All Products
Search

This Product

    Web Application Firewall:Supported WAF ports

    Document Center

    Web Application Firewall:Supported WAF ports

    Last Updated:Nov 18, 2025

    Web Application Firewall (WAF) protects web service traffic on both standard and non-standard ports. When you add a website to WAF, you must specify the ports for the origin server. WAF uses these ports to receive and forward traffic. This topic describes the standard and non-standard ports that WAF supports.

    Standard ports

    WAF protects web service traffic on the following standard ports:

    • HTTP ports: 80 and 8080

    • HTTPS ports: 443 and 8443

    Non-standard ports

    Cloud native mode

    If you add your website to WAF in cloud native mode, you can specify non-standard ports in the range of 1 to 65535.

    CNAME record mode

    If you add your website to WAF in CNAME record mode, you can use only the non-standard ports that WAF provides. Custom non-standard ports are not supported. The available non-standard ports vary based on the WAF edition.

    Edition

    Supported non-standard port range

    Number of supported non-standard ports

    Subscription Basic and Pro

    Not supported

    Not supported

    Subscription Enterprise and Ultimate

    IPv4

    IPv6

    • Enterprise: 50

    • Ultimate: 100

    For HTTP and HTTPS, non-standard ports are ports in the range of 0 to 65535, excluding the following system ports: 9, 20, 21, 22, 23, 25, 42, 53, 67, 68, 69, 110, 135, 137, 138, 139, 143, 161, 389, 445, 593, 1434, 1521, 3127, 3306, 3389, 4444, 5554, 5800, 5900, 6379, 9996, 11211, 27017, 27018, 50030, 50070, 61613, 61616, and 61617.

    • HTTP ports:

      81, 82, 83, 84, 86, 87, 88, 89, 97, 800, 808, 1000, 1090, 3333, 3501, 3601, 5000, 5222, 6001, 6666, 7000, 7001, 7002, 7003, 7004, 7005, 7006, 7009, 7010, 7011, 7012, 7013, 7014, 7015, 7016, 7018, 7019, 7020, 7021, 7022, 7023, 7024, 7025, 7026, 7070, 7081, 7082, 7083, 7088, 7097, 7510, 7777, 7800, 8000, 8001, 8002, 8003, 8008, 8009, 8020, 8021, 8022, 8025, 8026, 8077, 8078, 8081, 8082, 8083, 8084, 8085, 8086, 8087, 8088, 8089, 8090, 8091, 8106, 8181, 8334, 8336, 8686, 8800, 8888, 8889, 8999, 9000, 9001, 9002, 9003, 9021, 9023, 9027, 9037, 9080, 9081, 9082, 9180, 9200, 9201, 9205, 9207, 9208, 9209, 9210, 9211, 9212, 9213, 9898, 9908, 9916, 9918, 9919, 9928, 9929, 9939, 9999, 10000, 10001, 10080, 12601, 28080, 33702, and 48800

    • HTTPS ports:

      4443, 5443, 6443, 7443, 9443, 8553, 8663, 9553, 9663, and 18980

    Pay-as-you-go

    100

    To view the supported ports in the WAF console, perform the following steps:

    1. Go to the Onboarding page.

    2. On the CNAME Record tab, find the domain name that you want to manage and click Edit in the Actions column.

    3. In the Edit Domain Name panel, select the HTTP or HTTPS protocol and click View Port Range.

    References