diff --git a/docs/wafd/umn/ALL_META.TXT.json b/docs/wafd/umn/ALL_META.TXT.json new file mode 100644 index 000000000..bbc612184 --- /dev/null +++ b/docs/wafd/umn/ALL_META.TXT.json @@ -0,0 +1,1202 @@ +[ + { + "uri":"waf_01_0064.html", + "product_code":"dwaf", + "code":"1", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Service Overview", + "title":"Service Overview", + "githuburl":"" + }, + { + "uri":"waf_01_0045.html", + "product_code":"dwaf", + "code":"2", + "des":"Web Application Firewall (WAF) keeps web services stable and secure. It examines all HTTP and HTTPS requests to detect and block the following attacks: Structured Query L", + "doc_type":"usermanual", + "kw":"What Is Web Application Firewall?,Service Overview,User Guide", + "title":"What Is Web Application Firewall?", + "githuburl":"" + }, + { + "uri":"waf_01_0272.html", + "product_code":"dwaf", + "code":"3", + "des":"WAF is deployed in dedicated mode. The following tables describe specifications and functions of the dedicated WAF instances.Table 1 describes dedicated WAF instances.For", + "doc_type":"usermanual", + "kw":"Specifications,Service Overview,User Guide", + "title":"Specifications", + "githuburl":"" + }, + { + "uri":"waf_01_0094.html", + "product_code":"dwaf", + "code":"4", + "des":"WAF makes it easier for you to handle web security risks.WAF keeps applications stable and secure. It examines HTTP and HTTPS requests to detect and block attacks, such a", + "doc_type":"usermanual", + "kw":"Functions,Service Overview,User Guide", + "title":"Functions", + "githuburl":"" + }, + { + "uri":"waf_01_0065.html", + "product_code":"dwaf", + "code":"5", + "des":"WAF examines web traffic from multiple dimensions to accurately identify malicious requests and filter attacks, reducing the risks of data being tampered with or stolen.W", + "doc_type":"usermanual", + "kw":"Product Advantages,Service Overview,User Guide", + "title":"Product Advantages", + "githuburl":"" + }, + { + "uri":"waf_01_0046.html", + "product_code":"dwaf", + "code":"6", + "des":"WAF helps you defend against common web attacks, such as command injection and sensitive file access.Countless malicious requests may be sent to service interfaces during", + "doc_type":"usermanual", + "kw":"Application Scenarios,Service Overview,User Guide", + "title":"Application Scenarios", + "githuburl":"" + }, + { + "uri":"waf_01_0052.html", + "product_code":"dwaf", + "code":"7", + "des":"If you need to assign different permissions to employees in your enterprise to access your WAF resources, IAM is a good choice for fine-grained permissions management. IA", + "doc_type":"usermanual", + "kw":"WAF Permissions Management,Service Overview,User Guide", + "title":"WAF Permissions Management", + "githuburl":"" + }, + { + "uri":"waf_01_0051.html", + "product_code":"dwaf", + "code":"8", + "des":"This topic describes WAF and other cloud services.Cloud Eye monitors the indicators of the dedicated WAF, so that you can understand the protection status of the dedicate", + "doc_type":"usermanual", + "kw":"WAF and Other Services,Service Overview,User Guide", + "title":"WAF and Other Services", + "githuburl":"" + }, + { + "uri":"waf_01_0071.html", + "product_code":"dwaf", + "code":"9", + "des":"Sort out all website services you want to protect with WAF. This helps you learn about your workloads and specific data of your workloads so that you can choose and confi", + "doc_type":"usermanual", + "kw":"Overview,User Guide", + "title":"Overview", + "githuburl":"" + }, + { + "uri":"waf_01_1072.html", + "product_code":"dwaf", + "code":"10", + "des":"If your service servers are deployed on the cloud, you can buy dedicated WAF instances (or dedicated WAF engines) to protect important websites through domain names or to", + "doc_type":"usermanual", + "kw":"Applying for a Dedicated WAF Instance,User Guide", + "title":"Applying for a Dedicated WAF Instance", + "githuburl":"" + }, + { + "uri":"waf_01_0070.html", + "product_code":"dwaf", + "code":"11", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Enabling WAF Protection", + "title":"Enabling WAF Protection", + "githuburl":"" + }, + { + "uri":"waf_01_0249.html", + "product_code":"dwaf", + "code":"12", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Connecting a Website to WAF", + "title":"Connecting a Website to WAF", + "githuburl":"" + }, + { + "uri":"waf_01_0250.html", + "product_code":"dwaf", + "code":"13", + "des":"If your service servers are deployed on the cloud, you can add the domain name or IP address of the website to WAF so that the website traffic is forwarded to WAF for ins", + "doc_type":"usermanual", + "kw":"Step 1: Add a Website to WAF,Connecting a Website to WAF,User Guide", + "title":"Step 1: Add a Website to WAF", + "githuburl":"" + }, + { + "uri":"waf_01_0251.html", + "product_code":"dwaf", + "code":"14", + "des":"To ensure your dedicated WAF instance reliability, after you add a website to it, use Elastic Load Balance (ELB) to configure a load balancer and a health check for the d", + "doc_type":"usermanual", + "kw":"Step 2: Configure a Load Balancer,Connecting a Website to WAF,User Guide", + "title":"Step 2: Configure a Load Balancer", + "githuburl":"" + }, + { + "uri":"waf_01_0252.html", + "product_code":"dwaf", + "code":"15", + "des":"After you configure a load balancer for your dedicated WAF instance, you need to unbind the EIP from the origin server and then bind this EIP to the load balancer you con", + "doc_type":"usermanual", + "kw":"Step 3: Bind an EIP to a Load Balancer,Connecting a Website to WAF,User Guide", + "title":"Step 3: Bind an EIP to a Load Balancer", + "githuburl":"" + }, + { + "uri":"waf_01_0067.html", + "product_code":"dwaf", + "code":"16", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Website Domain Name Management", + "title":"Website Domain Name Management", + "githuburl":"" + }, + { + "uri":"waf_01_0020.html", + "product_code":"dwaf", + "code":"17", + "des":"This topic describes how to view the basic information about a protected website, switch WAF working mode, and delete a domain name of a protected website from WAF.A webs", + "doc_type":"usermanual", + "kw":"Viewing Basic Information,Website Domain Name Management,User Guide", + "title":"Viewing Basic Information", + "githuburl":"" + }, + { + "uri":"waf_01_0003.html", + "product_code":"dwaf", + "code":"18", + "des":"You can change the working mode of WAF. WAF can work in Enabled or Suspended mode.The domain name of the website to be protected has been connected to WAF.Enabled: In thi", + "doc_type":"usermanual", + "kw":"Switching WAF Working Mode,Website Domain Name Management,User Guide", + "title":"Switching WAF Working Mode", + "githuburl":"" + }, + { + "uri":"waf_01_0169.html", + "product_code":"dwaf", + "code":"19", + "des":"Transport Layer Security (TLS) provides confidentiality and ensures data integrity for data sent between applications over the Internet. HTTPS is a network protocol const", + "doc_type":"usermanual", + "kw":"Configuring PCI DSS/3DS Certification Check and TLS Version,Website Domain Name Management,User Guid", + "title":"Configuring PCI DSS/3DS Certification Check and TLS Version", + "githuburl":"" + }, + { + "uri":"waf_01_1171.html", + "product_code":"dwaf", + "code":"20", + "des":"If you want to set a timeout duration for each request between your WAF instance and origin server, enable Timeout Settings and specify WAF-to-Server connection timeout (", + "doc_type":"usermanual", + "kw":"Configuring Connection Timeout,Website Domain Name Management,User Guide", + "title":"Configuring Connection Timeout", + "githuburl":"" + }, + { + "uri":"waf_01_1172.html", + "product_code":"dwaf", + "code":"21", + "des":"If a large number of 502 Bad Gateway and 504 Gateway Timeout errors are detected, you can enable WAF breakdown protection and connection protection to let WAF suspend you", + "doc_type":"usermanual", + "kw":"Configuring Connection Protection,Website Domain Name Management,User Guide", + "title":"Configuring Connection Protection", + "githuburl":"" + }, + { + "uri":"waf_01_0262.html", + "product_code":"dwaf", + "code":"22", + "des":"If you set Client Protocol to HTTPS when you add a website to WAF, upload a certificate and use it for your website.If your website certificate is about to expire, purcha", + "doc_type":"usermanual", + "kw":"Updating a Certificate,Website Domain Name Management,User Guide", + "title":"Updating a Certificate", + "githuburl":"" + }, + { + "uri":"waf_01_0270.html", + "product_code":"dwaf", + "code":"23", + "des":"WAF allows you to configure traffic identifiers by IP address, session, or user tag to block possibly malicious requests from known attack sources based on IP address, Co", + "doc_type":"usermanual", + "kw":"Configuring a Traffic Identifier for a Known Attack Source,Website Domain Name Management,User Guide", + "title":"Configuring a Traffic Identifier for a Known Attack Source", + "githuburl":"" + }, + { + "uri":"waf_01_0001.html", + "product_code":"dwaf", + "code":"24", + "des":"This topic describes how to edit or add server information for a website to be protected.Applicable scenarios:Modify server information, including Client Protocol, Server", + "doc_type":"usermanual", + "kw":"Editing Server Information,Website Domain Name Management,User Guide", + "title":"Editing Server Information", + "githuburl":"" + }, + { + "uri":"waf_01_0154.html", + "product_code":"dwaf", + "code":"25", + "des":"If a visitor is blocked by WAF, the Default block page of WAF is returned by default. You can also configure Custom or Redirection for the block page to be returned as re", + "doc_type":"usermanual", + "kw":"Modifying the Alarm Page,Website Domain Name Management,User Guide", + "title":"Modifying the Alarm Page", + "githuburl":"" + }, + { + "uri":"waf_01_0005.html", + "product_code":"dwaf", + "code":"26", + "des":"This topic describes how to remove a website from WAF if you no longer need to protect it.A website domain name has been added to WAF.It takes about a minute to remove a ", + "doc_type":"usermanual", + "kw":"Removing a Protected Website from WAF,Website Domain Name Management,User Guide", + "title":"Removing a Protected Website from WAF", + "githuburl":"" + }, + { + "uri":"waf_01_0261.html", + "product_code":"dwaf", + "code":"27", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Certificate Management", + "title":"Certificate Management", + "githuburl":"" + }, + { + "uri":"waf_01_0078.html", + "product_code":"dwaf", + "code":"28", + "des":"If you select HTTPS for Client Protocol when you add a website to WAF, a certificate must be associated with the website.You can upload a certificate to WAF. Then you can", + "doc_type":"usermanual", + "kw":"Uploading a Certificate,Certificate Management,User Guide", + "title":"Uploading a Certificate", + "githuburl":"" + }, + { + "uri":"waf_01_0367.html", + "product_code":"dwaf", + "code":"29", + "des":"If you configure Client Protocol to HTTPS for your website, the website needs an SSL certificate. This topic describes how to bind an SSL certificate that you have upload", + "doc_type":"usermanual", + "kw":"Binding a Certificate to a Protected Website,Certificate Management,User Guide", + "title":"Binding a Certificate to a Protected Website", + "githuburl":"" + }, + { + "uri":"waf_01_0263.html", + "product_code":"dwaf", + "code":"30", + "des":"This topic describes how to delete an expired or invalid certificate.The certificate you want to delete is not bound to a protected website.If a certificate to be deleted", + "doc_type":"usermanual", + "kw":"Deleting a Certificate,Certificate Management,User Guide", + "title":"Deleting a Certificate", + "githuburl":"" + }, + { + "uri":"waf_01_0282.html", + "product_code":"dwaf", + "code":"31", + "des":"This topic describes how to view certificate details, including the certificate name, domain name a certificate is used for, and expiration time.You have created or pushe", + "doc_type":"usermanual", + "kw":"Viewing Certificate Information,Certificate Management,User Guide", + "title":"Viewing Certificate Information", + "githuburl":"" + }, + { + "uri":"waf_01_0007.html", + "product_code":"dwaf", + "code":"32", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Rule Configuration", + "title":"Rule Configuration", + "githuburl":"" + }, + { + "uri":"waf_01_0129.html", + "product_code":"dwaf", + "code":"33", + "des":"The built-in protection rules of WAF help you defend against common web application attacks, including XSS attacks, SQL injection, crawlers, and web shells. You can custo", + "doc_type":"usermanual", + "kw":"Configuration Guidance,Rule Configuration,User Guide", + "title":"Configuration Guidance", + "githuburl":"" + }, + { + "uri":"waf_01_0008.html", + "product_code":"dwaf", + "code":"34", + "des":"After this function is enabled, WAF can defend against common web attacks, such as SQL injections, XSS, remote overflow vulnerabilities, file inclusions, Bash vulnerabili", + "doc_type":"usermanual", + "kw":"Configuring Basic Web Protection Rules,Rule Configuration,User Guide", + "title":"Configuring Basic Web Protection Rules", + "githuburl":"" + }, + { + "uri":"waf_01_0009.html", + "product_code":"dwaf", + "code":"35", + "des":"You can customize a CC attack protection rule to restrict access to a specific URL on your website based on an IP address, cookie, or Referer, mitigating CC attacks. To m", + "doc_type":"usermanual", + "kw":"Configuring a CC Attack Protection Rule,Rule Configuration,User Guide", + "title":"Configuring a CC Attack Protection Rule", + "githuburl":"" + }, + { + "uri":"waf_01_0010.html", + "product_code":"dwaf", + "code":"36", + "des":"WAF allows you to customize protection rules by combining HTTP headers, cookies, URLs, request parameters, and client IP addresses.You can combine common HTTP fields, suc", + "doc_type":"usermanual", + "kw":"Configuring a Precise Protection Rule,Rule Configuration,User Guide", + "title":"Configuring a Precise Protection Rule", + "githuburl":"" + }, + { + "uri":"waf_01_0081.html", + "product_code":"dwaf", + "code":"37", + "des":"This topic describes how to create a reference table to batch configure protection metrics of a single type, such as Path, User Agent, IP, Params, Cookie, Referer, and He", + "doc_type":"usermanual", + "kw":"Adding a Reference Table,Rule Configuration,User Guide", + "title":"Adding a Reference Table", + "githuburl":"" + }, + { + "uri":"waf_01_0012.html", + "product_code":"dwaf", + "code":"38", + "des":"You can configure blacklist and whitelist rules to block, log only, or allow access requests from specific IP addresses or IP address ranges.A website has been added to W", + "doc_type":"usermanual", + "kw":"Configuring an IP Address Blacklist or Whitelist Rule,Rule Configuration,User Guide", + "title":"Configuring an IP Address Blacklist or Whitelist Rule", + "githuburl":"" + }, + { + "uri":"waf_01_0271.html", + "product_code":"dwaf", + "code":"39", + "des":"If WAF blocks a malicious request by IP address, Cookie, or Params, you can configure a known attack source rule to let WAF automatically block all requests from the atta", + "doc_type":"usermanual", + "kw":"Configuring a Known Attack Source Rule,Rule Configuration,User Guide", + "title":"Configuring a Known Attack Source Rule", + "githuburl":"" + }, + { + "uri":"waf_01_0013.html", + "product_code":"dwaf", + "code":"40", + "des":"This topic describes how to configure a geolocation access control rule. A geolocation access control rule allows you to control IP addresses forwarded from or to specifi", + "doc_type":"usermanual", + "kw":"Configuring a Geolocation Access Control Rule,Rule Configuration,User Guide", + "title":"Configuring a Geolocation Access Control