All Products
Search
Document Center

Web Application Firewall:Specify ports

Last Updated:Mar 02, 2026

When you add a website to Web Application Firewall (WAF) in CNAME record mode, you must specify the HTTP or HTTPS ports that the website uses. WAF inspects and forwards only traffic destined for these ports to the origin server. Traffic on unspecified ports is not forwarded.

WAF protects services on both standard ports (such as 80 and 443) and non-standard ports. The number of supported ports and the available non-standard port ranges depend on your WAF edition. For details, see Ports supported by each WAF edition.

Prerequisites

Before you begin, make sure that you have:

  • A WAF instance of any edition

  • A website added to WAF in CNAME record mode

Specify HTTP or HTTPS ports

Specify ports when you first add a website to WAF, or when the HTTP or HTTPS ports used by an existing website change.

  1. Log on to the WAF console. In the top navigation bar, select the resource group and the region (Chinese Mainland or Outside Chinese Mainland) of your WAF instance.

  2. In the left-side navigation pane, choose Asset Center > Website Access.

  3. In the domain name list, find the target domain name and click Edit in the Actions column.

  4. On the Edit page, locate the Destination Server Port section. Enter port numbers in the HTTP Port and HTTPS Port fields. Press Enter after each port number.

    Port numbers must fall within the allowed port range. Entries outside this range cannot be saved. Click View Allowed Port Range to check which ports are available for your WAF edition.

    Destination Server Port

  5. Click Confirm.

Related topics