All Products
Search

This Product

    Web Application Firewall:Upgrade and downgrade WAF 2.0

    Document Center

    Web Application Firewall:Upgrade and downgrade WAF 2.0

    Last Updated:Apr 22, 2026

    Adjust the edition or value-added service specifications of your Web Application Firewall (WAF) instance to match your current business requirements.

    Supported editions

    Upgrade and downgrade operations are supported for the following WAF 2.0 editions, for instances deployed in both the Chinese mainland and outside the Chinese mainland:

    • On-cloud WAF Pro

    • On-cloud WAF Enterprise

    • On-cloud WAF Ultimate

    • On-cloud WAF Exclusive

    • Hybrid Cloud WAF Exclusive

    Upgrade

    Upgrade your WAF instance to a higher edition before the instance expires. For a full comparison of features per edition, see WAF deployment plans and editions.

    To upgrade your WAF instance:

    1. Log on to the WAF console. In the top navigation bar, select the resource group and region of your WAF instance. The region can be Chinese Mainland or Outside Chinese Mainland.

    2. In the upper-right corner of the Overview page, click Upgrade your instance. .

    3. On the Upgrade your instance. page, configure the parameters, read and select Terms of Service, and then click Purchase Now to complete the payment.

    Downgrade

    Limitations

    Before downgrading, check that both of the following conditions are met:

    • The value you set for Extra Domain Package or Exclusive IP Addresses must be greater than or equal to the number of additional domain names or exclusive IP addresses currently in use. For example: if you purchased an On-cloud WAF Pro instance with Extra Domain Package set to 2, the instance provides a default quota of 10 domain names plus an additional quota of 2, for a total of 12. If all 12 domain names are in use, at least 1 additional domain package is consumed, so you cannot set Extra Domain Package to less than 1.

    • Downgrade operations are limited to once per month.

    What you can downgrade

    Downgrade value-added service specifications

    Reduce the specifications of the following value-added services through the console:

    • Extra bandwidth packages

    • Extra domain packages

    • Exclusive IP addresses

    • Log storage capacity

    • Data visualization

    Disable value-added services

    Submit a ticket to disable the following value-added services:

    • Bot management

    • Application protection

    • API security

    Potential impacts

    • Log loss: If your log storage usage exceeds the reduced capacity after a downgrade, new logs cannot be written. The minimum log storage capacity is 3 TB, and downgrading below this limit is not supported.

    • Service disablement: To disable bot management, application protection, or API security, submit a ticket instead of using the console downgrade flow.

    Refunds

    A partial refund is issued when you perform a downgrade. The refund amount is calculated as follows:

    Refund = Paid amount - Fees for consumed resources

    Where: Fees for consumed resources = Usage duration (days) x Daily unit price x 1.5

    Refund calculation diagram

    For the full refund policy, see Rules for unsubscribing from resources.

    Downgrade a WAF instance

    1. Log on to the WAF console. In the top navigation bar, select the resource group and region of your WAF instance. The region can be Chinese Mainland or Outside Chinese Mainland.

    2. In the left-side navigation pane, choose Service Information.

    3. In the upper-right corner of the basic information section on the Service Information page, click Downgrade.

    4. On the Downgrade page, configure the parameters, read and select Terms of Service, and then click Purchase Now to complete the payment.