Buying Cloud WAF

Cloud WAF instances are billed either in yearly/monthly (prepaid) or pay-per-use (postpaid) billing mode. The cloud mode provides standard, professional, and enterprise editions and domain name, QPS, and rule expansion packages. You can purchase cloud WAF editions that best fit your workloads.

WAF instances you purchased in any region can protect web services in all regions. To let WAF forward requests faster, select the region nearest to the location where your workloads are deployed. For example, if your services are deployed in Beijing and Shanghai, you can buy WAF instances in Beijing and Shanghai to protect services in Beijing and Shanghai, respectively.

Service Deployment Architecture

Figure 1 Deployment architecture in cloud mode

Application Scenarios

Cloud WAF is a good choice if your service servers are deployed on the cloud or on-premises and you plan to protect your website by adding its domain names to WAF.

The application scenarios for different editions are as follows:

• Standard edition

  This edition is suitable for small and medium-sized websites that do not have special security requirements.

• Professional edition

  This edition is suitable for medium-sized enterprise websites or services that are open to the Internet, focus on data security, and have high security requirements.

• Enterprise edition

  This edition is suitable for large and medium-sized enterprise websites that have large-scale services or have special security requirements.

Constraints

Only one cloud WAF edition can be purchased under an account in the same geographic region (for example, CN East regions).

Related Operations

• Buying a Cloud WAF Instance
• Changing the Cloud WAF Edition and Specifications

If the cloud WAF edition you are using cannot meet your business requirements, you can purchase domain/QPS/rule expansion packages to increase the quota. For example, if you are using the standard edition, 10 domain names can be protected. If you want to protect 30 domain names, you can purchase two domain name expansion packages to increase the quota.

In the upper right corner of the WAF management console, click Change to buy expansion packages.

Specification Restrictions

• A domain expansion package can protect a maximum of 10 domain names.
• A QPS extension package can protect 1,000 Queries Per Second (QPS). For example, an HTTP GET request is a query.
• A rule expansion package allows you to configure up to 10 IP address blacklist and whitelist rules.

Related Operations

Where and When Can I Buy a Domain, Bandwidth, or Rule Expansion Package?