WAF provides traffic forwarding service for domains. The WAF protection cluster uses several ports for workload protection. Only the traffic on the service ports configured for a domain is forwarded by WAF to the origin servers. If you enable a port that is not configured for the domain, the origin servers still remain secure.

For more information about ports, see Supported ports.