Can a Non-Cloud Server Use WAF?
WAF supports off-cloud IDC user access and can protect any public network server, including but not limited to cloud platforms, including other vendors' cloud platforms and IDCs.
Note:
Domain names accessed in certain regions should comply with local policy requirements.
Does WAF Support HTTPS Protection?
WAF fully supports HTTPS workload. The user only needs to upload the SSL certificates and private key according to the prompts to enable WAF to protect HTTPS workload traffic.
Can the Origin Server IP of WAF Be a Private IP?
When a domain name is added to WAF, the origin server address should be a public IP address or a domain name. If a private IP address is entered, it should be confirmed by the administrator.
How Many Origin-Pull IP Addresses Can Be Set for a Protected Domain Name of WAF?
Up to 20 origin-pull IP addresses can be set for a protected domain name of WAF.
How to Achieve Load Balancing When Configuring Multiple Origin Servers for WAF?
If multiple origin-pull IP addresses are configured, WAF uses a round-robin scheduling approach to balance the load of access requests.
Does WAF Support Health Checks?
WAF enables health checks by default. It detects the connection status of all origin server IP addresses. If an origin server IP has no response, WAF will no longer forward requests to this IP until the access status returns to normal.
Does WAF Support Session Persistence?
WAF supports session persistence, which is enabled by default.
How Long Does It Approximately Take for the Configuration Change to Take Effect in the WAF Console?
Generally, the changed configuration takes effect within 10 seconds.
Will the WAF Automatically Add the Origin-Pull IP Range to the Security Group?
The origin-pull IP range will not be automatically added to the security group. See Quick Start to add the corresponding origin-pull IP address to the security group.
If the Uploaded File Is Intercepted, Will the File Using HTTPS or SFTP to Upload Still Be Intercepted?
If WAF is not used, it will not be blocked. If WAF is used and the interception mode is enabled, malicious files uploaded using HTTP or HTTPS will be intercepted. However, files uploaded using SFTP will not be intercepted. SFTP is a non-HTTP or HTTPS protocol, and WAF protection does not cover files uploaded using SFTP.
Which Non-Standard Ports Does WAF Support?
| Protocol Name | Port |
|---|---|
| HTTP protocol | 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 97, 800, 805, 808, 1000, 1090, 2020, 3333, 3501, 3601, 5000, 5222, 6001, 6666, 7000, 7001, 7002, 7003, 7004, 7005, 7006, 7007, 7008, 7009, 7010, 7011, 7012, 7013, 7014, 7015, 7016, 7018, 7019, 7020, 7021, 7022, 7023, 7024, 7025, 7026, 7040, 7070, 7081, 7082, 7083, 7088 7097, 7510, 7621, 7777, 7800, 8000, 8002, 8003, 8004, 8005, 8006, 8007, 8008, 8009, 8010, 8011, 8012, 8020, 8021 8022, 8060, 8025, 8026, 8060, 8077, 8078, 8080, 8081, 8082, 8083, 8086, 8087, 8088, 8089, 8090, 8106, 8181, 8182, 8184, 8210, 8215, 8334, 8336, 8445, 8686, 8800, 8888, 8889, 8999, 9000, 9001, 9002, 9003, 9021, 9023, 9027, 9037, 9080, 9081, 9082, 9180, 9200, 9201, 9205, 9207, 9208, 9209, 9210, 9211 9212, 9213, 9898, 9908, 9916, 9918, 9919, 9928, 9929, 9939, 9999, 10000, 10001, 10080, 10083, 12601, 20080, 20083, 25060, 28080, 28080, 33702, 48800, and 52301. |
| HTTPS protocol | 443, 4443, 5100, 5200, 5443, 6443, 7443, 8084, 8085, 8091, 8442, 8443, 8553, 8663, 9443, 9550, 9553, 9663, 10803, and 18980. |