Rule", + "githuburl":"" + }, + { + "uri":"waf_01_0014.html", + "product_code":"dwaf", + "code":"41", + "des":"WAF can cache configuration for static web pages of websites. After you configure a web tamper protection rule, WAF can:Return directly the cached web page to the normal ", + "doc_type":"usermanual", + "kw":"Configuring a Web Tamper Protection Rule,Rule Configuration,User Guide", + "title":"Configuring a Web Tamper Protection Rule", + "githuburl":"" + }, + { + "uri":"waf_01_0015.html", + "product_code":"dwaf", + "code":"42", + "des":"You can configure website anti-crawler protection rules to protect against search engines, scanners, script tools, and other crawlers, and use JavaScript to create custom", + "doc_type":"usermanual", + "kw":"Configuring Anti-Crawler Rules,Rule Configuration,User Guide", + "title":"Configuring Anti-Crawler Rules", + "githuburl":"" + }, + { + "uri":"waf_01_0054.html", + "product_code":"dwaf", + "code":"43", + "des":"You can add two types of information leakage prevention rules.Sensitive information filtering: prevents disclosure of sensitive information (such as ID numbers, phone num", + "doc_type":"usermanual", + "kw":"Configuring an Information Leakage Prevention Rule,Rule Configuration,User Guide", + "title":"Configuring an Information Leakage Prevention Rule", + "githuburl":"" + }, + { + "uri":"waf_01_0016.html", + "product_code":"dwaf", + "code":"44", + "des":"Once an attack hits a WAF basic web protection rule or a feature-library anti-crawler rule, WAF will respond to the attack immediately according to the protective action ", + "doc_type":"usermanual", + "kw":"Configuring a Global Protection Whitelist (Formerly False Alarm Masking) Rule,Rule Configuration,Use", + "title":"Configuring a Global Protection Whitelist (Formerly False Alarm Masking) Rule", + "githuburl":"" + }, + { + "uri":"waf_01_0017.html", + "product_code":"dwaf", + "code":"45", + "des":"This topic describes how to configure data masking rules. You can configure data masking rules to prevent sensitive data such as passwords from being displayed in event l", + "doc_type":"usermanual", + "kw":"Configuring a Data Masking Rule,Rule Configuration,User Guide", + "title":"Configuring a Data Masking Rule", + "githuburl":"" + }, + { + "uri":"waf_01_0021.html", + "product_code":"dwaf", + "code":"46", + "des":"This topic describes how to view event logs, including attack and request statistics, event distribution, top 10 attacked domain names, top 10 attack source IP addresses,", + "doc_type":"usermanual", + "kw":"Dashboard,User Guide", + "title":"Dashboard", + "githuburl":"" + }, + { + "uri":"waf_01_0018.html", + "product_code":"dwaf", + "code":"47", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Event Management", + "title":"Event Management", + "githuburl":"" + }, + { + "uri":"waf_01_0156.html", + "product_code":"dwaf", + "code":"48", + "des":"On the Events page, you can view events generated for blocked attacks and logged only attacks. You can view details of WAF events, including the time an event occurs, ori", + "doc_type":"usermanual", + "kw":"Viewing Protection Event Logs,Event Management,User Guide", + "title":"Viewing Protection Event Logs", + "githuburl":"" + }, + { + "uri":"waf_01_0024.html", + "product_code":"dwaf", + "code":"49", + "des":"If you confirm that an attack event on the Events page is a false alarm, you can handle the event as false alarm by ignoring the URL and rule ID in basic web protection, ", + "doc_type":"usermanual", + "kw":"Handling False Alarms,Event Management,User Guide", + "title":"Handling False Alarms", + "githuburl":"" + }, + { + "uri":"waf_01_0077.html", + "product_code":"dwaf", + "code":"50", + "des":"This topic describes how to download events (logged and blocked events) data for the last five days. One or more CSV files containing the event data of the current day wi", + "doc_type":"usermanual", + "kw":"Downloading Events Data,Event Management,User Guide", + "title":"Downloading Events Data", + "githuburl":"" + }, + { + "uri":"waf_01_0055.html", + "product_code":"dwaf", + "code":"51", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Policy Management", + "title":"Policy Management", + "githuburl":"" + }, + { + "uri":"waf_01_0074.html", + "product_code":"dwaf", + "code":"52", + "des":"A policy is a combination of rules, such as basic web protection, blacklist, whitelist, and precise protection rules. A policy can be applied to multiple domain names, bu", + "doc_type":"usermanual", + "kw":"Adding a Policy,Policy Management,User Guide", + "title":"Adding a Policy", + "githuburl":"" + }, + { + "uri":"waf_01_0061.html", + "product_code":"dwaf", + "code":"53", + "des":"This topic describes how to add rules to one or more policies.A website has been added to WAF.To add a CC attack protection rule, see Table 1.To add a precise protection ", + "doc_type":"usermanual", + "kw":"Adding Rules to One or More Policies,Policy Management,User Guide", + "title":"Adding Rules to One or More Policies", + "githuburl":"" + }, + { + "uri":"waf_01_0075.html", + "product_code":"dwaf", + "code":"54", + "des":"This topic describes how to apply a policy to your protected website.A website has been added to WAF.A protected domain name can use only one policy, but one policy can b", + "doc_type":"usermanual", + "kw":"Applying a Policy to Your Website,Policy Management,User Guide", + "title":"Applying a Policy to Your Website", + "githuburl":"" + }, + { + "uri":"waf_01_0253.html", + "product_code":"dwaf", + "code":"55", + "des":"This topic describes how to manage your dedicated WAF instances (or engines), including viewing instance information, upgrading the instance edition, or deleting an insta", + "doc_type":"usermanual", + "kw":"Dedicated WAF Engine Management,User Guide", + "title":"Dedicated WAF Engine Management", + "githuburl":"" + }, + { + "uri":"waf_01_0319.html", + "product_code":"dwaf", + "code":"56", + "des":"On the Product Details page, you can view information about all your WAF instances, including the edition, domain quotas, and specifications.You have purchased a WAF inst", + "doc_type":"usermanual", + "kw":"Viewing Product Details,User Guide", + "title":"Viewing Product Details", + "githuburl":"" + }, + { + "uri":"waf_01_0096.html", + "product_code":"dwaf", + "code":"57", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Permissions Management", + "title":"Permissions Management", + "githuburl":"" + }, + { + "uri":"waf_01_0243.html", + "product_code":"dwaf", + "code":"58", + "des":"Custom policies can be created to supplement the system-defined policies of WAF.Example 1: Allowing users to query the protected domain list{\n \"Version\": \"1.1\",\n ", + "doc_type":"usermanual", + "kw":"WAF Custom Policies,Permissions Management,User Guide", + "title":"WAF Custom Policies", + "githuburl":"" + }, + { + "uri":"waf_01_0244.html", + "product_code":"dwaf", + "code":"59", + "des":"This topic describes fine-grained permissions management for your WAF instances. If your account does not need individual IAM users, then you may skip over this topic.By ", + "doc_type":"usermanual", + "kw":"WAF Permissions and Supported Actions,Permissions Management,User Guide", + "title":"WAF Permissions and Supported Actions", + "githuburl":"" + }, + { + "uri":"waf_01_1372.html", + "product_code":"dwaf", + "code":"60", + "des":"This topic describes metrics reported by dedicated WAF to Cloud Eye as well as their namespaces and dimensions. You can use APIs provided by Cloud Eye to query the metric", + "doc_type":"usermanual", + "kw":"Monitored Metrics,User Guide", + "title":"Monitored Metrics", + "githuburl":"" + }, + { + "uri":"waf_01_0022.html", + "product_code":"dwaf", + "code":"61", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"FAQs", + "title":"FAQs", + "githuburl":"" + }, + { + "uri":"waf_01_0025.html", + "product_code":"dwaf", + "code":"62", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"About WAF", + "title":"About WAF", + "githuburl":"" + }, + { + "uri":"waf_01_0292.html", + "product_code":"dwaf", + "code":"63", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"WAF Functions", + "title":"WAF Functions", + "githuburl":"" + }, + { + "uri":"waf_01_0029.html", + "product_code":"dwaf", + "code":"64", + "des":"A WAF instance can protect IP addresses.A dedicated or load balancing WAF instance can protect websites through either domain names or IP addresses.The origin server IP a", + "doc_type":"usermanual", + "kw":"Can WAF Protect an IP Address?,WAF Functions,User Guide", + "title":"Can WAF Protect an IP Address?", + "githuburl":"" + }, + { + "uri":"waf_01_0134.html", + "product_code":"dwaf", + "code":"65", + "des":"WAF can protect domain names or IP addresses.", + "doc_type":"usermanual", + "kw":"What Objects Does WAF Protect?,WAF Functions,User Guide", + "title":"What Objects Does WAF Protect?", + "githuburl":"" + }, + { + "uri":"waf_01_0026.html", + "product_code":"dwaf", + "code":"66", + "des":"WAF is deployed on the cloud, which is irrelevant to an OS. Therefore, WAF supports any OS. A domain name server on any OS can be connected to WAF for protection.", + "doc_type":"usermanual", + "kw":"Which OSs Does WAF Support?,WAF Functions,User Guide", + "title":"Which OSs Does WAF Support?", + "githuburl":"" + }, + { + "uri":"waf_01_0030.html", + "product_code":"dwaf", + "code":"67", + "des":"WAF provides protection at seven layers, namely, the physical layer, data link layer, network layer, transport layer, session layer, presentation layer, and application l", + "doc_type":"usermanual", + "kw":"Which Layers Does WAF Provide Protection At?,WAF Functions,User Guide", + "title":"Which Layers Does WAF Provide Protection At?", + "githuburl":"" + }, + { + "uri":"waf_01_0149.html", + "product_code":"dwaf", + "code":"68", + "des":"WAF caches only static web pages that are configured with web tamper protection and sends the cached web pages that are not tampered with to web visitors.", + "doc_type":"usermanual", + "kw":"Does WAF Support File Caching?,WAF Functions,User Guide", + "title":"Does WAF Support File Caching?", + "githuburl":"" + }, + { + "uri":"waf_01_0229.html", + "product_code":"dwaf", + "code":"69", + "des":"WAF supports access control over content at the application layer. HTTP and HTTPS are both application layer protocols.", + "doc_type":"usermanual", + "kw":"Does WAF Support Application Layer Protocol- and Content-Based Access Control?,WAF Functions,User Gu", + "title":"Does WAF Support Application Layer Protocol- and Content-Based Access Control?", + "githuburl":"" + }, + { + "uri":"waf_01_0187.html", + "product_code":"dwaf", + "code":"70", + "des":"The built-in detection of WAF checks POST data, and web shells are the files submitted in POST requests. WAF checks all data, such as forms and JSON files in POST request", + "doc_type":"usermanual", + "kw":"Can WAF Check the Body I Add to the POST Request?,WAF Functions,User Guide", + "title":"Can WAF Check the Body I Add to the POST Request?", + "githuburl":"" + }, + { + "uri":"waf_01_0257.html", + "product_code":"dwaf", + "code":"71", + "des":"No. However, you can customize a CC attack protection rule to restrict access to a specific URL on your website based on an IP address, cookie, or Referer, mitigating CC ", + "doc_type":"usermanual", + "kw":"Can WAF Limit the Access Speed of a Domain Name?,WAF Functions,User Guide", + "title":"Can WAF Limit the Access Speed of a Domain Name?", + "githuburl":"" + }, + { + "uri":"waf_01_0211.html", + "product_code":"dwaf", + "code":"72", + "des":"No. WAF can only detect and restrict source IP addresses.", + "doc_type":"usermanual", + "kw":"Can WAF Block URL Requests That Contain Special Characters?,WAF Functions,User Guide", + "title":"Can WAF Block URL Requests That Contain Special Characters?", + "githuburl":"" + }, + { + "uri":"waf_01_0280.html", + "product_code":"dwaf", + "code":"73", + "des":"WAF cannot block business-related attacks, such as spam and malicious user registrations. To prevent these attacks, configure the registration verification mechanism on y", + "doc_type":"usermanual", + "kw":"Can WAF Block Spam and Malicious User Registrations?,WAF Functions,User Guide", + "title":"Can WAF Block Spam and Malicious User Registrations?", + "githuburl":"" + }, + { + "uri":"waf_01_0212.html", + "product_code":"dwaf", + "code":"74", + "des":"If the request data for calling other APIs on the web page is included in the domain names protected by WAF, the request data passes through WAF. WAF checks the request d", + "doc_type":"usermanual", + "kw":"Can WAF Block Requests for Calling Other APIs from Web Pages?,WAF Functions,User Guide", + "title":"Can WAF Block Requests for Calling Other APIs from Web Pages?", + "githuburl":"" + }, + { + "uri":"waf_01_0027.html", + "product_code":"dwaf", + "code":"75", + "des":"WAF is deployed on the cloud.Web Application Firewall (WAF) keeps web services stable and secure. It examines all HTTP and HTTPS requests to detect and block the followin", + "doc_type":"usermanual", + "kw":"Which Web Service Framework Protocols Does WAF Support?,WAF Functions,User Guide", + "title":"Which Web Service Framework Protocols Does WAF Support?", + "githuburl":"" + }, + { + "uri":"waf_01_0329.html", + "product_code":"dwaf", + "code":"76", + "des":"Yes. WAF can protect HTTP and HTTPS applications.If a website uses the HTTP Strict Transport Security (HSTS) policy, the client (such as a browser) is forced to use HTTPS", + "doc_type":"usermanual", + "kw":"Can WAF Protect Websites Accessed Through HSTS or NTLM Authentication?,WAF Functions,User Guide", + "title":"Can WAF Protect Websites Accessed Through HSTS or NTLM Authentication?", + "githuburl":"" + }, + { + "uri":"waf_01_0345.html", + "product_code":"dwaf", + "code":"77", + "des":"WAF protects user data on the application layer. It supports cache configuration on static web pages. When a user accesses a web page, the system returns a cached page to", + "doc_type":"usermanual", + "kw":"Does WAF Cache Website Data?,WAF Functions,User Guide", + "title":"Does WAF Cache Website Data?", + "githuburl":"" + }, + { + "uri":"waf_01_0457.html", + "product_code":"dwaf", + "code":"78", + "des":"A Structured Query Language (SQL) injection is a common web attack. The attacker injects malicious SQL commands into database query strings to deceive the server into exe", + "doc_type":"usermanual", + "kw":"How Does WAF Detect SQL Injection and XSS Attacks?,WAF Functions,User Guide", + "title":"How Does WAF Detect SQL Injection and XSS Attacks?", + "githuburl":"" + }, + { + "uri":"waf_01_0293.html", + "product_code":"dwaf", + "code":"79", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"WAF Usage", + "title":"WAF Usage", + "githuburl":"" + }, + { + "uri":"waf_01_0218.html", + "product_code":"dwaf", + "code":"80", + "des":"WAF protects web application pages. After your website is connected to WAF, there is no impact on your email port or email sending or receiving.", + "doc_type":"usermanual", + "kw":"Does WAF Affect Email Ports or Email Receiving and Sending?,WAF Usage,User Guide", + "title":"Does WAF Affect Email Ports or Email Receiving and Sending?", + "githuburl":"" + }, + { + "uri":"waf_01_0062.html", + "product_code":"dwaf", + "code":"81", + "des":"After you connect a website to your WAF instance, WAF works as a reverse proxy between the client and the server. The real IP address of the server is hidden and only the", + "doc_type":"usermanual", + "kw":"How Do I Obtain the Real IP Address of a Web Visitor?,WAF Usage,User Guide", + "title":"How Do I Obtain the Real IP Address of a Web Visitor?", + "githuburl":"" + }, + { + "uri":"waf_01_0196.html", + "product_code":"dwaf", + "code":"82", + "des":"You can view security events such as file inclusion in WAF protection events to quickly locate attack sources or analyze