Buying a Cloud WAF Instance

Before You Start

• Only one billing mode can be selected for your WAF instance in an account.
• In the yearly/monthly billing mode, only one WAF edition can be purchased under an account in the same great region such as CN East, including CN East-Shanghai1 and CN East-Shanghai2 regions.
• Switch between yearly/monthly and pay-per-use payments is supported. For details, see Can I Switch Between Yearly/Monthly and Pay-per-Use Payments for WAF?
• For a cloud WAF instance billed on a yearly/monthly basis, after it expires or you unsubscribe from it, you can enable another WAF instance billed on either yearly/monthly or pay-per-use basis. The WAF service can save the configuration data of the original WAF instance so that you can use the configuration data without having to configure the new WAF instance only when the following conditions are met:
  • If you choose the pay-per-use billing mode, the new and original WAF instances must be under the same project in the same region.
  • If you choose the yearly/monthly billing mode, the new and original WAF instances must be in the same region.
• For a cloud WAF instance billed on a pay-per-use basis, you can disable the yearly/monthly billing mode and then enable the instance in either yearly/monthly or pay-per-use billing mode.
  

  After the pay-per-use billing mode is disabled, the WAF billing stops, the WAF configuration data is saved, and WAF Mode changes to Suspended. In this situation, WAF forwards your website traffic without inspecting traffic.

Prerequisites

Your account for logging in to the WAF console must have the WAF Administrator and BSS Administrator permissions.

Constraints

• Only one WAF edition can be purchased under an account in the same geographic region (for example, CN East regions).
  

  For details about supported regions, see In Which Regions Is WAF Available?

  Generally, a WAF instance purchased in any region can protect web services in all regions. To make a WAF instance forward your website traffic faster, select the region nearest to your services.

• The specifications of a WAF instance cannot be changed once you complete the purchase. To use a WAF instance with lower specifications, unsubscribe from the WAF instance you are using and buy another one.
• If you are using a professional or platinum WAF instance, you can configure any non-standard ports for your website. To do so, submit a ticket to enable custom non-standard ports.

Specification Limitations

• A domain package allows you to add 10 domain names to WAF, including one top-level domain and nine subdomains or wildcard domains related to the top-level domain.
• The QPS limit and bandwidth limit of a QPS expansion package:
  • For web applications deployed on Huawei Cloud

    Service bandwidth: 50 Mbit/s

    QPS: 1,000 (Each HTTP GET request is a query.)

  • For web applications not deployed on Huawei Cloud

    Service bandwidth: 20 Mbit/s

    QPS: 1,000 (Each HTTP GET request is a query.)

  

  • If you want to use the ELB access mode, make sure you are using standard, professional, or platinum cloud WAF. When you are using cloud WAF, the quotas for the domain name, QPS, and rule extension packages are shared between the ELB access and CNAME access modes.
  • The bandwidth limit applies only to websites accessed in cloud mode. Websites accessed in ELB mode have no bandwidth limit but only QPS limit.
• A rule expansion package allows you to configure up to 10 IP address blacklist and whitelist rules.

Application Scenarios

Cloud WAF is a good choice if your service servers are deployed on the cloud or on-premises and you plan to protect your website by adding its domain names to WAF.

The application scenarios for different editions are as follows:

• Standard edition

  This edition is suitable for small- and medium-sized websites that do not have special security requirements.

• Professional

  This edition is suitable for medium-sized enterprise websites or services that are open to the Internet, focus on data security, and have high security requirements.

• Platinum

  This edition is suitable for large- and medium-sized enterprise websites that have large-scale services or have special security requirements.

Purchasing a WAF Instance Billed Yearly/Monthly (New Console)

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner and choose Web Application Firewall under Security & Compliance.
4. In the upper right corner of the page, click Buy WAF.
5. (Optional): Select an enterprise project from the Enterprise Project drop-down list.

   This option is only available if you have logged in using an enterprise account, or if you have enabled enterprise projects. To learn more, see Enabling the Enterprise Center. You can use enterprise projects to more efficiently manage cloud resources and project members.

   

   • Value default indicates the default enterprise project. Resources that are not allocated to any enterprise projects under your account are listed in the default enterprise project.
   • The default option is available in the Enterprise Project drop-down list only when you purchase WAF under the logged-in account.

6. On the Buy Web Application Firewall page, select Cloud Mode for WAF Mode.
7. Select a region and WAF edition.
   

   Generally, a WAF instance purchased in any region can protect web services in all regions. To make a WAF instance forward your website traffic faster, select the region nearest to your services.

   To switch regions, select a region from the drop-down list. Only one WAF edition can be purchased in a region.

8. Specify the number of domain name, QPS, or rule expansion packages.
   For details, see Domain Name Expansion Package, QPS Expansion Package, and Rule Expansion Package.

   Figure 1 Selecting expansion packages
   

9. Configure the Required Duration. You can select the required duration from one month to three years.
   

   Select Auto-renew to enable the system to renew your service by the purchased period when the service is about to expire.

10. Confirm the product details and click Buy Now.
11. Check the order details and read the Huawei Cloud WAF Disclaimer. Then, select the box and click Pay Now.
12. Confirm the order details and click Pay Now.
13. On the payment page, select a payment method and pay for your order.

Buying a WAF Instance Billed on a Pay-per-use Basis

To buy pay-per-use WAF instances, submit a service ticket to enable the service.

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner and choose Web Application Firewall under Security & Compliance.
4. In the upper right corner of the page, click Buy WAF.
5. On the Buy Web Application Firewall page, select Pay-per-use for Billing Mode, select an edition, and configure the number of domain names, rules, and requests. Figure 2 shows an example.
   Figure 2 Selecting pay-per-use
   
   

   Generally, a WAF instance purchased in any region can protect web services in all regions. To make a WAF instance forward your website traffic faster, select the region nearest to your services.

   To switch regions, select a region from the Region drop-down list.

6. In the lower right corner of the page, click Next.
7. Click Back to Website Settings and add domain names of websites to be protected.
   

   If you want to disable WAF, choose Instance Management > Product Details, and click Disable Pay-Per-Use Billing next to Cloud Mode.

Verification

Your WAF instance is purchased when your instance edition and its remaining validity days are shown in the upper right corner of the management console.

Related Operations

• Changing the Edition and Specifications of a Cloud WAF Instance

  In cloud mode, to protect more domain names or traffic, upgrade the instance edition or increase the number of expansion packages.

• How Do I Unsubscribe from WAF?
• How Do I Renew My WAF Instance?