December 25 Web Application Firewall (WAF) Back-to-origin CIDR Blocks Upgrade Notice
Posted Date 12/11/2018
[Alibaba Cloud] [WAF] [Upgrade Notification]
Upgrade Period: (UTC+8) 10:30-12:30 on December 25, 2018 (PST 18:30-20:30 on December 24, 2018)
Upgrade Range: Mainland China and International server rooms of Web Application Firewall (WAF)
Upgrade Impact: Web Application Firewall will expand the capacity of servers and new back-to-origin CIDR blocks will be added. If your origin servers have IP whitelist or security group settings for access control, to only allow accesses from WAF back-to-origin CIDR blocks, you must add the following new WAF back-to-origin CIDR blocks into the whitelist before the capacity expansion.
Note: Besides adding new back-to-origin CIDR blocks, some existing CIDR blocks are also updated this time. Please verify the new CIDR blocks carefully.
New WAF back-to-origin CIDR blocks for the Mainland China region:
121.43.18.0/24, 120.25.115.0/24, 101.200.106.0/24, 120.55.177.0/24, 120.27.173.0/24, 120.55.107.0/24, 123.57.117.0/24, 120.76.16.0/24, 182.92.253.32/27, 60.205.193.64/27, 60.205.193.96/27, 120.78.44.128/26, 118.178.15.0/24, 39.106.237.192/26, 106.15.101.96/27, 47.101.16.64/27, 47.106.31.0/24, 47.98.74.0/25, 47.97.242.96/27, 112.124.159.0/24, 39.96.130.0/24, 39.96.119.0/24, 47.99.20.0/24, 47.104.53.0/26, 47.108.23.192/26
New WAF back-to-origin CIDR blocks for the International region:
47.89.1.160/27, 47.89.7.192/26, 47.88.145.96/27, 47.88.250.0/24, 47.52.120.0/24, 47.254.217.32/27, 47.88.74.0/24, 47.89.132.224/27, 47.91.69.64/27, 47.91.54.128/27, 47.74.160.0/24, 47.91.113.64/27, 149.129.211.0/27, 149.129.140.0/27, 47.89.7.224/27, 8.208.2.192/27
You can obtain the latest WAF back-to-origin CIDR blocks on the Web Application Firewall management console. For more information, see: https://www.alibabacloud.com/help/doc-detail/99399.htm.
Additionally, with frequent change of WAF back-to-origin CIDR blocks, we recommend that you do not only use back-to-origin CIDR blocks to do the origin site protection, but also use traffic marks to judge whether traffic passes through WAF for protection. For more information, see https://www.alibabacloud.com/help/doc-detail/99413.htm.
We apologize for any inconvenience caused. If you have any questions, please feel free to contact us by submitting a ticket any time.
Alibaba Cloud
Upgrade Period: (UTC+8) 10:30-12:30 on December 25, 2018 (PST 18:30-20:30 on December 24, 2018)
Upgrade Range: Mainland China and International server rooms of Web Application Firewall (WAF)
Upgrade Impact: Web Application Firewall will expand the capacity of servers and new back-to-origin CIDR blocks will be added. If your origin servers have IP whitelist or security group settings for access control, to only allow accesses from WAF back-to-origin CIDR blocks, you must add the following new WAF back-to-origin CIDR blocks into the whitelist before the capacity expansion.
Note: Besides adding new back-to-origin CIDR blocks, some existing CIDR blocks are also updated this time. Please verify the new CIDR blocks carefully.
New WAF back-to-origin CIDR blocks for the Mainland China region:
121.43.18.0/24, 120.25.115.0/24, 101.200.106.0/24, 120.55.177.0/24, 120.27.173.0/24, 120.55.107.0/24, 123.57.117.0/24, 120.76.16.0/24, 182.92.253.32/27, 60.205.193.64/27, 60.205.193.96/27, 120.78.44.128/26, 118.178.15.0/24, 39.106.237.192/26, 106.15.101.96/27, 47.101.16.64/27, 47.106.31.0/24, 47.98.74.0/25, 47.97.242.96/27, 112.124.159.0/24, 39.96.130.0/24, 39.96.119.0/24, 47.99.20.0/24, 47.104.53.0/26, 47.108.23.192/26
New WAF back-to-origin CIDR blocks for the International region:
47.89.1.160/27, 47.89.7.192/26, 47.88.145.96/27, 47.88.250.0/24, 47.52.120.0/24, 47.254.217.32/27, 47.88.74.0/24, 47.89.132.224/27, 47.91.69.64/27, 47.91.54.128/27, 47.74.160.0/24, 47.91.113.64/27, 149.129.211.0/27, 149.129.140.0/27, 47.89.7.224/27, 8.208.2.192/27
You can obtain the latest WAF back-to-origin CIDR blocks on the Web Application Firewall management console. For more information, see: https://www.alibabacloud.com/help/doc-detail/99399.htm.
Additionally, with frequent change of WAF back-to-origin CIDR blocks, we recommend that you do not only use back-to-origin CIDR blocks to do the origin site protection, but also use traffic marks to judge whether traffic passes through WAF for protection. For more information, see https://www.alibabacloud.com/help/doc-detail/99413.htm.
We apologize for any inconvenience caused. If you have any questions, please feel free to contact us by submitting a ticket any time.
Alibaba Cloud