To get started with Web Application Firewall (WAF), you must purchase a WAF instance. This topic describes how to purchase a WAF instance.

Background

WAF supports the subscription billing method. When you purchase a subscription WAF instance, you must select an edition based on your business requirements. Different editions have different protection features and specifications. For more information, see WAF deployment plans and editions.

Purchase a WAF instance

  1. On the Web Application Firewall buy page, set the following parameters:
    Parameter Description
    Region Select the region of the WAF instance. Valid values:
    • Chinese Mainland: regions in the Chinese mainland.
    • Outside Chinese Mainland: regions outside the Chinese mainland. The regions include China (Hong Kong), Singapore (Singapore), Malaysia (Kuala Lumpur), US (Silicon Valley), Australia (Sydney), Germany (Frankfurt), India (Mumbai), Indonesia (Jakarta), UAE (Dubai), and Japan (Tokyo).
    Deployment Select the deployment plan for the WAF instance. Valid values:
    • On-cloud WAF: If you select this plan, the WAF instance uses a shared cluster to deliver protection capabilities. This is the default value.
    • Hybrid Cloud WAF: If you select this plan, the WAF instance uses an on-premises cluster to deliver protection capabilities.
    Edition Select the edition of the WAF instance. Valid values:
    • If you select the On-cloud WAF deployment plan: Pro, Business, Enterprise, and Exclusive.
      Note By default, the Exclusive option is not displayed. If you want to purchase a WAF instance of the Exclusive edition, submit a ticket. For more information, see Best practices for WAF exclusive clusters.
    • If you select the Hybrid Cloud WAF deployment plan: Exclusive.

    After you select an edition, the Specifications section displays the details of the selected edition. For more information, see WAF deployment plans and editions.

    Protection Node Scaling Specify the number of protection nodes.

    If your web services are deployed across data centers, public clouds, and private clouds, you must configure on-premises protection nodes. For more information, see Overview of Hybrid Cloud WAF.

    Bot Management Specify whether to enable the bot management feature.

    You can enable this feature to mitigate security threats that are caused by bot traffic. For more information, see Set a bot threat intelligence rule and Configure the allowed crawlers function.

    App Protection Specify whether to enable the app protection feature.

    If your business supports native apps and you have security needs such as trusted communications or bot prevention, we recommend that you enable this feature. For more information, see Configure application protection.

    Extra Domain Package Specify the number of extra domain packages that you want to purchase.

    If you want to add multiple domain names or more than 10 subdomains to WAF, we recommend that you purchase extra domain packages. For more information, see Extra domain package.

    Extra Bandwidth Package Specify the extra bandwidth that you want to purchase. Unit: Mbit/s.

    If the total service bandwidth of the websites that you want to add to WAF exceeds the default service bandwidth provided by the selected edition, we recommend that you purchase extra bandwidth. You can configure this parameter only when you set Deployment to On-cloud WAF. For more information, see WAF service bandwidth.

    Extra VIP Package Specify the number of exclusive IP addresses that you want to purchase.

    If you want to protect an important domain name, you can purchase an exclusive IP address for your WAF instance, and then assign the IP address to the domain name. You can configure this parameter only when you set Deployment to On-cloud WAF. For more information, see Exclusive IP addresses.

    Intelligent Load Balancing Specify whether to enable intelligent load balancing.

    If you want to ensure high availability and minimize latency for automatic disaster recovery, you can enable intelligent load balancing. You can configure this parameter only when you set Deployment to On-cloud WAF. For more information, see Intelligent load balancing.

    Log Service Specify whether to enable Log Service for WAF.

    You can enable Log Service for WAF to store, view, and analyze WAF logs in real time. For more information, see Log Service for WAF.

    Log Storage Capacity Specify the maximum storage capacity for WAF logs. You can configure this parameter only when you set Log Service to Yes. Unit: TB.
    Data Visualization Specify the type of data visualization. Valid values: Disabled, Single Screen, and Multi-screen.

    You can enable the data visualization feature to display and analyze the workloads and security status of your website. For more information, see Data visualization.

    Purchase time Select a validity period for the WAF instance.
  2. Click Buy Now and complete the payment.
    Notice WAF does not provide a 5-day money-back guarantee or support partial refunds.