yexinru/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity

WAF Dedicated UMN 20250119 version

Browse Source 
Reviewed-by: Rogal, Marcel <mrogal@noreply.gitea.eco.tsi-dev.otc-service.com>
Co-authored-by: qiaoli <qiaoli@huawei.com>
Co-committed-by: qiaoli <qiaoli@huawei.com>
This commit is contained in:
Li, Qiao
2025-01-24 09:50:15 +00:00
committed by zuul
parent 90c401248a
commit 9d532fb0cf
48 changed files with 744 additions and 431 deletions
Download Patch File Download Diff File Expand all files Collapse all files

858
docs/wafd/umn/ALL_META.TXT.json
View File

File diff suppressed because it is too large Load Diff

6
docs/wafd/umn/CLASS.TXT.json
View File

@ -387,7 +387,7 @@
"code":"43"
},
{
"desc":"When setting a CC attack, precise access, or global whitelist protection rule, there are some fields in the Condition List or Trigger area. These fields together are used",
"desc":"When setting a precise access, CC attack protection, or global protection whitelist rule, there are some fields in the Condition List or Trigger area. These fields togeth",
"product_code":"wafd",
"title":"Condition Field Description",
"uri":"waf_01_3271.html",
@ -711,7 +711,7 @@
"code":"79"
},
{
"desc":"After you enable CTS and the management tracker is created, CTS starts recording operations on cloud resources. After a data tracker is created, the system starts recordi",
"desc":"After you enable CTS and the management tracker is created, CTS starts recording operations on cloud resources. Cloud Trace Service (CTS) stores operation records (traces",
"product_code":"wafd",
"title":"Viewing CTS Traces in the Trace List",
"uri":"waf_01_0060.html",
@ -1116,7 +1116,7 @@
"code":"124"
},
{
"desc":"After your website is connected to WAF, the size of the file each time you can upload to the website is limited as follows:Cloud mode - CNAME access: 1 GBCloud mode - loa",
"desc":"After your website is connected to WAF, the size of the file each time you can upload to the website is limited as follows:Cloud mode - Load balancer access mode: 10 GBDe",
"product_code":"wafd",
"title":"What Can I Do If Files Cannot Be Uploaded After a Website Is Connected to WAF?",
"uri":"waf_01_0100.html",

BIN
docs/wafd/umn/en-us_image_0000001074633189.png
View File

Binary file not shown.
Side by Side

Before

Width:  |  Height:  |  Size: 748 B

BIN
docs/wafd/umn/en-us_image_0000001481923368.jpg
View File

Binary file not shown.
Side by Side

Before

Width:  |  Height:  |  Size: 26 KiB

BIN
docs/wafd/umn/en-us_image_0000001675705730.png
View File

Binary file not shown.
Side by Side

Before

Width:  |  Height:  |  Size: 12 KiB

BIN
docs/wafd/umn/en-us_image_0000001695522016.jpg
View File

Binary file not shown.
Side by Side

Before

Width:  |  Height:  |  Size: 26 KiB

BIN
docs/wafd/umn/en-us_image_0000001710860016.png
View File

Binary file not shown.
Side by Side

Before

Width:  |  Height:  |  Size: 27 KiB

BIN
docs/wafd/umn/en-us_image_0000002098463152.jpg Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 983 B

BIN
docs/wafd/umn/en-us_image_0000002121808986.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 13 KiB

BIN
docs/wafd/umn/en-us_image_0000002126107914.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 55 KiB

BIN
docs/wafd/umn/en-us_image_0000002129833584.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 209 B

2
docs/wafd/umn/waf_01_0001.html
View File

@ -12,7 +12,7 @@
</div>
<div class="section" id="waf_01_0001__section10771154618268"><h4 class="sectiontitle">Impact on the System</h4><p id="waf_01_0001__p11952356122613">Modifying the server configuration does not affect services.</p>
</div>
<div class="section" id="waf_01_0001__section99661953135418"><h4 class="sectiontitle">Editing Server Information</h4><ol id="waf_01_0001__ol1946219212552"><li id="waf_01_0001__li16374183013585"><span>Log in to the management console.</span></li><li id="waf_01_0001__li1392155773219"><span>Click <span><img id="waf_01_0001__waf_01_3273_image10410329111410" src="en-us_image_0000001532693205.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0001__li13897125313222"><span>Click <span><img id="waf_01_0001__image074281418325" src="en-us_image_0000001288264194.png"></span> in the upper left corner and choose <strong id="waf_01_0001__b2106101864910">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0001__b101071818144914">Security</strong>.</span></li><li id="waf_01_0001__li099971734316"><span>In the navigation pane on the left, choose <strong id="waf_01_0001__b1828183317507">Website Settings</strong>.</span></li><li id="waf_01_0001__li11161220114217"><span>In the <strong id="waf_01_0001__b187312552712">Domain Name</strong> column, click the domain name of the website to go to the basic information page.</span></li><li id="waf_01_0001__li1974882520270"><span>In the <strong id="waf_01_0001__b66071211158">Origin Servers</strong> area, click <strong id="waf_01_0001__b20758175512149">Edit</strong>.</span></li><li id="waf_01_0001__li91447045719"><span>On the <strong id="waf_01_0001__b1575164102815">Edit Server Information</strong> page, edit the server configurations (such as client protocols and associated certificates).</span><p><ul id="waf_01_0001__ul1576651319263"><li id="waf_01_0001__li0766151314265">For details about certificate, see <a href="waf_01_0262.html">Updating the Certificate Used for a Website</a>.</li><li id="waf_01_0001__li876641352616">WAF supports configuring of multiple backend servers. To add a backend server, click <strong id="waf_01_0001__b13881646192010">Add</strong>.</li></ul>
<div class="section" id="waf_01_0001__section99661953135418"><h4 class="sectiontitle">Modifying Server Information of One Website</h4><ol id="waf_01_0001__ol1946219212552"><li id="waf_01_0001__li16374183013585"><span>Log in to the management console.</span></li><li id="waf_01_0001__li1392155773219"><span>Click <span><img id="waf_01_0001__waf_01_3273_image10410329111410" src="en-us_image_0000001532693205.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0001__li13897125313222"><span>Click <span><img id="waf_01_0001__image074281418325" src="en-us_image_0000001288264194.png"></span> in the upper left corner and choose <strong id="waf_01_0001__b2106101864910">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0001__b101071818144914">Security</strong>.</span></li><li id="waf_01_0001__li099971734316"><span>In the navigation pane on the left, choose <strong id="waf_01_0001__b1828183317507">Website Settings</strong>.</span></li><li id="waf_01_0001__li11161220114217"><span>In the <strong id="waf_01_0001__b187312552712">Domain Name</strong> column, click the domain name of the website to go to the basic information page.</span></li><li id="waf_01_0001__li1974882520270"><span>In the <strong id="waf_01_0001__b66071211158">Origin Servers</strong> area, click <strong id="waf_01_0001__b20758175512149">Edit</strong>.</span></li><li id="waf_01_0001__li91447045719"><span>On the <strong id="waf_01_0001__b1575164102815">Edit Server Information</strong> page, edit the server configurations (such as client protocols and associated certificates).</span><p><ul id="waf_01_0001__ul1576651319263"><li id="waf_01_0001__li0766151314265">For details about certificate, see <a href="waf_01_0262.html">Updating the Certificate Used for a Website</a>.</li><li id="waf_01_0001__li876641352616">WAF supports configuring of multiple backend servers. To add a backend server, click <strong id="waf_01_0001__b13881646192010">Add</strong>.</li></ul>
</p></li><li id="waf_01_0001__li170662618191"><span>Click <span class="uicontrol" id="waf_01_0001__uicontrol4176193313215"><b>Confirm</b></span>.</span></li></ol>
</div>
</div>

2
docs/wafd/umn/waf_01_0003.html
View File

@ -10,7 +10,7 @@
</div>
<div class="section" id="waf_01_0003__section18821175593911"><h4 class="sectiontitle">Impact on the System</h4><p id="waf_01_0003__p715917448368">If you suspend WAF protection, WAF does not scan for attacks and only forwards requests to origin servers. This is risky. To avoid normal requests from being blocked, configure global protection whitelist rules, instead of suspending WAF protection.</p>
</div>
<div class="section" id="waf_01_0003__section1260817181445"><h4 class="sectiontitle">Changing the Protection Mode (Enabling/Suspending WAF Protection)</h4><ol id="waf_01_0003__ol23626279415"><li id="waf_01_0003__li162931733115714"><span>Log in to the management console.</span></li><li id="waf_01_0003__li10362112712414"><span>Click <span><img id="waf_01_0003__image46876523615" src="en-us_image_0000001481372972.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0003__li58521521119"><span>Click <span><img id="waf_01_0003__image1185218212118" src="en-us_image_0000001941947437.png"></span> in the upper left corner and choose <strong id="waf_01_0003__b19165114310480">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0003__b15165164374818">Security</strong>.</span></li><li id="waf_01_0003__li13642278414"><span>In the navigation pane on the left, choose <strong id="waf_01_0003__b16805155719383">Website Settings</strong>.</span><p><ul id="waf_01_0003__ul172712516113"><li id="waf_01_0003__li972715511">Enabling protection: In the row containing the target domain name, click <span class="uicontrol" id="waf_01_0003__uicontrol17719626416"><b>Enable WAF</b></span> in the <span class="parmname" id="waf_01_0003__parmname129751311710"><b>Operation</b></span> column. In the displayed dialog box, click <span class="uicontrol" id="waf_01_0003__uicontrol06899148415"><b>Confirm</b></span>. If you <span class="uicontrol" id="waf_01_0003__uicontrol161451155120"><b>Enable WAF</b></span>, the <span class="parmname" id="waf_01_0003__parmname47165111515"><b>Status</b></span> of the domain name changes to <span class="parmvalue" id="waf_01_0003__parmvalue167951145120"><b>Protected</b></span>.</li><li id="waf_01_0003__li5580133610416">Suspending protection: In the row containing the target domain name, click <span class="uicontrol" id="waf_01_0003__uicontrol144041549145"><b>Suspend WAF</b></span> in the <span class="parmname" id="waf_01_0003__parmname1540411497415"><b>Operation</b></span> column. In the displayed dialog box, click <span class="uicontrol" id="waf_01_0003__uicontrol19405124916411"><b>Confirm</b></span>. If you <span class="uicontrol" id="waf_01_0003__uicontrol152481040115512"><b>Suspend WAF</b></span>, the <span class="parmname" id="waf_01_0003__parmname12491940185520"><b>Status</b></span> of the domain name changes to <span class="parmvalue" id="waf_01_0003__parmvalue142498402553"><b>Unprotected</b></span>.</li></ul>
<div class="section" id="waf_01_0003__section1260817181445"><h4 class="sectiontitle">Changing the Protection Mode (Enabling/Suspending WAF Protection)</h4><ol id="waf_01_0003__ol23626279415"><li id="waf_01_0003__li162931733115714"><span>Log in to the management console.</span></li><li id="waf_01_0003__li10362112712414"><span>Click <span><img id="waf_01_0003__image46876523615" src="en-us_image_0000001481372972.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0003__li58521521119"><span>Click <span><img id="waf_01_0003__image1185218212118" src="en-us_image_0000001941947437.png"></span> in the upper left corner and choose <strong id="waf_01_0003__b19165114310480">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0003__b15165164374818">Security</strong>.</span></li><li id="waf_01_0003__li13642278414"><span>In the navigation pane on the left, choose <strong id="waf_01_0003__b16805155719383">Website Settings</strong>.</span><p><ul id="waf_01_0003__ul172712516113"><li id="waf_01_0003__li972715511">Enabling protection: In the row containing the target domain name, click <span class="uicontrol" id="waf_01_0003__uicontrol1694605422118"><b>Enable WAF</b></span> in the <span class="parmname" id="waf_01_0003__parmname794655432110"><b>Operation</b></span> column. In the displayed dialog box, click <span class="uicontrol" id="waf_01_0003__uicontrol06899148415"><b>Confirm</b></span>. If you <span class="uicontrol" id="waf_01_0003__uicontrol161451155120"><b>Enable WAF</b></span>, the <span class="parmname" id="waf_01_0003__parmname47165111515"><b>Status</b></span> of the domain name changes to <span class="parmvalue" id="waf_01_0003__parmvalue167951145120"><b>Protected</b></span>.</li><li id="waf_01_0003__li5580133610416">Suspending protection: In the row containing the target domain name, click <span class="uicontrol" id="waf_01_0003__uicontrol889612117226"><b>Suspend WAF</b></span> in the <span class="parmname" id="waf_01_0003__parmname14896161122215"><b>Operation</b></span> column. In the displayed dialog box, click <span class="uicontrol" id="waf_01_0003__uicontrol19405124916411"><b>Confirm</b></span>. If you <span class="uicontrol" id="waf_01_0003__uicontrol152481040115512"><b>Suspend WAF</b></span>, the <span class="parmname" id="waf_01_0003__parmname12491940185520"><b>Status</b></span> of the domain name changes to <span class="parmvalue" id="waf_01_0003__parmvalue142498402553"><b>Unprotected</b></span>.</li></ul>
</p></li></ol>
</div>
</div>

2
docs/wafd/umn/waf_01_0005.html
View File

@ -6,7 +6,7 @@
</div>
<div class="section" id="waf_01_0005__section696033475217"><h4 class="sectiontitle">Impact on the System</h4><p id="waf_01_0005__p8733153819528">It takes about a minute to remove a website from WAF, but once this action is started, it cannot be cancelled. Exercise caution when removing a website from WAF.</p>
</div>
<div class="section" id="waf_01_0005__section12796121511446"><h4 class="sectiontitle">Deleting a Protected Website from WAF</h4><ol id="waf_01_0005__ol1235711264911"><li id="waf_01_0005__li16374183013585"><span>Log in to the management console.</span></li><li id="waf_01_0005__li1392155773219"><span>Click <span><img id="waf_01_0005__waf_01_3273_image10410329111410" src="en-us_image_0000001544531265.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0005__li13897125313222"><span>Click <span><img id="waf_01_0005__image074281418325" src="en-us_image_0000001340304197.png"></span> in the upper left corner and choose <strong id="waf_01_0005__b1774114013524">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0005__b5742184018528">Security</strong>.</span></li><li id="waf_01_0005__li099971734316"><span>In the navigation pane on the left, choose <strong id="waf_01_0005__b128962030134117">Website Settings</strong>.</span></li><li id="waf_01_0005__li10316102210514"><span>In the row containing the website domain name you want to delete, click <span class="uicontrol" id="waf_01_0005__uicontrol1338514586405"><b>Delete</b></span> in the <span class="parmname" id="waf_01_0005__parmname1238605894013"><b>Operation</b></span> column.</span></li><li id="waf_01_0005__li7981103315131"><span>In the displayed confirmation dialog box, confirm the deletion.</span><p><p id="waf_01_0005__p82731032114116">If you want to retain the policy applied to the domain name, select <strong id="waf_01_0005__b267611224615">Retain the policy of this domain name</strong>.</p>
<div class="section" id="waf_01_0005__section12796121511446"><h4 class="sectiontitle">Deleting a Protected Website from WAF</h4><ol id="waf_01_0005__ol1235711264911"><li id="waf_01_0005__li16374183013585"><span>Log in to the management console.</span></li><li id="waf_01_0005__li1392155773219"><span>Click <span><img id="waf_01_0005__waf_01_3273_image10410329111410" src="en-us_image_0000001544531265.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0005__li13897125313222"><span>Click <span><img id="waf_01_0005__image074281418325" src="en-us_image_0000001340304197.png"></span> in the upper left corner and choose <strong id="waf_01_0005__b1774114013524">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0005__b5742184018528">Security</strong>.</span></li><li id="waf_01_0005__li099971734316"><span>In the navigation pane on the left, choose <strong id="waf_01_0005__b128962030134117">Website Settings</strong>.</span></li><li id="waf_01_0005__li10316102210514"><span>In the row containing the website domain name you want to delete, click <span class="uicontrol" id="waf_01_0005__uicontrol113524540427"><b>Delete</b></span> in the <span class="parmname" id="waf_01_0005__parmname1238605894013"><b>Operation</b></span> column.</span></li><li id="waf_01_0005__li7981103315131"><span>In the displayed confirmation dialog box, confirm the deletion.</span><p><p id="waf_01_0005__p82731032114116">If you want to retain the policy applied to the domain name, select <strong id="waf_01_0005__b267611224615">Retain the policy of this domain name</strong>.</p>
<div class="fignone" id="waf_01_0005__fig918542415165"><span class="figcap"><b>Figure 1 </b>Deleting a protected domain name from WAF</span><br><span><img id="waf_01_0005__image192751609541" src="en-us_image_0000001435452489.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0005__li18411832131610"><span>Click <span class="uicontrol" id="waf_01_0005__uicontrol58426326168"><b>OK</b></span>.</span><p><p id="waf_01_0005__p1398616339165">If <span class="parmvalue" id="waf_01_0005__parmvalue1131165114414"><b>Domain name deleted successfully</b></span> is displayed in the upper right corner, the domain name of the website was deleted.</p>
</p></li></ol>

24
docs/wafd/umn/waf_01_0008.html
View File

@ -42,38 +42,37 @@
</div>
</li><li id="waf_01_0008__li11550834124116">Set the protection type.<div class="notice" id="waf_01_0008__note1564322641017"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="waf_01_0008__p145481432121014">By default, <strong id="waf_01_0008__b2876035154311">General Check</strong> is enabled. You can enable other protection types by referring to <a href="#waf_01_0008__table1054818371898">Table 2</a>.</p>
</div></div>
</li></ol>
<div class="tablenoborder"><a name="waf_01_0008__table1054818371898"></a><a name="table1054818371898"></a><table cellpadding="4" cellspacing="0" summary="" id="waf_01_0008__table1054818371898" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Protection types</caption><thead align="left"><tr id="waf_01_0008__row25491137297"><th align="left" class="cellrowborder" valign="top" width="40.04%" id="mcps1.3.5.2.7.2.3.2.3.1.1"><p id="waf_01_0008__p1854915379911">Type</p>
<div class="tablenoborder"><a name="waf_01_0008__table1054818371898"></a><a name="table1054818371898"></a><table cellpadding="4" cellspacing="0" summary="" id="waf_01_0008__table1054818371898" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Protection types</caption><thead align="left"><tr id="waf_01_0008__row25491137297"><th align="left" class="cellrowborder" valign="top" width="40.04%" id="mcps1.3.5.2.7.2.2.3.2.2.3.1.1"><p id="waf_01_0008__p1854915379911">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="59.96%" id="mcps1.3.5.2.7.2.3.2.3.1.2"><p id="waf_01_0008__p8549737894">Description</p>
<th align="left" class="cellrowborder" valign="top" width="59.96%" id="mcps1.3.5.2.7.2.2.3.2.2.3.1.2"><p id="waf_01_0008__p8549737894">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="waf_01_0008__row354983713918"><td class="cellrowborder" valign="top" width="40.04%" headers="mcps1.3.5.2.7.2.3.2.3.1.1 "><p id="waf_01_0008__p35498371299">General Check</p>
<tbody><tr id="waf_01_0008__row354983713918"><td class="cellrowborder" valign="top" width="40.04%" headers="mcps1.3.5.2.7.2.2.3.2.2.3.1.1 "><p id="waf_01_0008__p35498371299">General Check</p>
</td>
<td class="cellrowborder" valign="top" width="59.96%" headers="mcps1.3.5.2.7.2.3.2.3.1.2 "><p id="waf_01_0008__p125497371397">Defends against attacks such as SQL injections, XSS, remote overflow vulnerabilities, file inclusions, Bash vulnerabilities, remote command execution, directory traversal, sensitive file access, and command/code injections. SQL injection attacks are mainly detected based on semantics.</p>
<td class="cellrowborder" valign="top" width="59.96%" headers="mcps1.3.5.2.7.2.2.3.2.2.3.1.2 "><p id="waf_01_0008__p125497371397">Defends against attacks such as SQL injections, XSS, remote overflow vulnerabilities, file inclusions, Bash vulnerabilities, remote command execution, directory traversal, sensitive file access, and command/code injections. SQL injection attacks are mainly detected based on semantics.</p>
<div class="note" id="waf_01_0008__note66541414413"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="waf_01_0008__p86559124115">If you enable <strong id="waf_01_0008__b1528150124711">General Check</strong>, WAF checks your websites based on the built-in rules.</p>
</div></div>
</td>
</tr>
<tr id="waf_01_0008__row5549123715914"><td class="cellrowborder" valign="top" width="40.04%" headers="mcps1.3.5.2.7.2.3.2.3.1.1 "><p id="waf_01_0008__p754913375913">Webshell Detection</p>
<tr id="waf_01_0008__row5549123715914"><td class="cellrowborder" valign="top" width="40.04%" headers="mcps1.3.5.2.7.2.2.3.2.2.3.1.1 "><p id="waf_01_0008__p754913375913">Webshell Detection</p>
</td>
<td class="cellrowborder" valign="top" width="59.96%" headers="mcps1.3.5.2.7.2.3.2.3.1.2 "><p id="waf_01_0008__p1754993711914">Protects against web shells from upload interface.</p>
<td class="cellrowborder" valign="top" width="59.96%" headers="mcps1.3.5.2.7.2.2.3.2.2.3.1.2 "><p id="waf_01_0008__p1754993711914">Protects against web shells from upload interface.</p>
<div class="note" id="waf_01_0008__note19915165154218"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="waf_01_0008__p1591614514423">If you enable <strong id="waf_01_0008__b1727114744710">Webshell Detection</strong>, WAF detects web page Trojan horses inserted through the upload interface.</p>
</div></div>
</td>
</tr>
<tr id="waf_01_0008__row837585613435"><td class="cellrowborder" valign="top" width="40.04%" headers="mcps1.3.5.2.7.2.3.2.3.1.1 "><p id="waf_01_0008__p17376556194316">Deep Inspection</p>
<tr id="waf_01_0008__row837585613435"><td class="cellrowborder" valign="top" width="40.04%" headers="mcps1.3.5.2.7.2.2.3.2.2.3.1.1 "><p id="waf_01_0008__p17376556194316">Deep Inspection</p>
</td>
<td class="cellrowborder" valign="top" width="59.96%" headers="mcps1.3.5.2.7.2.3.2.3.1.2 "><p id="waf_01_0008__p16868294452">Identifies and blocks evasion attacks, such as the ones that use homomorphic character obfuscation, command injection with deformed wildcard characters, UTF7, data URI scheme, and other techniques.</p>
<div class="note" id="waf_01_0008__note825125516470"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="waf_01_0008__p1425155154718">If you enable <strong id="waf_01_0008__b376360647">Deep Inspection</strong>, WAF detects and defends against evasion attacks in depth.</p>
<td class="cellrowborder" valign="top" width="59.96%" headers="mcps1.3.5.2.7.2.2.3.2.2.3.1.2 "><p id="waf_01_0008__p16868294452">Identifies and blocks evasion attacks, such as the ones that use homomorphic character obfuscation, command injection with deformed wildcard characters, UTF7, data URI scheme, and other techniques.</p>
<div class="note" id="waf_01_0008__note825125516470"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="waf_01_0008__p1425155154718">If you enable <strong id="waf_01_0008__b30930148">Deep Inspection</strong>, WAF detects and defends against evasion attacks in depth.</p>
</div></div>
</td>
</tr>
<tr id="waf_01_0008__row124533351015"><td class="cellrowborder" valign="top" width="40.04%" headers="mcps1.3.5.2.7.2.3.2.3.1.1 "><p id="waf_01_0008__p122469331102">Header Inspection</p>
<tr id="waf_01_0008__row124533351015"><td class="cellrowborder" valign="top" width="40.04%" headers="mcps1.3.5.2.7.2.2.3.2.2.3.1.1 "><p id="waf_01_0008__p122469331102">Header Inspection</p>
</td>
<td class="cellrowborder" valign="top" width="59.96%" headers="mcps1.3.5.2.7.2.3.2.3.1.2 "><p id="waf_01_0008__p1714019071217">This function is disabled by default. When it is disabled, General Check will check some of the header fields, such as User-Agent, Content-type, Accept-Language, and Cookie.</p>
<td class="cellrowborder" valign="top" width="59.96%" headers="mcps1.3.5.2.7.2.2.3.2.2.3.1.2 "><p id="waf_01_0008__p1714019071217">This function is disabled by default. When it is disabled, General Check will check some of the header fields, such as User-Agent, Content-type, Accept-Language, and Cookie.</p>
<div class="note" id="waf_01_0008__note6982930171110"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="waf_01_0008__p20983730201118">If you enable this function, WAF checks all header fields in the requests.</p>
</div></div>
</td>
@ -81,6 +80,7 @@
</tbody>
</table>
</div>
</li></ol>
</p></li></ol>
</div>
<div class="section" id="waf_01_0008__section12205121204219"><h4 class="sectiontitle">Suggestions</h4><ul id="waf_01_0008__ul1967116228408"><li id="waf_01_0008__li2671172218402">If you are not clear about your service traffic characteristics, you are advised to switch to the <strong id="waf_01_0008__b11796358135516">Log only</strong> mode first and observe the WAF protection for a period of time. Generally, you need to observe service running for one to two weeks, and then analyze the attack logs.<ul id="waf_01_0008__ul167115222408"><li id="waf_01_0008__li067113224401">If no record of blocking legitimate requests is found, switch to the <strong id="waf_01_0008__b15753247563">Block</strong> mode.</li><li id="waf_01_0008__li1367182204016">If legitimate requests are blocked, adjust the protection level or configure global protection whitelist rules to prevent legitimate requests from being blocked.</li></ul>