attack events.Program developers write repeatedly", + "doc_type":"usermanual", + "kw":"What Are Local File Inclusion and Remote File Inclusion?,WAF Usage,User Guide", + "title":"What Are Local File Inclusion and Remote File Inclusion?", + "githuburl":"" + }, + { + "uri":"waf_01_0179.html", + "product_code":"dwaf", + "code":"83", + "des":"Queries Per Second (QPS) indicates the number of requests per second. For example, an HTTP GET request is also called a query. The number of requests is the total number ", + "doc_type":"usermanual", + "kw":"What Is the Difference Between QPS and the Number of Requests?,WAF Usage,User Guide", + "title":"What Is the Difference Between QPS and the Number of Requests?", + "githuburl":"" + }, + { + "uri":"waf_01_0222.html", + "product_code":"dwaf", + "code":"84", + "des":"The number of concurrent requests refers to the number of requests that the system can process simultaneously. When it comes to a website, concurrent requests refer to th", + "doc_type":"usermanual", + "kw":"What Are Concurrent Requests?,WAF Usage,User Guide", + "title":"What Are Concurrent Requests?", + "githuburl":"" + }, + { + "uri":"waf_01_0361.html", + "product_code":"dwaf", + "code":"85", + "des":"WAF preferentially forwards access requests to the single domain name. If the single domain name cannot be identified, access requests will be forwarded to the wildcard d", + "doc_type":"usermanual", + "kw":"How Does WAF Forward Access Requests When Both a Wildcard Domain Name and a Single Domain Name Are C", + "title":"How Does WAF Forward Access Requests When Both a Wildcard Domain Name and a Single Domain Name Are Connected to WAF?", + "githuburl":"" + }, + { + "uri":"waf_01_0366.html", + "product_code":"dwaf", + "code":"86", + "des":"No. After a website is connected to WAF, all website access requests are forwarded to WAF first. WAF detects and filters out malicious attack traffic, and returns normal ", + "doc_type":"usermanual", + "kw":"Does WAF Affect Data Transmission from the Internal Network to an External Network?,WAF Usage,User G", + "title":"Does WAF Affect Data Transmission from the Internal Network to an External Network?", + "githuburl":"" + }, + { + "uri":"waf_01_0124.html", + "product_code":"dwaf", + "code":"87", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Website Domain Name Access Configuration", + "title":"Website Domain Name Access Configuration", + "githuburl":"" + }, + { + "uri":"waf_01_0299.html", + "product_code":"dwaf", + "code":"88", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Domain Name and Port Configuration", + "title":"Domain Name and Port Configuration", + "githuburl":"" + }, + { + "uri":"waf_01_0176.html", + "product_code":"dwaf", + "code":"89", + "des":"After you connect a domain name or IP address of the website you want to protect to WAF, WAF works as a reverse proxy between the client and the server. The real IP addre", + "doc_type":"usermanual", + "kw":"How Do I Add a Domain Name/IP Address to WAF?,Domain Name and Port Configuration,User Guide", + "title":"How Do I Add a Domain Name/IP Address to WAF?", + "githuburl":"" + }, + { + "uri":"waf_01_0105.html", + "product_code":"dwaf", + "code":"90", + "des":"Before using WAF, you need to add domain names to be protected to WAF based on your web service protection requirements. WAF supports addition of single domain names and ", + "doc_type":"usermanual", + "kw":"How Do I Configure Domain Names to Be Protected When Adding Domain Names?,Domain Name and Port Confi", + "title":"How Do I Configure Domain Names to Be Protected When Adding Domain Names?", + "githuburl":"" + }, + { + "uri":"waf_01_0157.html", + "product_code":"dwaf", + "code":"91", + "des":"Prepare information required for connecting a domain name or IP address to WAF based on the mode of WAF instance you plan to buy.The following data is required:Domain nam", + "doc_type":"usermanual", + "kw":"What Data Is Required for Connecting a Domain Name/IP Address to WAF?,Domain Name and Port Configura", + "title":"What Data Is Required for Connecting a Domain Name/IP Address to WAF?", + "githuburl":"" + }, + { + "uri":"waf_01_0041.html", + "product_code":"dwaf", + "code":"92", + "des":"The deletion operation cannot be cancelled. Exercise caution when performing this operation.If you want to retain the policy applied to the domain name, select Retain the", + "doc_type":"usermanual", + "kw":"How Do I Safely Delete a Protected Domain Name?,Domain Name and Port Configuration,User Guide", + "title":"How Do I Safely Delete a Protected Domain Name?", + "githuburl":"" + }, + { + "uri":"waf_01_0104.html", + "product_code":"dwaf", + "code":"93", + "des":"When configuring multiple server addresses for the same domain name, pay attention to the following:For domain names mapping to non-standard portsThe client protocol, ser", + "doc_type":"usermanual", + "kw":"What Are the Precautions for Configuring Multiple Server Addresses for Backend Servers?,Domain Name ", + "title":"What Are the Precautions for Configuring Multiple Server Addresses for Backend Servers?", + "githuburl":"" + }, + { + "uri":"waf_01_0190.html", + "product_code":"dwaf", + "code":"94", + "des":"Yes. When adding a domain name to WAF, you can configure a single domain name or a wildcard domain name based on your service requirements. The details are as follows:Sin", + "doc_type":"usermanual", + "kw":"Does WAF Support Wildcard Domain Names?,Domain Name and Port Configuration,User Guide", + "title":"Does WAF Support Wildcard Domain Names?", + "githuburl":"" + }, + { + "uri":"waf_01_0301.html", + "product_code":"dwaf", + "code":"95", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Certificate Management", + "title":"Certificate Management", + "githuburl":"" + }, + { + "uri":"waf_01_0135.html", + "product_code":"dwaf", + "code":"96", + "des":"Each domain name must correspond to a certificate. A wildcard domain name can only be used for a wildcard domain certificate. If you only have single-domain certificates,", + "doc_type":"usermanual", + "kw":"How Do I Select a Certificate When Configuring a Wildcard Domain Name?,Certificate Management,User G", + "title":"How Do I Select a Certificate When Configuring a Wildcard Domain Name?", + "githuburl":"" + }, + { + "uri":"waf_01_0313.html", + "product_code":"dwaf", + "code":"97", + "des":"Only .pem certificates can be used in WAF. If the certificate is not in .pem format, convert it into .pem locally by referring to Table 1 before uploading it.Certificate ", + "doc_type":"usermanual", + "kw":"How Do I Convert a Certificate into PEM Format?,Certificate Management,User Guide", + "title":"How Do I Convert a Certificate into PEM Format?", + "githuburl":"" + }, + { + "uri":"waf_01_0127.html", + "product_code":"dwaf", + "code":"98", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Service Interruption Check", + "title":"Service Interruption Check", + "githuburl":"" + }, + { + "uri":"waf_01_0066.html", + "product_code":"dwaf", + "code":"99", + "des":"If an error, such as 404 Not Found, 502 Bad Gateway, or 504 Gateway Timeout, occurs after a domain name is connected to WAF, use the following methods to locate the cause", + "doc_type":"usermanual", + "kw":"404,502,504,How Do I Troubleshoot 404/502/504 Errors?,Service Interruption Check,User Guide", + "title":"How Do I Troubleshoot 404/502/504 Errors?", + "githuburl":"" + }, + { + "uri":"waf_01_0038.html", + "product_code":"dwaf", + "code":"100", + "des":"Once an attack hits a WAF rule, WAF will respond to the attack immediately according to the protective action (Log only or Block) you configured for the rule and display ", + "doc_type":"usermanual", + "kw":"How Do I Handle False Alarms as WAF Blocks Normal Requests to My Website?,Service Interruption Check", + "title":"How Do I Handle False Alarms as WAF Blocks Normal Requests to My Website?", + "githuburl":"" + }, + { + "uri":"waf_01_0160.html", + "product_code":"dwaf", + "code":"101", + "des":"The default timeout duration for connections between a browser and WAF is 120 seconds, which cannot be manually set.The default timeout duration for connections between W", + "doc_type":"usermanual", + "kw":"What Is the Connection Timeout Duration of WAF? Can I Manually Set the Timeout Duration?,Service Int", + "title":"What Is the Connection Timeout Duration of WAF? Can I Manually Set the Timeout Duration?", + "githuburl":"" + }, + { + "uri":"waf_01_0093.html", + "product_code":"dwaf", + "code":"102", + "des":"If your visitors receive a page similar to the one in Figure 1 when they try to access your website through a mobile phone, an incomplete certificate chain is uploaded wh", + "doc_type":"usermanual", + "kw":"Why Are HTTPS Requests Denied on Some Mobile Phones?,Service Interruption Check,User Guide", + "title":"Why Are HTTPS Requests Denied on Some Mobile Phones?", + "githuburl":"" + }, + { + "uri":"waf_01_0082.html", + "product_code":"dwaf", + "code":"103", + "des":"If the certificate provided by the certificate authority is not found in the built-in trust store on your platform and the certificate chain does not have a certificate a", + "doc_type":"usermanual", + "kw":"How Do I Fix an Incomplete Certificate Chain?,Service Interruption Check,User Guide", + "title":"How Do I Fix an Incomplete Certificate Chain?", + "githuburl":"" + }, + { + "uri":"waf_01_1082.html", + "product_code":"dwaf", + "code":"104", + "des":"After an HTTPS certificate is uploaded to the AAD or WAF console, a message is displayed indicating that the certificate and key do not match.How Do I Fix an Incomplete C", + "doc_type":"usermanual", + "kw":"Why Does My Certificate Not Match the Key?,Service Interruption Check,User Guide", + "title":"Why Does My Certificate Not Match the Key?", + "githuburl":"" + }, + { + "uri":"waf_01_0198.html", + "product_code":"dwaf", + "code":"105", + "des":"If the request contains malicious load and is intercepted by WAF, error 418 is reported when you access the domain name protected by WAF. You can view WAF protection logs", + "doc_type":"usermanual", + "kw":"Why Am I Seeing Error Code 418?,Service Interruption Check,User Guide", + "title":"Why Am I Seeing Error Code 418?", + "githuburl":"" + }, + { + "uri":"waf_01_0100.html", + "product_code":"dwaf", + "code":"106", + "des":"After your website is connected to WAF, the file visitors can upload each time cannot exceed 512 MB.To upload a file greater than 512 MB, upload the file through:IP addre", + "doc_type":"usermanual", + "kw":"How Can I Upload Files After the Website Is Connected to WAF?,Service Interruption Check,User Guide", + "title":"How Can I Upload Files After the Website Is Connected to WAF?", + "githuburl":"" + }, + { + "uri":"waf_01_0063.html", + "product_code":"dwaf", + "code":"107", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Protection Rule Configuration", + "title":"Protection Rule Configuration", + "githuburl":"" + }, + { + "uri":"waf_01_0304.html", + "product_code":"dwaf", + "code":"108", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Basic Web Protection", + "title":"Basic Web Protection", + "githuburl":"" + }, + { + "uri":"waf_01_0053.html", + "product_code":"dwaf", + "code":"109", + "des":"This FAQ guides you to switch the mode of basic web protection to Block.Perform the following operations:Log only and Block are merely modes of basic web protection. CC a", + "doc_type":"usermanual", + "kw":"How Do I Switch the Mode of Basic Web Protection from Log Only to Block?,Basic Web Protection,User G", + "title":"How Do I Switch the Mode of Basic Web Protection from Log Only to Block?", + "githuburl":"" + }, + { + "uri":"waf_01_0204.html", + "product_code":"dwaf", + "code":"110", + "des":"WAF provides three basic web protection levels: Low, Medium, and High. The default option is Medium. For details, see Table 1.", + "doc_type":"usermanual", + "kw":"Which Protection Levels Can Be Set for Basic Web Protection?,Basic Web Protection,User Guide", + "title":"Which Protection Levels Can Be Set for Basic Web Protection?", + "githuburl":"" + }, + { + "uri":"waf_01_0305.html", + "product_code":"dwaf", + "code":"111", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"CC Attack Protection Rules", + "title":"CC Attack Protection Rules", + "githuburl":"" + }, + { + "uri":"waf_01_0035.html", + "product_code":"dwaf", + "code":"112", + "des":"When a service interface is under an HTTP flood attack, you can set a CC attack protection rule on the WAF console to relieve service pressure.WAF provides the following ", + "doc_type":"usermanual", + "kw":"HTTP flood,How Do I Configure a CC Attack Protection Rule?,CC Attack Protection Rules,User Guide", + "title":"How Do I Configure a CC Attack Protection Rule?", + "githuburl":"" + }, + { + "uri":"waf_01_0036.html", + "product_code":"dwaf", + "code":"113", + "des":"During the configuration of a CC attack protection rule, if IP addresses cannot identify users precisely, for example, when many users share an egress IP address, use Coo", + "doc_type":"usermanual", + "kw":"When Is Cookie Used to Identify Users?,CC Attack Protection Rules,User Guide", + "title":"When Is Cookie Used to Identify Users?", + "githuburl":"" + }, + { + "uri":"waf_01_0308.html", + "product_code":"dwaf", + "code":"114", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Anti-Crawler Protection", + "title":"Anti-Crawler Protection", + "githuburl":"" + }, + { + "uri":"waf_01_0254.html", + "product_code":"dwaf", + "code":"115", + "des":"After JavaScript anti-crawler is enabled, WAF returns a piece of JavaScript code to the client when the client sends a request. If the client sends a normal request to th", + "doc_type":"usermanual", + "kw":"Why Is the Requested Page Unable to Load After JavaScript Anti-Crawler Is Enabled?,Anti-Crawler Prot", + "title":"Why Is the Requested Page Unable to Load After JavaScript Anti-Crawler Is Enabled?", + "githuburl":"" + }, + { + "uri":"waf_01_0309.html", + "product_code":"dwaf", + "code":"116", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Others", + "title":"Others", + "githuburl":"" + }, + { + "uri":"waf_01_0102.html", + "product_code":"dwaf", + "code":"117", + "des":"Normally, all requests destined for your site will pass through WAF. However, if your site is using CDN and WAF, the WAF policy targeted at the requests for caching stati", + "doc_type":"usermanual", + "kw":"In Which Situations Will the WAF Policies Fail?,Others,User Guide", + "title":"In Which Situations Will the WAF Policies Fail?", + "githuburl":"" + }, + { + "uri":"waf_01_0151.html", + "product_code":"dwaf", + "code":"118", + "des":"All paths configured for protection rules of WAF are case-sensitive.", + "doc_type":"usermanual", + "kw":"Is the Path of a WAF Protection Rule Case-sensitive?,Others,User Guide", + "title":"Is the Path of a WAF Protection Rule Case-sensitive?", + "githuburl":"" + }, + { + "uri":"waf_01_0028.html", + "product_code":"dwaf", + "code":"119", + "des":"The protection rules supported by WAF are described below.Basic Web ProtectionWAF can defend against common web attacks, such as SQL injection, XSS, web shells, and Troja", + "doc_type":"usermanual", + "kw":"What Protection Rules Does WAF Support?,Others,User Guide", + "title":"What Protection Rules Does WAF Support?", + "githuburl":"" + }, + { + "uri":"waf_01_0265.html", + "product_code":"dwaf", + "code":"120", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"usermanual", + "kw":"Change History,User Guide", + "title":"Change History", + "githuburl":"" + } +] \ No newline at end of file diff --git a/docs/wafd/umn/CLASS.TXT.json b/docs/wafd/umn/CLASS.TXT.json new file mode 100644 index 000000000..d69ade316 --- /dev/null +++ b/docs/wafd/umn/CLASS.TXT.json @@ -0,0 +1,1082 @@ +[ + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Service