Help Center/ Web Application Firewall/ Service Overview/ Basic Concepts/ Buying WAF
Updated on 2025-08-20 GMT+08:00
View PDF
Share

Buying WAF

Cloud WAF

Cloud mode is a cloud-based WAF deployment method. In this mode, Huawei Cloud WAF cluster resources are shared with all users. With this mode, you do not need to deploy any hardware or maintain the software. It is ready for use out of the box, highly available, and auto-scalable. You can select yearly/monthly or pay-per-using billing. For more details, see Buying a Cloud WAF Instance.

Dedicated WAF

With dedicated mode, you have completely isolated and independently deployed protection nodes. Your WAF instance performance will not be affected by attacks targeting other users' workloads in the cloud. This mode features dedicated resources and robust custom protection.

Dedicated WAF instances are not available in some regions. For details, see Notice on Web Application Firewall (Dedicated Mode) Discontinued.

Expansion Packages

Expansion packages provide specifications beyond the basic package of cloud WAF. You can buy domain name, QPS, and rule expansion packages to increase the quotas of domain names, service requests, service bandwidth, and IP address blacklist and whitelist rules.

To buy expansion packages, you need to buy yearly/monthly-billed the standard, professional, or enterprise edition for cloud WAF first.

A domain name expansion package is used to expand the protected domain name specifications beyond the basic package. A domain name expansion package supports 10 domain names.

A QPS expansion package is used to expand the service requests and service bandwidth beyond the basic package. A QPS expansion package protects up to:
  • Service requests: 1,000 QPS
  • Service bandwidth:

Currently, rule expansion packages contain only the specifications of IP address blacklist and whitelist protection rules. A rule expansion package allows you to configure up to 10 IP address blacklist and whitelist rules.

QPS

Queries Per Second (QPS) indicates the number of requests a system can process within one second. It evaluates the processing efficiency of a system. For example, an HTTP GET request is a query. For details about the QPS specifications supported by service editions, see Table 2.

Bandwidth

The bandwidth of WAF refers to the total traffic (in Mbit/s) of all domain names and websites protected by WAF. The bandwidth determines data transmission capabilities. For details about the bandwidth specifications supported by service editions, see Table 2.

The bandwidth in WAF is calculated by WAF itself and is not associated with the bandwidth or traffic limit of other Huawei Cloud products (such as CDN, ELB, and ECS).

Parent Topic: Basic Concepts