All WAF Instances

Description

This feature enables WAF to count identified requests to one or more WAF instances according to the rate limit mode you select. By default, requests to each WAF instance are counted for triggering a CC attack rule. If you enable this, WAF will count requests to all your WAF instances for triggering the rule. To enable user-based rate limiting, Per user or Other (Referer must be configured) instead of Per IP address must be selected for Rate Limit Mode. This is because IP address-based rate limiting cannot limit the access rate of a specific user. However, in user-based rate limiting, requests may be forwarded to one or more WAF instances. So, All WAF instances must be enabled for triggering the rule precisely.

If your website uses proxies such as anti-DDoS, Content Delivery Network (CDN), and cloud acceleration services, select Source for Rate Limit Mode and then Per user and enable All WAF instances.

Constraints and Limitations

Only the cloud CNAME access mode supports counting requests to All WAF instances.

In the CN East-Shanghai1 or CN North-Ulanqab1 region, you need to submit a ticket to enable All WAF instances for all dedicated WAF instances. For details, see Submitting a Service Ticket.