Overview", + "uri":"waf_01_0064.html", + "doc_type":"usermanual", + "p_code":"", + "code":"1" + }, + { + "desc":"Web Application Firewall (WAF) keeps web services stable and secure. It examines all HTTP and HTTPS requests to detect and block the following attacks: Structured Query L", + "product_code":"dwaf", + "title":"What Is Web Application Firewall?", + "uri":"waf_01_0045.html", + "doc_type":"usermanual", + "p_code":"1", + "code":"2" + }, + { + "desc":"WAF is deployed in dedicated mode. The following tables describe specifications and functions of the dedicated WAF instances.Table 1 describes dedicated WAF instances.For", + "product_code":"dwaf", + "title":"Specifications", + "uri":"waf_01_0272.html", + "doc_type":"usermanual", + "p_code":"1", + "code":"3" + }, + { + "desc":"WAF makes it easier for you to handle web security risks.WAF keeps applications stable and secure. It examines HTTP and HTTPS requests to detect and block attacks, such a", + "product_code":"dwaf", + "title":"Functions", + "uri":"waf_01_0094.html", + "doc_type":"usermanual", + "p_code":"1", + "code":"4" + }, + { + "desc":"WAF examines web traffic from multiple dimensions to accurately identify malicious requests and filter attacks, reducing the risks of data being tampered with or stolen.W", + "product_code":"dwaf", + "title":"Product Advantages", + "uri":"waf_01_0065.html", + "doc_type":"usermanual", + "p_code":"1", + "code":"5" + }, + { + "desc":"WAF helps you defend against common web attacks, such as command injection and sensitive file access.Countless malicious requests may be sent to service interfaces during", + "product_code":"dwaf", + "title":"Application Scenarios", + "uri":"waf_01_0046.html", + "doc_type":"usermanual", + "p_code":"1", + "code":"6" + }, + { + "desc":"If you need to assign different permissions to employees in your enterprise to access your WAF resources, IAM is a good choice for fine-grained permissions management. IA", + "product_code":"dwaf", + "title":"WAF Permissions Management", + "uri":"waf_01_0052.html", + "doc_type":"usermanual", + "p_code":"1", + "code":"7" + }, + { + "desc":"This topic describes WAF and other cloud services.Cloud Eye monitors the indicators of the dedicated WAF, so that you can understand the protection status of the dedicate", + "product_code":"dwaf", + "title":"WAF and Other Services", + "uri":"waf_01_0051.html", + "doc_type":"usermanual", + "p_code":"1", + "code":"8" + }, + { + "desc":"Sort out all website services you want to protect with WAF. This helps you learn about your workloads and specific data of your workloads so that you can choose and confi", + "product_code":"dwaf", + "title":"Overview", + "uri":"waf_01_0071.html", + "doc_type":"usermanual", + "p_code":"", + "code":"9" + }, + { + "desc":"If your service servers are deployed on the cloud, you can buy dedicated WAF instances (or dedicated WAF engines) to protect important websites through domain names or to", + "product_code":"dwaf", + "title":"Applying for a Dedicated WAF Instance", + "uri":"waf_01_1072.html", + "doc_type":"usermanual", + "p_code":"", + "code":"10" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Enabling WAF Protection", + "uri":"waf_01_0070.html", + "doc_type":"usermanual", + "p_code":"", + "code":"11" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Connecting a Website to WAF", + "uri":"waf_01_0249.html", + "doc_type":"usermanual", + "p_code":"11", + "code":"12" + }, + { + "desc":"If your service servers are deployed on the cloud, you can add the domain name or IP address of the website to WAF so that the website traffic is forwarded to WAF for ins", + "product_code":"dwaf", + "title":"Step 1: Add a Website to WAF", + "uri":"waf_01_0250.html", + "doc_type":"usermanual", + "p_code":"12", + "code":"13" + }, + { + "desc":"To ensure your dedicated WAF instance reliability, after you add a website to it, use Elastic Load Balance (ELB) to configure a load balancer and a health check for the d", + "product_code":"dwaf", + "title":"Step 2: Configure a Load Balancer", + "uri":"waf_01_0251.html", + "doc_type":"usermanual", + "p_code":"12", + "code":"14" + }, + { + "desc":"After you configure a load balancer for your dedicated WAF instance, you need to unbind the EIP from the origin server and then bind this EIP to the load balancer you con", + "product_code":"dwaf", + "title":"Step 3: Bind an EIP to a Load Balancer", + "uri":"waf_01_0252.html", + "doc_type":"usermanual", + "p_code":"12", + "code":"15" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Website Domain Name Management", + "uri":"waf_01_0067.html", + "doc_type":"usermanual", + "p_code":"", + "code":"16" + }, + { + "desc":"This topic describes how to view the basic information about a protected website, switch WAF working mode, and delete a domain name of a protected website from WAF.A webs", + "product_code":"dwaf", + "title":"Viewing Basic Information", + "uri":"waf_01_0020.html", + "doc_type":"usermanual", + "p_code":"16", + "code":"17" + }, + { + "desc":"You can change the working mode of WAF. WAF can work in Enabled or Suspended mode.The domain name of the website to be protected has been connected to WAF.Enabled: In thi", + "product_code":"dwaf", + "title":"Switching WAF Working Mode", + "uri":"waf_01_0003.html", + "doc_type":"usermanual", + "p_code":"16", + "code":"18" + }, + { + "desc":"Transport Layer Security (TLS) provides confidentiality and ensures data integrity for data sent between applications over the Internet. HTTPS is a network protocol const", + "product_code":"dwaf", + "title":"Configuring PCI DSS/3DS Certification Check and TLS Version", + "uri":"waf_01_0169.html", + "doc_type":"usermanual", + "p_code":"16", + "code":"19" + }, + { + "desc":"If you want to set a timeout duration for each request between your WAF instance and origin server, enable Timeout Settings and specify WAF-to-Server connection timeout (", + "product_code":"dwaf", + "title":"Configuring Connection Timeout", + "uri":"waf_01_1171.html", + "doc_type":"usermanual", + "p_code":"16", + "code":"20" + }, + { + "desc":"If a large number of 502 Bad Gateway and 504 Gateway Timeout errors are detected, you can enable WAF breakdown protection and connection protection to let WAF suspend you", + "product_code":"dwaf", + "title":"Configuring Connection Protection", + "uri":"waf_01_1172.html", + "doc_type":"usermanual", + "p_code":"16", + "code":"21" + }, + { + "desc":"If you set Client Protocol to HTTPS when you add a website to WAF, upload a certificate and use it for your website.If your website certificate is about to expire, purcha", + "product_code":"dwaf", + "title":"Updating a Certificate", + "uri":"waf_01_0262.html", + "doc_type":"usermanual", + "p_code":"16", + "code":"22" + }, + { + "desc":"WAF allows you to configure traffic identifiers by IP address, session, or user tag to block possibly malicious requests from known attack sources based on IP address, Co", + "product_code":"dwaf", + "title":"Configuring a Traffic Identifier for a Known Attack Source", + "uri":"waf_01_0270.html", + "doc_type":"usermanual", + "p_code":"16", + "code":"23" + }, + { + "desc":"This topic describes how to edit or add server information for a website to be protected.Applicable scenarios:Modify server information, including Client Protocol, Server", + "product_code":"dwaf", + "title":"Editing Server Information", + "uri":"waf_01_0001.html", + "doc_type":"usermanual", + "p_code":"16", + "code":"24" + }, + { + "desc":"If a visitor is blocked by WAF, the Default block page of WAF is returned by default. You can also configure Custom or Redirection for the block page to be returned as re", + "product_code":"dwaf", + "title":"Modifying the Alarm Page", + "uri":"waf_01_0154.html", + "doc_type":"usermanual", + "p_code":"16", + "code":"25" + }, + { + "desc":"This topic describes how to remove a website from WAF if you no longer need to protect it.A website domain name has been added to WAF.It takes about a minute to remove a ", + "product_code":"dwaf", + "title":"Removing a Protected Website from WAF", + "uri":"waf_01_0005.html", + "doc_type":"usermanual", + "p_code":"16", + "code":"26" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Certificate Management", + "uri":"waf_01_0261.html", + "doc_type":"usermanual", + "p_code":"", + "code":"27" + }, + { + "desc":"If you select HTTPS for Client Protocol when you add a website to WAF, a certificate must be associated with the website.You can upload a certificate to WAF. Then you can", + "product_code":"dwaf", + "title":"Uploading a Certificate", + "uri":"waf_01_0078.html", + "doc_type":"usermanual", + "p_code":"27", + "code":"28" + }, + { + "desc":"If you configure Client Protocol to HTTPS for your website, the website needs an SSL certificate. This topic describes how to bind an SSL certificate that you have upload", + "product_code":"dwaf", + "title":"Binding a Certificate to a Protected Website", + "uri":"waf_01_0367.html", + "doc_type":"usermanual", + "p_code":"27", + "code":"29" + }, + { + "desc":"This topic describes how to delete an expired or invalid certificate.The certificate you want to delete is not bound to a protected website.If a certificate to be deleted", + "product_code":"dwaf", + "title":"Deleting a Certificate", + "uri":"waf_01_0263.html", + "doc_type":"usermanual", + "p_code":"27", + "code":"30" + }, + { + "desc":"This topic describes how to view certificate details, including the certificate name, domain name a certificate is used for, and expiration time.You have created or pushe", + "product_code":"dwaf", + "title":"Viewing Certificate Information", + "uri":"waf_01_0282.html", + "doc_type":"usermanual", + "p_code":"27", + "code":"31" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Rule Configuration", + "uri":"waf_01_0007.html", + "doc_type":"usermanual", + "p_code":"", + "code":"32" + }, + { + "desc":"The built-in protection rules of WAF help you defend against common web application attacks, including XSS attacks, SQL injection, crawlers, and web shells. You can custo", + "product_code":"dwaf", + "title":"Configuration Guidance", + "uri":"waf_01_0129.html", + "doc_type":"usermanual", + "p_code":"32", + "code":"33" + }, + { + "desc":"After this function is enabled, WAF can defend against common web attacks, such as SQL injections, XSS, remote overflow vulnerabilities, file inclusions, Bash vulnerabili", + "product_code":"dwaf", + "title":"Configuring Basic Web Protection Rules", + "uri":"waf_01_0008.html", + "doc_type":"usermanual", + "p_code":"32", + "code":"34" + }, + { + "desc":"You can customize a CC attack protection rule to restrict access to a specific URL on your website based on an IP address, cookie, or Referer, mitigating CC attacks. To m", + "product_code":"dwaf", + "title":"Configuring a CC Attack Protection Rule", + "uri":"waf_01_0009.html", + "doc_type":"usermanual", + "p_code":"32", + "code":"35" + }, + { + "desc":"WAF allows you to customize protection rules by combining HTTP headers, cookies, URLs, request parameters, and client IP addresses.You can combine common HTTP fields, suc", + "product_code":"dwaf", + "title":"Configuring a Precise Protection Rule", + "uri":"waf_01_0010.html", + "doc_type":"usermanual", + "p_code":"32", + "code":"36" + }, + { + "desc":"This topic describes how to create a reference table to batch configure protection metrics of a single type, such as Path, User Agent, IP, Params, Cookie, Referer, and He", + "product_code":"dwaf", + "title":"Adding a Reference Table", + "uri":"waf_01_0081.html", + "doc_type":"usermanual", + "p_code":"32", + "code":"37" + }, + { + "desc":"You can configure blacklist and whitelist rules to block, log only, or allow access requests from specific IP addresses or IP address ranges.A website has been added to W", + "product_code":"dwaf", + "title":"Configuring an IP Address Blacklist or Whitelist Rule", + "uri":"waf_01_0012.html", + "doc_type":"usermanual", + "p_code":"32", + "code":"38" + }, + { + "desc":"If WAF blocks a malicious request by IP address, Cookie, or Params, you can configure a known attack source rule to let WAF automatically block all requests from the atta", + "product_code":"dwaf", + "title":"Configuring a Known Attack Source Rule", + "uri":"waf_01_0271.html", + "doc_type":"usermanual", + "p_code":"32", + "code":"39" + }, + { + "desc":"This topic describes how to configure a geolocation access control rule. A geolocation access control rule allows you to control IP addresses forwarded from or to specifi", + "product_code":"dwaf", + "title":"Configuring a Geolocation Access Control Rule", + "uri":"waf_01_0013.html", + "doc_type":"usermanual", + "p_code":"32", + "code":"40" + }, + { + "desc":"WAF can cache configuration for static web pages of websites. After you configure a web tamper protection rule, WAF can:Return directly the cached web page to the normal ", + "product_code":"dwaf", + "title":"Configuring a Web Tamper Protection Rule", + "uri":"waf_01_0014.html", + "doc_type":"usermanual", + "p_code":"32", + "code":"41" + }, + { + "desc":"You can configure website anti-crawler protection rules to protect against search engines, scanners, script tools, and other crawlers, and use JavaScript to create custom", + "product_code":"dwaf", + "title":"Configuring Anti-Crawler Rules", + "uri":"waf_01_0015.html", + "doc_type":"usermanual", + "p_code":"32", + "code":"42" + }, + { + "desc":"You can add two types of information leakage prevention rules.Sensitive information filtering: prevents disclosure of sensitive information (such as ID numbers, phone num", + "product_code":"dwaf", + "title":"Configuring an Information Leakage Prevention Rule", + "uri":"waf_01_0054.html", + "doc_type":"usermanual", + "p_code":"32", + "code":"43" + }, + { + "desc":"Once an attack hits a WAF basic web protection rule or a feature-library anti-crawler rule, WAF will respond to the attack immediately according to the protective action ", + "product_code":"dwaf", + "title":"Configuring a Global Protection Whitelist (Formerly False Alarm Masking) Rule", + "uri":"waf_01_0016.html", + "doc_type":"usermanual", + "p_code":"32", + "code":"44" + }, + { + "desc":"This topic describes how to configure data masking rules. You can configure data masking rules to prevent sensitive data such as passwords from being displayed in event l", + "product_code":"dwaf", + "title":"Configuring a Data Masking Rule", + "uri":"waf_01_0017.html", + "doc_type":"usermanual", + "p_code":"32", + "code":"45" + }, + { + "desc":"This topic describes how to view event logs, including attack and request statistics, event distribution, top 10 attacked domain names, top 10 attack source IP addresses,", + "product_code":"dwaf", + "title":"Dashboard", + "uri":"waf_01_0021.html", + "doc_type":"usermanual", + "p_code":"", + "code":"46" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Event Management", + "uri":"waf_01_0018.html", + "doc_type":"usermanual", + "p_code":"", + "code":"47" + }, + { + "desc":"On the Events page, you can view events generated for blocked attacks and logged only attacks. You can view details of WAF events, including the time an event occurs, ori", + "product_code":"dwaf", + "title":"Viewing Protection Event Logs", + "uri":"waf_01_0156.html", + "doc_type":"usermanual", + "p_code":"47", + "code":"48" + }, + { + "desc":"If you confirm that an attack event on the Events page is a false alarm, you can handle the event as false alarm by ignoring the URL and rule ID in basic web protection, ", + "product_code":"dwaf", + "title":"Handling False Alarms", + "uri":"waf_01_0024.html", + "doc_type":"usermanual", + "p_code":"47", + "code":"49" + }, + { + "desc":"This topic describes how to download events (logged and blocked events) data for the last five days. One or more CSV files containing the event data of the current day wi", + "product_code":"dwaf", + "title":"Downloading Events Data", + "uri":"waf_01_0077.html", + "doc_type":"usermanual", + "p_code":"47", + "code":"50" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Policy Management", + "uri":"waf_01_0055.html", + "doc_type":"usermanual", + "p_code":"", + "code":"51" + }, + { + "desc":"A policy is a combination of rules, such as basic web protection, blacklist, whitelist, and precise protection rules. A policy can be applied to multiple domain names, bu", + "product_code":"dwaf", + "title":"Adding a Policy", + "uri":"waf_01_0074.html", + "doc_type":"usermanual", + "p_code":"51", + "code":"52" + }, + { + "desc":"This topic describes how to add rules to one or more policies.A website has been added to WAF.To add a CC attack protection rule, see Table 1.To add a precise protection ", + "product_code":"dwaf", + "title":"Adding Rules to One or More Policies", + "uri":"waf_01_0061.html", + "doc_type":"usermanual", + "p_code":"51", + "code":"53" + }, + { + "desc":"This topic describes how to apply a policy to your protected website.A website has been added to WAF.A protected domain name can use only one policy, but one policy can b", + "product_code":"dwaf", + "title":"Applying a Policy to Your Website", + "uri":"waf_01_0075.html", + "doc_type":"usermanual", + "p_code":"51", + "code":"54" + }, + { + "desc":"This topic describes how to manage your dedicated WAF instances (or engines), including viewing instance information, upgrading the instance edition, or deleting an insta", + "product_code":"dwaf", + "title":"Dedicated WAF Engine Management", + "uri":"waf_01_0253.html", + "doc_type":"usermanual", + "p_code":"", + "code":"55" + }, + { + "desc":"On the Product Details page, you can view information about all your WAF instances, including the edition, domain quotas, and specifications.You have purchased a WAF inst", + "product_code":"dwaf", + "title":"Viewing Product Details", + "uri":"waf_01_0319.html", + "doc_type":"usermanual", + "p_code":"", + "code":"56" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Permissions Management", + "uri":"waf_01_0096.html", + "doc_type":"usermanual", + "p_code":"", + "code":"57" + }, + { + "desc":"Custom policies can be created to supplement the system-defined policies of WAF.Example 1: Allowing users to query the protected domain list{\n \"Version\": \"1.1\",\n ", + "product_code":"dwaf", + "title":"WAF Custom Policies", + "uri":"waf_01_0243.html", + "doc_type":"usermanual", + "p_code":"57", + "code":"58" + }, + { + "desc":"This topic describes fine-grained permissions management for your WAF instances. If your account does not need individual IAM users, then you may skip over this topic.By ", + "product_code":"dwaf", + "title":"WAF Permissions and Supported Actions", + "uri":"waf_01_0244.html", + "doc_type":"usermanual", + "p_code":"57", + "code":"59" + }, + { + "desc":"This topic describes metrics reported by dedicated WAF to Cloud Eye as well as their namespaces and dimensions. You can use APIs provided by Cloud Eye to query the metric", + "product_code":"dwaf", + "title":"Monitored Metrics", + "uri":"waf_01_1372.html", + "doc_type":"usermanual", + "p_code":"", + "code":"60" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"FAQs", + "uri":"waf_01_0022.html", + "doc_type":"usermanual", + "p_code":"", + "code":"61" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"About WAF", + "uri":"waf_01_0025.html", + "doc_type":"usermanual", + "p_code":"61", + "code":"62" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"WAF Functions", + "uri":"waf_01_0292.html", + "doc_type":"usermanual", + "p_code":"62", + "code":"63" + }, + { + "desc":"A WAF instance can protect IP addresses.A dedicated or load balancing WAF instance can protect websites through either domain names or IP addresses.The origin server IP a", + "product_code":"dwaf", + "title":"Can WAF Protect an IP Address?", + "uri":"waf_01_0029.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"64" + }, + { + "desc":"WAF can protect domain names or IP addresses.", + "product_code":"dwaf", + "title":"What Objects Does WAF Protect?", + "uri":"waf_01_0134.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"65" + }, + { + "desc":"WAF is deployed on the cloud, which is irrelevant to an OS. Therefore, WAF supports any OS. A domain name server on any OS can be connected to WAF for protection.", + "product_code":"dwaf", + "title":"Which OSs Does WAF Support?", + "uri":"waf_01_0026.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"66" + }, + { + "desc":"WAF provides protection at seven layers, namely, the physical layer, data link layer, network layer, transport layer, session layer, presentation layer, and application l", + "product_code":"dwaf", + "title":"Which Layers Does WAF Provide Protection At?", + "uri":"waf_01_0030.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"67" + }, + { + "desc":"WAF caches only static web pages that are configured with web tamper protection and sends the cached web pages that are not tampered with to web visitors.", + "product_code":"dwaf", + "title":"Does WAF Support File Caching?", + "uri":"waf_01_0149.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"68" + }, + { + "desc":"WAF supports access control over content at the application layer. HTTP and HTTPS are both application layer protocols.", + "product_code":"dwaf", + "title":"Does WAF Support Application Layer Protocol- and Content-Based Access Control?", + "uri":"waf_01_0229.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"69" + }, + { + "desc":"The built-in detection of WAF checks POST data, and web shells are the files submitted in POST requests. WAF checks all data, such as forms and JSON files in POST request", + "product_code":"dwaf", + "title":"Can WAF Check the Body I Add to the POST Request?", + "uri":"waf_01_0187.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"70" + }, + { + "desc":"No. However, you can customize a CC attack protection rule to restrict access to a specific URL on your website based on an IP address, cookie, or Referer, mitigating CC ", + "product_code":"dwaf", + "title":"Can WAF Limit the Access Speed of a Domain Name?", + "uri":"waf_01_0257.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"71" + }, + { + "desc":"No. WAF can only detect and restrict source IP addresses.", + "product_code":"dwaf", + "title":"Can WAF Block URL Requests That Contain Special Characters?", + "uri":"waf_01_0211.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"72" + }, + { + "desc":"WAF cannot block business-related attacks, such as spam and malicious user registrations. To prevent these attacks, configure the registration verification mechanism on y", + "product_code":"dwaf", + "title":"Can WAF Block Spam and Malicious User Registrations?", + "uri":"waf_01_0280.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"73" + }, + { + "desc":"If the request data for calling other APIs on the web page is included in the domain names protected by WAF, the request data passes through WAF. WAF checks the request d", + "product_code":"dwaf", + "title":"Can WAF Block Requests for Calling Other APIs from Web Pages?", + "uri":"waf_01_0212.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"74" + }, + { + "desc":"WAF is deployed on the cloud.Web Application Firewall (WAF) keeps web services stable and secure. It examines all HTTP and HTTPS requests to detect and block the followin", + "product_code":"dwaf", + "title":"Which Web Service Framework Protocols Does WAF Support?", + "uri":"waf_01_0027.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"75" + }, + { + "desc":"Yes. WAF can protect HTTP and HTTPS applications.If a website uses the HTTP Strict Transport Security (HSTS) policy, the client (such as a browser) is forced to use HTTPS", + "product_code":"dwaf", + "title":"Can WAF Protect Websites Accessed Through HSTS or NTLM Authentication?", + "uri":"waf_01_0329.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"76" + }, + { + "desc":"WAF protects user data on the application layer. It supports cache configuration on static web pages. When a user accesses a web page, the system returns a cached page to", + "product_code":"dwaf", + "title":"Does WAF Cache Website Data?", + "uri":"waf_01_0345.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"77" + }, + { + "desc":"A Structured Query Language (SQL) injection is a common web attack. The attacker injects malicious SQL commands into database query strings to deceive the server into exe", + "product_code":"dwaf", + "title":"How Does WAF Detect SQL Injection and XSS Attacks?", + "uri":"waf_01_0457.html", + "doc_type":"usermanual", + "p_code":"63", + "code":"78" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"WAF Usage", + "uri":"waf_01_0293.html", + "doc_type":"usermanual", + "p_code":"62", + "code":"79" + }, + { + "desc":"WAF protects web application pages. After your website is connected to WAF, there is no impact on your email port or email sending or receiving.", + "product_code":"dwaf", + "title":"Does WAF Affect Email Ports or Email Receiving and Sending?", + "uri":"waf_01_0218.html", + "doc_type":"usermanual", + "p_code":"79", + "code":"80" + }, + { + "desc":"After you connect a website to your WAF instance, WAF works as a reverse proxy between the client and the server. The real IP address of the server is hidden and only the", + "product_code":"dwaf", + "title":"How Do I Obtain the Real IP Address of a Web Visitor?", + "uri":"waf_01_0062.html", + "doc_type":"usermanual", + "p_code":"79", + "code":"81" + }, + { + "desc":"You can view security events such as file inclusion in WAF protection events to quickly locate attack sources or analyze attack events.Program developers write repeatedly", + "product_code":"dwaf", + "title":"What Are Local File Inclusion and Remote File Inclusion?", + "uri":"waf_01_0196.html", + "doc_type":"usermanual", + "p_code":"79", + "code":"82" + }, + { + "desc":"Queries Per Second (QPS) indicates the number of requests per second. For example, an HTTP GET request is also called a query. The number of requests is the total number ", + "product_code":"dwaf", + "title":"What Is the Difference Between QPS and the Number of Requests?", + "uri":"waf_01_0179.html", + "doc_type":"usermanual", + "p_code":"79", + "code":"83" + }, + { + "desc":"The number of concurrent requests refers to the number of requests that the system can process simultaneously. When it comes to a website, concurrent requests refer to th", + "product_code":"dwaf", + "title":"What Are Concurrent Requests?", + "uri":"waf_01_0222.html", + "doc_type":"usermanual", + "p_code":"79", + "code":"84" + }, + { + "desc":"WAF preferentially forwards access requests to the single domain name. If the single domain name cannot be identified, access requests will be forwarded to the wildcard d", + "product_code":"dwaf", + "title":"How Does WAF Forward Access Requests When Both a Wildcard Domain Name and a Single Domain Name Are Connected to WAF?", + "uri":"waf_01_0361.html", + "doc_type":"usermanual", + "p_code":"79", + "code":"85" + }, + { + "desc":"No. After a website is connected to WAF, all website access requests are forwarded to WAF first. WAF detects and filters out malicious attack traffic, and returns normal ", + "product_code":"dwaf", + "title":"Does WAF Affect Data Transmission from the Internal Network to an External Network?", + "uri":"waf_01_0366.html", + "doc_type":"usermanual", + "p_code":"79", + "code":"86" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Website Domain Name Access Configuration", + "uri":"waf_01_0124.html", + "doc_type":"usermanual", + "p_code":"61", + "code":"87" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Domain Name and Port Configuration", + "uri":"waf_01_0299.html", + "doc_type":"usermanual", + "p_code":"87", + "code":"88" + }, + { + "desc":"After you connect a domain name or IP address of the website you want to protect to WAF, WAF works as a reverse proxy between the client and the server. The real IP addre", + "product_code":"dwaf", + "title":"How Do I Add a Domain Name/IP Address to WAF?", + "uri":"waf_01_0176.html", + "doc_type":"usermanual", + "p_code":"88", + "code":"89" + }, + { + "desc":"Before using WAF, you need to add domain names to be protected to WAF based on your web service protection requirements. WAF supports addition of single domain names and ", + "product_code":"dwaf", + "title":"How Do I Configure Domain Names to Be Protected When Adding Domain Names?", + "uri":"waf_01_0105.html", + "doc_type":"usermanual", + "p_code":"88", + "code":"90" + }, + { + "desc":"Prepare information required for connecting a domain name or IP address to WAF based on the mode of WAF instance you plan to buy.The following data is required:Domain nam", + "product_code":"dwaf", + "title":"What Data Is Required for Connecting a Domain Name/IP Address to WAF?", + "uri":"waf_01_0157.html", + "doc_type":"usermanual", + "p_code":"88", + "code":"91" + }, + { + "desc":"The deletion operation cannot be cancelled. Exercise caution when performing this operation.If you want to retain the policy applied to the domain name, select Retain the", + "product_code":"dwaf", + "title":"How Do I Safely Delete a Protected Domain Name?", + "uri":"waf_01_0041.html", + "doc_type":"usermanual", + "p_code":"88", + "code":"92" + }, + { + "desc":"When configuring multiple server addresses for the same domain name, pay attention to the following:For domain names mapping to non-standard portsThe client protocol, ser", + "product_code":"dwaf", + "title":"What Are the Precautions for Configuring Multiple Server Addresses for Backend Servers?", + "uri":"waf_01_0104.html", + "doc_type":"usermanual", + "p_code":"88", + "code":"93" + }, + { + "desc":"Yes. When adding a domain name to WAF, you can configure a single domain name or a wildcard domain name based on your service requirements. The details are as follows:Sin", + "product_code":"dwaf", + "title":"Does WAF Support Wildcard Domain Names?", + "uri":"waf_01_0190.html", + "doc_type":"usermanual", + "p_code":"88", + "code":"94" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Certificate Management", + "uri":"waf_01_0301.html", + "doc_type":"usermanual", + "p_code":"87", + "code":"95" + }, + { + "desc":"Each domain name must correspond to a certificate. A wildcard domain name can only be used for a wildcard domain certificate. If you only have single-domain certificates,", + "product_code":"dwaf", + "title":"How Do I Select a Certificate When Configuring a Wildcard Domain Name?", + "uri":"waf_01_0135.html", + "doc_type":"usermanual", + "p_code":"95", + "code":"96" + }, + { + "desc":"Only .pem certificates can be used in WAF. If the certificate is not in .pem format, convert it into .pem locally by referring to Table 1 before uploading it.Certificate ", + "product_code":"dwaf", + "title":"How Do I Convert a Certificate into PEM Format?", + "uri":"waf_01_0313.html", + "doc_type":"usermanual", + "p_code":"95", + "code":"97" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Service Interruption Check", + "uri":"waf_01_0127.html", + "doc_type":"usermanual", + "p_code":"61", + "code":"98" + }, + { + "desc":"If an error, such as 404 Not Found, 502 Bad Gateway, or 504 Gateway Timeout, occurs after a domain name is connected to WAF, use the following methods to locate the cause", + "product_code":"dwaf", + "title":"How Do I Troubleshoot 404/502/504 Errors?", + "uri":"waf_01_0066.html", + "doc_type":"usermanual", + "p_code":"98", + "code":"99" + }, + { + "desc":"Once an attack hits a WAF rule, WAF will respond to the attack immediately according to the protective action (Log only or Block) you configured for the rule and display ", + "product_code":"dwaf", + "title":"How Do I Handle False Alarms as WAF Blocks Normal Requests to My Website?", + "uri":"waf_01_0038.html", + "doc_type":"usermanual", + "p_code":"98", + "code":"100" + }, + { + "desc":"The default timeout duration for connections between a browser and WAF is 120 seconds, which cannot be manually set.The default timeout duration for connections between W", + "product_code":"dwaf", + "title":"What Is the Connection Timeout Duration of WAF? Can I Manually Set the Timeout Duration?", + "uri":"waf_01_0160.html", + "doc_type":"usermanual", + "p_code":"98", + "code":"101" + }, + { + "desc":"If your visitors receive a page similar to the one in Figure 1 when they try to access your website through a mobile phone, an incomplete certificate chain is uploaded wh", + "product_code":"dwaf", + "title":"Why Are HTTPS Requests Denied on Some Mobile Phones?", + "uri":"waf_01_0093.html", + "doc_type":"usermanual", + "p_code":"98", + "code":"102" + }, + { + "desc":"If the certificate provided by the certificate authority is not found in the built-in trust store on your platform and the certificate chain does not have a certificate a", + "product_code":"dwaf", + "title":"How Do I Fix an Incomplete Certificate Chain?", + "uri":"waf_01_0082.html", + "doc_type":"usermanual", + "p_code":"98", + "code":"103" + }, + { + "desc":"After an HTTPS certificate is uploaded to the AAD or WAF console, a message is displayed indicating that the certificate and key do not match.How Do I Fix an Incomplete C", + "product_code":"dwaf", + "title":"Why Does My Certificate Not Match the Key?", + "uri":"waf_01_1082.html", + "doc_type":"usermanual", + "p_code":"98", + "code":"104" + }, + { + "desc":"If the request contains malicious load and is intercepted by WAF, error 418 is reported when you access the domain name protected by WAF. You can view WAF protection logs", + "product_code":"dwaf", + "title":"Why Am I Seeing Error Code 418?", + "uri":"waf_01_0198.html", + "doc_type":"usermanual", + "p_code":"98", + "code":"105" + }, + { + "desc":"After your website is connected to WAF, the file visitors can upload each time cannot exceed 512 MB.To upload a file greater than 512 MB, upload the file through:IP addre", + "product_code":"dwaf", + "title":"How Can I Upload Files After the Website Is Connected to WAF?", + "uri":"waf_01_0100.html", + "doc_type":"usermanual", + "p_code":"98", + "code":"106" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Protection Rule Configuration", + "uri":"waf_01_0063.html", + "doc_type":"usermanual", + "p_code":"61", + "code":"107" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Basic Web Protection", + "uri":"waf_01_0304.html", + "doc_type":"usermanual", + "p_code":"107", + "code":"108" + }, + { + "desc":"This FAQ guides you to switch the mode of basic web protection to Block.Perform the following operations:Log only and Block are merely modes of basic web protection. CC a", + "product_code":"dwaf", + "title":"How Do I Switch the Mode of Basic Web Protection from Log Only to Block?", + "uri":"waf_01_0053.html", + "doc_type":"usermanual", + "p_code":"108", + "code":"109" + }, + { + "desc":"WAF provides three basic web protection levels: Low, Medium, and High. The default option is Medium. For details, see Table 1.", + "product_code":"dwaf", + "title":"Which Protection Levels Can Be Set for Basic Web Protection?", + "uri":"waf_01_0204.html", + "doc_type":"usermanual", + "p_code":"108", + "code":"110" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"CC Attack Protection Rules", + "uri":"waf_01_0305.html", + "doc_type":"usermanual", + "p_code":"107", + "code":"111" + }, + { + "desc":"When a service interface is under an HTTP flood attack, you can set a CC attack protection rule on the WAF console to relieve service pressure.WAF provides the following ", + "product_code":"dwaf", + "title":"How Do I Configure a CC Attack Protection Rule?", + "uri":"waf_01_0035.html", + "doc_type":"usermanual", + "p_code":"111", + "code":"112" + }, + { + "desc":"During the configuration of a CC attack protection rule, if IP addresses cannot identify users precisely, for example, when many users share an egress IP address, use Coo", + "product_code":"dwaf", + "title":"When Is Cookie Used to Identify Users?", + "uri":"waf_01_0036.html", + "doc_type":"usermanual", + "p_code":"111", + "code":"113" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Anti-Crawler Protection", + "uri":"waf_01_0308.html", + "doc_type":"usermanual", + "p_code":"107", + "code":"114" + }, + { + "desc":"After JavaScript anti-crawler is enabled, WAF returns a piece of JavaScript code to the client when the client sends a request. If the client sends a normal request to th", + "product_code":"dwaf", + "title":"Why Is the Requested Page Unable to Load After JavaScript Anti-Crawler Is Enabled?", + "uri":"waf_01_0254.html", + "doc_type":"usermanual", + "p_code":"114", + "code":"115" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Others", + "uri":"waf_01_0309.html", + "doc_type":"usermanual", + "p_code":"107", + "code":"116" + }, + { + "desc":"Normally, all requests destined for your site will pass through WAF. However, if your site is using CDN and WAF, the WAF policy targeted at the requests for caching stati", + "product_code":"dwaf", + "title":"In Which Situations Will the WAF Policies Fail?", + "uri":"waf_01_0102.html", + "doc_type":"usermanual", + "p_code":"116", + "code":"117" + }, + { + "desc":"All paths configured for protection rules of WAF are case-sensitive.", + "product_code":"dwaf", + "title":"Is the Path of a WAF Protection Rule Case-sensitive?", + "uri":"waf_01_0151.html", + "doc_type":"usermanual", + "p_code":"116", + "code":"118" + }, + { + "desc":"The protection rules supported by WAF are described below.Basic Web ProtectionWAF can defend against common web attacks, such as SQL injection, XSS, web shells, and Troja", + "product_code":"dwaf", + "title":"What Protection Rules Does WAF Support?", + "uri":"waf_01_0028.html", + "doc_type":"usermanual", + "p_code":"116", + "code":"119" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"dwaf", + "title":"Change History", + "uri":"waf_01_0265.html", + "doc_type":"usermanual", + "p_code":"", + "code":"120" + } +] \ No newline at end of file diff --git a/docs/wafd/umn/PARAMETERS.txt b/docs/wafd/umn/PARAMETERS.txt new file mode 100644 index 000000000..6da8d5f07 --- /dev/null +++ b/docs/wafd/umn/PARAMETERS.txt @@ -0,0 +1,3 @@ +version="" +language="en-us" +type="" \ No newline at end of file diff --git a/docs/wafd/umn/en-us_image_0000001081671555.jpg b/docs/wafd/umn/en-us_image_0000001081671555.jpg new file mode 100644 index 000000000..22c76c8e5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001081671555.jpg differ diff --git a/docs/wafd/umn/en-us_image_0000001081906323.jpg b/docs/wafd/umn/en-us_image_0000001081906323.jpg new file mode 100644 index 000000000..22c76c8e5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001081906323.jpg differ diff --git a/docs/wafd/umn/en-us_image_0000001082065421.jpg b/docs/wafd/umn/en-us_image_0000001082065421.jpg new file mode 100644 index 000000000..22c76c8e5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001082065421.jpg differ diff --git a/docs/wafd/umn/en-us_image_0000001126290859.png b/docs/wafd/umn/en-us_image_0000001126290859.png new file mode 100644 index 000000000..9cc3fc110 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001126290859.png differ diff --git a/docs/wafd/umn/en-us_image_0000001127096041.png b/docs/wafd/umn/en-us_image_0000001127096041.png new file mode 100644 index 000000000..7346d7f69 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001127096041.png differ diff --git a/docs/wafd/umn/en-us_image_0000001127126255.png b/docs/wafd/umn/en-us_image_0000001127126255.png new file mode 100644 index 000000000..df8a9d0f7 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001127126255.png differ diff --git a/docs/wafd/umn/en-us_image_0000001133216533.jpg b/docs/wafd/umn/en-us_image_0000001133216533.jpg new file mode 100644 index 000000000..22c76c8e5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001133216533.jpg differ diff --git a/docs/wafd/umn/en-us_image_0000001191376107.jpg b/docs/wafd/umn/en-us_image_0000001191376107.jpg new file mode 100644 index 000000000..cc595ad9d Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001191376107.jpg differ diff --git a/docs/wafd/umn/en-us_image_0000001227094315.png b/docs/wafd/umn/en-us_image_0000001227094315.png new file mode 100644 index 000000000..19b0e9bb0 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001227094315.png differ diff --git a/docs/wafd/umn/en-us_image_0000001238212390.png b/docs/wafd/umn/en-us_image_0000001238212390.png new file mode 100644 index 000000000..930cfd6e9 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001238212390.png differ diff --git a/docs/wafd/umn/en-us_image_0000001238508978.jpg b/docs/wafd/umn/en-us_image_0000001238508978.jpg new file mode 100644 index 000000000..22c76c8e5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001238508978.jpg differ diff --git a/docs/wafd/umn/en-us_image_0000001238531606.png b/docs/wafd/umn/en-us_image_0000001238531606.png new file mode 100644 index 000000000..6e43f2e85 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001238531606.png differ diff --git a/docs/wafd/umn/en-us_image_0000001240865319.jpg b/docs/wafd/umn/en-us_image_0000001240865319.jpg new file mode 100644 index 000000000..22c76c8e5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001240865319.jpg differ diff --git a/docs/wafd/umn/en-us_image_0000001241293100.png b/docs/wafd/umn/en-us_image_0000001241293100.png new file mode 100644 index 000000000..930cfd6e9 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001241293100.png differ diff --git a/docs/wafd/umn/en-us_image_0000001241765756.png b/docs/wafd/umn/en-us_image_0000001241765756.png new file mode 100644 index 000000000..6e43f2e85 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001241765756.png differ diff --git a/docs/wafd/umn/en-us_image_0000001260399509.jpg b/docs/wafd/umn/en-us_image_0000001260399509.jpg new file mode 100644 index 000000000..22c76c8e5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001260399509.jpg differ diff --git a/docs/wafd/umn/en-us_image_0000001275434812.png b/docs/wafd/umn/en-us_image_0000001275434812.png new file mode 100644 index 000000000..930cfd6e9 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001275434812.png differ diff --git a/docs/wafd/umn/en-us_image_0000001282207201.png b/docs/wafd/umn/en-us_image_0000001282207201.png new file mode 100644 index 000000000..6e43f2e85 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001282207201.png differ diff --git a/docs/wafd/umn/en-us_image_0000001282375645.png b/docs/wafd/umn/en-us_image_0000001282375645.png new file mode 100644 index 000000000..6e43f2e85 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001282375645.png differ diff --git a/docs/wafd/umn/en-us_image_0000001282406385.png b/docs/wafd/umn/en-us_image_0000001282406385.png new file mode 100644 index 000000000..930cfd6e9 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001282406385.png differ diff --git a/docs/wafd/umn/en-us_image_0000001284383208.png b/docs/wafd/umn/en-us_image_0000001284383208.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001284383208.png differ diff --git a/docs/wafd/umn/en-us_image_0000001284790620.png b/docs/wafd/umn/en-us_image_0000001284790620.png new file mode 100644 index 000000000..9c0f87337 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001284790620.png differ diff --git a/docs/wafd/umn/en-us_image_0000001284850794.png b/docs/wafd/umn/en-us_image_0000001284850794.png new file mode 100644 index 000000000..1c0acd55d Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001284850794.png differ diff --git a/docs/wafd/umn/en-us_image_0000001284852786.png b/docs/wafd/umn/en-us_image_0000001284852786.png new file mode 100644 index 000000000..12c5a8da8 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001284852786.png differ diff --git a/docs/wafd/umn/en-us_image_0000001284861820.png b/docs/wafd/umn/en-us_image_0000001284861820.png new file mode 100644 index 000000000..3b233e5a9 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001284861820.png differ diff --git a/docs/wafd/umn/en-us_image_0000001284948512.png b/docs/wafd/umn/en-us_image_0000001284948512.png new file mode 100644 index 000000000..68a0f4264 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001284948512.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285022128.png b/docs/wafd/umn/en-us_image_0000001285022128.png new file mode 100644 index 000000000..a197f1717 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285022128.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285028708.png b/docs/wafd/umn/en-us_image_0000001285028708.png new file mode 100644 index 000000000..df03ee537 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285028708.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285178604.png b/docs/wafd/umn/en-us_image_0000001285178604.png new file mode 100644 index 000000000..1c0acd55d Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285178604.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285430612.png b/docs/wafd/umn/en-us_image_0000001285430612.png new file mode 100644 index 000000000..d3181e064 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285430612.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285485922.png b/docs/wafd/umn/en-us_image_0000001285485922.png new file mode 100644 index 000000000..5484b02de Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285485922.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285486134.png b/docs/wafd/umn/en-us_image_0000001285486134.png new file mode 100644 index 000000000..103b38cd0 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285486134.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285577484.png b/docs/wafd/umn/en-us_image_0000001285577484.png new file mode 100644 index 000000000..02064941e Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285577484.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285577912.png b/docs/wafd/umn/en-us_image_0000001285577912.png new file mode 100644 index 000000000..06ba8c092 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285577912.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285588948.png b/docs/wafd/umn/en-us_image_0000001285588948.png new file mode 100644 index 000000000..d9fa5b4fb Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285588948.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285636510.png b/docs/wafd/umn/en-us_image_0000001285636510.png new file mode 100644 index 000000000..192aa59da Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285636510.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285643550.png b/docs/wafd/umn/en-us_image_0000001285643550.png new file mode 100644 index 000000000..1cc4085c2 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285643550.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285661276.png b/docs/wafd/umn/en-us_image_0000001285661276.png new file mode 100644 index 000000000..74d46bdc4 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285661276.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285684556.png b/docs/wafd/umn/en-us_image_0000001285684556.png new file mode 100644 index 000000000..1af9d515c Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285684556.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285728898.png b/docs/wafd/umn/en-us_image_0000001285728898.png new file mode 100644 index 000000000..0bbcc97ae Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285728898.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285737132.png b/docs/wafd/umn/en-us_image_0000001285737132.png new file mode 100644 index 000000000..7e4fa5cb5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285737132.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285803110.png b/docs/wafd/umn/en-us_image_0000001285803110.png new file mode 100644 index 000000000..fcdd34424 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285803110.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285811290.png b/docs/wafd/umn/en-us_image_0000001285811290.png new file mode 100644 index 000000000..00856df82 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285811290.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285815180.png b/docs/wafd/umn/en-us_image_0000001285815180.png new file mode 100644 index 000000000..72407d9b9 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285815180.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285950994.png b/docs/wafd/umn/en-us_image_0000001285950994.png new file mode 100644 index 000000000..895f47bdf Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285950994.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285975220.png b/docs/wafd/umn/en-us_image_0000001285975220.png new file mode 100644 index 000000000..d03569f11 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285975220.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285981628.png b/docs/wafd/umn/en-us_image_0000001285981628.png new file mode 100644 index 000000000..d0cdaf7eb Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285981628.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285986476.png b/docs/wafd/umn/en-us_image_0000001285986476.png new file mode 100644 index 000000000..1cb9d3955 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285986476.png differ diff --git a/docs/wafd/umn/en-us_image_0000001285992940.png b/docs/wafd/umn/en-us_image_0000001285992940.png new file mode 100644 index 000000000..fd6bca83d Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001285992940.png differ diff --git a/docs/wafd/umn/en-us_image_0000001286051354.png b/docs/wafd/umn/en-us_image_0000001286051354.png new file mode 100644 index 000000000..afa7592d9 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001286051354.png differ diff --git a/docs/wafd/umn/en-us_image_0000001286052290.png b/docs/wafd/umn/en-us_image_0000001286052290.png new file mode 100644 index 000000000..889d1c172 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001286052290.png differ diff --git a/docs/wafd/umn/en-us_image_0000001286058500.png b/docs/wafd/umn/en-us_image_0000001286058500.png new file mode 100644 index 000000000..2cb70c800 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001286058500.png differ diff --git a/docs/wafd/umn/en-us_image_0000001286061432.png b/docs/wafd/umn/en-us_image_0000001286061432.png new file mode 100644 index 000000000..004f239d9 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001286061432.png differ diff --git a/docs/wafd/umn/en-us_image_0000001286529486.png b/docs/wafd/umn/en-us_image_0000001286529486.png new file mode 100644 index 000000000..d0855593f Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001286529486.png differ diff --git a/docs/wafd/umn/en-us_image_0000001286548588.png b/docs/wafd/umn/en-us_image_0000001286548588.png new file mode 100644 index 000000000..b9f9566a5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001286548588.png differ diff --git a/docs/wafd/umn/en-us_image_0000001287944330.png b/docs/wafd/umn/en-us_image_0000001287944330.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001287944330.png differ diff --git a/docs/wafd/umn/en-us_image_0000001287946362.png b/docs/wafd/umn/en-us_image_0000001287946362.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001287946362.png differ diff --git a/docs/wafd/umn/en-us_image_0000001287946366.png b/docs/wafd/umn/en-us_image_0000001287946366.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001287946366.png differ diff --git a/docs/wafd/umn/en-us_image_0000001287947022.png b/docs/wafd/umn/en-us_image_0000001287947022.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001287947022.png differ diff --git a/docs/wafd/umn/en-us_image_0000001288099090.png b/docs/wafd/umn/en-us_image_0000001288099090.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001288099090.png differ diff --git a/docs/wafd/umn/en-us_image_0000001288106282.png b/docs/wafd/umn/en-us_image_0000001288106282.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001288106282.png differ diff --git a/docs/wafd/umn/en-us_image_0000001288106346.png b/docs/wafd/umn/en-us_image_0000001288106346.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001288106346.png differ diff --git a/docs/wafd/umn/en-us_image_0000001288106950.png b/docs/wafd/umn/en-us_image_0000001288106950.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001288106950.png differ diff --git a/docs/wafd/umn/en-us_image_0000001288264194.png b/docs/wafd/umn/en-us_image_0000001288264194.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001288264194.png differ diff --git a/docs/wafd/umn/en-us_image_0000001288266226.png b/docs/wafd/umn/en-us_image_0000001288266226.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001288266226.png differ diff --git a/docs/wafd/umn/en-us_image_0000001288266230.png b/docs/wafd/umn/en-us_image_0000001288266230.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001288266230.png differ diff --git a/docs/wafd/umn/en-us_image_0000001288266902.png b/docs/wafd/umn/en-us_image_0000001288266902.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001288266902.png differ diff --git a/docs/wafd/umn/en-us_image_0000001288423818.png b/docs/wafd/umn/en-us_image_0000001288423818.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001288423818.png differ diff --git a/docs/wafd/umn/en-us_image_0000001288425878.png b/docs/wafd/umn/en-us_image_0000001288425878.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001288425878.png differ diff --git a/docs/wafd/umn/en-us_image_0000001288427746.png b/docs/wafd/umn/en-us_image_0000001288427746.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001288427746.png differ diff --git a/docs/wafd/umn/en-us_image_0000001317947942.jpg b/docs/wafd/umn/en-us_image_0000001317947942.jpg new file mode 100644 index 000000000..22c76c8e5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001317947942.jpg differ diff --git a/docs/wafd/umn/en-us_image_0000001324043026.png b/docs/wafd/umn/en-us_image_0000001324043026.png new file mode 100644 index 000000000..12c5a8da8 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001324043026.png differ diff --git a/docs/wafd/umn/en-us_image_0000001326514597.png b/docs/wafd/umn/en-us_image_0000001326514597.png new file mode 100644 index 000000000..6e43f2e85 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001326514597.png differ diff --git a/docs/wafd/umn/en-us_image_0000001326640436.png b/docs/wafd/umn/en-us_image_0000001326640436.png new file mode 100644 index 000000000..6e7d232d6 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001326640436.png differ diff --git a/docs/wafd/umn/en-us_image_0000001326802772.png b/docs/wafd/umn/en-us_image_0000001326802772.png new file mode 100644 index 000000000..371459598 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001326802772.png differ diff --git a/docs/wafd/umn/en-us_image_0000001327191500.png b/docs/wafd/umn/en-us_image_0000001327191500.png new file mode 100644 index 000000000..824f1e801 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001327191500.png differ diff --git a/docs/wafd/umn/en-us_image_0000001327470582.png b/docs/wafd/umn/en-us_image_0000001327470582.png new file mode 100644 index 000000000..86931c51b Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001327470582.png differ diff --git a/docs/wafd/umn/en-us_image_0000001336983185.jpg b/docs/wafd/umn/en-us_image_0000001336983185.jpg new file mode 100644 index 000000000..22c76c8e5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001336983185.jpg differ diff --git a/docs/wafd/umn/en-us_image_0000001337244713.png b/docs/wafd/umn/en-us_image_0000001337244713.png new file mode 100644 index 000000000..b42196678 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337244713.png differ diff --git a/docs/wafd/umn/en-us_image_0000001337404641.png b/docs/wafd/umn/en-us_image_0000001337404641.png new file mode 100644 index 000000000..9d45c05d5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337404641.png differ diff --git a/docs/wafd/umn/en-us_image_0000001337470357.png b/docs/wafd/umn/en-us_image_0000001337470357.png new file mode 100644 index 000000000..843e8e97d Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337470357.png differ diff --git a/docs/wafd/umn/en-us_image_0000001337771401.png b/docs/wafd/umn/en-us_image_0000001337771401.png new file mode 100644 index 000000000..5d69d7cae Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337771401.png differ diff --git a/docs/wafd/umn/en-us_image_0000001337772205.png b/docs/wafd/umn/en-us_image_0000001337772205.png new file mode 100644 index 000000000..dc81236c2 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337772205.png differ diff --git a/docs/wafd/umn/en-us_image_0000001337772269.png b/docs/wafd/umn/en-us_image_0000001337772269.png new file mode 100644 index 000000000..8ed210bf6 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337772269.png differ diff --git a/docs/wafd/umn/en-us_image_0000001337772549.png b/docs/wafd/umn/en-us_image_0000001337772549.png new file mode 100644 index 000000000..016ae8249 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337772549.png differ diff --git a/docs/wafd/umn/en-us_image_0000001337775421.png b/docs/wafd/umn/en-us_image_0000001337775421.png new file mode 100644 index 000000000..52f33ad9d Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337775421.png differ diff --git a/docs/wafd/umn/en-us_image_0000001337777849.png b/docs/wafd/umn/en-us_image_0000001337777849.png new file mode 100644 index 000000000..1cc4085c2 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337777849.png differ diff --git a/docs/wafd/umn/en-us_image_0000001337778441.png b/docs/wafd/umn/en-us_image_0000001337778441.png new file mode 100644 index 000000000..4820ecab2 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337778441.png differ diff --git a/docs/wafd/umn/en-us_image_0000001337808105.png b/docs/wafd/umn/en-us_image_0000001337808105.png new file mode 100644 index 000000000..298b07cd7 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337808105.png differ diff --git a/docs/wafd/umn/en-us_image_0000001337887457.png b/docs/wafd/umn/en-us_image_0000001337887457.png new file mode 100644 index 000000000..6f8569b98 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337887457.png differ diff --git a/docs/wafd/umn/en-us_image_0000001337894657.png b/docs/wafd/umn/en-us_image_0000001337894657.png new file mode 100644 index 000000000..4e78c1a73 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337894657.png differ diff --git a/docs/wafd/umn/en-us_image_0000001337958950.png b/docs/wafd/umn/en-us_image_0000001337958950.png new file mode 100644 index 000000000..0ef639f97 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001337958950.png differ diff --git a/docs/wafd/umn/en-us_image_0000001338016357.png b/docs/wafd/umn/en-us_image_0000001338016357.png new file mode 100644 index 000000000..8ce4d5a20 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001338016357.png differ diff --git a/docs/wafd/umn/en-us_image_0000001338096873.png b/docs/wafd/umn/en-us_image_0000001338096873.png new file mode 100644 index 000000000..86dcf261b Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001338096873.png differ diff --git a/docs/wafd/umn/en-us_image_0000001338097417.png b/docs/wafd/umn/en-us_image_0000001338097417.png new file mode 100644 index 000000000..0bbcc97ae Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001338097417.png differ diff --git a/docs/wafd/umn/en-us_image_0000001338129425.png b/docs/wafd/umn/en-us_image_0000001338129425.png new file mode 100644 index 000000000..db787de59 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001338129425.png differ diff --git a/docs/wafd/umn/en-us_image_0000001338155669.png b/docs/wafd/umn/en-us_image_0000001338155669.png new file mode 100644 index 000000000..5ba03118e Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001338155669.png differ diff --git a/docs/wafd/umn/en-us_image_0000001338214477.png b/docs/wafd/umn/en-us_image_0000001338214477.png new file mode 100644 index 000000000..ef87a8fbe Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001338214477.png differ diff --git a/docs/wafd/umn/en-us_image_0000001338230701.png b/docs/wafd/umn/en-us_image_0000001338230701.png new file mode 100644 index 000000000..de668d13a Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001338230701.png differ diff --git a/docs/wafd/umn/en-us_image_0000001338298405.png b/docs/wafd/umn/en-us_image_0000001338298405.png new file mode 100644 index 000000000..fd6fd03cc Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001338298405.png differ diff --git a/docs/wafd/umn/en-us_image_0000001338300589.png b/docs/wafd/umn/en-us_image_0000001338300589.png new file mode 100644 index 000000000..a93a1db9c Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001338300589.png differ diff --git a/docs/wafd/umn/en-us_image_0000001338332661.png b/docs/wafd/umn/en-us_image_0000001338332661.png new file mode 100644 index 000000000..09cde81f3 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001338332661.png differ diff --git a/docs/wafd/umn/en-us_image_0000001338407897.png b/docs/wafd/umn/en-us_image_0000001338407897.png new file mode 100644 index 000000000..000ca05f2 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001338407897.png differ diff --git a/docs/wafd/umn/en-us_image_0000001338527429.png b/docs/wafd/umn/en-us_image_0000001338527429.png new file mode 100644 index 000000000..cddf6109c Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001338527429.png differ diff --git a/docs/wafd/umn/en-us_image_0000001338628737.png b/docs/wafd/umn/en-us_image_0000001338628737.png new file mode 100644 index 000000000..e9b61f7d7 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001338628737.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340304197.png b/docs/wafd/umn/en-us_image_0000001340304197.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340304197.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340304201.png b/docs/wafd/umn/en-us_image_0000001340304201.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340304201.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340305457.png b/docs/wafd/umn/en-us_image_0000001340305457.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340305457.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340305633.png b/docs/wafd/umn/en-us_image_0000001340305633.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340305633.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340306233.png b/docs/wafd/umn/en-us_image_0000001340306233.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340306233.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340306901.png b/docs/wafd/umn/en-us_image_0000001340306901.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340306901.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340308129.png b/docs/wafd/umn/en-us_image_0000001340308129.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340308129.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340308381.png b/docs/wafd/umn/en-us_image_0000001340308381.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340308381.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340424065.png b/docs/wafd/umn/en-us_image_0000001340424065.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340424065.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340424693.png b/docs/wafd/umn/en-us_image_0000001340424693.