All Products
Search
Document Center

Web Application Firewall:Extra domain package

Last Updated:Sep 16, 2026

Extra domain packages are used to increase the number of domains that a Web Application Firewall (WAF) instance can protect. Each extra domain package protects one second-level domain and nine of its subdomains. This topic describes what extra domain packages are and how to purchase them.

Overview

By default, a WAF instance can protect one second-level domain and up to nine of its subdomains, which can include a wildcard domain. For example, you can add one second-level domain, such as example.com, and up to nine related subdomains, such as www.example.com, *.example.com, mail.example.com, user.pay.example.com, or x.y.z.example.com.

You must purchase an extra domain package to protect more domains with your WAF instance. This is required in the following scenarios:

  • The number of second-level domains or subdomains to protect exceeds the default limit.

  • You need to protect domains that belong to more than one second-level domain. For example, if you have already added example.com or its subdomains and then try to add aliyun.com (another second-level domain) or its subdomains, you receive a quota limit message, such as: "The number of second-level domains is limited. Upgrade the service and purchase an extra domain package separately."

Purchase an extra domain package

The purchase process depends on whether you already have a WAF instance. For more information, see upgrade and downgrade.