Help Center/ Web Application Firewall/ Help Panel/ Tier-2 Help Panel - Website Settings/ Step 2: Configure a Load Balancer for a Dedicated WAF instance
Updated on 2025-04-25 GMT+08:00

Step 2: Configure a Load Balancer for a Dedicated WAF instance

To ensure your dedicated WAF instance reliability, after you add a website to it, use Huawei Cloud Elastic Load Balance (ELB) to configure a load balancer and enable health checks for the dedicated WAF instance.

Huawei Cloud ELB is billed by traffic. For details, see ELB Pricing Details.

  1. Add a listener to the load balancer. For details, see Adding an HTTP Listener or Adding an HTTPS Listener.

    When adding a listener, set the parameters as follows:

    • Frontend Port: the port that will be used by the load balancer to receive requests from clients. You can set this parameter to any port. The origin server port configured in WAF is recommended.
    • Frontend Protocol: Select HTTP or HTTPS.
    • If you select Weighted round robin for Load Balancing Algorithm, disable Sticky Session. If you enable Sticky Session, the same requests will be forwarded to the same dedicated WAF instance. If this instance becomes faulty, an error will occur when the requests come to it next time.
    • If Health Check is configured, the health check result must be Healthy, or the website requests cannot be pointed to WAF. For details about how to configure health check, see Configuring a Health Check.

  2. Click in the upper left corner, select a region, and choose Security & Compliance > Web Application Firewall to go to the Dashboard page.
  3. In the navigation pane on the left, choose Instance Management > Dedicated Engine to go to the dedicated WAF instance page.
  4. Locate the row containing the WAF instance. In the Operation column, click More > Add to ELB.
  5. In the Add to ELB dialog box, specify ELB (Load Balancer), ELB Listener, and Backend Server Group based on 1.

    The Health Check result must be Healthy, or the website requests cannot be pointed to WAF. For details about troubleshooting, see How Do I Troubleshoot an Unhealthy Backend Server?

  6. Click OK. Then, configure service port for the WAF instance. Backend Port must be set to the port configured in Step 1: Add a Domain Name/IP Address to WAF.