To get started with Web Application Firewall (WAF) 3.0, you must purchase a WAF 3.0 instance. WAF 3.0 supports the subscription billing method and pay-as-you-go billing method. This topic describes how to purchase a subscription WAF 3.0 instance.

Procedure

  1. On the Web Application Firewall 3.0 (Subscription) buy page, configure the parameters based on your business requirements.
    Important
    • Different editions provide different features and support different specifications. For more information, see Editions.
    • Before you purchase a WAF 3.0 instance, determine the required queries per second (QPS) specifications based on your business requirements. If your peak service traffic exceeds the purchased QPS specifications, your WAF 3.0 instance may be added to a sandbox. After your WAF instance is added to a sandbox, the service-level agreement (SLA) is no longer guaranteed and service access exceptions may occur. For information about the QPS specifications that are supported by each WAF edition, the extended QPS specifications that can be purchased, and the burstable QPS specifications that can be specified, see the description of peak QPS in the Editions topic. For information about the sandbox feature, see Introduction to the sandbox feature.
    Table 1. Purchase a WAF 3.0 instance of the Basic edition
    Parameter Description
    Billing Method Select a billing method for the WAF 3.0 instance. Set this parameter to Subscription.
    Region Select a region for the WAF 3.0 instance. Valid values:
    • Chinese mainland: regions in the Chinese mainland.
    • Outside the Chinese mainland: regions outside the Chinese mainland.
    Edition Select an edition for the WAF 3.0 instance. Set this parameter to Basic.
    Note
    • The Basic edition is suitable for scenarios in which you need to only configure basic protection for small-sized websites and personal websites that do not have special security requirements.
    • If you want to configure Log Service, Multi-Level Protection Scheme (MLPS), or bot management for your services, select Pro, Enterprise, or Ultimate. If you want to configure custom protection policies for your services, select Enterprise or Ultimate. For more information, see Purchase a WAF 3.0 instance of the Pro edition, Enterprise edition, or Ultimate edition.

    After you select an edition, the specifications of the selected edition are displayed in the Description section. For more information, see Editions.

    Extra Domains Specify the number of domain names that you want to add. The Basic edition provides three domain names free of charge and the number of domain names can be increased by up to 10.
    Subscription Duration Select the subscription period of the WAF 3.0 instance and specify whether to enable Auto-renewal.
    Note If you want to test a WAF instance before you purchase the instance, contact your account manager to apply for a proof of concept (PoC) project.
    Table 2. Purchase a WAF 3.0 instance of the Pro edition, Enterprise edition, or Ultimate edition
    Parameter Description
    Billing Method Select a billing method for the WAF 3.0 instance. Set this parameter to Subscription.
    Region Select a region for the WAF 3.0 instance. Valid values:
    • Chinese mainland: regions in the Chinese mainland.
    • Outside the Chinese mainland: regions outside the Chinese mainland.
    Note You do not need to select a specific region when you purchase a WAF 3.0 instance. The system automatically selects the most suitable region when you configure the origin server.
    Edition Select an edition for the WAF 3.0 instance. Set this parameter to Pro, Enterprise, or Ultimate.

    After you select an edition, the specifications of the selected edition are displayed in the Description section. For more information, see Editions.

    Hybrid Cloud Protection Specify whether to enable the hybrid cloud protection feature.

    If you want WAF to protect services that are deployed across data centers, public clouds, and private clouds, enable the hybrid cloud protection feature. This way, you can manage and protect the services in a centralized manner.

    Additional Protection Nodes Specify the number of protection nodes for the hybrid cloud protection cluster.

    If your web services are deployed across data centers, public clouds, and private clouds, you must configure hybrid cloud protection nodes. You can specify the number of protection nodes only when you enable the hybrid cloud protection feature.

    Bot Management-Web Application Protection Specify whether to enable the web application protection feature that is provided by the bot management module.

    You can enable this feature to mitigate the security threats that occur due to bot traffic on web pages or HTML5 pages. For more information, see Configure anti-crawler rules for websites.

    Bot Management-App Protection Specify whether to enable the app protection feature that is provided by the bot management module.

    If your business supports native apps and you have security requirements, such as requirements for trusted communications or bot prevention, we recommend that you enable this feature. For more information, see Configure anti-crawler rules for apps.

    Extended QPS Specify the QPS quota that you want to increase.

    If the peak QPS of the service that you want to add to WAF exceeds the specifications of the selected edition, you can purchase an additional QPS quota.

    Note Different WAF 3.0 editions have different QPS limits. For more information, see the description of the peak QPS of different WAF 3.0 editions in the Editions topic.
    Threshold of Burstable QPS (Pay-as-you-go) Specify the maximum QPS value that can be billed on a pay-as-you-go basis. For more information, see Burstable QPS (pay-as-you-go).
    Extra Domains Specify the number of additional domain names that you want to purchase.

    If the number of domain names that you want to add to WAF exceeds the specifications of the specified edition, you can purchase additional domain names.

    Note Different editions have different limits for the number of additional domain names. For more information, see the description of additional domain names that are supported by different WAF 3.0 editions in the Editions topic.
    Exclusive IP Address Specify the number of exclusive IP addresses that you want to purchase.

    If you want to protect an important domain name, you can purchase an exclusive IP address for your WAF instance and assign the IP address to the domain name. Exclusive IP address applies only to the services that are added to WAF in CNAME record mode. For more information, see Enable an exclusive IP address.

    Intelligent Load Balancing Specify whether to enable intelligent load balancing.

    You can enable intelligent load balancing to ensure high availability and minimize latency during automatic disaster recovery. Intelligent load balancing applies only to the services that are added to WAF in CNAME record mode. For more information, see Use the intelligent load balancing feature.

    Log Service Specify whether to enable the Log Service for WAF feature.

    You can enable Log Service for WAF to store, view, and analyze WAF logs in real time. For more information, see Overview of log management.

    Log Storage Capacity Specify the storage capacity of Log Service. The minimum storage capacity is 3 TB. Unit: TB.

    If the log storage usage reaches the upper limit, WAF logs are no longer written.

    Subscription Duration Select the subscription period of the WAF 3.0 instance and specify whether to enable Auto-renewal.
    Note If you want to test a WAF instance before you purchase the instance, contact your account manager to apply for a PoC project.
  2. Click Buy Now and complete the payment.