[Upgrade] WAF clusters for CNAME-integrated services outside the Chinese mainland
Dec 08, 2025
Web Application FirewallAffected Time
Changes
Alibaba Cloud is upgrading the WAF clusters serving CNAME-integrated services outside the Chinese mainland. As part of this upgrade, traffic will be gradually migrated from the current origin IP CIDR blocks—47.74.160.128/27 and 47.74.160.160/27—to a new origin IP CIDR block: 161.117.161.0/25. Please verify and ensure that all three CIDR blocks—47.74.160.128/27, 47.74.160.160/27, and 161.117.161.0/25—are added to your origin server’s whitelist policies.
The decommissioning schedule for 47.74.160.128/27 and 47.74.160.160/27 will be announced separately.
Impact and mitigation
During the upgrade, you may experience 2–3 brief service interruptions, such as temporary disconnections or connection rejections. For clients with automatic retry mechanisms, recovery will take no more than one minute. We recommend monitoring your services closely and preparing disaster recovery measures based on your system architecture—such as client retries or origin failover.
We apologize for any inconvenience caused by this upgrade. If you have any questions, please contact us via support ticket or our customer service hotline.















