- Release Notes and Announcements
- Release Notes
- Announcements
- Security Advisory
- Notice for Apache Log4j 2 RCE Vulnerability (CVE-2021-44832)
- Notice for Apache Log4j 2 RCE Vulnerability (CVE-2021-45046)
- Notice for Apache Log4j 2 RCE Vulnerability (CVE-2021-44228)
- Notice for WebLogic Console HTTP RCE Vulnerability
- Notice for Exchange Server Command Execution Vulnerability
- Notice for Yonyou GRP-U8 SQL Injection Vulnerability
- Notice for Apache Cocoon XXE Vulnerability (CVE-2020-11991)
- Notice for WordPress File Manager Arbitrary Code Execution Vulnerability
- Jenkins Security Advisory for September
- Notice for Apache Struts 2 RCE Vulnerabilities (CVE-2019-0230 and CVE-2019-0233)
- Notice for Apache SkyWalking SQL Injection Vulnerability (CVE-2020-13921)
- User Guide
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Best Practice
- Combined Application of WAF and Anti-DDoS Pro
- WAF Security Protection for API Gateway
- Applying for and Using Free HTTPS Certificates
- Obtaining Real Client IPs
- Replacing Certificate
- Setting CC Protection
- WAF CCP Overview
- Connecting Frontend-Backend Separated Site to WAF CAPTCHA
- Best Practices of Bot Behavior Management Connection
- FAQS
- Service Level Agreement
- WAF Policy
- Contact Us
- Glossary
- Release Notes and Announcements
- Release Notes
- Announcements
- Security Advisory
- Notice for Apache Log4j 2 RCE Vulnerability (CVE-2021-44832)
- Notice for Apache Log4j 2 RCE Vulnerability (CVE-2021-45046)
- Notice for Apache Log4j 2 RCE Vulnerability (CVE-2021-44228)
- Notice for WebLogic Console HTTP RCE Vulnerability
- Notice for Exchange Server Command Execution Vulnerability
- Notice for Yonyou GRP-U8 SQL Injection Vulnerability
- Notice for Apache Cocoon XXE Vulnerability (CVE-2020-11991)
- Notice for WordPress File Manager Arbitrary Code Execution Vulnerability
- Jenkins Security Advisory for September
- Notice for Apache Struts 2 RCE Vulnerabilities (CVE-2019-0230 and CVE-2019-0233)
- Notice for Apache SkyWalking SQL Injection Vulnerability (CVE-2020-13921)
- User Guide
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Best Practice
- Combined Application of WAF and Anti-DDoS Pro
- WAF Security Protection for API Gateway
- Applying for and Using Free HTTPS Certificates
- Obtaining Real Client IPs
- Replacing Certificate
- Setting CC Protection
- WAF CCP Overview
- Connecting Frontend-Backend Separated Site to WAF CAPTCHA
- Best Practices of Bot Behavior Management Connection
- FAQS
- Service Level Agreement
- WAF Policy
- Contact Us
- Glossary
This document describes how to get started with Web Application Firewall (WAF).
1. Basic Knowledge of WAF
- What features does WAF have?
- Why WAF?
- What use cases does WAF support?
- How to select a WAF edition?
- In which regions is WAF supported?
2. WAF Billing Mode
WAF is available as SaaS WAF and CLB WAF instances with the same billable items, billing modes, and prices. Both of them support the monthly subscription (prepaid) billing mode. For more information, see Billing Overview.
You can purchase different types of WAF instances according to your connection method. For more information, see Purchase Guide.
3. Getting Started
3.1 WAF features
WAF is available as SaaS WAF and CLB WAF instances with different features. For more information, see Product Category.
3.2 WAF purchase
WAF supports the monthly subscription (prepaid) billing mode. You can purchase an instance on the WAF purchase page as instructed in Purchase Guide.
3.3 Connection to WAF
WAF is available as SaaS WAF and CLB WAF instances with different domain name connection modes. For more information, see Getting Started.
3.4 Practices
WAF is applicable to certain use cases and can be used together with other Tencent Cloud services for security protection:
- Use WAF and Anti-DDoS Pro together
- Use WAF and API Gateway together for security protection
- Apply for and use free HTTPS certificates
- Get real client IPs
4. Overview of Console Features
| To | Read |
|---|---|
| View the access log information of WAF-protected domain names | Access Log |
| Query web attack log information by filter and download the result | Attack Logs |
| Enable emergency CC protection or customize CC protection policies | CC Protection Rules |
| Prevent abnormal display caused by specific page tampering | Tamper Protection |
| Combine custom policies into targeted rules to block various types of attacks | Custom Rules |
| Replace the sensitive information returned by webpages to prevent information leakage | Leak Protection |
| Add regions to the blocklist to block all access sources in such regions | Region Blocking |
| Differentiate between friendly and malicious bots and take targeted traffic management policies | Bot Overview |
| Query the statuses of access source IPs that go through WAF-protected domain names and set a blocklist | IP Management |
5. FAQs
Is WAF available to servers outside Tencent Cloud?
Does WAF support HTTPS protection?
Can the real server IP added to WAF be the private IP of a Tencent Cloud CVM instance?
Which ports does WAF support?
How do I connect a domain name?
Does WAF support connecting wildcard domain names?
6. Feedback and Suggestions
If you have any questions or suggestions about WAF, you can send your feedback through the following channels, and we will get back to you accordingly:
- To report a problem with the product documentation, such as incorrect content, broken links, or API errors, click Send Feedback at the bottom of the page.
- If you encounter any problems while using the product, contact us for assistance.
Yes
No
Was this page helpful?