Migrating Protection Policies for Your Website
Application Scenarios
This topic will walk you through on how to migrate your website protection policies from Alibaba Cloud WAF to Huawei Cloud WAF.
We will show how to complete the migration from Alibaba Cloud pay-per-use WAF 3.0 to Huawei Cloud professional edition cloud WAF.
Resource and Cost Planning
Resource |
Description |
Monthly Fee |
---|---|---|
Web Application Firewall (WAF) |
Cloud - professional edition:
|
For details about pricing rules, see Billing Description. |
Step 1: Buy Huawei Cloud Professional Edition Cloud WAF
- Log in to Huawei Cloud management console.
- On the management console page, choose .
- In the upper right corner of the page, click Buy WAF. On the purchase page displayed, select Cloud Mode for WAF Mode.
- Region: Select the region nearest to your services WAF will protect.
- Edition: Select Profesional.
- Expansion Package and Required Duration: Set them based on site requirements.
- Confirm the product details and click Buy Now in the lower right corner of the page.
- Check the order details and read the WAF Disclaimer. Then, select the box and click Pay Now.
- On the payment page, select a payment method and pay for your order.
Step 2: Connect the Website to Huawei Cloud WAF
- In the navigation pane on the left, choose Website Settings.
- In the upper left corner of the website list, click Add Website.
- Select Cloud - CNAME and click Configure Now.
- Configure website details. Table 2 describes the parameter mappings between Huawei Cloud and Alibaba Cloud.
On the Alibaba Cloud WAF console, choose Edit and check its configuration details.
. In the Actions column of the row containing the target domain name, clickTable 2 Parameter mappings Parameter No. in Figure 1
Alibaba Cloud
Huawei Cloud
①
Domain Name
Domain Name
②
Protocol Type/Port
Client Protocol/Protected Port
③
Whether Layer 7 Proxy, Such as Anti-DDoS Pro, Anti-DDoS Premium, or Alibaba Cloud CDN, Is Deployed in Front of WAF
Use Layer-7 Proxy
④
IPv6
IPv6 Protection
⑤
Load Balancing Algorithm
Load Balancing Algorithm
⑥
Origin Server Address
Server Address
⑦
Protection Resource
Automatically generated
- Click Next. Then, whitelist WAF back-to-source IP address, test WAF, and modify DNS records as prompted.
Figure 2 Domain name added to WAF
Step 3: Migrating Protection Rules
Table 3 summarizes mappings between Alibaba Cloud WAF rules and Huawei Cloud WAF rules.
Alibaba Cloud |
Huawei Cloud |
Reference |
---|---|---|
Basic protection rule |
Basic web protection |
Configuring Basic Web Protection Rules to Defend Against Common Web Attacks |
Whitelist |
|
|
IP address blacklist |
Blacklist and whitelist |
|
Custom rules |
Precise protection |
|
Scan protection |
Scanning protection |
Configuring Scan Protection Rules to Block Heavy-Traffic Attacks |
Custom response |
Alarm page |
|
HTTP flood protection (CC attack defense) |
CC attack protection |
|
Region blacklist rule |
Geolocation access control |
Configuring Geolocation Access Control Rules to Block or Allow Requests from Specific Locations |
Web Tamper Protection |
Web tamper protection |
Configuring Web Tamper Protection Rules to Prevent Static Web Pages from Being Tampered With |
Data leakage prevention |
Information leakage prevention |
Configuring Information Leakage Prevention Rules to Prevent Sensitive Information Leakage |
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot