Web Application Firewall (WAF) protects services that use standard and non-standard ports. You must specify ports for the origin server when you add your website to WAF. WAF receives and forwards traffic based on the specified ports. This topic describes the standard and non-standard ports that are supported by WAF.

Standard ports

WAF protects services that use the following standard ports:
  • HTTP ports: port 80 and port 8080
  • HTTPS ports: port 443 and port 8443

Non-standard ports

Cloud native mode

Cloud native mode: You can use non-standard ports that range from port 0 to port 65535.

CNAME record mode

The CNAME record mode supports specific non-standard ports. Different WAF editions support different non-standard ports.
Edition Supported non-standard port
Subscription Basic Edition and Pro Edition Not supported
Subscription Business Edition and Enterprise Edition
  • HTTP ports:
    81, 82, 83, 84, 86, 87, 88, 89, 97, 800, 808, 1000, 1090, 3333, 3501, 3601, 5000, 5222, 6001, 6666, 7000, 7001, 7002, 7003, 7004, 7005, 7006, 7009, 7010, 7011, 7012, 7013, 7014, 7015, 7016, 7018, 7019, 7020, 7021, 7022, 7023, 7024, 7025, 7026, 7070, 7081, 7082, 7083, 7088, 7097, 7510, 7777, 7800, 8000, 8001, 8002, 8003, 8008, 8009, 8020, 8021, 8022, 8025, 8026, 8077, 8078, 8081, 8082, 8083, 8084, 8085, 8086, 8087, 8088, 8089, 8090, 8091, 8106, 8181, 8334, 8336, 8686, 8800, 8888, 8889, 8999, 9000, 9001, 9002, 9003, 9021, 9023, 9027, 9037, 9080, 9081, 9082, 9180, 9200, 9201, 9205, 9207, 9208, 9209, 9210, 9211, 9212, 9213, 9898, 9908, 9916, 9918, 9919, 9928, 9929, 9939, 9999, 10000, 10001, 10080, 12601, 28080, 33702, and 48800
    Note Only WAF instances that are deployed in the Chinese mainland support port 48800.
  • HTTPS ports:
    4443, 5443, 6443, 7443, 9443, 8553, 8663, 9553, 9663, and 18980
    Note Only WAF instances that are deployed in the Chinese mainland support port 18980.
Pay-as-you-go

You can perform the following operations to view the supported ports in the WAF console.

  1. Go to the Website Configuration page in the WAF console.
  2. On the Website Configuration page, click the CNAME Record tab. Find the domain name whose ports you want to view and click Edit in the Actions column.
  3. In the Edit Domain Name panel, select HTTP or HTTPS and click View Port Range.

References