Web Application Firewall:WAF 3.0 released, WAF 2.0 end-of-sale

WAF 3.0 provides the following advantages compared with WAF 2.0:

• New cloud native architecture

  WAF 3.0 is deeply integrated as an SDK module into the gateways of cloud services, such as ALB and Microservices Engine (MSE), to detect threats and protect traffic. During the protection process, WAF does not forward traffic. You can enable WAF protection in the console of a cloud service in a specific region without the need to change the DNS records or the settings of certificates, ports, and back-to-origin algorithms. This helps improve the stability and performance of your business and reduce access latency. For more information, see Cloud native architecture.

• New protection configuration mode

  WAF 3.0 allows you to add cloud service instances or domain names as protected objects and create protected object groups. WAF 3.0 also allows you to create protection rule templates for different protected objects in different protection modules. WAF 3.0 allows you to perform the following operations, which helps you configure protection in a more efficient manner:

  • Create protected object groups to apply a set of protection rules to multiple protected objects that have similar protection requirements. You can also configure custom protection rules for specific protected objects.

  • Configure default protection templates to apply predefined protection rules to new protected objects.

  For more information, see Protection configuration overview.

• Support for the pay-as-you-go billing method

  WAF 3.0 supports the pay-as-you-go billing method. The billing unit is security capacity units (SeCUs). All fees are calculated based on SeCUs. This helps simplify the calculation process and billing rules. Bills are generated on an hourly basis based on your SeCU usage. You can purchase resource plans to offset SeCU usage fees based on your business requirements. For more information, see Pay-as-you-go billing method of WAF 3.0.

• New features and improved user experience

  WAF 3.0 provides new features, such as the custom response feature. In WAF 3.0, the fees of the Log Service for WAF feature are included in the bills of Simple Log Service. The Log Service for WAF feature allows you to specify a custom storage capacity and retention period for logs. WAF 3.0 also optimizes the configurations for adding services in CNAME record mode and the configurations for security reports and rule searches. For information about the custom response feature, see Configure the custom response module. For information about the Log Service for WAF feature, see Log Service for WAF. For information about the CNAME record mode, see CNAME record mode. For information about security reports, see Security reports.