12
docs/wafd/umn/waf_01_0009.html
View File

@ -101,7 +101,7 @@
<tr id="waf_01_0009__row178278614219"><td class="cellrowborder" valign="top" width="19%" headers="mcps1.3.6.2.8.2.2.2.4.1.1 "><p id="waf_01_0009__p1482756182112">Block Page</p>
</td>
<td class="cellrowborder" valign="top" width="54.26%" headers="mcps1.3.6.2.8.2.2.2.4.1.2 "><p id="waf_01_0009__p13827126122120">The page displayed if the request limit has been reached. This parameter is configured only when <strong id="waf_01_0009__b187531129114516">Protective Action</strong> is set to <strong id="waf_01_0009__b475462974510">Block</strong>.</p>
<ul id="waf_01_0009__ul58276611212"><li id="waf_01_0009__li1982718615214">If you select <strong id="waf_01_0009__b15868163212456">Default settings</strong>, the default block page is displayed.</li><li id="waf_01_0009__li158270612218">If you select <strong id="waf_01_0009__b971013518452">Custom</strong>, a custom error message is displayed.</li></ul>
<ul id="waf_01_0009__ul58276611212"><li id="waf_01_0009__li1982718615214">If you select <strong id="waf_01_0009__b15868163212456">Default settings</strong>, the default block page is displayed.</li><li id="waf_01_0009__li158270612218">If you select <strong id="waf_01_0009__b81302143616">Custom</strong>, you can write a custom error message, so that WAF will return this message to website visitors when their requests are blocked.</li></ul>
</td>
<td class="cellrowborder" valign="top" width="26.740000000000002%" headers="mcps1.3.6.2.8.2.2.2.4.1.3 "><p id="waf_01_0009__p148275632115">Custom</p>
</td>
@ -124,21 +124,21 @@
</tbody>
</table>
</div>
</p></li><li id="waf_01_0009__li17347103632318"><span>Click <strong id="waf_01_0009__b15938614612">Confirm</strong>. You can then view the added CC attack protection rule in the CC rule list.</span><p><ul id="waf_01_0009__ul134733613239"><li id="waf_01_0009__li18347163662318">To disable a rule, click <strong id="waf_01_0009__b12139173154620">Disable</strong> in the <strong id="waf_01_0009__b10140531104612">Operation</strong> column of the rule. The default <strong id="waf_01_0009__b3141173119465">Rule Status</strong> is <strong id="waf_01_0009__b014113315469">Enabled</strong>.</li><li id="waf_01_0009__li7348183662313">To modify a rule, click <strong id="waf_01_0009__b1734723384610">Modify</strong> in the row containing the rule.</li><li id="waf_01_0009__li1348123611236">To delete a rule, click <strong id="waf_01_0009__b2620173194716">Delete</strong> in the row containing the rule.</li></ul>
</p></li><li id="waf_01_0009__li17347103632318"><span>Click <span class="uicontrol" id="waf_01_0009__uicontrol153473360231"><b>Confirm</b></span>. You can then view the added CC attack protection rule in the CC rule list.</span><p><ul id="waf_01_0009__ul134733613239"><li id="waf_01_0009__li18347163662318">To disable a rule, click <strong id="waf_01_0009__b12139173154620">Disable</strong> in the <strong id="waf_01_0009__b10140531104612">Operation</strong> column of the rule. The default <strong id="waf_01_0009__b3141173119465">Rule Status</strong> is <strong id="waf_01_0009__b014113315469">Enabled</strong>.</li><li id="waf_01_0009__li7348183662313">To modify a rule, click <strong id="waf_01_0009__b1734723384610">Modify</strong> in the row containing the rule.</li><li id="waf_01_0009__li1348123611236">To delete a rule, click <strong id="waf_01_0009__b2620173194716">Delete</strong> in the row containing the rule.</li></ul>
</p></li></ol>
</div>
<div class="section" id="waf_01_0009__section4176194446"><h4 class="sectiontitle">Protection Effect</h4><p id="waf_01_0009__p187472252055">If you have configured a CC attack protection rule like <a href="#waf_01_0009__fig1083929152617">Figure 1</a> (with <strong id="waf_01_0009__b8185188191815">Protective Action</strong> set to <strong id="waf_01_0009__b1551716316186">Block</strong>) for your domain name <span class="parmvalue" id="waf_01_0009__parmvalue2530459171620"><b>www.example.com</b></span>, take the following steps to verify the protection effect:</p>
<ol id="waf_01_0009__ol3178546414"><li id="waf_01_0009__li529312963813"><span>Clear the browser cache and enter the domain name in the address bar to check whether the website is accessible.</span><p><ul id="waf_01_0009__waf_01_0008_ul112081054104215"><li id="waf_01_0009__li181201354134518">If the website is inaccessible, connect the website domain name to WAF by referring to <a href="waf_01_0326.html">Step 1: Add Your Website to WAF</a>.</li><li id="waf_01_0009__waf_01_0008_li15572817174415">If the website is accessible, go to <a href="#waf_01_0009__li88102353919">2</a>.</li></ul>
</p></li><li id="waf_01_0009__li88102353919"><a name="waf_01_0009__li88102353919"></a><a name="li88102353919"></a><span>Clear the browser cache, enter <strong id="waf_01_0009__b250419557150">http://www.example.com/admin</strong> in the address bar, and refresh the page 10 times within 60 seconds. In normal cases, the custom block page will be displayed the eleventh time you refresh the page, and the requested page will be accessible when you refresh the page 60 seconds later.</span><p><p id="waf_01_0009__p147901724184313">If you select <strong id="waf_01_0009__b145871623131611">Verification code</strong> for protective action, a verification code is required for visitors to continue the access if they exceed the configured rate limit.</p>
<p class="MsoBodyText" id="waf_01_0009__p31297682"><span><img id="waf_01_0009__image29123463" src="en-us_image_0000001695522016.jpg" title="Click to enlarge" class="imgResize"></span></p>
<div class="fignone" id="waf_01_0009__fig521410412068"><span class="figcap"><b>Figure 2 </b>Verification code</span><br><span><img id="waf_01_0009__image14213115011119" src="en-us_image_0000002126107914.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0009__li11175716476"><span>Return to the WAF console. In the navigation pane, click <strong id="waf_01_0009__b587603218162">Events</strong>. On the displayed page, view the event log.</span></li></ol>
</div>
<div class="section" id="waf_01_0009__section118149824913"><h4 class="sectiontitle">Configuration Example - Verification Code</h4><p id="waf_01_0009__p042032163514">If domain name <strong id="waf_01_0009__b3625599213">www.example.com</strong> has been connected to WAF, perform the following steps to verify that WAF CAPTCHA verification is enabled.</p>
<ol id="waf_01_0009__ol0456123717116"><li id="waf_01_0009__li17534471434"><span>Add a CC attack protection rule with <strong id="waf_01_0009__b4568191084719">Protection Action</strong> set to <strong id="waf_01_0009__b1568810144717">Verification code</strong>.</span><p><div class="fignone" id="waf_01_0009__fig15654111421118"><span class="figcap"><b>Figure 2 </b>Verification code</span><br><span><img id="waf_01_0009__image155514291652" src="en-us_image_0000002019512640.png" title="Click to enlarge" class="imgResize"></span></div>
<ol id="waf_01_0009__ol0456123717116"><li id="waf_01_0009__li17534471434"><span>Add a CC attack protection rule with <strong id="waf_01_0009__b4568191084719">Protection Action</strong> set to <strong id="waf_01_0009__b1568810144717">Verification code</strong>.</span><p><div class="fignone" id="waf_01_0009__fig15654111421118"><span class="figcap"><b>Figure 3 </b>Verification code</span><br><span><img id="waf_01_0009__image155514291652" src="en-us_image_0000002019512640.png" title="Click to enlarge" class="imgResize"></span></div>
<p id="waf_01_0009__p19726254115620"></p>
</p></li><li id="waf_01_0009__li17643557142218"><span>Enable CC attack protection.</span><p><div class="fignone" id="waf_01_0009__fig1023425111117"><span class="figcap"><b>Figure 3 </b>Enabling CC Attack Protection</span><br><span><img id="waf_01_0009__image138491626194214" src="en-us_image_0000002090587337.png"></span></div>
</p></li><li id="waf_01_0009__li17643557142218"><span>Enable CC attack protection.</span><p><div class="fignone" id="waf_01_0009__fig1023425111117"><span class="figcap"><b>Figure 4 </b>Enabling CC Attack Protection</span><br><span><img id="waf_01_0009__image138491626194214" src="en-us_image_0000002090587337.png"></span></div>
</p></li><li id="waf_01_0009__li3433529122814"><span>Clear the browser cache and access http://www.example.com/admin/.</span><p><p id="waf_01_0009__en-us_topic_0110861267_p6625183072812">If you access the page 10 times within 60 seconds, a verification code is required when you attempt to access the page for the eleventh time. You need to enter the verification code to continue the access.</p>
<p class="MsoBodyText" id="waf_01_0009__en-us_topic_0110861267_p6596163716217"><span><img id="waf_01_0009__en-us_topic_0110861267_image1559613718219" src="en-us_image_0000001481923368.jpg" title="Click to enlarge" class="imgResize"></span></p>
<div class="fignone" id="waf_01_0009__fig20217674131"><span class="figcap"><b>Figure 5 </b>Verification code</span><br><span><img id="waf_01_0009__waf_01_0009_image14213115011119" src="en-us_image_0000002126107914.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0009__li10820165001813"><span>Go to the WAF console. In the navigation pane on the left, choose <strong id="waf_01_0009__b163851280103">Events</strong>. View the event on the <strong id="waf_01_0009__b73858816107">Events</strong> page.</span></li></ol>
</div>
</div>

14
docs/wafd/umn/waf_01_0010.html
View File

@ -39,12 +39,12 @@
<tr id="waf_01_0010__row601487010457"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.7.2.9.2.4.1.2.4.1.1 "><p id="waf_01_0010__p1744246310457">Condition List</p>
</td>
<td class="cellrowborder" valign="top" width="49%" headers="mcps1.3.7.2.9.2.4.1.2.4.1.2 "><p id="waf_01_0010__p355343310457">Click <span class="uicontrol" id="waf_01_0010__uicontrol27650470104613"><b>Add</b></span> and add conditions. At least one condition is required for a rule, but up to 30 conditions are allowed. If you add more than one condition, the rule will only take effect when all conditions are met.</p>
<div class="p" id="waf_01_0010__p7949331142211">Parameters for configuring a condition are described as follows:<ul id="waf_01_0010__ul61829843104748"><li id="waf_01_0010__li18188182033310"><strong id="waf_01_0010__b842352706134812">Field</strong></li><li id="waf_01_0010__li168603561498"><strong id="waf_01_0010__b136405281019">Subfield</strong>: Configure this field only when <span class="parmvalue" id="waf_01_0010__parmvalue10793315133817"><b>Params</b></span>, <span class="parmvalue" id="waf_01_0010__parmvalue7793131533815"><b>Cookie</b></span>, or <span class="parmvalue" id="waf_01_0010__parmvalue242742372716"><b>Header</b></span> is selected for <strong id="waf_01_0010__b9654143874510">Field</strong>.</li><li id="waf_01_0010__li45757787104748"><strong id="waf_01_0010__b14964124454514">Logic</strong>: Select a logical relationship from the drop-down list.<div class="note" id="waf_01_0010__note852381343216"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="waf_01_0010__ul111142453212"><li id="waf_01_0010__li1911152433212">If <strong id="waf_01_0010__b3711155615410">Include any value</strong>, <strong id="waf_01_0010__b12711185655415">Exclude any value</strong>, <strong id="waf_01_0010__b1771215615545">Equal to any value</strong>, <strong id="waf_01_0010__b5712656145418">Not equal to any value</strong>, <strong id="waf_01_0010__b127127567542">Prefix is any value</strong>, <strong id="waf_01_0010__b47122567547">Prefix is not any of them</strong>, <strong id="waf_01_0010__b5712456195411">Suffix is any value</strong>, or <strong id="waf_01_0010__b87129569549">Suffix is not any of them</strong> is selected, select an existing reference table in the <strong id="waf_01_0010__b17713105611547">Content</strong> drop-down list. For details, see <a href="waf_01_0081.html">Creating a Reference Table to Configure Protection Metrics in Batches</a>.</li><li id="waf_01_0010__li1812172433216"><strong id="waf_01_0010__b2042913071">Exclude any value</strong>, <strong id="waf_01_0010__b240481632">Not equal to any value</strong>, <strong id="waf_01_0010__b17917877">Prefix is not any of them</strong>, and <strong id="waf_01_0010__b1165318734">Suffix is not any of them</strong> indicates, respectively, that WAF performs the protection action (block, allow, or log only) when the field in the access request does not contain, is not equal to, or the prefix or suffix is not any value set in the reference table. For example, assume that <strong id="waf_01_0010__b910102542">Path</strong> field is set to <strong id="waf_01_0010__b1081047811">Exclude any value</strong> and the <strong id="waf_01_0010__b889589377">test</strong> reference table is selected. If <em id="waf_01_0010__i287238172">test1</em>, <em id="waf_01_0010__i1503837067">test2</em>, and <em id="waf_01_0010__i1719878469">test3</em> are set in the <strong id="waf_01_0010__b1419992589">test</strong> reference table, WAF performs the protection action when the path of the access request does not contain <em id="waf_01_0010__i2020825960">test1</em>, <em id="waf_01_0010__i43388766">test2</em>, or <em id="waf_01_0010__i243747508">test3</em>.</li></ul>
<div class="p" id="waf_01_0010__p7949331142211">Parameters for configuring a condition are described as follows:<ul id="waf_01_0010__ul61829843104748"><li id="waf_01_0010__li18188182033310"><strong id="waf_01_0010__b842352706134812">Field</strong></li><li id="waf_01_0010__li168603561498"><strong id="waf_01_0010__b136405281019">Subfield</strong>: Configure this field only when <span class="parmvalue" id="waf_01_0010__parmvalue10793315133817"><b>Params</b></span>, <span class="parmvalue" id="waf_01_0010__parmvalue7793131533815"><b>Cookie</b></span>, or <span class="parmvalue" id="waf_01_0010__parmvalue242742372716"><b>Header</b></span> is selected for <strong id="waf_01_0010__b9654143874510">Field</strong>.</li><li id="waf_01_0010__li45757787104748"><strong id="waf_01_0010__b14964124454514">Logic</strong>: Select a logical relationship from the drop-down list.<div class="note" id="waf_01_0010__note852381343216"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="waf_01_0010__ul111142453212"><li id="waf_01_0010__li1911152433212">If <strong id="waf_01_0010__b3711155615410">Include any value</strong>, <strong id="waf_01_0010__b12711185655415">Exclude any value</strong>, <strong id="waf_01_0010__b1771215615545">Equal to any value</strong>, <strong id="waf_01_0010__b5712656145418">Not equal to any value</strong>, <strong id="waf_01_0010__b127127567542">Prefix is any value</strong>, <strong id="waf_01_0010__b47122567547">Prefix is not any of them</strong>, <strong id="waf_01_0010__b5712456195411">Suffix is any value</strong>, or <strong id="waf_01_0010__b87129569549">Suffix is not any of them</strong> is selected, select an existing reference table in the <strong id="waf_01_0010__b17713105611547">Content</strong> drop-down list. For details, see <a href="waf_01_0081.html">Creating a Reference Table to Configure Protection Metrics in Batches</a>.</li><li id="waf_01_0010__li1812172433216"><strong id="waf_01_0010__b1288020743">Exclude any value</strong>, <strong id="waf_01_0010__b1682188495">Not equal to any value</strong>, <strong id="waf_01_0010__b747673759">Prefix is not any of them</strong>, and <strong id="waf_01_0010__b566558485">Suffix is not any of them</strong> indicates, respectively, that WAF performs the protection action (block, allow, or log only) when the field in the access request does not contain, is not equal to, or the prefix or suffix is not any value set in the reference table. For example, assume that <strong id="waf_01_0010__b165295719">Path</strong> field is set to <strong id="waf_01_0010__b990360368">Exclude any value</strong> and the <strong id="waf_01_0010__b1627330809">test</strong> reference table is selected. If <em id="waf_01_0010__i34089118">test1</em>, <em id="waf_01_0010__i512831022">test2</em>, and <em id="waf_01_0010__i536785447">test3</em> are set in the <strong id="waf_01_0010__b1318958190">test</strong> reference table, WAF performs the protection action when the path of the access request does not contain <em id="waf_01_0010__i1439452927">test1</em>, <em id="waf_01_0010__i326853328">test2</em>, or <em id="waf_01_0010__i917221889">test3</em>.</li></ul>
</div></div>
</li><li id="waf_01_0010__li14531210104748"><strong id="waf_01_0010__b842352706125548">Content</strong>: Enter or select the content of condition matching.</li></ul>
</li><li id="waf_01_0010__li14531210104748"><strong id="waf_01_0010__b842352706125548">Content</strong>: Enter or select the content of condition matching.<div class="note" id="waf_01_0010__note661931813411"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="waf_01_0010__p106195186413">For more details about the configurations in general, see <a href="waf_01_3271.html#waf_01_3271__table13543174312394">Table 1</a>.</p>
</div></div>
</li></ul>
</div>
<div class="note" id="waf_01_0010__note661931813411"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="waf_01_0010__p106195186413">For more details about the configurations in general, see <a href="waf_01_3271.html#waf_01_3271__table13543174312394">Table 1</a>.</p>
</div></div>
</td>
<td class="cellrowborder" valign="top" width="34%" headers="mcps1.3.7.2.9.2.4.1.2.4.1.3 "><p id="waf_01_0010__p247213553318"><strong id="waf_01_0010__b7768165834314">Path</strong> <strong id="waf_01_0010__b13769175864317">Include</strong> <span class="parmvalue" id="waf_01_0010__parmvalue276915586432"><b>/admin</b></span></p>
</td>
@ -73,7 +73,7 @@
<td class="cellrowborder" valign="top" width="34%" headers="mcps1.3.7.2.9.2.4.1.2.4.1.3 "><p id="waf_01_0010__p662112271010"><strong id="waf_01_0010__b842352706174327">5</strong></p>
</td>
</tr>
<tr id="waf_01_0010__row1749220184218"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.7.2.9.2.4.1.2.4.1.1 "><p id="waf_01_0010__p6704202210380">Apply</p>
<tr id="waf_01_0010__row1749220184218"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.7.2.9.2.4.1.2.4.1.1 "><p id="waf_01_0010__p6704202210380">Application Schedule</p>
</td>
<td class="cellrowborder" valign="top" width="49%" headers="mcps1.3.7.2.9.2.4.1.2.4.1.2 "><p id="waf_01_0010__p1070492283816">Select <strong id="waf_01_0010__b7608152217812">Immediate</strong> to enable the rule immediately, or select <strong id="waf_01_0010__b15970204010">Custom</strong> to configure when you wish the rule to be enabled.</p>
</td>
@ -83,7 +83,7 @@
<tr id="waf_01_0010__row0362114911257"><td class="cellrowborder" valign="top" width="17%" headers="mcps1.3.7.2.9.2.4.1.2.4.1.1 "><p id="waf_01_0010__p1482756182112">Block Page</p>
</td>
<td class="cellrowborder" valign="top" width="49%" headers="mcps1.3.7.2.9.2.4.1.2.4.1.2 "><p id="waf_01_0010__p13827126122120">If <strong id="waf_01_0010__b105452183382">Protective Action</strong> is set to <strong id="waf_01_0010__b1281335103820">Block</strong>, you can configure an error page you want to return to the visitors.</p>
<ul id="waf_01_0010__ul58276611212"><li id="waf_01_0010__li1982718615214">If you select <strong id="waf_01_0010__b46078517271">Default settings</strong>, the default block page is displayed.</li><li id="waf_01_0010__li158270612218">If you select <strong id="waf_01_0010__b197535716270">Custom</strong>, a custom error message is displayed.</li></ul>
<ul id="waf_01_0010__ul58276611212"><li id="waf_01_0010__li1982718615214">If you select <strong id="waf_01_0010__b46078517271">Default settings</strong>, the default block page is displayed.</li><li id="waf_01_0010__li158270612218">If you select <strong id="waf_01_0010__b195495146346">Custom</strong>, you can write a custom error message, so that WAF will return this message to website visitors when their requests are blocked.</li></ul>
</td>
<td class="cellrowborder" valign="top" width="34%" headers="mcps1.3.7.2.9.2.4.1.2.4.1.3 "><p id="waf_01_0010__p148275632115">Custom</p>
</td>
@ -107,7 +107,7 @@
</table>
</div>
</div>
</p></li><li id="waf_01_0010__li643812971514"><span>Click <strong id="waf_01_0010__b475241512538">Confirm</strong>. You can then view the added precise protection rule in the protection rule list.</span><p><ul id="waf_01_0010__ul32152522327"><li id="waf_01_0010__li7955184513317">To disable a rule, click <strong id="waf_01_0010__b918311585209">Disable</strong> in the <strong id="waf_01_0010__b31846587207">Operation</strong> column of the rule. The default <strong id="waf_01_0010__b418425811207">Rule Status</strong> is <strong id="waf_01_0010__b121841658152011">Enabled</strong>.</li><li id="waf_01_0010__li142141252173210">To modify a rule, click <strong id="waf_01_0010__b2077526122010">Modify</strong> in the row containing the rule.</li><li id="waf_01_0010__li82151952133210">To delete a rule, click <strong id="waf_01_0010__b842352706102537">Delete</strong> in the row containing the rule.</li></ul>
</p></li><li id="waf_01_0010__li643812971514"><span>Click <span class="uicontrol" id="waf_01_0010__uicontrol4176193313215"><b>Confirm</b></span>. You can then view the added precise protection rule in the protection rule list.</span><p><ul id="waf_01_0010__ul32152522327"><li id="waf_01_0010__li7955184513317">To disable a rule, click <strong id="waf_01_0010__b918311585209">Disable</strong> in the <strong id="waf_01_0010__b31846587207">Operation</strong> column of the rule. The default <strong id="waf_01_0010__b418425811207">Rule Status</strong> is <strong id="waf_01_0010__b121841658152011">Enabled</strong>.</li><li id="waf_01_0010__li142141252173210">To modify a rule, click <strong id="waf_01_0010__b2077526122010">Modify</strong> in the row containing the rule.</li><li id="waf_01_0010__li82151952133210">To delete a rule, click <strong id="waf_01_0010__b842352706102537">Delete</strong> in the row containing the rule.</li></ul>
</p></li></ol>
</div>
<div class="section" id="waf_01_0010__section1410161231312"><h4 class="sectiontitle">Protection Effect</h4><p id="waf_01_0010__p13688122011">To verify WAF is protecting your website (<strong id="waf_01_0010__b3250122915119">www.example.com</strong>) against the rule as shown in <a href="#waf_01_0010__fig39459217174738">Figure 1</a>:</p>

2
docs/wafd/umn/waf_01_0012.html
View File

@ -77,7 +77,7 @@
<div class="fignone" id="waf_01_0012__fig13996155195418"><a name="waf_01_0012__fig13996155195418"></a><a name="fig13996155195418"></a><span class="figcap"><b>Figure 3 </b>Blocking IP address range 128.0.0.0/1</span><br><span><img id="waf_01_0012__image1753591417214" src="en-us_image_0000001732030241.png" title="Click to enlarge" class="imgResize"></span></div>
</li><li id="waf_01_0012__li15516950164520"><strong id="waf_01_0012__b1462116164716">Method 2</strong>: Add a precise protection rule to block all access requests, as shown in <a href="#waf_01_0012__fig489116305597">Figure 4</a>.<div class="fignone" id="waf_01_0012__fig489116305597"><a name="waf_01_0012__fig489116305597"></a><a name="fig489116305597"></a><span class="figcap"><b>Figure 4 </b>Blocking all access requests</span><br><span><img id="waf_01_0012__image128361024735" src="en-us_image_0000002057944613.png" title="Click to enlarge" class="imgResize"></span></div>
</li></ul>
</p></li><li id="waf_01_0012__li839632265215"><a name="waf_01_0012__li839632265215"></a><a name="li839632265215"></a><span>Refer to <a href="#waf_01_0012__fig5519155016115">Figure 5</a> and add a whitelist rule to allow a specified IP address, for example, <em id="waf_01_0012__i913625416142">XXX.XXX.2.3</em>.</span><p><div class="fignone" id="waf_01_0012__fig5519155016115"><a name="waf_01_0012__fig5519155016115"></a><a name="fig5519155016115"></a><span class="figcap"><b>Figure 5 </b>Allowing the access of a specified IP address</span><br><span><img id="waf_01_0012__image953712510412" src="en-us_image_0000001732035733.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0012__li839632265215"><a name="waf_01_0012__li839632265215"></a><a name="li839632265215"></a><span>Refer to <a href="#waf_01_0012__fig5519155016115">Figure 5</a> and add a whitelist rule to allow a specified IP address, for example, <em id="waf_01_0012__i913625416142">192.168.2.3</em>.</span><p><div class="fignone" id="waf_01_0012__fig5519155016115"><a name="waf_01_0012__fig5519155016115"></a><a name="fig5519155016115"></a><span class="figcap"><b>Figure 5 </b>Allowing the access of a specified IP address</span><br><span><img id="waf_01_0012__image953712510412" src="en-us_image_0000001732035733.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0012__li124219442611"><span>Enable the white and blacklist protection.</span><p><div class="fignone" id="waf_01_0012__fig4155115310221"><span class="figcap"><b>Figure 6 </b>Blacklist and Whitelist configuration area</span><br><span><img id="waf_01_0012__image1645722905119" src="en-us_image_0000002091891973.png"></span></div>
<p id="waf_01_0012__p161965111226"></p>
</p></li><li id="waf_01_0012__li15956024825"><span>Clear the browser cache and access http://www.example.com.</span><p><p id="waf_01_0012__p19297451496">If the IP address of a visitor is not the one specified in <a href="#waf_01_0012__li839632265215">Step 2</a>, WAF blocks the access request. <a href="#waf_01_0012__fig11778435913">Figure 7</a> shows an example of the block page.</p>

4
docs/wafd/umn/waf_01_0015.html
View File

@ -7,13 +7,13 @@
<div class="section" id="waf_01_0015__section5903171661012"><h4 class="sectiontitle">Prerequisites</h4><p id="waf_01_0015__waf_01_0009_waf_01_0054_waf_01_0001_p173267390016">You have added the website you want to protect to WAF.</p>
</div>
<div class="section" id="waf_01_0015__section827219419246"><h4 class="sectiontitle">Constraints</h4><ul id="waf_01_0015__ul9272641192419"><li id="waf_01_0015__li0272174111242">Cookies must be enabled and JavaScript supported by any browser used to access a website protected by anti-crawler protection rules.</li><li id="waf_01_0015__li20272741132418">If your service is connected to CDN, exercise caution when using the JS anti-crawler function.<p id="waf_01_0015__p427210416247"><a name="waf_01_0015__li20272741132418"></a><a name="li20272741132418"></a>CDN caching may impact JS anti-crawler performance and page accessibility.</p>
</li><li id="waf_01_0015__li421418208429">JS anti-crawler protection is not supported if you use the ELB access mode.</li><li id="waf_01_0015__li2012713348325">WAF only logs JavaScript challenge and JavaScript authentication events. No other protective actions can be configured for JavaScript challenge and authentication.</li><li id="waf_01_0015__li87699455314">WAF JavaScript-based anti-crawler rules only check GET requests and do not check POST requests.</li></ul>
</li><li id="waf_01_0015__li117948818499">JS anti-crawler protection is not supported when you select <strong id="waf_01_0015__b3769173619111">ELB access</strong> for website deployment.</li><li id="waf_01_0015__li2012713348325">WAF only logs JavaScript challenge and JavaScript authentication events. No other protective actions can be configured for JavaScript challenge and authentication.</li><li id="waf_01_0015__li87699455314">WAF JavaScript-based anti-crawler rules only check GET requests and do not check POST requests.</li></ul>
</div>
<div class="section" id="waf_01_0015__section17319131413234"><h4 class="sectiontitle">How JavaScript Anti-Crawler Protection Works</h4><p id="waf_01_0015__p328922113396"><a href="#waf_01_0015__fig0891191071116">Figure 1</a> shows how JavaScript anti-crawler detection works, which includes JavaScript challenges (step 1 and step 2) and JavaScript authentication (step 3).</p>
<div class="fignone" id="waf_01_0015__fig0891191071116"><a name="waf_01_0015__fig0891191071116"></a><a name="fig0891191071116"></a><span class="figcap"><b>Figure 1 </b>JavaScript Anti-Crawler protection process</span><br><span><img id="waf_01_0015__image1619371955016" src="en-us_image_0000001127096041.png" title="Click to enlarge" class="imgResize"></span></div>
<div class="p" id="waf_01_0015__p1884414561419">If JavaScript anti-crawler is enabled when a client sends a request, WAF returns a piece of JavaScript code to the client.<ul id="waf_01_0015__ul154921953144511"><li id="waf_01_0015__li6160233510">If the client sends a normal request to the website, triggered by the received JavaScript code, the client will automatically send the request to WAF again. WAF then forwards the request to the origin server. This process is called JavaScript verification.</li><li id="waf_01_0015__li12468959740">If the client is a crawler, it cannot be triggered by the received JavaScript code and will not send a request to WAF again. The client fails JavaScript authentication.</li><li id="waf_01_0015__li1749335316452">If a client crawler fabricates a WAF authentication request and sends the request to WAF, the WAF will block the request. The client fails JavaScript authentication.</li></ul>
</div>
<p id="waf_01_0015__p551214183464">By collecting statistics on the number of JavaScript challenges and authentication responses, the system calculates how many requests the JavaScript anti-crawler defends. In <a href="#waf_01_0015__fig10806185634312">Figure 2</a>, the JavaScript anti-crawler has logged 18 events, 16 of which are JavaScript challenge responses, and 2 of which are JavaScript authentication responses. <strong id="waf_01_0015__b339741782010">Others</strong> indicates the number of WAF authentication requests fabricated by the crawler.</p>
<p id="waf_01_0015__p551214183464">By collecting statistics on the number of JavaScript challenges and authentication responses, the system calculates how many requests the JavaScript anti-crawler defends. In <a href="#waf_01_0015__fig10806185634312">Figure 2</a>, the JavaScript anti-crawler has logged 18 events, 16 of which are JavaScript challenge responses, and 2 of which are JavaScript authentication responses. <strong id="waf_01_0015__b339741782010">Other</strong> indicates the number of WAF authentication requests fabricated by the crawler.</p>
<div class="fignone" id="waf_01_0015__fig10806185634312"><a name="waf_01_0015__fig10806185634312"></a><a name="fig10806185634312"></a><span class="figcap"><b>Figure 2 </b>Parameters of a JavaScript anti-crawler protection rule</span><br><span><img id="waf_01_0015__image7430657164017" src="en-us_image_0000001127126255.png" title="Click to enlarge" class="imgResize"></span></div>
<div class="notice" id="waf_01_0015__note173152217103"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="waf_01_0015__p650332154513">WAF only logs JavaScript challenge and JavaScript authentication events. No other protective actions can be configured for JavaScript challenge and authentication.</p>
</div></div>

4
docs/wafd/umn/waf_01_0016.html
View File

@ -42,9 +42,9 @@
<tr id="waf_01_0016__row17081849123811"><td class="cellrowborder" valign="top" width="22.91229122912291%" headers="mcps1.3.7.2.8.2.2.2.4.1.1 "><p id="waf_01_0016__p104642054143811">Condition List</p>
</td>
<td class="cellrowborder" valign="top" width="49.09490949094909%" headers="mcps1.3.7.2.8.2.2.2.4.1.2 "><p id="waf_01_0016__p11464115416389">Click <strong id="waf_01_0016__b66201443102517">Add</strong> to add conditions. At least one condition needs to be added. You can add up to 30 conditions to a protection rule. If more than one condition is added, all of the conditions must be met for the rule to be applied. A condition includes the following parameters:</p>
<div class="p" id="waf_01_0016__p546418547389">Parameters for configuring a condition are described as follows:<ul id="waf_01_0016__ul1846455483811"><li id="waf_01_0016__li1346416549384"><strong id="waf_01_0016__b1123410868">Field</strong></li><li id="waf_01_0016__li14464654143818"><strong id="waf_01_0016__b1036311361253">Subfield</strong>: Configure this field only when <span class="parmvalue" id="waf_01_0016__parmvalue123661436152513"><b>Params</b></span>, <span class="parmvalue" id="waf_01_0016__parmvalue10371183682511"><b>Cookie</b></span>, or <span class="parmvalue" id="waf_01_0016__parmvalue13756369253"><b>Header</b></span> is selected for <strong id="waf_01_0016__b1037819369253">Field</strong>.<div class="notice" id="waf_01_0016__note114652546386"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="waf_01_0016__p54654548381">The length of a subfield cannot exceed 2,048 bytes. Only digits, letters, underscores (_), and hyphens (-) are allowed.</p>
<div class="p" id="waf_01_0016__p546418547389">Parameters for configuring a condition are described as follows:<ul id="waf_01_0016__ul1846455483811"><li id="waf_01_0016__li1346416549384"><strong id="waf_01_0016__b868298235">Field</strong></li><li id="waf_01_0016__li14464654143818"><strong id="waf_01_0016__b1036311361253">Subfield</strong>: Configure this field only when <span class="parmvalue" id="waf_01_0016__parmvalue123661436152513"><b>Params</b></span>, <span class="parmvalue" id="waf_01_0016__parmvalue10371183682511"><b>Cookie</b></span>, or <span class="parmvalue" id="waf_01_0016__parmvalue13756369253"><b>Header</b></span> is selected for <strong id="waf_01_0016__b1037819369253">Field</strong>.<div class="notice" id="waf_01_0016__note114652546386"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="waf_01_0016__p54654548381">The length of a subfield cannot exceed 2,048 bytes. Only digits, letters, underscores (_), and hyphens (-) are allowed.</p>
</div></div>
</li><li id="waf_01_0016__li144651454173811"><strong id="waf_01_0016__b1614721633">Logic</strong>: Select a logical relationship from the drop-down list.</li><li id="waf_01_0016__li8465754103811"><strong id="waf_01_0016__b1600653683">Content</strong>: Enter or select the content that matches the condition.</li></ul>
</li><li id="waf_01_0016__li144651454173811"><strong id="waf_01_0016__b2124599365">Logic</strong>: Select a logical relationship from the drop-down list.</li><li id="waf_01_0016__li8465754103811"><strong id="waf_01_0016__b197193211">Content</strong>: Enter or select the content that matches the condition.</li></ul>
</div>
</td>
<td class="cellrowborder" valign="top" width="27.992799279927993%" headers="mcps1.3.7.2.8.2.2.2.4.1.3 "><p id="waf_01_0016__p1846514548387">Path, Include, /product</p>

2
docs/wafd/umn/waf_01_0020.html
View File

@ -32,7 +32,7 @@
</td>
<td class="cellrowborder" valign="top" width="70.59%" headers="mcps1.3.3.2.5.2.2.1.2.3.1.2 "><p id="waf_01_0020__p153334811406">WAF protection status and security situation of the domain name for the past three days.</p>
<p id="waf_01_0020__p38081513123911">WAF supports the following protection modes:</p>
<ul id="waf_01_0020__ul4809161373912"><li id="waf_01_0020__li14809121333913"><span class="parmvalue" id="waf_01_0020__parmvalue18809191317391"><b>Protected</b></span>: The WAF protection is enabled.</li><li id="waf_01_0020__li1780915138395"><strong id="waf_01_0020__b418357369">Unprotected</strong>: The WAF protection is disabled. If a large number of normal requests are blocked, for example, status code 418 is frequently returned, then you can switch the mode to <strong id="waf_01_0020__b1878590538">Suspended</strong>. In this mode, your website is not protected because WAF only forwards requests. It does not scan for attacks. This mode is risky. You are advised to use the global protection whitelist rules to reduce false alarms.</li></ul>
<ul id="waf_01_0020__ul4809161373912"><li id="waf_01_0020__li14809121333913"><span class="parmvalue" id="waf_01_0020__parmvalue18809191317391"><b>Protected</b></span>: The WAF protection is enabled.</li><li id="waf_01_0020__li1780915138395"><strong id="waf_01_0020__b498876526">Unprotected</strong>: The WAF protection is disabled. If a large number of normal requests are blocked, for example, status code 418 is frequently returned, then you can switch the mode to <strong id="waf_01_0020__b1073928408">Suspended</strong>. In this mode, your website is not protected because WAF only forwards requests. It does not scan for attacks. This mode is risky. You are advised to use the global protection whitelist rules to reduce false alarms.</li></ul>
</td>
</tr>
<tr id="waf_01_0020__row7960832183513"><td class="cellrowborder" valign="top" width="29.409999999999997%" headers="mcps1.3.3.2.5.2.2.1.2.3.1.1 "><p id="waf_01_0020__p119601932153517">Certificate/Cipher Suite</p>

8
docs/wafd/umn/waf_01_0021.html
View File

@ -4,7 +4,7 @@
<div id="body1499850551754"><p id="waf_01_0021__p138557148593">This topic describes how to view protection event logs, including attack and request statistics, event distribution, top 10 attacked domain names, top 10 attack source IP addresses, and top 10 attacked URLs in a specified time range, such as yesterday, today, past 3 days, past 7 days, or past 30 days.</p>
<div class="section" id="waf_01_0021__section2256777914731"><h4 class="sectiontitle">Prerequisites</h4><ul id="waf_01_0021__ul4390430184318"><li id="waf_01_0021__li2391193014318">You have <a href="waf_01_1108.html">connected a website to WAF</a>.</li><li id="waf_01_0021__li1464801164215">At least one protection rule has been configured for the domain name.</li></ul>
</div>
<div class="section" id="waf_01_0021__section85381210192217"><h4 class="sectiontitle">Specification Limitations</h4><p id="waf_01_0021__p13971229142219">On the <span class="wintitle" id="waf_01_0021__wintitle5821133717327"><b>Dashboard</b></span> page, protection data of up to 30 days can be viewed.</p>
<div class="section" id="waf_01_0021__section85381210192217"><h4 class="sectiontitle">Specification Limitations</h4><p id="waf_01_0021__p13971229142219">You can view the protection data of a maximum of 30 days.</p>
</div>
<div class="section" id="waf_01_0021__section1588682602717"><a name="waf_01_0021__section1588682602717"></a><a name="section1588682602717"></a><h4 class="sectiontitle">How to Calculate QPS</h4><p id="waf_01_0021__p1406517122916">The QPS calculation method varies depending on the time range. For details, see <a href="#waf_01_0021__table397244618286">Table 1</a>.</p>
@ -52,10 +52,10 @@
</div>
<div class="section" id="waf_01_0021__section61533550183130"><h4 class="sectiontitle">Viewing the Dashboard</h4><ol id="waf_01_0021__ol521413913717"><li id="waf_01_0021__li16374183013585"><span>Log in to the management console.</span></li><li id="waf_01_0021__li31225453713"><span>Click <span><img id="waf_01_0021__image4493111902419" src="en-us_image_0210924450.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0021__li13897125313222"><span>Click <span><img id="waf_01_0021__image074281418325" src="en-us_image_0000001288106346.png"></span> in the upper left corner and choose <strong id="waf_01_0021__b9111175719525">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0021__b5111125716521">Security</strong>.</span></li><li id="waf_01_0021__li109110245205"><span>In the upper part of the page, select a project from the <strong id="waf_01_0021__b191791336131910">Enterprise Project</strong> drop-down list. Then, specify the website, instance, and time range for your query.</span><p><ul id="waf_01_0021__ul154544461218"><li id="waf_01_0021__li44547465214">By default, the information about all websites you add to WAF in all enterprise projects are displayed.</li><li id="waf_01_0021__li1645494620213"><strong id="waf_01_0021__b1121135024112">Domain Names</strong>: shows information about websites added to the WAF instance in the selected enterprise project. Click <strong id="waf_01_0021__b1671533123917">View</strong> to go to the <strong id="waf_01_0021__b67171938399">Website Settings</strong> page and view details about domain names of protected websites.</li><li id="waf_01_0021__li43461258102114">Query time: You can select <strong id="waf_01_0021__b62834554020">Yesterday</strong>, <strong id="waf_01_0021__b172211944015">Today</strong>, <strong id="waf_01_0021__b254901513409">Past 3 days</strong>, <strong id="waf_01_0021__b12319192210405">Past 7 days</strong>, or <strong id="waf_01_0021__b1597143084015">Past 30 days</strong>.</li></ul>
<div class="fignone" id="waf_01_0021__fig1734625842114"><span class="figcap"><b>Figure 1 </b>Setting search criteria</span><br><span><img id="waf_01_0021__image19762102685116" src="en-us_image_0000001731610061.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0021__li10301203371518"><span>View how many requests, attacks, and attacked pages by attack type over the specified time range.</span><p><ul id="waf_01_0021__ul10927226115"><li id="waf_01_0021__li9927728111"><strong id="waf_01_0021__b1862799105310">Requests</strong>: shows the page views of the website, making it easy for you to view the total number of pages accessed by visitors in a certain period of time.</li><li id="waf_01_0021__li18927132131115"><strong id="waf_01_0021__b2049024175">Attacks</strong>: shows how many times the website are attacked.</li><li id="waf_01_0021__li89278212112">You can view how many pages are attacked by a certain type of attack within a certain period of time.</li><li id="waf_01_0021__li792716214111">You can click <strong id="waf_01_0021__b1736281845914">Show Details</strong> to view the details of the 10 domain names with the most requests, attacks, and basic web protection, precise protection, CC attack protection, and anti-crawler protection actions.</li></ul>
</p></li><li id="waf_01_0021__li10301203371518"><span>View how many requests, attacks, and attacked pages by attack type over the specified time range.</span><p><ul id="waf_01_0021__ul10927226115"><li id="waf_01_0021__li9927728111"><strong id="waf_01_0021__b1862799105310">Requests</strong>: shows the page views of the website, making it easy for you to view the total number of pages accessed by visitors in a certain period of time.</li><li id="waf_01_0021__li18927132131115"><strong id="waf_01_0021__b675092002">Attacks</strong>: shows how many times the website are attacked.</li><li id="waf_01_0021__li89278212112">You can view how many pages are attacked by a certain type of attack within a certain period of time.</li><li id="waf_01_0021__li792716214111">You can click <strong id="waf_01_0021__b1736281845914">Show Details</strong> to view the details of the 10 domain names with the most requests, attacks, and basic web protection, precise protection, CC attack protection, and anti-crawler protection actions.</li></ul>
<div class="fignone" id="waf_01_0021__fig11383182518307"><span class="figcap"><b>Figure 2 </b>Protection action statistics</span><br><span><img id="waf_01_0021__image15196320184916" src="en-us_image_0000001285684556.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0021__li177431343113418"><span>Query security data in the <strong id="waf_01_0021__b372584312519">Security Event Statistics</strong> area.</span><p><p id="waf_01_0021__p555316599457"><strong id="waf_01_0021__b89414101178">By day</strong>: You can select this option to view the data gathered by the day. If you leave this option unselected, you have the following options:</p>
<ul id="waf_01_0021__ul91231041296"><li id="waf_01_0021__li1212304142918"><strong id="waf_01_0021__b1475783054">Yesterday</strong> and <strong id="waf_01_0021__b677273028">Today</strong>: Security event data is gathered every minute.</li><li id="waf_01_0021__li2626173415302"><strong id="waf_01_0021__b137122127">Past 3 days</strong>: Security event data is gathered every 5 minutes.</li><li id="waf_01_0021__li5354114317"><strong id="waf_01_0021__b1886091953">Past 7 days</strong>: Security event data is gathered every 10 minutes.</li><li id="waf_01_0021__li23512172314"><strong id="waf_01_0021__b2321927131512">Past 30 days</strong>: Security event data is gathered every hour.</li></ul>
<ul id="waf_01_0021__ul91231041296"><li id="waf_01_0021__li1212304142918"><strong id="waf_01_0021__b1823648498">Yesterday</strong> and <strong id="waf_01_0021__b318234460">Today</strong>: Security event data is gathered every minute.</li><li id="waf_01_0021__li2626173415302"><strong id="waf_01_0021__b651307810">Past 3 days</strong>: Security event data is gathered every 5 minutes.</li><li id="waf_01_0021__li5354114317"><strong id="waf_01_0021__b1127725265">Past 7 days</strong>: Security event data is gathered every 10 minutes.</li><li id="waf_01_0021__li23512172314"><strong id="waf_01_0021__b2321927131512">Past 30 days</strong>: Security event data is gathered every hour.</li></ul>
<div class="fignone" id="waf_01_0021__fig1839019550457"><span class="figcap"><b>Figure 3 </b>Security Event Statistics</span><br><span><img id="waf_01_0021__image1914123175610" src="en-us_image_0000001683533946.png" title="Click to enlarge" class="imgResize"></span></div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="waf_01_0021__table17926159192910" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameters in Security Event Statistics</caption><thead align="left"><tr id="waf_01_0021__row1192514982914"><th align="left" class="cellrowborder" valign="top" width="28.01%" id="mcps1.3.5.2.6.2.4.2.3.1.1"><p id="waf_01_0021__p89254912292">Parameter</p>
@ -84,7 +84,7 @@
<tr id="waf_01_0021__row898710466506"><td class="cellrowborder" valign="top" width="28.01%" headers="mcps1.3.5.2.6.2.4.2.3.1.1 "><p id="waf_01_0021__p2083915016535">Event Distribution</p>
</td>
<td class="cellrowborder" valign="top" width="71.99%" headers="mcps1.3.5.2.6.2.4.2.3.1.2 "><p id="waf_01_0021__p48404045313">Types of attack events</p>
<p id="waf_01_0021__p10455101395519">Click an area in the <strong id="waf_01_0021__b764199392">Event Distribution</strong> area to view the type, number, and proportion of an attack.</p>
<p id="waf_01_0021__p10455101395519">Click an area in the <strong id="waf_01_0021__b54504934">Event Distribution</strong> area to view the type, number, and proportion of an attack.</p>
</td>
</tr>
<tr id="waf_01_0021__row124101555165018"><td class="cellrowborder" valign="top" width="28.01%" headers="mcps1.3.5.2.6.2.4.2.3.1.1 "><p id="waf_01_0021__p12840140165315">Top 10 Attacked Domain Names</p>

4
docs/wafd/umn/waf_01_0024.html
View File

@ -37,9 +37,9 @@
<tr id="waf_01_0024__waf_01_0016_row17081849123811"><td class="cellrowborder" valign="top" width="22.91229122912291%" headers="mcps1.3.6.2.5.2.1.1.4.2.4.1.1 "><p id="waf_01_0024__waf_01_0016_p104642054143811">Condition List</p>
</td>
<td class="cellrowborder" valign="top" width="49.09490949094909%" headers="mcps1.3.6.2.5.2.1.1.4.2.4.1.2 "><p id="waf_01_0024__waf_01_0016_p11464115416389">Click <strong id="waf_01_0024__waf_01_0016_b66201443102517">Add</strong> to add conditions. At least one condition needs to be added. You can add up to 30 conditions to a protection rule. If more than one condition is added, all of the conditions must be met for the rule to be applied. A condition includes the following parameters:</p>
<div class="p" id="waf_01_0024__waf_01_0016_p546418547389">Parameters for configuring a condition are described as follows:<ul id="waf_01_0024__waf_01_0016_ul1846455483811"><li id="waf_01_0024__waf_01_0016_li1346416549384"><strong id="waf_01_0024__waf_01_0016_b1123410868">Field</strong></li><li id="waf_01_0024__waf_01_0016_li14464654143818"><strong id="waf_01_0024__waf_01_0016_b1036311361253">Subfield</strong>: Configure this field only when <span class="parmvalue" id="waf_01_0024__waf_01_0016_parmvalue123661436152513"><b>Params</b></span>, <span class="parmvalue" id="waf_01_0024__waf_01_0016_parmvalue10371183682511"><b>Cookie</b></span>, or <span class="parmvalue" id="waf_01_0024__waf_01_0016_parmvalue13756369253"><b>Header</b></span> is selected for <strong id="waf_01_0024__waf_01_0016_b1037819369253">Field</strong>.<div class="notice" id="waf_01_0024__waf_01_0016_note114652546386"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="waf_01_0024__waf_01_0016_p54654548381">The length of a subfield cannot exceed 2,048 bytes. Only digits, letters, underscores (_), and hyphens (-) are allowed.</p>
<div class="p" id="waf_01_0024__waf_01_0016_p546418547389">Parameters for configuring a condition are described as follows:<ul id="waf_01_0024__waf_01_0016_ul1846455483811"><li id="waf_01_0024__waf_01_0016_li1346416549384"><strong id="waf_01_0024__waf_01_0016_b868298235">Field</strong></li><li id="waf_01_0024__waf_01_0016_li14464654143818"><strong id="waf_01_0024__waf_01_0016_b1036311361253">Subfield</strong>: Configure this field only when <span class="parmvalue" id="waf_01_0024__waf_01_0016_parmvalue123661436152513"><b>Params</b></span>, <span class="parmvalue" id="waf_01_0024__waf_01_0016_parmvalue10371183682511"><b>Cookie</b></span>, or <span class="parmvalue" id="waf_01_0024__waf_01_0016_parmvalue13756369253"><b>Header</b></span> is selected for <strong id="waf_01_0024__waf_01_0016_b1037819369253">Field</strong>.<div class="notice" id="waf_01_0024__waf_01_0016_note114652546386"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="waf_01_0024__waf_01_0016_p54654548381">The length of a subfield cannot exceed 2,048 bytes. Only digits, letters, underscores (_), and hyphens (-) are allowed.</p>
</div></div>
</li><li id="waf_01_0024__waf_01_0016_li144651454173811"><strong id="waf_01_0024__waf_01_0016_b1614721633">Logic</strong>: Select a logical relationship from the drop-down list.</li><li id="waf_01_0024__waf_01_0016_li8465754103811"><strong id="waf_01_0024__waf_01_0016_b1600653683">Content</strong>: Enter or select the content that matches the condition.</li></ul>
</li><li id="waf_01_0024__waf_01_0016_li144651454173811"><strong id="waf_01_0024__waf_01_0016_b2124599365">Logic</strong>: Select a logical relationship from the drop-down list.</li><li id="waf_01_0024__waf_01_0016_li8465754103811"><strong id="waf_01_0024__waf_01_0016_b197193211">Content</strong>: Enter or select the content that matches the condition.</li></ul>
</div>
</td>
<td class="cellrowborder" valign="top" width="27.992799279927993%" headers="mcps1.3.6.2.5.2.1.1.4.2.4.1.3 "><p id="waf_01_0024__waf_01_0016_p1846514548387">Path, Include, /product</p>

2
docs/wafd/umn/waf_01_0052.html
View File

@ -6,7 +6,7 @@
<p id="waf_01_0052__p56221573527">If your account does not need individual IAM users for permissions management, then you may skip over this chapter.</p>
<div class="section" id="waf_01_0052__section1687715494121"><h4 class="sectiontitle">WAF Permissions</h4><p id="waf_01_0052__p91531416151317">By default, new IAM users do not have any permissions assigned. You need to add a user to one or more groups, and attach permissions policies or roles to these groups. Users inherit permissions from the groups to which they are added and can perform specified operations on cloud services based on the permissions.</p>
<p id="waf_01_0052__p744319551540">WAF is a project-level service deployed and accessed in specific physical regions. To assign WAF permissions to a user group, specify the scope as region-specific projects and select projects for the permissions to take effect. If <strong id="waf_01_0052__b73881513192011">All projects</strong> is selected, the permissions will take effect for the user group in all region-specific projects. When accessing WAF, the users need to switch to a region where they have been authorized to use the WAF service.</p>
<div class="p" id="waf_01_0052__p92931510171920">You can grant users permissions by using roles and policies.<ul id="waf_01_0052__ul14203102718193"><li id="waf_01_0052__li1820417275191">Roles: A type of coarse-grained authorization mechanism that defines permissions related to users responsibilities. Only a limited number of service-level roles for authorization are available. You need to also assign other dependent roles for the permission control to take effect. Roles are not ideal for fine-grained authorization and secure access control.</li><li id="waf_01_0052__li13156030101920">Policies: A fine-grained authorization mechanism that defines permissions required to perform operations on specific cloud resources under certain conditions. This mechanism allows for more flexible policy-based authorization and meets secure access control requirements. For example, you can grant WAF users only the permissions for managing a certain type of resources. Most policies define permissions based on APIs. For the API actions supported by WAF, see <a href="waf_01_0244.html">WAF Permissions and Supported Actions</a>.</li></ul>
<div class="p" id="waf_01_0052__p92931510171920">You can grant users permissions by using roles and policies.<ul id="waf_01_0052__ul14203102718193"><li id="waf_01_0052__li1820417275191">Roles: A type of coarse-grained authorization mechanism that defines permissions related to user responsibilities. Only a limited number of service-level roles for authorization are available. You need to also assign other dependent roles for the permission control to take effect. Roles are not ideal for fine-grained authorization and secure access control.</li><li id="waf_01_0052__li13156030101920">Policies: A fine-grained authorization mechanism that defines permissions required to perform operations on specific cloud resources under certain conditions. This mechanism allows for more flexible policy-based authorization and meets secure access control requirements. For example, you can grant WAF users only the permissions for managing a certain type of resources. Most policies define permissions based on APIs. For the API actions supported by WAF, see <a href="waf_01_0244.html">WAF Permissions and Supported Actions</a>.</li></ul>
</div>
<p id="waf_01_0052__p164624296138"><a href="#waf_01_0052__table1409182914134">Table 1</a> lists all the system roles supported by WAF.</p>

4
docs/wafd/umn/waf_01_0060.html
View File

@ -1,7 +1,7 @@
<a name="waf_01_0060"></a><a name="waf_01_0060"></a>
<h1 class="topictitle1">Viewing CTS Traces in the Trace List</h1>
<div id="body8662426"><div class="section" id="waf_01_0060__en-us_topic_0179639644_section5470822195238"><h4 class="sectiontitle">Scenarios</h4><p id="waf_01_0060__en-us_topic_0179639644_p333055219577">After you enable CTS and the management tracker is created, CTS starts recording operations on cloud resources. After a data tracker is created, the system starts recording operations on data in Object Storage Service (OBS) buckets. Cloud Trace Service (CTS) stores operation records (traces) generated in the last seven days.</p>
<div id="body8662426"><div class="section" id="waf_01_0060__en-us_topic_0179639644_section5470822195238"><h4 class="sectiontitle">Scenarios</h4><p id="waf_01_0060__en-us_topic_0179639644_p333055219577">After you enable CTS and the management tracker is created, CTS starts recording operations on cloud resources. Cloud Trace Service (CTS) stores operation records (traces) generated in the last seven days.</p>
<div class="note" id="waf_01_0060__en-us_topic_0179639644_note1438715448188"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="waf_01_0060__en-us_topic_0179639644_p1138754410182">These operation records are retained for seven days on the CTS console and are automatically deleted upon expiration. Manual deletion is not supported.</p>
</div></div>
</div>
@ -10,7 +10,7 @@
</li><li id="waf_01_0060__en-us_topic_0179639644_li15936204184311"><strong id="waf_01_0060__en-us_topic_0179639644_b98151395276">Operator</strong>: Select a user.</li><li id="waf_01_0060__en-us_topic_0179639644_li6936184119437"><strong id="waf_01_0060__en-us_topic_0179639644_b6981161112286">Trace Status</strong>: Select <strong id="waf_01_0060__en-us_topic_0179639644_b1298716111281">All trace statuses</strong>, <strong id="waf_01_0060__en-us_topic_0179639644_b7987181115281">Normal</strong>, <strong id="waf_01_0060__en-us_topic_0179639644_b2988181112810">Warning</strong>, or <strong id="waf_01_0060__en-us_topic_0179639644_b99881511132820">Incident</strong>.</li><li id="waf_01_0060__en-us_topic_0179639644_li1993654144315">Time range: Select <strong id="waf_01_0060__en-us_topic_0179639644_b1840823133614">Last 1 hour</strong>, <strong id="waf_01_0060__en-us_topic_0179639644_b6408123118362">Last 1 day</strong>, or <strong id="waf_01_0060__en-us_topic_0179639644_b12408231123610">Last 1 week</strong>, or specify a custom time range within the last seven days.</li></ul>
</div>
</li><li class="subitemlist" id="waf_01_0060__en-us_topic_0179639644_li094111715448">Click <strong id="waf_01_0060__en-us_topic_0179639644_b55732514186">Query</strong>.</li><li id="waf_01_0060__en-us_topic_0179639644_li29410170448">On the <strong id="waf_01_0060__en-us_topic_0179639644_b176911834143214">Trace List</strong> page, you can also export and refresh the trace list.<ul id="waf_01_0060__en-us_topic_0179639644_ul119414175448"><li id="waf_01_0060__en-us_topic_0179639644_li12946170445">Click <strong id="waf_01_0060__en-us_topic_0179639644_b8907168171714">Export</strong> to export all traces in the query result as a CSV file. The file can contain up to 5,000 records.</li><li id="waf_01_0060__en-us_topic_0179639644_li394151717445">Click <span><img id="waf_01_0060__en-us_topic_0179639644_image109421716440" src="en-us_image_0000001696678850.png" title="Click to enlarge" class="imgResize"></span> to view the latest information about traces.</li></ul>
</li><li id="waf_01_0060__en-us_topic_0179639644_li169491744418">Click <span><img id="waf_01_0060__en-us_topic_0179639644_image9947176447" src="en-us_image_0000001744678489.jpg" title="Click to enlarge" class="imgResize"></span> on the left of a trace to expand its details.<p id="waf_01_0060__en-us_topic_0179639644_p1294101714446"><span><img id="waf_01_0060__en-us_topic_0179639644_image184153010412" src="en-us_image_0000001710860016.png" title="Click to enlarge" class="imgResize"></span></p>
</li><li id="waf_01_0060__en-us_topic_0179639644_li169491744418">Click <span><img id="waf_01_0060__en-us_topic_0179639644_image9947176447" src="en-us_image_0000001744678489.jpg" title="Click to enlarge" class="imgResize"></span> on the left of a trace to expand its details.<p id="waf_01_0060__en-us_topic_0179639644_p1294101714446"></p>
<p id="waf_01_0060__en-us_topic_0179639644_p1694171715446"><span><img id="waf_01_0060__en-us_topic_0179639644_image1767234653119" src="en-us_image_0000001942942816.png" title="Click to enlarge" class="imgResize"></span></p>
<p id="waf_01_0060__en-us_topic_0179639644_p145491156142711"><span><img id="waf_01_0060__en-us_topic_0179639644_image10370145123013" src="en-us_image_0000001942777100.png" title="Click to enlarge" class="imgResize"></span></p>
<p id="waf_01_0060__en-us_topic_0179639644_p1352018181294"></p>

4
docs/wafd/umn/waf_01_0061.html
View File

@ -6,8 +6,8 @@
</div></div>
<div class="section" id="waf_01_0061__section1837918913347"><h4 class="sectiontitle">Adding Rules to One or More Policies</h4><ol id="waf_01_0061__ol591231710346"><li id="waf_01_0061__li16374183013585"><span>Log in to the management console.</span></li><li id="waf_01_0061__li1392155773219"><span>Click <span><img id="waf_01_0061__waf_01_3273_image10410329111410" src="en-us_image_0000001544453213.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0061__li13897125313222"><span>Click <span><img id="waf_01_0061__image074281418325" src="en-us_image_0000001340586225.png"></span> in the upper left corner and choose <strong id="waf_01_0061__b1863914201670">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0061__b764022014715">Security</strong>.</span></li><li id="waf_01_0061__li112865034620"><span>In the navigation pane on the left, choose <strong id="waf_01_0061__waf_01_0074_b136517536559">Policies</strong>.</span></li><li id="waf_01_0061__li1226681212507"><span>In the upper left corner of the policy list, click <span class="uicontrol" id="waf_01_0061__uicontrol682015491342"><b>View All My Rules</b></span>.</span><p><div class="fignone" id="waf_01_0061__fig142786554196"><span class="figcap"><b>Figure 1 </b>View Rules</span><br><span><img id="waf_01_0061__image1327955521914" src="en-us_image_0000001286529486.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0061__li8527174912488"><span>In the upper left corner above a list of a type of rule, click <strong id="waf_01_0061__b166366489132">Add Rule</strong>.</span><p><div class="fignone" id="waf_01_0061__fig1663217234218"><span class="figcap"><b>Figure 2 </b>Adding a rule to one or more policies</span><br><span><img id="waf_01_0061__image46441001631" src="en-us_image_0000001344977541.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0061__li196121216144320"><span>Select one or more policies from the <strong id="waf_01_0061__b164573272302">Policy Name</strong> drop-down list.</span><p><div class="fignone" id="waf_01_0061__fig196561326114814"><span class="figcap"><b>Figure 3 </b>Adding a rule to one or more policies</span><br><span><img id="waf_01_0061__image992785616242" src="en-us_image_0000001732213921.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0061__li218618511035"><span>Set other parameters.</span><p><ul id="waf_01_0061__ul92695165114"><li id="waf_01_0061__li1626125111515">To add a CC attack protection rule, see <a href="waf_01_0009.html#waf_01_0009__table480817611214">Table 1</a>.</li><li id="waf_01_0061__li18767504222">To add a precise protection rule, see <a href="waf_01_0010.html#waf_01_0010__table2299936310457">Table 1</a>.</li><li id="waf_01_0061__li25221415112712">To add a blacklist or whitelist rule, see <a href="waf_01_0012.html#waf_01_0012__table147241231818">Table 1</a>.</li><li id="waf_01_0061__li207919319432">To add a geolocation access control rule, see <a href="waf_01_0013.html#waf_01_0013__table157961352154713">Table 1</a>.</li><li id="waf_01_0061__li1247023052818">To add a WTP rule, see <a href="waf_01_0014.html#waf_01_0014__table2046816299203">Table 1</a>.</li><li id="waf_01_0061__li5918202132913">To add an information leakage prevention rule, see <a href="waf_01_0054.html#waf_01_0054__table242612276178">Table 1</a>.</li><li id="waf_01_0061__li6834155514336">To add a global protection whitelist rule, see <a href="waf_01_0016.html#waf_01_0016__table1623195815237">Table 1</a>.</li><li id="waf_01_0061__li1545115363110">To add a data masking rule, see <a href="waf_01_0017.html#waf_01_0017__table4696626918715">Table 1</a>.</li></ul>
</p></li><li id="waf_01_0061__li196121216144320"><span>Select one or more policies from the <span class="parmname" id="waf_01_0061__parmname16529125813439"><b>Policy Name</b></span> drop-down list.</span><p><div class="fignone" id="waf_01_0061__fig196561326114814"><span class="figcap"><b>Figure 3 </b>Adding a rule to one or more policies</span><br><span><img id="waf_01_0061__image992785616242" src="en-us_image_0000001732213921.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0061__li218618511035"><span>Set other parameters in addition to <span class="parmname" id="waf_01_0061__parmname799116931518"><b>Policy Name</b></span>.</span><p><ul id="waf_01_0061__ul92695165114"><li id="waf_01_0061__li1626125111515">To add a CC attack protection rule, see <a href="waf_01_0009.html#waf_01_0009__table480817611214">Table 1</a>.</li><li id="waf_01_0061__li18767504222">To add a precise protection rule, see <a href="waf_01_0010.html#waf_01_0010__table2299936310457">Table 1</a>.</li><li id="waf_01_0061__li25221415112712">To add a blacklist or whitelist rule, see <a href="waf_01_0012.html#waf_01_0012__table147241231818">Table 1</a>.</li><li id="waf_01_0061__li207919319432">To add a geolocation access control rule, see <a href="waf_01_0013.html#waf_01_0013__table157961352154713">Table 1</a>.</li><li id="waf_01_0061__li1247023052818">To add a WTP rule, see <a href="waf_01_0014.html#waf_01_0014__table2046816299203">Table 1</a>.</li><li id="waf_01_0061__li5918202132913">To add an information leakage prevention rule, see <a href="waf_01_0054.html#waf_01_0054__table242612276178">Table 1</a>.</li><li id="waf_01_0061__li6834155514336">To add a global protection whitelist rule, see <a href="waf_01_0016.html#waf_01_0016__table1623195815237">Table 1</a>.</li><li id="waf_01_0061__li1545115363110">To add a data masking rule, see <a href="waf_01_0017.html#waf_01_0017__table4696626918715">Table 1</a>.</li></ul>
</p></li><li id="waf_01_0061__li519065113314"><span>Click <strong id="waf_01_0061__b842352706171621">Confirm</strong>.</span></li></ol>
</div>
</div>

2
docs/wafd/umn/waf_01_0066.html
View File

@ -37,7 +37,7 @@
<div class="section" id="waf_01_0066__section163218156156"><h4 class="sectiontitle">504 Gateway Timeout</h4><p id="waf_01_0066__p18641201157"><strong id="waf_01_0066__b352162173815">Scenario</strong>: After the configuration of connecting a domain name to WAF is complete, your website works properly. However, with the increasing traffic volume, the number of 504 errors also increases. If you directly access the IP address of the origin server, the 504 error code is returned sometimes.</p>
<p id="waf_01_0066__p1285195554416">The possible causes are as follows:</p>
<ul id="waf_01_0066__ul5980193354517"><li id="waf_01_0066__li19980163311451"><strong id="waf_01_0066__b12654435123814">Cause 1</strong>: Backend server performance issues (such as too many connections or high CPU usage)<div class="p" id="waf_01_0066__p8231778247"><strong id="waf_01_0066__b6873217917">Solution</strong>:<ol id="waf_01_0066__ol1469192115220"><li id="waf_01_0066__li147062118525">Optimize the server configuration, including TCP network parameters and ulimit parameters.</li><li id="waf_01_0066__li8470132155219">To handle large-scale service increase, use method 1 or method 2 to perform the processing.<p id="waf_01_0066__p19474204115210"><a name="waf_01_0066__li8470132155219"></a><a name="li8470132155219"></a><strong id="waf_01_0066__b2801202632117">Method 1</strong>: Add a backend server group to the ELB load balancer.</p>
<div class="p" id="waf_01_0066__p4475114185219"><strong id="waf_01_0066__b036194711210">Method 2</strong>: Create an ELB. Use the EIP of ELB as the IP address of the server to connect to WAF.<ol type="a" id="waf_01_0066__ol1290912413242"><li id="waf_01_0066__li163491642155314">Log in to the management console, click <strong id="waf_01_0066__b1530816112119">Service List</strong> in the upper part of the page, and choose <span class="menucascade" id="waf_01_0066__menucascade132161618214"><b><span class="uicontrol" id="waf_01_0066__uicontrol1831161618217">Security</span></b> &gt; <b><span class="uicontrol" id="waf_01_0066__uicontrol93271619213">Web Application Firewall (Dedicated)</span></b></span>.</li><li id="waf_01_0066__li122541452131016">In the navigation pane, choose <strong id="waf_01_0066__b20604718182520">Website Settings</strong>.</li><li id="waf_01_0066__li8604035162816">In the <strong id="waf_01_0066__b959005644219">Domain Name</strong> column, click the domain name. Its information is displayed.</li><li id="waf_01_0066__li1790924202413">In the <span class="parmname" id="waf_01_0066__parmname54341714212"><b>Server Information</b></span> area, click <span><img id="waf_01_0066__image1908545245" src="en-us_image_0167644254.jpg"></span>. On the displayed page, click <strong id="waf_01_0066__b13011725131615">Add</strong>.</li></ol>
<div class="p" id="waf_01_0066__p4475114185219"><strong id="waf_01_0066__b036194711210">Method 2</strong>: Create an ELB. Use the EIP of ELB as the IP address of the server to connect to WAF.<ol type="a" id="waf_01_0066__ol1290912413242"><li id="waf_01_0066__li163491642155314">Log in to the management console, click <strong id="waf_01_0066__b1530816112119">Service List</strong> in the upper part of the page, and choose <span class="menucascade" id="waf_01_0066__menucascade132161618214"><b><span class="uicontrol" id="waf_01_0066__uicontrol1831161618217">Security</span></b> &gt; <b><span class="uicontrol" id="waf_01_0066__uicontrol93271619213">Web Application Firewall (Dedicated)</span></b></span>.</li><li id="waf_01_0066__li122541452131016">In the navigation pane, choose <strong id="waf_01_0066__b20604718182520">Website Settings</strong>.</li><li id="waf_01_0066__li8604035162816">In the <strong id="waf_01_0066__b959005644219">Domain Name</strong> column, click the domain name. Its information is displayed.</li><li id="waf_01_0066__li1790924202413">In the <span class="parmname" id="waf_01_0066__parmname105691154141716"><b>Server Information</b></span> area, click <span><img id="waf_01_0066__image3569165418170" src="en-us_image_0000002098463152.jpg"></span>. On the displayed page, click <strong id="waf_01_0066__b231118591175">Add</strong>.</li></ol>
</div>
</li><li id="waf_01_0066__li647022113526">If the <strong id="waf_01_0066__b8211840101618">Client Protocol</strong> is <strong id="waf_01_0066__b322240121615">HTTPS</strong>, you can use HTTPS on the WAF side. However, it is recommended that <strong id="waf_01_0066__b11221440191612">HTTP</strong> (<strong id="waf_01_0066__b102334016169">Server Protocol</strong>) to forward the requests to your web server, lowering the computational demands on backend servers.</li></ol>
</div>

2
docs/wafd/umn/waf_01_0074.html
View File

@ -7,7 +7,7 @@
<div class="section" id="waf_01_0074__section282518213147"><h4 class="sectiontitle">Constraints</h4><p id="waf_01_0074__p177841258485">A protected website domain name can use only one policy.</p>
</div>
<div class="section" id="waf_01_0074__section5458145019310"><h4 class="sectiontitle">Procedure</h4><ol id="waf_01_0074__ol202261245463"><li id="waf_01_0074__li16374183013585"><span>Log in to the management console.</span></li><li id="waf_01_0074__li1392155773219"><span>Click <span><img id="waf_01_0074__waf_01_3273_image10410329111410" src="en-us_image_0000001481959198.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0074__li13897125313222"><span>Click <span><img id="waf_01_0074__image074281418325" src="en-us_image_0000001288266902.png"></span> in the upper left corner and choose <strong id="waf_01_0074__b19204131815617">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0074__b42051618369">Security</strong>.</span></li><li id="waf_01_0074__li099971734316"><span>In the navigation pane on the left, choose <strong id="waf_01_0074__b136517536559">Policies</strong>.</span></li><li id="waf_01_0074__li566414459315"><span>In the upper left corner, click <strong id="waf_01_0074__b165002325711">Add Policy</strong>.</span><p><div class="fignone" id="waf_01_0074__fig1915813471382"><span class="figcap"><b>Figure 1 </b>Policies</span><br><span><img id="waf_01_0074__image1915813471587" src="en-us_image_0000001338407897.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0074__li66654451238"><span>In the displayed dialog box, enter the policy name and click <strong id="waf_01_0074__b218214113811">Confirm</strong>. The added policy will be displayed in the policy list.</span><p><div class="fignone" id="waf_01_0074__fig174413277114"><span class="figcap"><b>Figure 2 </b>Add Policy</span><br><span><img id="waf_01_0074__image154419273111" src="en-us_image_0000001338527429.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0074__li66654451238"><span>In the displayed dialog box, enter the policy name and click <span class="uicontrol" id="waf_01_0074__uicontrol7695172111321"><b>Confirm</b></span>. The added policy will be displayed in the policy list.</span><p><div class="fignone" id="waf_01_0074__fig174413277114"><span class="figcap"><b>Figure 2 </b>Add Policy</span><br><span><img id="waf_01_0074__image154419273111" src="en-us_image_0000001338527429.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0074__li1066544511311"><span>In the <strong id="waf_01_0074__b241213312405">Policy Name</strong> column, click the policy name. On the displayed page, add rules to the policy by referring to <a href="waf_01_0007.html">Rule Configurations</a>.</span></li></ol>
</div>
<div class="section" id="waf_01_0074__section2961638191410"><h4 class="sectiontitle">Related Operations</h4><ul id="waf_01_0074__ul1795164243211"><li id="waf_01_0074__li812010472037">To modify a policy name, click <span><img id="waf_01_0074__image122948263321" src="en-us_image_0301168075.png"></span> next to the policy name. In the dialog box displayed, enter a new policy name.</li><li id="waf_01_0074__li423011401510">To delete a rule, locate the row containing the rule. In the <strong id="waf_01_0074__b11225949105817">Operation</strong> column, click <span class="uicontrol" id="waf_01_0074__uicontrol9863081314"><b>Delete</b></span>.</li></ul>

6
docs/wafd/umn/waf_01_0081.html
View File

@ -31,14 +31,14 @@
<tr id="waf_01_0081__row42281837115815"><td class="cellrowborder" valign="top" width="19.801980198019802%" headers="mcps1.3.6.2.9.2.2.2.4.1.1 "><p id="waf_01_0081__p722503705817">Type</p>
</td>
<td class="cellrowborder" valign="top" width="40.59405940594059%" headers="mcps1.3.6.2.9.2.2.2.4.1.2 "><ul id="waf_01_0081__ul16778520183811"><li id="waf_01_0081__li1876171163812"><strong id="waf_01_0081__b106604194315">Path</strong>: A URL to be protected, excluding a domain name</li><li id="waf_01_0081__li64251833143713"><strong id="waf_01_0081__b76123351226">User Agent</strong>: A user agent of the scanner to be protected</li><li id="waf_01_0081__li3426153353711"><strong id="waf_01_0081__b162061481921">IP</strong>: An IP address of the visitor to be protected. </li><li id="waf_01_0081__li84261133133718"><strong id="waf_01_0081__b186907431422">Params</strong>: A request parameter to be protected</li><li id="waf_01_0081__li104272335373"><strong id="waf_01_0081__b51911327183116">Cookie</strong>: A small piece of data to identify web visitors</li><li id="waf_01_0081__li12385466376"><strong id="waf_01_0081__b1433018561622">Referer</strong>: A user-defined request resource<p id="waf_01_0081__p15906194611370">For example, if the protected path is <strong id="waf_01_0081__b555552635116">/admin/xxx</strong> and you do not want visitors to be able to access it from <em id="waf_01_0081__i165561926115115">www.test.com</em>, set <strong id="waf_01_0081__b18557152610515">Value</strong> to <strong id="waf_01_0081__b35581926125116">http://www.test.com</strong>.</p>
</li><li id="waf_01_0081__li20238111394811"><strong id="waf_01_0081__b1472121436">Header</strong>: A user-defined HTTP header</li></ul>
</li><li id="waf_01_0081__li20238111394811"><strong id="waf_01_0081__b1472121436">Header</strong>: A user-defined HTTP header.</li></ul>
</td>
<td class="cellrowborder" valign="top" width="39.603960396039604%" headers="mcps1.3.6.2.9.2.2.2.4.1.3 "><p id="waf_01_0081__p722843765810"><strong id="waf_01_0081__b84235270617450">Path</strong></p>
<td class="cellrowborder" valign="top" width="39.603960396039604%" headers="mcps1.3.6.2.9.2.2.2.4.1.3 "><p id="waf_01_0081__p722843765810">Path</p>
</td>
</tr>
<tr id="waf_01_0081__row9229237185820"><td class="cellrowborder" valign="top" width="19.801980198019802%" headers="mcps1.3.6.2.9.2.2.2.4.1.1 "><p id="waf_01_0081__p1222819373585">Value</p>
</td>
<td class="cellrowborder" valign="top" width="40.59405940594059%" headers="mcps1.3.6.2.9.2.2.2.4.1.2 "><p id="waf_01_0081__p62287371589">Value of the corresponding <strong id="waf_01_0081__b51674195516">Type</strong>. Wildcards are not allowed.</p>
<td class="cellrowborder" valign="top" width="40.59405940594059%" headers="mcps1.3.6.2.9.2.2.2.4.1.2 "><p id="waf_01_0081__p7290155890">Value of the corresponding <strong id="waf_01_0081__b206374117269">Type</strong>. Wildcards are not allowed.</p>
<div class="note" id="waf_01_0081__note7228133745811"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="waf_01_0081__p1422853713589">Click <strong id="waf_01_0081__b931125820184">Add</strong> to add more than one value.</p>
</div></div>
</td>

2
docs/wafd/umn/waf_01_0100.html
View File

@ -1,7 +1,7 @@
<a name="waf_01_0100"></a><a name="waf_01_0100"></a>
<h1 class="topictitle1">What Can I Do If Files Cannot Be Uploaded After a Website Is Connected to WAF?</h1>
<div id="body1559553043706"><div class="p" id="waf_01_0100__p886135716225">After your website is connected to WAF, the size of the file each time you can upload to the website is limited as follows:<ul id="waf_01_0100__ul9280112792419"><li id="waf_01_0100__waf_01_4317_li17615725152116">Cloud mode - CNAME access: 1 GB</li><li id="waf_01_0100__waf_01_4317_li3123318172213">Cloud mode - load balancer access or dedicated mode: 10 GB</li></ul>
<div id="body1559553043706"><div class="p" id="waf_01_0100__p886135716225">After your website is connected to WAF, the size of the file each time you can upload to the website is limited as follows:<ul id="waf_01_0100__ul9280112792419"><li id="waf_01_0100__li1417115913521">Cloud mode - Load balancer access mode: 10 GB</li><li id="waf_01_0100__waf_01_4317_li3123318172213">Dedicated mode: 10 GB</li></ul>
</div>
<p id="waf_01_0100__p8060118">To upload a file larger than what is allowed, upload the file through any of the following:</p>
<ul id="waf_01_0100__ul4826180192113"><li id="waf_01_0100__li182611002118">IP address</li><li id="waf_01_0100__li165763310219">Separate web server that is not protected by WAF</li><li id="waf_01_0100__li11539184142213">FTP server</li></ul>

2
docs/wafd/umn/waf_01_0154.html
View File

@ -8,7 +8,7 @@
</div>
<div class="section" id="waf_01_0154__section6226125684212"><h4 class="sectiontitle">Constraints</h4><ul id="waf_01_0154__ul733272924313"><li id="waf_01_0154__li138424311710">The <strong id="waf_01_0154__b1672914286112">Redirection</strong> mode is not supported if you select <strong id="waf_01_0154__b187291128181117">ELB access</strong> for the protected website.</li><li id="waf_01_0154__li1333219298436">The content of the text/html, text/xml, and application/json pages can be configured on the <strong id="waf_01_0154__b15389173212289">Custom</strong> block page to be returned.</li><li id="waf_01_0154__li1133313291438">The root domain name of the redirection address must be the same as the currently protected domain name (including a wildcard domain name). For example, if the protected domain name is <strong id="waf_01_0154__b129371423191311">www.example.com</strong> and the port is 8080, the redirection URL can be set to <strong id="waf_01_0154__b161455611318">http://www.example.com:8080/error.html</strong>.</li></ul>
</div>
<div class="section" id="waf_01_0154__section096064411189"><h4 class="sectiontitle">Editing Response Page for Blocked Requests</h4><ol id="waf_01_0154__ol10882242199"><li id="waf_01_0154__li16374183013585"><span>Log in to the management console.</span></li><li id="waf_01_0154__li1392155773219"><span>Click <span><img id="waf_01_0154__waf_01_3273_image10410329111410" src="en-us_image_0000001481693004.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0154__li13897125313222"><span>Click <span><img id="waf_01_0154__image074281418325" src="en-us_image_0000001340583529.png"></span> in the upper left corner and choose <strong id="waf_01_0154__b11117103464916">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0154__b411912341493">Security</strong>.</span></li><li id="waf_01_0154__li099971734316"><span>In the navigation pane on the left, choose <strong id="waf_01_0154__b159785394548">Website Settings</strong>.</span></li><li id="waf_01_0154__li11161220114217"><span>In the <strong id="waf_01_0154__b458081162710">Domain Name</strong> column, click the domain name of the website to go to the basic information page.</span></li><li id="waf_01_0154__li3469123715239"><span>Click the edit icon next to the page template name in the row where <strong id="waf_01_0154__b589165214291">Alarm Page</strong> is located. In the displayed <strong id="waf_01_0154__b199015218292">Alarm Page</strong> dialog box, specify <strong id="waf_01_0154__b15911452182915">Page Template</strong>.</span><p><ul id="waf_01_0154__ul1355473382810"><li id="waf_01_0154__li755483322814">To use the built-in page, select <strong id="waf_01_0154__b9133519183016">Default</strong>. An HTTP code 418 is returned.<div class="fignone" id="waf_01_0154__fig16839153020205"><span class="figcap"><b>Figure 1 </b>Default alarm page</span><br><span><img id="waf_01_0154__image2033993955012" src="en-us_image_0000001338016357.png" title="Click to enlarge" class="imgResize"></span></div>
<div class="section" id="waf_01_0154__section096064411189"><h4 class="sectiontitle">Editing Response Page for Blocked Requests</h4><ol id="waf_01_0154__ol10882242199"><li id="waf_01_0154__li16374183013585"><span>Log in to the management console.</span></li><li id="waf_01_0154__li1392155773219"><span>Click <span><img id="waf_01_0154__waf_01_3273_image10410329111410" src="en-us_image_0000001481693004.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0154__li13897125313222"><span>Click <span><img id="waf_01_0154__image074281418325" src="en-us_image_0000001340583529.png"></span> in the upper left corner and choose <strong id="waf_01_0154__b11117103464916">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0154__b411912341493">Security</strong>.</span></li><li id="waf_01_0154__li099971734316"><span>In the navigation pane on the left, choose <strong id="waf_01_0154__b159785394548">Website Settings</strong>.</span></li><li id="waf_01_0154__li11161220114217"><span>In the <strong id="waf_01_0154__b458081162710">Domain Name</strong> column, click the domain name of the website to go to the basic information page.</span></li><li id="waf_01_0154__li3469123715239"><span>Click <span><img id="waf_01_0154__image9812181815246" src="en-us_image_0000002129833584.png"></span> next to the page template name in the row of <strong id="waf_01_0154__b589165214291">Alarm Page</strong>. In the displayed <strong id="waf_01_0154__b199015218292">Alarm Page</strong> dialog box, specify <strong id="waf_01_0154__b15911452182915">Page Template</strong>.</span><p><ul id="waf_01_0154__ul1355473382810"><li id="waf_01_0154__li755483322814">To use the built-in page, select <strong id="waf_01_0154__b9133519183016">Default</strong>. An HTTP code 418 is returned.<div class="fignone" id="waf_01_0154__fig16839153020205"><span class="figcap"><b>Figure 1 </b>Default alarm page</span><br><span><img id="waf_01_0154__image2033993955012" src="en-us_image_0000001338016357.png" title="Click to enlarge" class="imgResize"></span></div>
</li><li id="waf_01_0154__li8528174913307">To customize the alarm page, select <strong id="waf_01_0154__b1947468133317">Custom</strong> and configure following parameters.<ul id="waf_01_0154__ul425019448427"><li id="waf_01_0154__li28311941164217"><strong id="waf_01_0154__b075416193345">HTTP Return Code</strong>: return code configured on a custom page.</li><li id="waf_01_0154__li1743991011112"><strong id="waf_01_0154__b19968174753010">Response Header</strong>: Click <span class="uicontrol" id="waf_01_0154__uicontrol818819385515"><b>Add Response Header Field</b></span> and configure response header parameters.</li><li id="waf_01_0154__li20833941144217"><strong id="waf_01_0154__b1882615568346">Block Page Type</strong>: The options are <strong id="waf_01_0154__b856901033517">text/html</strong>, <strong id="waf_01_0154__b8958161319359">text/xml</strong>, and <strong id="waf_01_0154__b151761118103511">application/json</strong>.</li><li id="waf_01_0154__li57549394434"><strong id="waf_01_0154__b6558228123518">Page Content</strong>: Configure the page content based on the selected value for <strong id="waf_01_0154__b82211247193515">Block Page Type</strong>.</li></ul>
<div class="fignone" id="waf_01_0154__fig1539442518417"><span class="figcap"><b>Figure 2 </b>Custom alarm page</span><br><span><img id="waf_01_0154__image5224252175110" src="en-us_image_0000001338096873.png" title="Click to enlarge" class="imgResize"></span></div>
</li><li id="waf_01_0154__li11811584456">To configure a redirection URL, select <strong id="waf_01_0154__b1247217218323">Redirection</strong>.<div class="fignone" id="waf_01_0154__fig4130183432116"><span class="figcap"><b>Figure 3 </b>Redirection alarm page</span><br><span><img id="waf_01_0154__image726620229527" src="en-us_image_0000001285737132.png" title="Click to enlarge" class="imgResize"></span></div>

3
docs/wafd/umn/waf_01_0169.html
View File

@ -58,8 +58,7 @@
</tr>
</thead>
<tbody><tr id="waf_01_0169__row2359154512119"><td class="cellrowborder" valign="top" width="25.707429257074292%" headers="mcps1.3.6.6.2.5.1.1 "><p id="waf_01_0169__p7359445102116">Default cipher suite</p>
<div class="note" id="waf_01_0169__note17708833105911"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="waf_01_0169__p17709833105916">By default, <span class="parmvalue" id="waf_01_0169__parmvalue18809952131820"><b>Cipher suite 1</b></span> is configured for websites. However, if the request does not carry the server name indication (SNI), WAF uses the <span class="parmvalue" id="waf_01_0169__parmvalue1388521061917"><b>Default cipher suite</b></span>.</p>
</div></div>
<div class="note" id="waf_01_0169__note17708833105911"><span class="notetitle"> NOTE: </span><div class="notebody"></div></div>
</td>
<td class="cellrowborder" valign="top" width="29.6970302969703%" headers="mcps1.3.6.6.2.5.1.2 "><ul id="waf_01_0169__ul82761049527"><li id="waf_01_0169__li1422994135115">ECDHE-RSA-AES256-SHA384</li><li id="waf_01_0169__li497373443515">AES256-SHA256</li><li id="waf_01_0169__li143989755">RC4</li><li id="waf_01_0169__li49740347350">HIGH</li></ul>
</td>

2
docs/wafd/umn/waf_01_0172.html
View File

@ -3,7 +3,7 @@
<h1 class="topictitle1">Using LTS to Log WAF Activities</h1>
<div id="body1583227361556"><p id="waf_01_0172__p0715193811414">After you authorize WAF to access Log Tank Service (LTS), you can use the WAF logs recorded by LTS for quick and efficient real-time analysis, device O&amp;M management, and analysis of service trends.</p>
<p id="waf_01_0172__p61851899544">LTS analyzes and processes a large number of logs. It enables you to process logs in real-time, efficiently, and securely. Logs can be stored in LTS for seven days by default but you can configure LTS for up to 30 days if needed. Logs earlier than 30 days are automatically deleted. However, you can configure LTS to dump those logs to an Object Storage Service (OBS) bucket or enable Data Ingestion Service (DIS) for long-term storage.</p>
<div class="section" id="waf_01_0172__section18620173633111"><h4 class="sectiontitle">Prerequisites</h4><ul id="waf_01_0172__ul1628203616303"><li id="waf_01_0172__li9564252069">You have applied for your WAF.</li><li id="waf_01_0172__li662918364306"><a href="waf_01_1108.html">The website you want to protect has been connected to WAF.</a></li></ul>
<div class="section" id="waf_01_0172__section18620173633111"><h4 class="sectiontitle">Prerequisites</h4><ul id="waf_01_0172__ul1628203616303"><li id="waf_01_0172__li9564252069">You have applied for your WAF.</li><li id="waf_01_0172__li662918364306"><a href="waf_01_1108.html">You have connected the website you want to protect to WAF.</a></li></ul>
</div>
<div class="section" id="waf_01_0172__section17224433506"><h4 class="sectiontitle">Impact on the System</h4><p id="waf_01_0172__p14108241508">Enabling LTS for WAF does not affect WAF performance.</p>
</div>

107
docs/wafd/umn/waf_01_0253.html
View File

File diff suppressed because it is too large Load Diff

2
docs/wafd/umn/waf_01_0262.html
View File

@ -9,7 +9,7 @@
</div>
<div class="section" id="waf_01_0262__section2066713104015"><h4 class="sectiontitle">Impact on the System</h4><ul id="waf_01_0262__ul4866124444011"><li id="waf_01_0262__li264515311422">It is recommended that you update the certificate before it expires. Otherwise, all WAF protection rules will fail to take effect, and there can be massive impacts on the origin server, even more severe than a crashed host or website access failures.</li><li id="waf_01_0262__li8866844164012">Updating certificates does not affect services. The old certificate still works during the certificate replacement. The new certificate will take over the job once it has been uploaded and successfully associated with the domain name.</li></ul>
</div>
<div class="section" id="waf_01_0262__section0629134732013"><h4 class="sectiontitle">Updating the Certificate Used for a Website</h4><ol id="waf_01_0262__ol6186521237"><li id="waf_01_0262__li16374183013585"><span>Log in to the management console.</span></li><li id="waf_01_0262__li1392155773219"><span>Click <span><img id="waf_01_0262__waf_01_3273_image10410329111410" src="en-us_image_0000001532693109.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0262__li13897125313222"><span>Click <span><img id="waf_01_0262__image074281418325" src="en-us_image_0000001340663937.png"></span> in the upper left corner and choose <strong id="waf_01_0262__b075933124511">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0262__b10760131134511">Security</strong>.</span></li><li id="waf_01_0262__li099971734316"><span>In the navigation pane on the left, choose <strong id="waf_01_0262__b77814904110">Website Settings</strong>.</span></li><li id="waf_01_0262__li11161220114217"><span>In the <strong id="waf_01_0262__b189846484519">Domain Name</strong> column, click the domain name of the website to go to the basic information page.</span></li><li id="waf_01_0262__li5865132352711"><a name="waf_01_0262__li5865132352711"></a><a name="li5865132352711"></a><span>Click the edit icon next to the certificate name. In the <strong id="waf_01_0262__b45305462545">Update Certificate</strong> dialog box, import a new certificate or select an existing certificate.</span><p><ul id="waf_01_0262__ul206543110363"><li id="waf_01_0262__li206541116361">If you select <strong id="waf_01_0262__b185057521318">Import new certificate</strong> for <strong id="waf_01_0262__b149579817135">Update Method</strong>, enter a certificate name, and copy and paste the certificate file and private key into the corresponding text boxes.<div class="note" id="waf_01_0262__note181831744193520"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="waf_01_0262__p318254416356">WAF encrypts and saves the private key to keep it safe.</p>
<div class="section" id="waf_01_0262__section0629134732013"><h4 class="sectiontitle">Updating the Certificate Used for a Website</h4><ol id="waf_01_0262__ol6186521237"><li id="waf_01_0262__li16374183013585"><span>Log in to the management console.</span></li><li id="waf_01_0262__li1392155773219"><span>Click <span><img id="waf_01_0262__waf_01_3273_image10410329111410" src="en-us_image_0000001532693109.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0262__li13897125313222"><span>Click <span><img id="waf_01_0262__image074281418325" src="en-us_image_0000001340663937.png"></span> in the upper left corner and choose <strong id="waf_01_0262__b075933124511">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0262__b10760131134511">Security</strong>.</span></li><li id="waf_01_0262__li099971734316"><span>In the navigation pane on the left, choose <strong id="waf_01_0262__b77814904110">Website Settings</strong>.</span></li><li id="waf_01_0262__li11161220114217"><span>In the <strong id="waf_01_0262__b189846484519">Domain Name</strong> column, click the domain name of the website to go to the basic information page.</span></li><li id="waf_01_0262__li5865132352711"><a name="waf_01_0262__li5865132352711"></a><a name="li5865132352711"></a><span>Click <strong id="waf_01_0262__b117101456151619">Modify</strong> next to the certificate name. In the <strong id="waf_01_0262__b45305462545">Update Certificate</strong> dialog box, import a new certificate or select an existing certificate.</span><p><ul id="waf_01_0262__ul206543110363"><li id="waf_01_0262__li206541116361">If you select <strong id="waf_01_0262__b185057521318">Import new certificate</strong> for <strong id="waf_01_0262__b149579817135">Update Method</strong>, enter a certificate name, and copy and paste the certificate file and private key into the corresponding text boxes.<div class="note" id="waf_01_0262__note181831744193520"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="waf_01_0262__p318254416356">WAF encrypts and saves the private key to keep it safe.</p>
</div></div>
<div class="fignone" id="waf_01_0262__fig1518314493518"><span class="figcap"><b>Figure 1 </b>Update Certificate</span><br><span><img id="waf_01_0262__image15136467459" src="en-us_image_0000001337894657.png" title="Click to enlarge" class="imgResize"></span></div>
<div class="p" id="waf_01_0262__p1135817492476">Only .pem certificates can be used in WAF. If the certificate is not in .pem format, convert it into .pem locally by referring to <a href="#waf_01_0262__waf_01_3273_table1292125414516">Table 1</a> before uploading it.

9
docs/wafd/umn/waf_01_0265.html
View File

@ -8,7 +8,14 @@
</th>
</tr>
</thead>
<tbody><tr id="waf_01_0265__row331174124512"><td class="cellrowborder" valign="top" width="23.849999999999998%" headers="mcps1.3.1.1.3.1.1 "><p id="waf_01_0265__p832194144510">2024-12-13</p>
<tbody><tr id="waf_01_0265__row976418712436"><td class="cellrowborder" valign="top" width="23.849999999999998%" headers="mcps1.3.1.1.3.1.1 "><p id="waf_01_0265__p27641712438">2025-01-17</p>
</td>
<td class="cellrowborder" valign="top" width="76.14999999999999%" headers="mcps1.3.1.1.3.1.2 "><p id="waf_01_0265__p57642711438">This issue is the ninth official release.</p>
<p id="waf_01_0265__p63596441434">Modified the following content:</p>
<ul id="waf_01_0265__ul84991951144310"><li id="waf_01_0265__li20499125114312"><a href="waf_01_0253.html">Managing Dedicated WAF Engines</a>: Added the record of the dedicated engine versions.</li></ul>
</td>
</tr>
<tr id="waf_01_0265__row331174124512"><td class="cellrowborder" valign="top" width="23.849999999999998%" headers="mcps1.3.1.1.3.1.1 "><p id="waf_01_0265__p832194144510">2024-12-13</p>
</td>
<td class="cellrowborder" valign="top" width="76.14999999999999%" headers="mcps1.3.1.1.3.1.2 "><p id="waf_01_0265__p1532184114457">This issue is the eighth official release.</p>
<p id="waf_01_0265__p105821425184615">Added the following content:</p>

4
docs/wafd/umn/waf_01_0271.html
View File

@ -27,11 +27,11 @@
<tbody><tr id="waf_01_0271__row671212161816"><td class="cellrowborder" valign="top" width="24.222422242224223%" headers="mcps1.3.7.2.8.2.2.2.4.1.1 "><p id="waf_01_0271__p10707122186">Blocking Type</p>
</td>
<td class="cellrowborder" valign="top" width="43.81438143814381%" headers="mcps1.3.7.2.8.2.2.2.4.1.2 "><p id="waf_01_0271__p123164594811">Specifies the blocking type. The options are:</p>
<ul id="waf_01_0271__ul16332155911817"><li id="waf_01_0271__waf_01_0271_li63194316016"><strong id="waf_01_0271__b651448669">Long-term IP address blocking</strong></li><li id="waf_01_0271__waf_01_0271_li4320531906"><strong id="waf_01_0271__b358712775">Short-term IP address blocking</strong></li><li id="waf_01_0271__waf_01_0271_li163201033012"><strong id="waf_01_0271__b574789997">Long-term Cookie blocking</strong></li><li id="waf_01_0271__waf_01_0271_li193201831607"><strong id="waf_01_0271__b207352053">Short-term Cookie blocking</strong></li><li id="waf_01_0271__waf_01_0271_li132010315015"><strong id="waf_01_0271__b1576099841">Long-term Params blocking</strong></li><li id="waf_01_0271__waf_01_0271_li163201335016"><strong id="waf_01_0271__b626503838">Short-term Params blocking</strong></li></ul>
<ul id="waf_01_0271__ul16332155911817"><li id="waf_01_0271__waf_01_0271_li63194316016"><strong id="waf_01_0271__b784919570">Long-term IP address blocking</strong></li><li id="waf_01_0271__waf_01_0271_li4320531906"><strong id="waf_01_0271__b1008957947">Short-term IP address blocking</strong></li><li id="waf_01_0271__waf_01_0271_li163201033012"><strong id="waf_01_0271__b402200591">Long-term Cookie blocking</strong></li><li id="waf_01_0271__waf_01_0271_li193201831607"><strong id="waf_01_0271__b442730386">Short-term Cookie blocking</strong></li><li id="waf_01_0271__waf_01_0271_li132010315015"><strong id="waf_01_0271__b286438655">Long-term Params blocking</strong></li><li id="waf_01_0271__waf_01_0271_li163201335016"><strong id="waf_01_0271__b1495807565">Short-term Params blocking</strong></li></ul>
<div class="notice" id="waf_01_0271__note1568354082010"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="waf_01_0271__waf_01_0271_p1774919914417">For blacklist and whitelist rules, a known attack source with <span class="parmvalue" id="waf_01_0271__waf_01_0271_parmvalue1556161203310"><b>Long-term IP address blocking</b></span> or <span class="parmvalue" id="waf_01_0271__waf_01_0271_parmvalue373485173312"><b>Short-term IP address blocking</b></span> configured cannot be selected.</p>
</div></div>
</td>
<td class="cellrowborder" valign="top" width="31.963196319631965%" headers="mcps1.3.7.2.8.2.2.2.4.1.3 "><p id="waf_01_0271__p51226218461"><strong id="waf_01_0271__b709416458">Long-term IP address blocking</strong></p>
<td class="cellrowborder" valign="top" width="31.963196319631965%" headers="mcps1.3.7.2.8.2.2.2.4.1.3 "><p id="waf_01_0271__p51226218461"><strong id="waf_01_0271__b616469851">Long-term IP address blocking</strong></p>
</td>
</tr>
<tr id="waf_01_0271__row13988143320408"><td class="cellrowborder" valign="top" width="24.222422242224223%" headers="mcps1.3.7.2.8.2.2.2.4.1.1 "><p id="waf_01_0271__p1989533134019">Blocking Duration (s)</p>

4
docs/wafd/umn/waf_01_0272.html
View File

@ -58,8 +58,8 @@
<tbody><tr id="waf_01_0272__row17367240205616"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.3.2.3.1.1 "><p id="waf_01_0272__p13715144975619">Peak rate of normal service requests</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.3.2.3.1.2 "><p id="waf_01_0272__p139651058125611">The following lists the specifications of a single instance.</p>
<ul id="waf_01_0272__ul1996545818561"><li id="waf_01_0272__li209654581568">Specifications: WI-500. Estimated performance:<ul id="waf_01_0272__ul396617582563"><li id="waf_01_0272__li1496612587563">HTTP services - Recommended QPS: 5,000. Maximum QPS: 10,000.</li><li id="waf_01_0272__li189661258145611">HTTPS services - Recommended QPS: 4,000. Maximum QPS: 8,000.</li><li id="waf_01_0272__li9966205865610">WebSocket service - Maximum concurrent connections: 5,000</li><li id="waf_01_0272__li59661588562">Maximum WAF-to-server persistent connections: 60,000</li></ul>
</li><li id="waf_01_0272__li1096665811567">Specifications: WI-100. Estimated performance:<ul id="waf_01_0272__ul9966125815620"><li id="waf_01_0272__li11966105817563">HTTP services - Recommended QPS: 1,000. Maximum QPS: 2,000.</li><li id="waf_01_0272__li1966165810567">HTTPS services - Recommended QPS: 800. Maximum QPS: 1,600</li><li id="waf_01_0272__li5966135816568">WebSocket service - Maximum concurrent connections: 1,000</li><li id="waf_01_0272__li696695819568">Maximum WAF-to-server persistent connections: 60,000</li></ul>
<ul id="waf_01_0272__ul1996545818561"><li id="waf_01_0272__li209654581568">Specifications: WI-500. Estimated performance:<ul id="waf_01_0272__ul396617582563"><li id="waf_01_0272__li1496612587563">HTTP services: 5,000 QPS (recommended)</li><li id="waf_01_0272__li189661258145611">HTTPS services: 4,000 QPS (recommended)</li><li id="waf_01_0272__li9966205865610">WebSocket service - Maximum concurrent connections: 5,000</li><li id="waf_01_0272__li59661588562">Maximum WAF-to-server persistent connections: 60,000</li></ul>
</li><li id="waf_01_0272__li1096665811567">Specifications: WI-100. Estimated performance:<ul id="waf_01_0272__ul9966125815620"><li id="waf_01_0272__li11966105817563">HTTP services: 1,000 QPS (recommended)</li><li id="waf_01_0272__li1966165810567">HTTPS services: 800 QPS (recommended)</li><li id="waf_01_0272__li5966135816568">WebSocket service - Maximum concurrent connections: 1,000</li><li id="waf_01_0272__li696695819568">Maximum WAF-to-server persistent connections: 60,000</li></ul>
</li></ul>
<div class="notice" id="waf_01_0272__note179661158195614"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="waf_01_0272__p1966115813561">Maximum QPS values are for reference only. They may vary depending on your businesses. The real-world QPS is related to the request size and the type and quantity of protection rules you customize.</p>
</div></div>

2
docs/wafd/umn/waf_01_0278.html
View File

@ -53,7 +53,7 @@
</th>
</tr>
</thead>
<tbody><tr id="waf_01_0278__row381219506168"><td class="cellrowborder" valign="top" width="57.95%" headers="mcps1.3.3.4.2.3.1.1 "><p id="waf_01_0278__p381217501163">Cause 1: <strong id="waf_01_0278__b342280588">Access Status</strong> for <strong id="waf_01_0278__b762750828">Domain Name/IP Address</strong> not updated</p>
<tbody><tr id="waf_01_0278__row381219506168"><td class="cellrowborder" valign="top" width="57.95%" headers="mcps1.3.3.4.2.3.1.1 "><p id="waf_01_0278__p381217501163">Cause 1: <strong id="waf_01_0278__b1813060679">Access Status</strong> for <strong id="waf_01_0278__b639991600">Domain Name/IP Address</strong> not updated</p>
</td>
<td class="cellrowborder" valign="top" width="42.05%" headers="mcps1.3.3.4.2.3.1.2 "><p id="waf_01_0278__p12305131215289">In the <span class="parmname" id="waf_01_0278__parmname3559124611527"><b>Access Status</b></span> column for the website, click <span><img id="waf_01_0278__waf_01_0278_image18831174811" src="en-us_image_0000002039631197.png"></span> to update the status.</p>
</td>

20
docs/wafd/umn/waf_01_0287.html
View File

@ -6,7 +6,7 @@
</div></div>
<div class="section" id="waf_01_0287__section19116221204118"><h4 class="sectiontitle">Prerequisites</h4><ul id="waf_01_0287__ul20231194314120"><li id="waf_01_0287__li5231114313415">You have <a href="waf_01_1072.html">applied for a dedicated WAF instance</a>.</li><li id="waf_01_0287__li1272714508430">You have contacted technical support to apply for the ELB access mode.</li><li id="waf_01_0287__li1827425144216">You have applied for a dedicated load balancer. Its specifications must be <span class="parmvalue" id="waf_01_0287__parmvalue743073074315"><b>Application load balancing (HTTP/HTTPS)</b></span>. Note that the account you use to apply for the load balancer must have WAF dedicated mode enabled.</li></ul>
</div>
<div class="section" id="waf_01_0287__section5824152333016"><h4 class="sectiontitle">Connecting a Website to WAF in ELB Access Mode</h4><ol id="waf_01_0287__ol10332142763019"><li id="waf_01_0287__li1633214279300"><span>Log in to the management console.</span></li><li id="waf_01_0287__li19333327173010"><span>Click <span><img id="waf_01_0287__image1633352713012" src="en-us_image_0000002046002725.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0287__li933417274300"><span>Click <span><img id="waf_01_0287__image53345270304" src="en-us_image_0000002009764796.png"></span> in the upper left corner and choose <strong id="waf_01_0287__b1446464616137">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0287__b0464346171315">Security</strong>.</span></li><li id="waf_01_0287__li633420275307"><span>In the navigation pane on the left, choose <strong id="waf_01_0287__b198465538132">Website Settings</strong>.</span></li><li id="waf_01_0287__li2334122718301"><span>In the upper left corner of the website list, click <strong id="waf_01_0287__b2018911892">Add Website</strong>.</span></li><li id="waf_01_0287__li1633415277306"><span>Choose <span class="parmvalue" id="waf_01_0287__parmvalue163441356201320"><b>ELB access</b></span> and click <span class="uicontrol" id="waf_01_0287__uicontrol734485615135"><b>OK</b></span>.</span></li><li id="waf_01_0287__li1533542715309"><span>On the displayed domain name details page, configure basic settings by referring to <a href="#waf_01_0287__table113358275303">Table 1</a>.</span><p><div class="p" id="waf_01_0287__p53351127123012">
<div class="section" id="waf_01_0287__section5824152333016"><h4 class="sectiontitle">Connecting a Website to WAF in ELB Access Mode</h4><ol id="waf_01_0287__ol10332142763019"><li id="waf_01_0287__li1633214279300"><span>Log in to the management console.</span></li><li id="waf_01_0287__li19333327173010"><span>Click <span><img id="waf_01_0287__image1633352713012" src="en-us_image_0000002046002725.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0287__li933417274300"><span>Click <span><img id="waf_01_0287__image53345270304" src="en-us_image_0000002009764796.png"></span> in the upper left corner and choose <strong id="waf_01_0287__b1446464616137">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0287__b0464346171315">Security</strong>.</span></li><li id="waf_01_0287__li633420275307"><span>In the navigation pane on the left, choose <strong id="waf_01_0287__b198465538132">Website Settings</strong>.</span></li><li id="waf_01_0287__li2334122718301"><span>In the upper left corner of the website list, click <strong id="waf_01_0287__b1420062825">Add Website</strong>.</span></li><li id="waf_01_0287__li1633415277306"><span>Choose <span class="parmvalue" id="waf_01_0287__parmvalue163441356201320"><b>ELB access</b></span> and click <span class="uicontrol" id="waf_01_0287__uicontrol734485615135"><b>OK</b></span>.</span></li><li id="waf_01_0287__li1533542715309"><span>On the displayed domain name details page, configure basic settings by referring to <a href="#waf_01_0287__table113358275303">Table 1</a>.</span><p><div class="p" id="waf_01_0287__p53351127123012">
<div class="tablenoborder"><a name="waf_01_0287__table113358275303"></a><a name="table113358275303"></a><table cellpadding="4" cellspacing="0" summary="" id="waf_01_0287__table113358275303" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameter description</caption><thead align="left"><tr id="waf_01_0287__row733512270303"><th align="left" class="cellrowborder" valign="top" width="20.71%" id="mcps1.3.4.2.7.2.1.1.2.4.1.1"><p id="waf_01_0287__p133511279300">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="58.5%" id="mcps1.3.4.2.7.2.1.1.2.4.1.2"><p id="waf_01_0287__p13351027143013">Description</p>
@ -25,7 +25,7 @@
<tr id="waf_01_0287__row233612711309"><td class="cellrowborder" valign="top" width="20.71%" headers="mcps1.3.4.2.7.2.1.1.2.4.1.1 "><p id="waf_01_0287__p433672773014">ELB Listener</p>
</td>
<td class="cellrowborder" valign="top" width="58.5%" headers="mcps1.3.4.2.7.2.1.1.2.4.1.2 "><p id="waf_01_0287__p1033617279309">Listener configured for the selected ELB load balancer.</p>
<ul id="waf_01_0287__ul1833692719301"><li id="waf_01_0287__li433611277307"><strong id="waf_01_0287__b886932514">All listeners</strong></li><li id="waf_01_0287__li193361027113015"><strong id="waf_01_0287__b1095296116">Specific listener</strong></li></ul>
<ul id="waf_01_0287__ul1833692719301"><li id="waf_01_0287__li433611277307"><strong id="waf_01_0287__b2002994741">All listeners</strong></li><li id="waf_01_0287__li193361027113015"><strong id="waf_01_0287__b213741993">Specific listener</strong></li></ul>
</td>
<td class="cellrowborder" valign="top" width="20.79%" headers="mcps1.3.4.2.7.2.1.1.2.4.1.3 "><p id="waf_01_0287__p53361027123011">All listeners</p>
</td>
@ -41,11 +41,11 @@
</td>
<td class="cellrowborder" valign="top" width="58.5%" headers="mcps1.3.4.2.7.2.1.1.2.4.1.2 "><p id="waf_01_0287__p63361627173016">Set this parameter to the domain name or IP address you want to protect. Make sure that the domain name has been resolved to the EIP of the load balancer.</p>
<p id="waf_01_0287__p933613275300">Single domain names or wildcard domain names are supported.</p>
<ul id="waf_01_0287__ul23361275301"><li id="waf_01_0287__li1633619272304">Single domain name: Enter a single domain name, for example, www.example.com.</li><li id="waf_01_0287__li1333722715307">Wildcard domain name<ul id="waf_01_0287__ul0337427193018"><li id="waf_01_0287__li333720275304">If the server IP address of each subdomain name is the same, enter a wildcard domain name. For example, if the subdomain names <em id="waf_01_0287__i227050965"><strong id="waf_01_0287__b341364810">a.example.com</strong></em>, <strong id="waf_01_0287__b1389598467"><em id="waf_01_0287__i14407571">b.example.com</em></strong>, and <em id="waf_01_0287__i1858531584"><strong id="waf_01_0287__b813679620">c.example.com</strong></em> have the same server IP address, you can add the wildcard domain name <strong id="waf_01_0287__b1272283548"><em id="waf_01_0287__i88351494">*.example.com</em></strong> to WAF to protect all three.</li><li id="waf_01_0287__li14337102773015">If the server IP addresses of subdomain names are different, add subdomain names as single domain names one by one.</li><li id="waf_01_0287__li203373279308">Wildcard domain name<span class="parmvalue" id="waf_01_0287__parmvalue84437634"><b>*</b></span> can be added.</li></ul>
<ul id="waf_01_0287__ul23361275301"><li id="waf_01_0287__li1633619272304">Single domain name: Enter a single domain name, for example, www.example.com.</li><li id="waf_01_0287__li1333722715307">Wildcard domain name<ul id="waf_01_0287__ul0337427193018"><li id="waf_01_0287__li333720275304">If the server IP address of each subdomain name is the same, enter a wildcard domain name. For example, if the subdomain names <em id="waf_01_0287__i1706415666"><strong id="waf_01_0287__b1038107804">a.example.com</strong></em>, <strong id="waf_01_0287__b1983403437"><em id="waf_01_0287__i1237531474">b.example.com</em></strong>, and <em id="waf_01_0287__i1410141913"><strong id="waf_01_0287__b71607969">c.example.com</strong></em> have the same server IP address, you can add the wildcard domain name <strong id="waf_01_0287__b872291741"><em id="waf_01_0287__i305059053">*.example.com</em></strong> to WAF to protect all three.</li><li id="waf_01_0287__li14337102773015">If the server IP addresses of subdomain names are different, add subdomain names as single domain names one by one.</li><li id="waf_01_0287__li203373279308">Wildcard domain name<span class="parmvalue" id="waf_01_0287__parmvalue844699704"><b>*</b></span> can be added.</li></ul>
</li></ul>
</td>
<td class="cellrowborder" valign="top" width="20.79%" headers="mcps1.3.4.2.7.2.1.1.2.4.1.3 "><p id="waf_01_0287__p163373279301">Single domain name: <strong id="waf_01_0287__b221099894">www.example.com</strong></p>
<p id="waf_01_0287__p19337122763014">Wildcard domain name: <strong id="waf_01_0287__b1399514860">*.example.com</strong></p>
<td class="cellrowborder" valign="top" width="20.79%" headers="mcps1.3.4.2.7.2.1.1.2.4.1.3 "><p id="waf_01_0287__p163373279301">Single domain name: <strong id="waf_01_0287__b495914787">www.example.com</strong></p>
<p id="waf_01_0287__p19337122763014">Wildcard domain name: <strong id="waf_01_0287__b806622053">*.example.com</strong></p>
<p id="waf_01_0287__p203374276307">IP Address:</p>
<p id="waf_01_0287__p1633732717304">XXX.XXX.1.1</p>
</td>
@ -59,12 +59,12 @@
</tr>
<tr id="waf_01_0287__row183375270305"><td class="cellrowborder" valign="top" width="20.71%" headers="mcps1.3.4.2.7.2.1.1.2.4.1.1 "><p id="waf_01_0287__p19337182723012">Policy</p>
</td>
<td class="cellrowborder" valign="top" width="58.5%" headers="mcps1.3.4.2.7.2.1.1.2.4.1.2 "><p id="waf_01_0287__p1337142712303">The <strong id="waf_01_0287__b596782979">system-generated policy</strong> is selected by default. You can select a policy you configured before. You can also customize rules after the domain name is connected to WAF.</p>
<td class="cellrowborder" valign="top" width="58.5%" headers="mcps1.3.4.2.7.2.1.1.2.4.1.2 "><p id="waf_01_0287__p1337142712303">The <strong id="waf_01_0287__b589149423">system-generated policy</strong> is selected by default. You can select a policy you configured before. You can also customize rules after the domain name is connected to WAF.</p>
<p id="waf_01_0287__p53375272303">System-generated policies</p>
<ul id="waf_01_0287__ul1333772714308"><li id="waf_01_0287__li19338427193018">Basic web protection (<strong id="waf_01_0287__b966141479">Log only</strong> mode and common checks)<p id="waf_01_0287__p153381527193015">The basic web protection defends against attacks such as SQL injections, XSS, remote overflow vulnerabilities, file inclusions, Bash vulnerabilities, remote command execution, directory traversal, sensitive file access, and command/code injections.</p>
</li><li id="waf_01_0287__li17338122783016">Anti-crawler (<strong id="waf_01_0287__b912990329">Log only</strong> mode and <strong id="waf_01_0287__b1546672972">Scanner</strong> feature)<p id="waf_01_0287__p63381127153011">WAF only logs web scanning tasks, such as vulnerability scanning and virus scanning, such as crawling behavior of OpenVAS and Nmap.</p>
<ul id="waf_01_0287__ul1333772714308"><li id="waf_01_0287__li19338427193018">Basic web protection (<strong id="waf_01_0287__b2100001422">Log only</strong> mode and common checks)<p id="waf_01_0287__p153381527193015">The basic web protection defends against attacks such as SQL injections, XSS, remote overflow vulnerabilities, file inclusions, Bash vulnerabilities, remote command execution, directory traversal, sensitive file access, and command/code injections.</p>
</li><li id="waf_01_0287__li17338122783016">Anti-crawler (<strong id="waf_01_0287__b87242610">Log only</strong> mode and <strong id="waf_01_0287__b245308457">Scanner</strong> feature)<p id="waf_01_0287__p63381127153011">WAF only logs web scanning tasks, such as vulnerability scanning and virus scanning, such as crawling behavior of OpenVAS and Nmap.</p>
</li></ul>
<div class="note" id="waf_01_0287__note133386275303"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="waf_01_0287__ul14338427183019"><li id="waf_01_0287__li133387273307"><strong id="waf_01_0287__b587745922">Log only</strong>: WAF only logs detected attacks instead of blocking them.</li><li id="waf_01_0287__li10338327143012">Only the professional and platinum editions allow you to specify a custom policy for <strong id="waf_01_0287__b592360961">Policy</strong>.</li></ul>
<div class="note" id="waf_01_0287__note133386275303"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="waf_01_0287__ul14338427183019"><li id="waf_01_0287__li133387273307"><strong id="waf_01_0287__b1301048244">Log only</strong>: WAF only logs detected attacks instead of blocking them.</li><li id="waf_01_0287__li10338327143012">Only the professional and platinum editions allow you to specify a custom policy for <strong id="waf_01_0287__b1028783880">Policy</strong>.</li></ul>
</div></div>
</td>
<td class="cellrowborder" valign="top" width="20.79%" headers="mcps1.3.4.2.7.2.1.1.2.4.1.3 "><p id="waf_01_0287__p73381827103013">System-generated policy</p>
@ -74,7 +74,7 @@
</table>
</div>
</div>
</p></li><li id="waf_01_0287__li15338132783010"><span>Click <strong id="waf_01_0287__b811457611">OK</strong>.</span><p><p id="waf_01_0287__p9338142763015">You can view the added websites in the protected website list.</p>
</p></li><li id="waf_01_0287__li15338132783010"><span>Click <strong id="waf_01_0287__b702950166">OK</strong>.</span><p><p id="waf_01_0287__p9338142763015">You can view the added websites in the protected website list.</p>
</p></li></ol>
</div>
<div class="section" id="waf_01_0287__en-us_topic_0000001871474014_section048163615716"><h4 class="sectiontitle">Follow-up Operations</h4><ul id="waf_01_0287__ul11170121873520"><li id="waf_01_0287__li151701018153512">The initial <strong id="waf_01_0287__b8986124252020">Access Status</strong> of a website is <strong id="waf_01_0287__b1987042172020">Unaccessed</strong>. When a request reaches the WAF instance configured for the website, the access status automatically changes to <strong id="waf_01_0287__b1498710428203">Accessed</strong>. To address access failure, see </li><li id="waf_01_0287__li1551305011359"><a href="waf_01_3274.html">Complete Recommended Configurations</a></li><li id="waf_01_0287__li275382463515">Adjust the protection policy configured for the protected domain name based on protection requirements. For details, see <a href="waf_01_0129.html">Protection Configuration Overview</a>.</li></ul>

2
docs/wafd/umn/waf_01_0311.html
View File

@ -10,7 +10,7 @@
</div>
<div class="section" id="waf_01_0311__section1327018172114"><h4 class="sectiontitle">Handling Suggestions</h4><p id="waf_01_0311__p16367195217354">Disable the JavaScript anti-crawler protection by performing the following steps:</p>
<ol id="waf_01_0311__ol2233133483013"><li id="waf_01_0311__li16374183013585"><span>Log in to the management console.</span></li><li id="waf_01_0311__li1392155773219"><span>Click <span><img id="waf_01_0311__waf_01_3273_image10410329111410" src="en-us_image_0000001533330749.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0311__li13897125313222"><span>Click <span><img id="waf_01_0311__image074281418325" src="en-us_image_0000001677145090.png"></span> in the upper left corner and choose <strong id="waf_01_0311__b1537891063115">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0311__b6378910183118">Security</strong>.</span></li><li id="waf_01_0311__li13247101063711"><span>In the navigation pane on the left, choose <strong id="waf_01_0311__waf_01_0008_b1415519456415">Policies</strong>.</span></li><li id="waf_01_0311__li19626231465"><span>Click the name of the target policy to go to the protection configuration page.</span></li><li id="waf_01_0311__li13157471303"><span>Click the <span class="parmname" id="waf_01_0311__waf_01_0015_parmname1839753916433"><b>Anti-Crawler</b></span> configuration area and toggle it on or off if needed.</span><p><ul id="waf_01_0311__waf_01_0015_ul103222180"><li id="waf_01_0311__waf_01_0015_waf_01_0008_li16311214181"><span><img id="waf_01_0311__waf_01_0015_waf_01_0008_image12518105842612" src="en-us_image_0000002054495070.png"></span>: enabled.</li><li id="waf_01_0311__waf_01_0015_waf_01_0008_li245212187"><span><img id="waf_01_0311__waf_01_0015_waf_01_0008_image16420271818" src="en-us_image_0000001761857181.png"></span>: disabled.</li></ul>
</p></li><li id="waf_01_0311__li3713161417610"><span>Click the <strong id="waf_01_0311__b32461491168">JavaScript</strong> tab and disable the JavaScript anti-crawler protection. Its status changes to <span><img id="waf_01_0311__image142478912610" src="en-us_image_0000001074633189.png"></span>.</span></li></ol>
</p></li><li id="waf_01_0311__li3713161417610"><span>Click the <strong id="waf_01_0311__b32461491168">JavaScript</strong> tab and disable the JavaScript anti-crawler protection..</span></li></ol>
</div>
</div>
<div>

2
docs/wafd/umn/waf_01_0312.html
View File

@ -8,7 +8,7 @@
</div>
<div class="section" id="waf_01_0312__section1138044612534"><h4 class="sectiontitle">Configuring a Precise Protection Rule to Block All Source IP Addresses Except the Specified Ones</h4><ol id="waf_01_0312__ol123433332541"><li id="waf_01_0312__li1692342691314"><span>Log in to the management console.</span></li><li id="waf_01_0312__li11343933175420"><span>Click <span><img id="waf_01_0312__image4818147196" src="en-us_image_0000001482832030.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0312__li13897125313222"><span>Click <span><img id="waf_01_0312__image074281418325" src="en-us_image_0000001573330978.png"></span> in the upper left corner and choose <strong id="waf_01_0312__b14448192314584">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0312__b14448172315580">Security</strong>.</span></li><li id="waf_01_0312__li8314401631"><span>In the navigation pane on the left, choose <strong id="waf_01_0312__waf_01_0008_b1415519456415_1">Policies</strong>.</span></li><li id="waf_01_0312__li1631411014319"><span>Click the name of the target policy to go to the protection configuration page.</span></li><li id="waf_01_0312__li184373297154"><span>In the <strong id="waf_01_0312__b65963716288">Precise Protection</strong> configuration area, enable the protection.</span><p><div class="fignone" id="waf_01_0312__fig142101527112618"><span class="figcap"><b>Figure 3 </b>Precise Protection configuration area</span><br><span><img id="waf_01_0312__image746019518565" src="en-us_image_0000002055860514.png"></span></div>
<p id="waf_01_0312__p10540743101215"></p>
</p></li><li id="waf_01_0312__li16357152817577"><span>Click <strong id="waf_01_0312__b15215213294">Customize Rule</strong>. In the upper left corner of the displayed page, click <strong id="waf_01_0312__b107541018193011">Add Rule</strong>.</span></li><li id="waf_01_0312__li123452332541"><a name="waf_01_0312__li123452332541"></a><a name="li123452332541"></a><span>In the displayed <strong id="waf_01_0312__b1874193315302">Add Precise Protection Rule</strong> dialog box, add a protection rule as shown in <a href="#waf_01_0312__fig163451833195414">Figure 4</a> to block all requests.</span><p><div class="caution" id="waf_01_0312__note1624025311202"><span class="cautiontitle"><img src="public_sys-resources/caution_3.0-en-us.png"> </span><div class="cautionbody"><p id="waf_01_0312__p14241115362020">The priority value here must be greater than that configured in <a href="#waf_01_0312__li15907173419260">Step 9</a> because allowing access has a higher priority than blocking access and a smaller priority value indicates a higher priority.</p>
</p></li><li id="waf_01_0312__li16357152817577"><span>In the upper left corner of the displayed page, click <strong id="waf_01_0312__b107541018193011">Add Rule</strong>.</span></li><li id="waf_01_0312__li123452332541"><a name="waf_01_0312__li123452332541"></a><a name="li123452332541"></a><span>In the displayed <strong id="waf_01_0312__b1874193315302">Add Precise Protection Rule</strong> dialog box, add a protection rule as shown in <a href="#waf_01_0312__fig163451833195414">Figure 4</a> to block all requests.</span><p><div class="caution" id="waf_01_0312__note1624025311202"><span class="cautiontitle"><img src="public_sys-resources/caution_3.0-en-us.png"> </span><div class="cautionbody"><p id="waf_01_0312__p14241115362020">The priority value here must be greater than that configured in <a href="#waf_01_0312__li15907173419260">Step 9</a> because allowing access has a higher priority than blocking access and a smaller priority value indicates a higher priority.</p>
</div></div>
<div class="fignone" id="waf_01_0312__fig163451833195414"><a name="waf_01_0312__fig163451833195414"></a><a name="fig163451833195414"></a><span class="figcap"><b>Figure 4 </b>Blocking all requests</span><br><span><img id="waf_01_0312__waf_01_0010_image3594528154810" src="en-us_image_0000001732020137.png" title="Click to enlarge" class="imgResize"></span></div>
</p></li><li id="waf_01_0312__li15907173419260"><a name="waf_01_0312__li15907173419260"></a><a name="li15907173419260"></a><span>Click <strong id="waf_01_0312__b6760151203120">Add Rule</strong>. In the displayed <strong id="waf_01_0312__b2076221113113">Add Precise Protection Rule</strong> dialog box, add a rule for the specified IP address.</span><p><p id="waf_01_0312__p1690883432616">For example, if you want to allow 192.168.2.3 to access the website, add a protection rule as shown in <a href="#waf_01_0312__fig18908103413269">Figure 5</a>.</p>

2
docs/wafd/umn/waf_01_0355.html
View File

@ -3,7 +3,7 @@
<h1 class="topictitle1">Why Does the Page Fail to Be Refreshed After WTP Is Enabled?</h1>
<div id="body0000001212311239"><p id="waf_01_0355__p9473123141515">Web Tamper Protection (WTP) supports only caching of static web pages. Perform the following steps to fix this issue:</p>
<ol id="waf_01_0355__ol887732610231"><li id="waf_01_0355__li16374183013585"><span>Log in to the management console.</span></li><li id="waf_01_0355__li1392155773219"><span>Click <span><img id="waf_01_0355__waf_01_3273_image10410329111410" src="en-us_image_0000001482063812.jpg"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="waf_01_0355__li13897125313222"><span>Click <span><img id="waf_01_0355__image074281418325" src="en-us_image_0000001548562913.png"></span> in the upper left corner and choose <strong id="waf_01_0355__b19561194312514">Web Application Firewall (Dedicated)</strong> under <strong id="waf_01_0355__b1256154322515">Security</strong>.</span></li><li id="waf_01_0355__li13247101063711"><span>In the navigation pane on the left, choose <strong id="waf_01_0355__waf_01_0008_b1415519456415">Policies</strong>.</span></li><li id="waf_01_0355__li19626231465"><span>Click the name of the target policy to go to the protection configuration page.</span></li><li id="waf_01_0355__li19950124513353"><span>Click the <strong id="waf_01_0355__b5258353110">Web Tamper Protection</strong> configuration area and check whether this function is enabled.</span><p><ul id="waf_01_0355__ul103222180"><li id="waf_01_0355__waf_01_0008_li16311214181">If this function is enabled (<span><img id="waf_01_0355__waf_01_0008_image12518105842612" src="en-us_image_0000002094324173.png"></span>), go to <a href="#waf_01_0355__li56301354192511">Step 7</a>.</li><li id="waf_01_0355__waf_01_0008_li245212187">If this function is disabled (<span><img id="waf_01_0355__image209881151618" src="en-us_image_0000001716118726.png"></span>), click <span><img id="waf_01_0355__image119881259119" src="en-us_image_0000001831751069.png"></span> to enable the function. Refresh the page several minutes later.</li></ul>
</p></li><li id="waf_01_0355__li56301354192511"><a name="waf_01_0355__li56301354192511"></a><a name="li56301354192511"></a><span>Click <strong id="waf_01_0355__b19742032152917">Customize Rule</strong>. On the displayed page, check whether the domain name and path are correct.</span><p><ul id="waf_01_0355__ul7640153916210"><li id="waf_01_0355__li156401639122">If they are correct, go to <a href="#waf_01_0355__li129561731105818">Step 8</a>.</li><li id="waf_01_0355__li104542020673">If they are incorrect, click <strong id="waf_01_0355__b16593332173118">Delete</strong> in the <strong id="waf_01_0355__b523123783118">Operation</strong> column to delete the rule. Then, click <strong id="waf_01_0355__b159221145133116">Add Rule</strong> above the rule list and configure another rule. <p id="waf_01_0355__p8891421179">After the rule is added successfully, refresh the page several minutes later. Then, access the page again.</p>
</p></li><li id="waf_01_0355__li56301354192511"><a name="waf_01_0355__li56301354192511"></a><a name="li56301354192511"></a><span>Click <strong id="waf_01_0355__b2023116265419">Customize Rule</strong>. On the displayed page, check whether the domain name and path are correct.</span><p><ul id="waf_01_0355__ul7640153916210"><li id="waf_01_0355__li156401639122">If they are correct, go to <a href="#waf_01_0355__li129561731105818">Step 8</a>.</li><li id="waf_01_0355__li104542020673">If they are incorrect, click <strong id="waf_01_0355__b16593332173118">Delete</strong> in the <strong id="waf_01_0355__b523123783118">Operation</strong> column to delete the rule. Then, click <strong id="waf_01_0355__b159221145133116">Add Rule</strong> above the rule list and configure another rule. <p id="waf_01_0355__p8891421179">After the rule is added successfully, refresh the page several minutes later. Then, access the page again.</p>
</li></ul>
</p></li><li id="waf_01_0355__li129561731105818"><a name="waf_01_0355__li129561731105818"></a><a name="li129561731105818"></a><span>In the row containing the web tamper protection rule, click <strong id="waf_01_0355__b1611719197361">Update Cache</strong> in the <strong id="waf_01_0355__b33272024163612">Operation</strong> column.</span><p><p id="waf_01_0355__p643510341313">If the content of a protected page is modified, you must update the cache. Otherwise, WAF always returns the most recently cached content.</p>
<p id="waf_01_0355__p13807143913168">After updating the cache, refresh the page and access the page again. If the page is still not updated, contact technical support.</p>

4
docs/wafd/umn/waf_01_0425.html
View File

@ -12,8 +12,8 @@
<tbody><tr id="waf_01_0425__en-us_topic_0110861186_row1513810215185"><td class="cellrowborder" valign="top" width="100%" headers="mcps1.3.2.2.2.1.1 mcps1.3.2.2.2.1.2 "><p id="waf_01_0425__en-us_topic_0110861186_p2013816218186">Peak rate of normal service requests</p>
</td>
<td class="cellrowborder" valign="top" width="100%" headers="mcps1.3.2.2.2.1.1 mcps1.3.2.2.2.1.2 "><p id="waf_01_0425__p11627171723218">The following lists the specifications of a single instance.</p>
<ul id="waf_01_0425__ul1062781773217"><li id="waf_01_0425__li762751719320">Specifications: WI-500. Estimated performance:<ul id="waf_01_0425__ul0627131783213"><li id="waf_01_0425__li6627717133216">HTTP services - Recommended QPS: 5,000. Maximum QPS: 10,000.</li><li id="waf_01_0425__li12627131713320">HTTPS services - Recommended QPS: 4,000. Maximum QPS: 8,000.</li><li id="waf_01_0425__li10627101720325">WebSocket service - Maximum concurrent connections: 5,000</li><li id="waf_01_0425__li762781717328">Maximum WAF-to-server persistent connections: 60,000</li></ul>
</li><li id="waf_01_0425__li562741763213">Specifications: WI-100. Estimated performance:<ul id="waf_01_0425__ul19627111793219"><li id="waf_01_0425__li862711173324">HTTP services - Recommended QPS: 1,000. Maximum QPS: 2,000.</li><li id="waf_01_0425__li962761717323">HTTPS services - Recommended QPS: 800. Maximum QPS: 1,600</li><li id="waf_01_0425__li10627717133213">WebSocket service - Maximum concurrent connections: 1,000</li><li id="waf_01_0425__li762751715324">Maximum WAF-to-server persistent connections: 60,000</li></ul>
<ul id="waf_01_0425__ul1062781773217"><li id="waf_01_0425__li762751719320">Specifications: WI-500. Estimated performance:<ul id="waf_01_0425__ul0627131783213"><li id="waf_01_0425__li6627717133216">HTTP services: 5,000 QPS (recommended)</li><li id="waf_01_0425__li12627131713320">HTTPS services: 4,000 QPS (recommended)</li><li id="waf_01_0425__li10627101720325">WebSocket service - Maximum concurrent connections: 5,000</li><li id="waf_01_0425__li762781717328">Maximum WAF-to-server persistent connections: 60,000</li></ul>
</li><li id="waf_01_0425__li562741763213">Specifications: WI-100. Estimated performance:<ul id="waf_01_0425__ul19627111793219"><li id="waf_01_0425__li862711173324">HTTP services: 1,000 QPS (recommended)</li><li id="waf_01_0425__li962761717323">HTTPS services: 800 QPS (recommended)</li><li id="waf_01_0425__li10627717133213">WebSocket service - Maximum concurrent connections: 1,000</li><li id="waf_01_0425__li762751715324">Maximum WAF-to-server persistent connections: 60,000</li></ul>
</li></ul>
<div class="notice" id="waf_01_0425__note26271917133215"><span class="noticetitle"> NOTICE: </span><div class="noticebody"><p id="waf_01_0425__p362701753210">Maximum QPS values are for reference only. They may vary depending on your businesses. The real-world QPS is related to the request size and the type and quantity of protection rules you customize.</p>
</div></div>

26
docs/wafd/umn/waf_01_1249.html
View File

@ -2,33 +2,33 @@
<h1 class="topictitle1">Ports Supported by WAF</h1>
<div id="body8662426"><p id="waf_01_1249__en-us_topic_0000001917273837_p388094810242">WAF can protect standard and non-standard ports. When you add a website to WAF, you need to specify protection port, which is your service port. WAF will then forward and protect traffic over this port. This section describes the standard and non-standard ports WAF can protect.</p>
<div class="p" id="waf_01_1249__en-us_topic_0000001917273837_p1274183818275"><a href="#waf_01_1249__waf_01_0032_table9589104616288">Table 1</a> lists the ports that can be protected by WAF.
<div class="tablenoborder"><a name="waf_01_1249__waf_01_0032_table9589104616288"></a><a name="waf_01_0032_table9589104616288"></a><table cellpadding="4" cellspacing="0" summary="" id="waf_01_1249__waf_01_0032_table9589104616288" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Ports supported by WAF</caption><thead align="left"><tr id="waf_01_1249__waf_01_0032_row11589184610284"><th align="left" class="cellrowborder" valign="top" width="22.63%" id="mcps1.3.2.2.2.5.1.1"><p id="waf_01_1249__waf_01_0032_p155891246132816">Port Category</p>
<div class="p" id="waf_01_1249__p1274183818275"><a href="#waf_01_1249__en-us_topic_0000001917572517_table9589104616288">Table 1</a> lists the ports that can be protected by WAF.
<div class="tablenoborder"><a name="waf_01_1249__en-us_topic_0000001917572517_table9589104616288"></a><a name="en-us_topic_0000001917572517_table9589104616288"></a><table cellpadding="4" cellspacing="0" summary="" id="waf_01_1249__en-us_topic_0000001917572517_table9589104616288" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Ports supported by WAF</caption><thead align="left"><tr id="waf_01_1249__en-us_topic_0000001917572517_row11589184610284"><th align="left" class="cellrowborder" valign="top" width="22.63%" id="mcps1.3.2.2.2.5.1.1"><p id="waf_01_1249__en-us_topic_0000001917572517_p155891246132816">Port Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="33.47%" id="mcps1.3.2.2.2.5.1.2"><p id="waf_01_1249__waf_01_0032_p3589946192815">HTTP Protocol</p>
<th align="left" class="cellrowborder" valign="top" width="33.47%" id="mcps1.3.2.2.2.5.1.2"><p id="waf_01_1249__en-us_topic_0000001917572517_p3589946192815">HTTP</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20.74%" id="mcps1.3.2.2.2.5.1.3"><p id="waf_01_1249__waf_01_0032_p1458944662813">HTTPS Protocol</p>
<th align="left" class="cellrowborder" valign="top" width="20.74%" id="mcps1.3.2.2.2.5.1.3"><p id="waf_01_1249__en-us_topic_0000001917572517_p1458944662813">HTTPS</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="23.16%" id="mcps1.3.2.2.2.5.1.4"><p id="waf_01_1249__waf_01_0032_p9589174612810">Port Limit</p>
<th align="left" class="cellrowborder" valign="top" width="23.16%" id="mcps1.3.2.2.2.5.1.4"><p id="waf_01_1249__en-us_topic_0000001917572517_p9589174612810">Port Limit</p>
</th>
</tr>
</thead>
<tbody><tr id="waf_01_1249__waf_01_0032_row0589184618288"><td class="cellrowborder" valign="top" width="22.63%" headers="mcps1.3.2.2.2.5.1.1 "><p id="waf_01_1249__waf_01_0032_p25891546102817">Standard ports</p>
<tbody><tr id="waf_01_1249__en-us_topic_0000001917572517_row0589184618288"><td class="cellrowborder" valign="top" width="22.63%" headers="mcps1.3.2.2.2.5.1.1 "><p id="waf_01_1249__en-us_topic_0000001917572517_p25891546102817">Standard ports</p>
</td>
<td class="cellrowborder" valign="top" width="33.47%" headers="mcps1.3.2.2.2.5.1.2 "><p id="waf_01_1249__waf_01_0032_p75891446202818">80</p>
<td class="cellrowborder" valign="top" width="33.47%" headers="mcps1.3.2.2.2.5.1.2 "><p id="waf_01_1249__en-us_topic_0000001917572517_p75891446202818">80</p>
</td>
<td class="cellrowborder" valign="top" width="20.74%" headers="mcps1.3.2.2.2.5.1.3 "><p id="waf_01_1249__waf_01_0032_p558944602819">443</p>
<td class="cellrowborder" valign="top" width="20.74%" headers="mcps1.3.2.2.2.5.1.3 "><p id="waf_01_1249__en-us_topic_0000001917572517_p558944602819">443</p>
</td>
<td class="cellrowborder" valign="top" width="23.16%" headers="mcps1.3.2.2.2.5.1.4 "><p id="waf_01_1249__waf_01_0032_p95891046122816">Unlimited</p>
<td class="cellrowborder" valign="top" width="23.16%" headers="mcps1.3.2.2.2.5.1.4 "><p id="waf_01_1249__en-us_topic_0000001917572517_p95891046122816">Unlimited</p>
</td>
</tr>
<tr id="waf_01_1249__waf_01_0032_row125891046152814"><td class="cellrowborder" valign="top" width="22.63%" headers="mcps1.3.2.2.2.5.1.1 "><p id="waf_01_1249__waf_01_0032_p16100122715305">Non-standard ports (182 in total)</p>
<tr id="waf_01_1249__en-us_topic_0000001917572517_row125891046152814"><td class="cellrowborder" valign="top" width="22.63%" headers="mcps1.3.2.2.2.5.1.1 "><p id="waf_01_1249__en-us_topic_0000001917572517_p16100122715305">Non-standard ports (<strong id="waf_01_1249__b434985614613">182</strong> in total)</p>
</td>
<td class="cellrowborder" valign="top" width="33.47%" headers="mcps1.3.2.2.2.5.1.2 "><p id="waf_01_1249__waf_01_0032_p810052713306">9945, 9770, 81, 82, 83, 84, 88, 89, 800, 808, 1000, 1090, 3128, 3333, 3501, 3601, 4444, 5000, 5222, 5555, 5601, 6001, 6666, 6788, 6789, 6842, 6868, 7000, 7001, 7002, 7003, 7004, 7005, 7006, 7009, 7010, 7011, 7012, 7013, 7014, 7015, 7016, 7018, 7019, 7020, 7021, 7022, 7023, 7024, 7025, 7026, 7070, 7081, 7082, 7083, 7088, 7097, 7777, 7800, 7979, 8000, 8001, 8002, 8003, 8008, 8009, 8010, 8020, 8021, 8022, 8025, 8026, 8077, 8078, 8080, 8085, 8086, 8087, 8088, 8089, 8090, 8091, 8092, 8093, 8094, 8095, 8096, 8097, 8098, 8106, 8118, 8181, 8334, 8336, 8800, 8686, 8888, 8889, 8989, 8999, 9000, 9001, 9002, 9003, 9080, 9200, 9802, 10000, 10001, 10080, 12601, 86, 9021, 9023, 9027, 9037, 9081, 9082, 9201, 9205, 9207, 9208, 9209, 9210, 9211, 9212, 9213, 48800, 87, 97, 7510, 9180, 9898, 9908, 9916, 9918, 9919, 9928, 9929, 9939, 28080, 33702, 8011, 8012, 8013, 8014, 8015, 8016, 8017, and 8070</p>
<td class="cellrowborder" valign="top" width="33.47%" headers="mcps1.3.2.2.2.5.1.2 "><p id="waf_01_1249__en-us_topic_0000001917572517_p810052713306">9945, 9770, 81, 82, 83, 84, 88, 89, 800, 808, 1000, 1090, 3128, 3333, 3501, 3601, 4444, 5000, 5222, 5555, 5601, 6001, 6666, 6788, 6789, 6842, 6868, 7000, 7001, 7002, 7003, 7004, 7005, 7006, 7009, 7010, 7011, 7012, 7013, 7014, 7015, 7016, 7018, 7019, 7020, 7021, 7022, 7023, 7024, 7025, 7026, 7070, 7081, 7082, 7083, 7088, 7097, 7777, 7800, 7979, 8000, 8001, 8002, 8003, 8008, 8009, 8010, 8020, 8021, 8022, 8025, 8026, 8077, 8078, 8080, 8085, 8086, 8087, 8088, 8089, 8090, 8091, 8092, 8093, 8094, 8095, 8096, 8097, 8098, 8106, 8118, 8181, 8334, 8336, 8800, 8686, 8888, 8889, 8989, 8999, 9000, 9001, 9002, 9003, 9080, 9200, 9802, 10000, 10001, 10080, 12601, 86, 9021, 9023, 9027, 9037, 9081, 9082, 9201, 9205, 9207, 9208, 9209, 9210, 9211, 9212, 9213, 48800, 87, 97, 7510, 9180, 9898, 9908, 9916, 9918, 9919, 9928, 9929, 9939, 28080, 33702, 8011, 8012, 8013, 8014, 8015, 8016, 8017, 8070</p>
</td>
<td class="cellrowborder" valign="top" width="20.74%" headers="mcps1.3.2.2.2.5.1.3 "><p id="waf_01_1249__waf_01_0032_p181008274305">8750, 8445, 18010, 4443, 5443, 6443, 7443, 8081, 8082, 8083, 8084, 8443, 8843, 9443, 8553, 8663, 9553, 9663, 18110, 18381, 18980, 28443, 18443, 8033, 18000, 19000, 7072, 7073, 8803, 8804, 8805, 9999</p>
<td class="cellrowborder" valign="top" width="20.74%" headers="mcps1.3.2.2.2.5.1.3 "><p id="waf_01_1249__en-us_topic_0000001917572517_p181008274305">8750, 8445, 18010, 4443, 5443, 6443, 7443, 8081, 8082, 8083, 8084, 8443, 8843, 9443, 8553, 8663, 9553, 9663, 18110, 18381, 18980, 28443, 18443, 8033, 18000, 19000, 7072, 7073, 8803, 8804, 8805, 9999</p>
</td>
<td class="cellrowborder" valign="top" width="23.16%" headers="mcps1.3.2.2.2.5.1.4 "><p id="waf_01_1249__waf_01_0032_p45901146102812">Unlimited</p>
<td class="cellrowborder" valign="top" width="23.16%" headers="mcps1.3.2.2.2.5.1.4 "><p id="waf_01_1249__en-us_topic_0000001917572517_p45901146102812">Unlimited</p>
</td>
</tr>
</tbody>

8
docs/wafd/umn/waf_01_1346.html
View File

@ -8,9 +8,7 @@
<p id="waf_01_1346__p5851366504">For example:</p>
<pre class="screen" id="waf_01_1346__screen16575161035013">curl -kv -H "Host: a.example.com" http://192.168.0.1</pre>
<p id="waf_01_1346__p189946546491">If the response code is 200, the request has been forwarded. </p>
</li><li id="waf_01_1346__li138391432185711">Attack blocking test<ol type="a" id="waf_01_1346__ol151584461204"><li id="waf_01_1346__li5158346706">Ensure that the block mode for basic web protection has been enabled in the policy used for the protected website.<p id="waf_01_1346__p13992014113517"><a name="waf_01_1346__li5158346706"></a><a name="li5158346706"></a><span><img id="waf_01_1346__image1199111493510" src="en-us_image_0000001732411573.png" title="Click to enlarge" class="imgResize"></span></p>
<p id="waf_01_1346__p12482631367"></p>
<p id="waf_01_1346__p097764551412"></p>
</li><li id="waf_01_1346__li138391432185711">Attack blocking test<ol type="a" id="waf_01_1346__ol151584461204"><li id="waf_01_1346__li5158346706">Ensure that the block mode for basic web protection has been enabled in the policy used for the protected website.<div class="fignone" id="waf_01_1346__fig8790185516616"><span class="figcap"><b>Figure 1 </b>Enabling Basic Web Protection</span><br><span><img id="waf_01_1346__image1199111493510" src="en-us_image_0000001732411573.png" title="Click to enlarge" class="imgResize"></span></div>
</li><li id="waf_01_1346__li1115817461607">Run the following command:<pre class="screen" id="waf_01_1346__screen13873113125916">curl -kv -H "Host: {protection object added to WAF}"{Client protocol in server configuration}://{IP address of the dedicated WAF instance}:{protection port}--data "id=1 and 1='1"</pre>
<div class="p" id="waf_01_1346__p8658135612010">Example:<pre class="screen" id="waf_01_1346__screen19620743010">curl -kv -H "Host: a.example.com" http:// 192.168.X.X --data "id=1 and 1='1"</pre>
</div>
@ -27,9 +25,7 @@
curl -kv -H "Host: a.example.com" http://100.10.X.X</pre>
<p id="waf_01_1346__p107791029157">If the response code is 200, the request has been forwarded.</p>
<p id="waf_01_1346__p19779129851">If the dedicated WAF instance works but the request fails to be forwarded, check the load balancer settings first. If the load balancer health check result is unhealthy, disable health check and perform the preceding operations again.</p>
</li><li id="waf_01_1346__li6803143811712">Attack blocking test<ol id="waf_01_1346__ol145753584"><li id="waf_01_1346__li2045773484">Ensure that the block mode for basic web protection has been enabled in the policy used for the protected website.<p id="waf_01_1346__waf_01_1346_p13992014113517"><a name="waf_01_1346__li2045773484"></a><a name="li2045773484"></a><span><img id="waf_01_1346__waf_01_1346_image1199111493510" src="en-us_image_0000001732411573.png" title="Click to enlarge" class="imgResize"></span></p>
<p id="waf_01_1346__waf_01_1346_p12482631367"></p>
<p id="waf_01_1346__waf_01_1346_p097764551412"></p>
</li><li id="waf_01_1346__li6803143811712">Attack blocking test<ol id="waf_01_1346__ol145753584"><li id="waf_01_1346__li2045773484">Ensure that the block mode for basic web protection has been enabled in the policy used for the protected website.<div class="fignone" id="waf_01_1346__waf_01_1346_fig8790185516616"><span class="figcap"><b>Figure 2 </b>Enabling Basic Web Protection</span><br><span><img id="waf_01_1346__waf_01_1346_image1199111493510" src="en-us_image_0000001732411573.png" title="Click to enlarge" class="imgResize"></span></div>
</li><li id="waf_01_1346__li18287223811">Run the following command:<pre class="screen" id="waf_01_1346__screen11507106496">curl -kv -H "Host: { protection object added to WAF}"{ELB external protocol}://{Private IP address bound to the load balancer}:{ELB listening port}--data "id=1 and 1='1"</pre>
<p id="waf_01_1346__p57322435818">If an EIP has been bound to the load balancer, any publicly accessible servers can be used for testing.</p>
<pre class="screen" id="waf_01_1346__screen2931622131018">curl -kv -H "Host: { protection object added to WAF}"{ELB external protocol}://{EIP bound to the load balancer}:{ELB listening port}--data "id=1 and 1='1"</pre>

8
docs/wafd/umn/waf_01_3271.html
View File

@ -1,9 +1,9 @@
<a name="waf_01_3271"></a><a name="waf_01_3271"></a>
<h1 class="topictitle1">Condition Field Description</h1>
<div id="body0000001675685056"><p id="waf_01_3271__p776135765118">When setting a CC attack, precise access, or global whitelist protection rule, there are some fields in the <strong id="waf_01_3271__b16707736143613">Condition List</strong> or <strong id="waf_01_3271__b11715154011367">Trigger</strong> area. These fields together are used to define the request attributes to trigger the rule. This topic describes the fields that you can specify in conditions to trigger a rule.</p>
<div class="section" id="waf_01_3271__section11592545543"><h4 class="sectiontitle">What Is a Condition Field?</h4><p id="waf_01_3271__p8447145618544">A condition field specifies the request attribute WAF checks against protection rules. When configuring a <a href="waf_01_0009.html">CC attack protection rule</a>, <a href="waf_01_0010.html">precise access protection rule</a>, or <a href="waf_01_0016.html">global protection whitelist</a>, you can define condition fields to specify request attributes to trigger the rule. If a request meets the conditions set in a rule, the request matches the rule. WAF handles the request based on the action (for example, allow, block, or log only) set in the rule.</p>
<div class="fignone" id="waf_01_3271__fig103617260317"><span class="figcap"><b>Figure 1 </b>Condition field</span><br><span><img id="waf_01_3271__image101228591644" src="en-us_image_0000001675705730.png" title="Click to enlarge" class="imgResize"></span></div>
<div id="body0000001675685056"><p id="waf_01_3271__p776135765118">When setting a precise access, CC attack protection, or global protection whitelist rule, there are some fields in the <strong id="waf_01_3271__b16707736143613">Condition List</strong> or <strong id="waf_01_3271__b11715154011367">Trigger</strong> area. These fields together are used to define the request attributes to trigger the rule. This topic describes the fields that you can specify in conditions to trigger a rule.</p>
<div class="section" id="waf_01_3271__section11592545543"><h4 class="sectiontitle">What Is a Condition Field?</h4><p id="waf_01_3271__p8447145618544">A condition field specifies the request attribute WAF checks against protection rules. When configuring a <a href="waf_01_0010.html">precise access protection rule</a>, <a href="waf_01_0009.html">CC attack protection rule</a>, or <a href="waf_01_0016.html">global protection whitelist</a>, you can define condition fields to specify request attributes to trigger the rule. If a request meets the conditions set in a rule, the request matches the rule. WAF handles the request based on the action (for example, allow, block, or log only) set in the rule.</p>
<div class="fignone" id="waf_01_3271__fig103617260317"><span class="figcap"><b>Figure 1 </b>Condition field</span><br><span><img id="waf_01_3271__image1367102475714" src="en-us_image_0000002121808986.png" title="Click to enlarge" class="imgResize"></span></div>
<p id="waf_01_3271__p631132612116">A condition field consists of the field, subfield, logic, and content. Example:</p>
<ul id="waf_01_3271__ul131162021212"><li id="waf_01_3271__li1431182018120">Example 1: If <strong id="waf_01_3271__b15115181414518">Field</strong> is set to <strong id="waf_01_3271__b1977712191554">Path</strong>, <strong id="waf_01_3271__b648516252516">logic</strong> to <strong id="waf_01_3271__b1679704717511">Include</strong>, and <strong id="waf_01_3271__b34601254853">Content</strong> to <strong id="waf_01_3271__b11575123361">/admin</strong>, a request matches the rule when the requested path contains /admin.</li><li id="waf_01_3271__li4275183421418">Example 2: Set <strong id="waf_01_3271__b179378334715">Field</strong> to <strong id="waf_01_3271__b741553810710">IPv4</strong>, <strong id="waf_01_3271__b138522414810">Subfield</strong> to <strong id="waf_01_3271__b726911421780">Client IP Address</strong>, <strong id="waf_01_3271__b1592115010713">Logic</strong> to <strong id="waf_01_3271__b1945311012815">Equal to</strong>, and <strong id="waf_01_3271__b144244263818">Content</strong> to <strong id="waf_01_3271__b61011398814">192.XX.XX.3</strong>. When the client IP address is 192.XX.XX.3, the request hits the rule.</li></ul>
</div>
@ -18,7 +18,7 @@
</th>
</tr>
</thead>
<tbody><tr id="waf_01_3271__row1545114318391"><td class="cellrowborder" valign="top" width="27.32726727327267%" headers="mcps1.3.3.2.2.5.1.1 "><p id="waf_01_3271__p14545943123913"><strong id="waf_01_3271__b15933693785012">Path</strong>: part of a URL that does not include a domain name. This value supports exact matches only. For example, if the path to be protected is <span class="parmvalue" id="waf_01_3271__parmvalue831657173915"><b>/admin</b></span>, <strong id="waf_01_3271__b193125743915">Path</strong> must be set to <span class="parmvalue" id="waf_01_3271__parmvalue1532165793919"><b>/admin</b></span>.</p>
<tbody><tr id="waf_01_3271__row1545114318391"><td class="cellrowborder" valign="top" width="27.32726727327267%" headers="mcps1.3.3.2.2.5.1.1 "><p id="waf_01_3271__p14545943123913"><strong id="waf_01_3271__b8236949133420">Path</strong>: part of a URL that does not include a domain name. This value supports exact matches only, so that the path to be protected must be the same as the path you specify for this parameter. For example, if the path to be protected is <span class="parmvalue" id="waf_01_3271__parmvalue831657173915"><b>/admin</b></span>, <strong id="waf_01_3271__b193125743915">Path</strong> must be set to <span class="parmvalue" id="waf_01_3271__parmvalue1532165793919"><b>/admin</b></span>.</p>
</td>
<td class="cellrowborder" valign="top" width="18.238176182381764%" headers="mcps1.3.3.2.2.5.1.2 "><p id="waf_01_3271__p854510433396">--</p>
</td>

2
docs/wafd/umn/waf_01_5249.html
View File

@ -23,7 +23,7 @@
</td>
<td class="cellrowborder" valign="top" width="17.810000000000002%" headers="mcps1.3.4.3.2.5.1.2 "><p id="waf_01_5249__p1130323318191">Protected Object</p>
</td>
<td class="cellrowborder" valign="top" width="43.19%" headers="mcps1.3.4.3.2.5.1.3 "><ul id="waf_01_5249__ul6619122055017"><li id="waf_01_5249__li461992020500">Domain name: used by visitors to access your website. A domain name consists of letters separated by dots (.). It is a human readable address that maps to the machine readable IP address of your server.</li><li id="waf_01_5249__li126191520165014">IP: IP address of the website.</li></ul>
<td class="cellrowborder" valign="top" width="43.19%" headers="mcps1.3.4.3.2.5.1.3 "><ul id="waf_01_5249__ul6619122055017"><li id="waf_01_5249__li461992020500">Domain name: used by visitors to access your website. A domain name consists of letters separated by dots (.). It is a human readable address that maps to the machine-readable IP address of your server.</li><li id="waf_01_5249__li126191520165014">IP: IP address of the website.</li></ul>
</td>
<td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.4.3.2.5.1.4 "><p id="waf_01_5249__p16933943172410">www.example.com</p>
</td>