All Products
Search

This Product

    Web Application Firewall:Upgrade or downgrade a subscription WAF 3.0 instance

    Document Center

    Web Application Firewall:Upgrade or downgrade a subscription WAF 3.0 instance

    Last Updated:Jul 02, 2025

    You can upgrade the edition of your Web Application Firewall (WAF) instance. You can also upgrade or downgrade the specifications of the value-added services that you purchased. This topic describes how to upgrade or downgrade a WAF instance.

    Upgrade

    Supported upgrade operations

    • Upgrade the edition of a WAF instance

      You can upgrade the edition of a WAF instance. WAF 3.0 provides the following editions: Basic, Pro, Enterprise, and Ultimate. The editions are listed in ascending order of protection capabilities.

    • Purchase value-added services

      You can purchase the following value-added services: hybrid cloud protection, bot management for web application protection, bot management for app protection, API security, additional queries per second (QPS), burstable QPS (pay-as-you-go), additional domain names, exclusive IP addresses, intelligent load balancing, Simple Log Service for WAF, risk identification, and traffic spike throttling.

    • Upgrade the specifications of value-added services

      You can upgrade the following specifications of the value-added services: additional hybrid cloud protection nodes, additional QPS quota, additional quota for burstable QPS (pay-as-you-go), additional domain name quota, number of exclusive IP addresses, and log storage capacity.

    Billing

    You are charged when you upgrade your WAF instance. The new specifications immediately take effect.

    Note

    On the Web Application Firewall 3.0 (Subscription) | Upgrade/Downgrade page in the WAF console, you can view the fees required for your upgrade.

    Procedure

    1. Log on to the WAF 3.0 console. In the top navigation bar, select the resource group and region of the WAF instance. You can select Chinese Mainland or Outside Chinese Mainland.

    2. In the left-side navigation pane, click Overview.

    3. On the Overview page, find the Edition Information section and click Upgrade Now.

      Note

      You can also click Upgrade below Intelligent Load Balancing or click Resize below Protected Domain Names, Clean QPS, or Exclusive IP Addresses.

    4. On the Web Application Firewall 3.0 (Subscription) | Upgrade/Downgrade page, configure the parameters, read and select Terms of Service, and then click Buy Now to complete the payment.

    Downgrade

    In WAF 3.0, you can downgrade the existing specifications of the current edition, but you cannot downgrade the edition. For example, if your WAF instance runs the Enterprise edition, you can downgrade existing specifications to reduce costs, but you cannot downgrade the edition from Enterprise to Pro.

    Unsupported scenarios

    • The value of the Extra Domains, Exclusive IP Address, or Additional Hybrid Cloud Protection Nodes parameter must be greater than or equal to the quotas that you used.

      • For example, you purchased a subscription WAF Pro instance and set the Extra Domains parameter to 10. The instance provides a default domain name quota of 5 and an additional domain name quota of 10. If you added 7 domain names to WAF, the additional quota of 2 is consumed, and you cannot modify the Extra Domains parameter to be less than 2.

    Supported downgrade operations

    • Downgrade the specifications of value-added services

      You can downgrade the following specifications of value-added services: additional QPS quota, additional quota for burstable QPS (pay-as-you-go), additional domain name quota, number of exclusive IP addresses, log storage capacity, and additional quota for hybrid cloud protection nodes.

    • Disable value-added services

      • You can submit a ticket to disable the following value-added services: bot management for web application protection, bot management for app protection, and API security.

      • You can directly disable the following value-added services: risk identification and traffic spike throttling.

    Downgrade impacts

    • If you specify a smaller value for the Extended QPS or Burstable QPS (Pay-as-you-go) parameter, the possibility that the WAF instance is added to the sandbox increases. We recommend that you do not reduce the QPS quotas of your WAF instance. For more information, see Sandbox overview.

    • If your log storage usage exceeds the limit after a downgrade, new logs cannot be written, which will result in log loss. The minimum log storage capacity to purchase is 3 TB, and downgrading below this limit is not supported.

    Refunds

    You can request a refund when you perform a downgrade operation. For more information about how to calculate refunds, see Rules for unsubscribing from resources.

    image

    Note

    You can calculate refunds by using the following formula: Refunds = Paid amount - Fees for consumed resources. Fees for consumed resources = Usage duration (days) × Daily unit price × 1.5.

      Procedure

      Important

      You can perform a downgrade operation once a month.

      1. Log on to the WAF 3.0 console. In the top navigation bar, select the resource group and region of the WAF instance. You can select Chinese Mainland or Outside Chinese Mainland.

      2. In the left-side navigation pane, click Overview.

      3. On the Overview page, find the Edition Information section, click More and then click Downgrade.

      4. On the Web Application Firewall 3.0 (Subscription) | Downgrade page, configure the parameters, read and select Terms of Service, and then click Buy Now to complete the payment.