	Server Protocol	Protocol used by WAF to forward requests from the client (such as a browser). The options are HTTP and HTTPS.	HTTP
  	VPC	Select the VPC to which the dedicated WAF instance belongs.	vpc-default
  	Server Address	Private IP address of the website server.	192.168.1.1
  (Optional) Certificate	Certificate Name	If you set Client Protocol to HTTPS, you are required to configure a certificate on WAF and associate the certificate with the domain name. NOTICE: Only .pem certificates can be used in WAF. If the certificate is not in PEM format, convert it into pem format by referring to How Do I Convert a Certificate into PEM Format? Currently, certificates purchased in Huawei Cloud SCM can be pushed only to the default enterprise project. For other enterprise projects, SSL certificates pushed by SCM cannot be used.	-