ALB provides basic, standard, and WAF-enabled instances. This topic describes the features supported by different editions.

The following table describes the features supported by different ALB editions.

Note The performance of ALB instances is determined by the IP address mode of ALB instances rather than the edition of the ALB. For more information about the performance metrics of ALB instances, see Performance metrics.
FeatureBasicStandardWAF-enabled
Listener protocol
QUICSupportedSupportedSupported
HTTP/2SupportedSupportedSupported
WebSocketSupportedSupportedSupported
Forwarding rule
Distributing network traffic based on domain names or URLsSupportedSupportedSupported
Distributing network traffic based on HTTP headersSupportedSupportedSupported
Distributing network traffic based on query stringsNot supportedSupportedSupported
Distributing network traffic based on cookiesNot supportedSupportedSupported
Distributing network traffic based on HTTP request methodsNot supportedSupportedSupported
Distributing network traffic based on source IP addressesNot supportedSupportedSupported
Distributing network traffic based on response status codesNot supportedSupportedSupported
Distributing network traffic based on response headersNot supportedSupportedSupported
RedirectsSupportedSupportedSupported
Rewriting requests or returning custom responsesNot supportedSupportedSupported
Adding or deleting headersNot supportedSupportedSupported
Traffic mirroringNot supportedSupportedSupported
QPS throttlingNot supportedSupportedSupported
AScriptNot supportedSupported for whitelisted users. To use this feature, log on to the Quota Center console. On the Whitelist Quotas page, enter the quota ID slb_user_visible_gray_label/ascript and click Apply. For more information, see Manage ALB quotas.Supported
Security
Access control based on whitelists or blacklistsSupportedSupportedSupported
TLS cipher suitesSupportedSupportedSupported
Server Name Indication (SNI) for multiple certificatesSupportedSupportedSupported
Rivest-Shamir-Adleman (RSA) and elliptic-curve cryptography (ECC) certificatesSupportedSupportedSupported
ECC certificatesSupportedSupportedSupported
End-to-end data transfer over HTTPSNot supportedSupportedSupported
Custom TLS cipher suitesNot supportedSupportedSupported
TLS 1.3SupportedSupportedSupported
Web Application Firewall (WAF)Not supportedNot supportedSupported
Monitoring
Access log managementSupportedSupportedSupported