View supported ports - Web Application Firewall - Alibaba Cloud Documentation Center

Web Application Firewall (WAF) can protect web service traffic on both standard and non-standard ports. When you add a website to WAF, you must specify origin server ports. WAF receives and forwards traffic based on the specified ports. This topic describes the supported standard and non-standard ports.

Standard ports

WAF can protect web service traffic on the following standard ports:

HTTP ports: 80 and 8080
HTTPS ports: 443 and 8443

Non-standard ports

Cloud native mode

If you add your website to WAF in cloud native mode, you can specify ports ranging from 0 to 65535, including non-standard ports.

CNAME record mode

If you add your website to WAF in CNAME record mode, you can specify only specific ports. Different WAF editions support different non-standard ports.

Edition	Supported non-standard port
Subscription Basic Edition and Subscription Pro Edition	Not supported
Subscription Business Edition and Subscription Enterprise Edition	HTTP ports: 81, 82, 83, 84, 86, 87, 88, 89, 97, 800, 808, 1000, 1090, 3333, 3501, 3601, 5000, 5222, 6001, 6666, 7000, 7001, 7002, 7003, 7004, 7005, 7006, 7009, 7010, 7011, 7012, 7013, 7014, 7015, 7016, 7018, 7019, 7020, 7021, 7022, 7023, 7024, 7025, 7026, 7070, 7081, 7082, 7083, 7088, 7097, 7510, 7777, 7800, 8000, 8001, 8002, 8003, 8008, 8009, 8020, 8021, 8022, 8025, 8026, 8077, 8078, 8081, 8082, 8083, 8084, 8085, 8086, 8087, 8088, 8089, 8090, 8091, 8106, 8181, 8334, 8336, 8686, 8800, 8888, 8889, 8999, 9000, 9001, 9002, 9003, 9021, 9023, 9027, 9037, 9080, 9081, 9082, 9180, 9200, 9201, 9205, 9207, 9208, 9209, 9210, 9211, 9212, 9213, 9898, 9908, 9916, 9918, 9919, 9928, 9929, 9939, 9999, 10000, 10001, 10080, 12601, 28080, 33702, and 48800 HTTPS ports: 4443, 5443, 6443, 7443, 9443, 8553, 8663, 9553, 9663, and 18980
Pay-as-you-go

To view the supported ports in the WAF console, perform the following steps:

Go to the Website Configuration page.
On the CNAME Record tab, find the domain name whose ports you want to view and click Edit in the Actions column.
In the Edit Domain Name panel, select HTTP or HTTPS and click View Port Range.

References

For information about the cloud native mode, see Cloud native mode.
For information about the CNAME record mode, see Add a domain name to WAF.

For information about how to query the ports of an instance that are added to WAF, see DescribeResourcePort.