Updated on 2025-08-19 GMT+08:00

Deleting a Protected Website from WAF

If you no longer want to use WAF to protect your website, you can delete the website from WAF.

Impact on the System

  • With cloud mode CNAME access, before deleting a website from WAF, you need to resolve the domain name to the origin server IP address on the DNS platform, or the traffic to your domain name cannot be routed to the origin server.
  • If you select Forcible delete the WAF CNAME record, WAF will not check your domain name resolution and delete WAF CNAME record immediately. Before enabling this option, make sure you have resolved the domain name to the origin server, or your website will become inaccessible.

    If you do not select Forcibly delete the WAF CNAME record, WAF will retain the CNAME record of the domain name for about 30 days before deleting it.

  • It takes about a minute to remove a website from WAF, but once this action is started, it cannot be cancelled. Exercise caution when removing a website from WAF.

Deleting a Protected Website from WAF

  1. Log in to the WAF console.
  2. Click in the upper left corner and select a region or project.
  3. (Optional) If you have enabled the enterprise project function, in the upper part of the navigation pane on the left, select your enterprise project from the Filter by enterprise project drop-down list. Then, WAF will display the related security data in the enterprise project on the page.
  4. In the navigation pane on the left, click Website Settings.
  5. Delete the website from the domain name access list.

    • Cloud mode - CNAME access
      1. In the Operation column of the target website, click More > Delete.
      2. In the Are you sure you want to delete these domain names? dialog box, confirm the deletion.
        With cloud mode CNAME access, there are three domain name deletion scenarios.
        Table 1 Deleting a protected domain from WAF

        Option

        No Proxy Used

        Proxy Used

        1

        The CNAME of the domain name has been deleted from the DNS provider, and an A record has been configured to the origin server IP address, or services carried on the domain name have been brought offline.

        The domain name has been pointed to the origin server on the Advanced Anti-DDoS, CDN, or cloud acceleration product side, or services carried on the domain name have been brought offline.

        2

        Forcibly delete the WAF CNAME record.

        3

        Retain the policy of this domain name.

        • If you have completed the configuration required by Table 1 and selected option 1, WAF retains the CNAME record of the domain name for about 30 days and then deletes it.

          If WAF professional edition or later for cloud mode is used and you select option 3, WAF retains the protection policy. So that the policies can still be used for other domain names.

        • If you have completed the configuration required by Table 1 and selected option 1 and option 2, WAF does not check the service domain name resolution configuration and deletes the CNAME record of WAF immediately. If the service domain name resolution is not modified, website services will become abnormal.

          If WAF professional edition or later for cloud mode is used and you select option 3, WAF retains the protection policy. So that the policies can still be used for other domain names.

    • Cloud mode - Load balancer access/Dedicated mode
      1. In the row containing the domain name you want to delete, click Delete in the Operation column.
      2. In the Are you sure you want to delete these domain names? dialog box, confirm the deletion and click OK.

        If you want to retain the policy applied to the domain name, select Retain the policy of this domain name.

Related Operations

To delete domain names in batches, select the domain names and click Delete above the website list.

If you want to add a website you deleted before to WAF again, follow the process in Connecting Your Website to WAF.