This topic describes how to activate Alibaba Cloud WAF.

Background information

WAF supports the subscription billing method. To buy a subscription-based instance, you must select a WAF edition. Different editions have different protection features and specifications. For more information, see WAF editions and features.

Procedure

  1. Go to the Web Application Firewall buy page with your Alibaba Cloud account.
  2. On the Web Application Firewall buy page, configure the following parameters.WAF buy page (International site)
    Parameter Description
    Region Select the region where the WAF cluster resides. Valid values:
    • Mainland China: mainland China regions.
    • International: regions outside mainland China, including China (Hong Kong), Singapore, Malaysia (Kuala Lumpur), US (Silicon Valley), Australia (Sydney), Germany (Frankfurt), India (Mumbai), Indonesia (Jakarta), UAE (Dubai), and Japan (Tokyo).
    Plan Select the edition of WAF that you want to activate. Valid values:
    • Pro
      Note This edition does not support Log Service.
    • Business
    • Enterprise

    After you select an edition, the Specification section displays the details about the selected edition. For more information, see Editions and features.

    Extra Domain Enter the number of extra domain name packages that you want to purchase.

    If you want to add multiple top-level domain names or more than 10 subdomains to WAF, we recommend that you buy extra domain name packages. For more information, see Extra domain name packages.

    Exclusive IP Enter the number of exclusive WAF IP addresses.

    You can buy an exclusive WAF IP address and assign it to a specific domain. For more information, see Exclusive IP addresses.

    Extra Traffic Specify the extra bandwidth in Mbit/s.

    If the total bandwidth of your websites exceeds the service bandwidth of WAF, we recommend that you buy extra bandwidth. For more information, see Extra bandwidth.

    GSLB Select whether to enable intelligent load balancing.

    You can enable intelligent load balancing for your services to meet the high availability and low latency requirements of automatic disaster recovery. For more information, see Intelligent load balancing.

    Access Log Service Select whether to enable Log Service.
    You can enable Log Service to store, view, and analyze WAF logs in real time. For more information, see Log Service.
    Note The Pro edition does not support this option.
    Log Storage Period Specify the period for which you want to store WAF logs. Valid values: 180 Days and 360 Days.
    Note The Pro edition does not support this option.
    Log Storage Size Specify the maximum size of stored logs. Valid values: 3T, 5T, 10T, 15T, 20T, 25T, and 50T.
    Note The Pro edition does not support this option.
    Bot Manager Select whether to enable the bot management function.

    To mitigate security threats caused by bot traffic, enable the bot management function. For more information, see Set a bot threat intelligence rule and Set a threat intelligence rule to allow requests from specific crawlers.

    Notice The bot management function is available for only the new protection engine of WAF. If you enable this function by upgrading the existing WAF instance, make sure that you have upgraded to the new protection engine. For more information about how to upgrade a protection engine, see Protection engine is upgraded.

    If you enabled the bot management function but did not upgrade your WAF instance to the new protection engine, submit a ticket and apply to upgrade the protection engine.

    Mobile App Protection Select whether to enable the app protection function.

    You can enable the function if your business supports native apps and you have security needs, such as the need for trusted communications and the prevention of bot script abuse. For more information, see Configure application protection.

    Notice This function is available for only the new protection engine of WAF. If you enable this function by upgrading the existing WAF instance, make sure that you have upgraded to the new protection engine. For more information about how to upgrade a protection engine, see Protection engine is upgraded.

    If you enabled the app protection function but did not upgrade your WAF instance to the new protection engine, submit a ticket and apply to upgrade the protection engine.

    Service Time Select a validity period for the WAF instance.
  3. Click Buy Now and complete the payment.
    Notice WAF does not support unconditional refunds or partial refunds.