This topic lists frequently asked questions about WAF 3.0.
Pre-sales product capability consultation
-
How does WAF obtain the client source IP and record the client IP through a custom header?
-
Does WAF support cross-account use of CDN + Anti-DDoS Proxy + WAF architectures?
-
What domain name suffixes are supported for CNAME onboarding?
-
Does WAF protect multiple origin server IPs under a single domain?
-
Does WAF support websites that use NTLM protocol authentication?
-
Is the WAF QPS limit applied to the entire WAF instance or to each domain individually?
Resource onboarding configuration
-
What is the difference between an origin IP address and a back-to-origin IP address in WAF?
-
Can the same domain use both cloud product onboarding and CNAME onboarding at the same time?
-
The same domain name resolves to multiple cloud product instances. How should I onboard?
-
Multiple domain names resolve to the same cloud product instance. How should I onboard?
-
During CNAME onboarding, how does WAF load balance a domain-type origin (such as CNAME)?
-
How to view the WAF back-to-origin IP ranges and the CNAME provided by WAF?
-
The CLB, NLB, or ECS instance that you want to add cannot be found on the resource onboarding page
-
For the origin IP address in WAF, should I use the public or private IP of an ECS instance?
-
When you add an HTTPS listener port, the CLB certificate is incomplete
-
Why does adding multiple extended certificates fail during cloud product onboarding?
-
After onboarding a cloud product to WAF, do I still need to configure protected objects?
-
How to batch export the list of domain information that has been onboarded via CNAME?
-
After cloud product onboarding, can the origin server get the real client IP?
Post-onboarding troubleshooting
-
My website is protected by WAF, but it doesn't appear in the domain list
-
Why does the error InvalidTLS occur when onboarding a CLB instance via cloud product onboarding?
-
Why am I unable to access miniapps on a website that I added to WAF?
-
Why am I unable to access the website that I added to WAF by using specific clients?
-
What to do if blackhole filtering is triggered for your WAF instance
Protection configuration
-
Why can I not find a specific protection rule ID in the WAF console?
-
Why does a custom rule not take effect after I set the match field to Body Parameter?