Help Center/ Cloud Firewall/ FAQs/ About the Product/ Can WAF, Advanced Anti-DDoS, and CFW Be Deployed Together?
Updated on 2025-05-23 GMT+08:00

Can WAF, Advanced Anti-DDoS, and CFW Be Deployed Together?

Yes. WAF has three modes: exclusive mode, ELB mode, and cloud mode. The traffic trend varies depending on the mode. The details are as follows:
Table 1 Traffic flow

WAF Mode

Traffic Flow

Dedicated/ELB mode

Internet -> AAD -> CFW -> WAF (dedicated/ELB mode) -> Origin Server

Cloud mode

Internet -> Advanced Anti-DDoS -> WAF (cloud mode) -> CFW -> Origin server

  • If you have purchased Advanced Anti-DDoS or WAF in cloud mode, exercise caution when configuring traffic blocking rules. You are advised to configure traffic permitting rules or whitelists.
  • If you have purchased WAF in dedicated or ELB mode, configure it based on service requirements.

For details, see Precautions for Using CFW with WAF, Advanced Anti-DDoS, and CDN.