Edge Security Acceleration:Configure an IP address blacklist

Create an IP address blacklist-based protection policy

1. Log on to the DCDN console.

2. In the left-side navigation pane, choose WAF > Protection Policies.

3. On the Protection Policies page, click Create Policy.

4. On the Create Policy page, configure the following parameters.

   Section	Parameter	Description
   Policy Information	Policy Type	Select IP Blacklist.
   	Policy Name	The policy name. Up to 64 characters: letters, digits, and underscores (_).
   	Make Default	Whether to set this policy as the default for its type. Note Only one default policy is allowed per type. Once set, the default designation cannot be changed. This switch is unavailable if a default policy already exists for this type.
   Rule Information	Rule	The blacklist rule configuration. For more information, see Parameters of an IP address blacklist rule. Note To increase the quota for the number of rules, submit a ticket.
   Protected Domain Names	Select Association Mode	A domain name can have multiple policies of the same type. If a domain name already has a same-type policy, you can add this policy or replace the existing one. Replacement is available only for domain names using the default policy. Valid values: Add and replace original policy: Unbind the existing policy and replace it with the current one. Add and retain original policy: Both policies coexist without affecting each other.
   	Protected Domain Names	Domain names to associate with this policy.

5. Click Create Policy.

   The policy is enabled by default.

Parameters of an IP address blacklist rule

You can add a rule when creating a blacklist or add one to an existing blacklist. The following table describes the rule parameters.

Related APIs

• CreateDcdnWafPolicy — Creates a custom protection policy.

• BatchCreateDcdnWafRules — Creates multiple custom rules in a batch.

• DescribeDcdnWafPolicies — Queries custom protection policies.

• DescribeDcdnWafDefaultRules — Queries the default rule set.

• DescribeDcdnWafPolicies — Queries custom protection policies.

• DescribeDcdnWafPolicyValidDomains — Queries the valid domains for a custom protection policy.