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340424693.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340425481.png b/docs/wafd/umn/en-us_image_0000001340425481.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340425481.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340426097.png b/docs/wafd/umn/en-us_image_0000001340426097.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340426097.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340426101.png b/docs/wafd/umn/en-us_image_0000001340426101.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340426101.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340427973.png b/docs/wafd/umn/en-us_image_0000001340427973.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340427973.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340583529.png b/docs/wafd/umn/en-us_image_0000001340583529.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340583529.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340585565.png b/docs/wafd/umn/en-us_image_0000001340585565.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340585565.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340585569.png b/docs/wafd/umn/en-us_image_0000001340585569.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340585569.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340586225.png b/docs/wafd/umn/en-us_image_0000001340586225.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340586225.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340663937.png b/docs/wafd/umn/en-us_image_0000001340663937.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340663937.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340665981.png b/docs/wafd/umn/en-us_image_0000001340665981.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340665981.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340666645.png b/docs/wafd/umn/en-us_image_0000001340666645.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340666645.png differ diff --git a/docs/wafd/umn/en-us_image_0000001340667861.png b/docs/wafd/umn/en-us_image_0000001340667861.png new file mode 100644 index 000000000..28807ed30 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001340667861.png differ diff --git a/docs/wafd/umn/en-us_image_0000001344294497.png b/docs/wafd/umn/en-us_image_0000001344294497.png new file mode 100644 index 000000000..bb0ac5a7f Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001344294497.png differ diff --git a/docs/wafd/umn/en-us_image_0000001344977541.png b/docs/wafd/umn/en-us_image_0000001344977541.png new file mode 100644 index 000000000..4d9ceca7c Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001344977541.png differ diff --git a/docs/wafd/umn/en-us_image_0000001345013254.png b/docs/wafd/umn/en-us_image_0000001345013254.png new file mode 100644 index 000000000..7aabd8ec9 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001345013254.png differ diff --git a/docs/wafd/umn/en-us_image_0000001345013500.png b/docs/wafd/umn/en-us_image_0000001345013500.png new file mode 100644 index 000000000..3de8d42dd Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001345013500.png differ diff --git a/docs/wafd/umn/en-us_image_0000001345171226.png b/docs/wafd/umn/en-us_image_0000001345171226.png new file mode 100644 index 000000000..498f7b86e Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001345171226.png differ diff --git a/docs/wafd/umn/en-us_image_0000001345173294.png b/docs/wafd/umn/en-us_image_0000001345173294.png new file mode 100644 index 000000000..9e28eed01 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001345173294.png differ diff --git a/docs/wafd/umn/en-us_image_0000001345332674.png b/docs/wafd/umn/en-us_image_0000001345332674.png new file mode 100644 index 000000000..6148d7a20 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001345332674.png differ diff --git a/docs/wafd/umn/en-us_image_0000001345493078.png b/docs/wafd/umn/en-us_image_0000001345493078.png new file mode 100644 index 000000000..224322a89 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001345493078.png differ diff --git a/docs/wafd/umn/en-us_image_0000001377910101.png b/docs/wafd/umn/en-us_image_0000001377910101.png new file mode 100644 index 000000000..cabfab803 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001377910101.png differ diff --git a/docs/wafd/umn/en-us_image_0000001377911005.png b/docs/wafd/umn/en-us_image_0000001377911005.png new file mode 100644 index 000000000..38459a061 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001377911005.png differ diff --git a/docs/wafd/umn/en-us_image_0000001378030725.png b/docs/wafd/umn/en-us_image_0000001378030725.png new file mode 100644 index 000000000..f0d15611f Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001378030725.png differ diff --git a/docs/wafd/umn/en-us_image_0000001378108553.png b/docs/wafd/umn/en-us_image_0000001378108553.png new file mode 100644 index 000000000..71c2b2b8b Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001378108553.png differ diff --git a/docs/wafd/umn/en-us_image_0000001379820401.jpg b/docs/wafd/umn/en-us_image_0000001379820401.jpg new file mode 100644 index 000000000..22c76c8e5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001379820401.jpg differ diff --git a/docs/wafd/umn/en-us_image_0000001388712885.png b/docs/wafd/umn/en-us_image_0000001388712885.png new file mode 100644 index 000000000..52b476890 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001388712885.png differ diff --git a/docs/wafd/umn/en-us_image_0000001388786649.png b/docs/wafd/umn/en-us_image_0000001388786649.png new file mode 100644 index 000000000..309cc70dd Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001388786649.png differ diff --git a/docs/wafd/umn/en-us_image_0000001395650509.png b/docs/wafd/umn/en-us_image_0000001395650509.png new file mode 100644 index 000000000..20937afed Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001395650509.png differ diff --git a/docs/wafd/umn/en-us_image_0000001395732753.png b/docs/wafd/umn/en-us_image_0000001395732753.png new file mode 100644 index 000000000..b72846c96 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001395732753.png differ diff --git a/docs/wafd/umn/en-us_image_0000001395732757.png b/docs/wafd/umn/en-us_image_0000001395732757.png new file mode 100644 index 000000000..89ada9eb1 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001395732757.png differ diff --git a/docs/wafd/umn/en-us_image_0000001395852973.png b/docs/wafd/umn/en-us_image_0000001395852973.png new file mode 100644 index 000000000..016757b22 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001395852973.png differ diff --git a/docs/wafd/umn/en-us_image_0000001395853109.png b/docs/wafd/umn/en-us_image_0000001395853109.png new file mode 100644 index 000000000..73d421be5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001395853109.png differ diff --git a/docs/wafd/umn/en-us_image_0000001395970885.png b/docs/wafd/umn/en-us_image_0000001395970885.png new file mode 100644 index 000000000..425ca70eb Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001395970885.png differ diff --git a/docs/wafd/umn/en-us_image_0000001395970965.png b/docs/wafd/umn/en-us_image_0000001395970965.png new file mode 100644 index 000000000..b36aa0aea Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001395970965.png differ diff --git a/docs/wafd/umn/en-us_image_0000001395972785.png b/docs/wafd/umn/en-us_image_0000001395972785.png new file mode 100644 index 000000000..7ff247097 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001395972785.png differ diff --git a/docs/wafd/umn/en-us_image_0000001396154617.png b/docs/wafd/umn/en-us_image_0000001396154617.png new file mode 100644 index 000000000..60c75eb10 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001396154617.png differ diff --git a/docs/wafd/umn/en-us_image_0000001427503477.png b/docs/wafd/umn/en-us_image_0000001427503477.png new file mode 100644 index 000000000..a16b51288 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0000001427503477.png differ diff --git a/docs/wafd/umn/en-us_image_0167644254.jpg b/docs/wafd/umn/en-us_image_0167644254.jpg new file mode 100644 index 000000000..821271f43 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0167644254.jpg differ diff --git a/docs/wafd/umn/en-us_image_0168547060.png b/docs/wafd/umn/en-us_image_0168547060.png new file mode 100644 index 000000000..9ee58a13c Binary files /dev/null and b/docs/wafd/umn/en-us_image_0168547060.png differ diff --git a/docs/wafd/umn/en-us_image_0168632822.png b/docs/wafd/umn/en-us_image_0168632822.png new file mode 100644 index 000000000..0404e1d90 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0168632822.png differ diff --git a/docs/wafd/umn/en-us_image_0169130550.png b/docs/wafd/umn/en-us_image_0169130550.png new file mode 100644 index 000000000..c956debe4 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0169130550.png differ diff --git a/docs/wafd/umn/en-us_image_0210924450.jpg b/docs/wafd/umn/en-us_image_0210924450.jpg new file mode 100644 index 000000000..22c76c8e5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0210924450.jpg differ diff --git a/docs/wafd/umn/en-us_image_0210924454.jpg b/docs/wafd/umn/en-us_image_0210924454.jpg new file mode 100644 index 000000000..821271f43 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0210924454.jpg differ diff --git a/docs/wafd/umn/en-us_image_0212852906.png b/docs/wafd/umn/en-us_image_0212852906.png new file mode 100644 index 000000000..6443d563d Binary files /dev/null and b/docs/wafd/umn/en-us_image_0212852906.png differ diff --git a/docs/wafd/umn/en-us_image_0234013368.png b/docs/wafd/umn/en-us_image_0234013368.png new file mode 100644 index 000000000..19b0e9bb0 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0234013368.png differ diff --git a/docs/wafd/umn/en-us_image_0246108677.png b/docs/wafd/umn/en-us_image_0246108677.png new file mode 100644 index 000000000..f9390c006 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0246108677.png differ diff --git a/docs/wafd/umn/en-us_image_0246108818.png b/docs/wafd/umn/en-us_image_0246108818.png new file mode 100644 index 000000000..27e55c1d3 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0246108818.png differ diff --git a/docs/wafd/umn/en-us_image_0246109037.png b/docs/wafd/umn/en-us_image_0246109037.png new file mode 100644 index 000000000..a7a3b246d Binary files /dev/null and b/docs/wafd/umn/en-us_image_0246109037.png differ diff --git a/docs/wafd/umn/en-us_image_0246112199.png b/docs/wafd/umn/en-us_image_0246112199.png new file mode 100644 index 000000000..2fdf96682 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0246112199.png differ diff --git a/docs/wafd/umn/en-us_image_0268155242.png b/docs/wafd/umn/en-us_image_0268155242.png new file mode 100644 index 000000000..ea6ebc5a8 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0268155242.png differ diff --git a/docs/wafd/umn/en-us_image_0269115287.png b/docs/wafd/umn/en-us_image_0269115287.png new file mode 100644 index 000000000..c44d82dce Binary files /dev/null and b/docs/wafd/umn/en-us_image_0269115287.png differ diff --git a/docs/wafd/umn/en-us_image_0269496734.png b/docs/wafd/umn/en-us_image_0269496734.png new file mode 100644 index 000000000..fec4196dc Binary files /dev/null and b/docs/wafd/umn/en-us_image_0269496734.png differ diff --git a/docs/wafd/umn/en-us_image_0269497434.jpg b/docs/wafd/umn/en-us_image_0269497434.jpg new file mode 100644 index 000000000..22c76c8e5 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0269497434.jpg differ diff --git a/docs/wafd/umn/en-us_image_0274310129.png b/docs/wafd/umn/en-us_image_0274310129.png new file mode 100644 index 000000000..5da9c223c Binary files /dev/null and b/docs/wafd/umn/en-us_image_0274310129.png differ diff --git a/docs/wafd/umn/en-us_image_0282893059.jpg b/docs/wafd/umn/en-us_image_0282893059.jpg new file mode 100644 index 000000000..821271f43 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0282893059.jpg differ diff --git a/docs/wafd/umn/en-us_image_0283637109.png b/docs/wafd/umn/en-us_image_0283637109.png new file mode 100644 index 000000000..b32fe9ff6 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0283637109.png differ diff --git a/docs/wafd/umn/en-us_image_0301168075.png b/docs/wafd/umn/en-us_image_0301168075.png new file mode 100644 index 000000000..9f433f712 Binary files /dev/null and b/docs/wafd/umn/en-us_image_0301168075.png differ diff --git a/docs/wafd/umn/public_sys-resources/caution_3.0-en-us.png b/docs/wafd/umn/public_sys-resources/caution_3.0-en-us.png new file mode 100644 index 000000000..60f607621 Binary files /dev/null and b/docs/wafd/umn/public_sys-resources/caution_3.0-en-us.png differ diff --git a/docs/wafd/umn/public_sys-resources/commonltr.css b/docs/wafd/umn/public_sys-resources/commonltr.css new file mode 100644 index 000000000..c5480b0ab --- /dev/null +++ b/docs/wafd/umn/public_sys-resources/commonltr.css @@ -0,0 +1 @@ +body{font-size:10pt;font-family:Arial;margin:1.5em;border-top:2pt;padding-top:1em;padding-bottom:2em}.msgph{font-family:Courier New}.rowlinecopyright{color:red;margin-top:10pt}.unresolved{background-color:skyblue}.noTemplate{background-color:yellow}.base{background-color:#fff}.nested0{margin-top:1em}.p{margin-top:.6em;margin-bottom:.6em}p{margin-top:.5em;margin-bottom:.5em}.note p{margin-top:.5em;margin-bottom:.5em}.tip p{margin-top:.5em;margin-bottom:.5em}.danger p{margin-top:.5em;margin-bottom:.5em}.notice p{margin-top:.5em;margin-bottom:.5em}.warning p{margin-top:.5em;margin-bottom:.5em}.caution p{margin-top:.5em;margin-bottom:.5em}.attention p{margin-top:.5em;margin-bottom:.5em}table p{margin-top:.2em;margin-bottom:.2em}table .p{margin-top:.4em;margin-bottom:.2em}.figcap{font-size:10pt}img{margin-top:.3em}.figdesc{font-style:normal}.figborder{border-style:solid;padding-left:3px;border-width:2px;padding-right:3px;margin-top:1em;border-color:Silver}.figsides{border-left:2px solid;padding-left:3px;border-right:2px solid;padding-right:3px;margin-top:1em;border-color:Silver}.figtop{border-top:2px solid;margin-top:1em;border-color:Silver}.figbottom{border-bottom:2px solid;border-color:Silver}.figtopbot{border-top:2px solid;border-bottom:2px solid;margin-top:1em;border-color:Silver}.fignone{font-size:10pt;margin-top:8pt;margin-bottom:8pt}.familylinks{margin-top:1.5em;margin-bottom:1em}.ullinks{list-style-type:none}.linklist{margin-bottom:1em}.linklistwithchild{margin-left:1.5em;margin-bottom:1em}.sublinklist{margin-left:1.5em;margin-bottom:1em}.relconcepts{margin-top:.6em;margin-bottom:.6em}.reltasks{margin-top:.6em;margin-bottom:.6em}.relref{margin-top:.6em;margin-bottom:.6em}.relinfo{margin-top:.6em;margin-bottom:.6em}.breadcrumb{font-size:smaller;margin-bottom:.6em}.prereq{margin-left:20px}.parentlink{margin-top:.6em;margin-bottom:.6em}.nextlink{margin-top:.6em;margin-bottom:.6em}.previouslink{margin-top:.6em;margin-bottom:.6em}.topictitle1{margin-top:0;margin-bottom:1em;font-size:14pt;color:#007af4}.topictitle2{margin-top:1pc;margin-bottom:.45em;font-size:1.17em;color:#007af4}.topictitle3{margin-top:1pc;margin-bottom:.17em;font-size:1.17em;font-weight:bold;color:#007af4}.topictitle4{margin-top:.83em;font-size:1.17em;font-weight:bold}.topictitle5{font-size:1.17em;font-weight:bold}.topictitle6{font-size:1.17em;font-style:italic}.sectiontitle{margin-top:1em;margin-bottom:1em;color:black;font-size:10.5pt;font-weight:bold;color:#007af4;overflow:auto}.section{margin-top:1em;margin-bottom:1em}.example{margin-top:1em;margin-bottom:1em}.sectiontitle2contents:link{color:#007af4}.sectiontitle2contents:visited{color:#800080}.note{margin-top:1em;margin-bottom:1em;background-color:#ffc}.notetitle{font-weight:bold}.notelisttitle{font-weight:bold}.tip{margin-top:1em;margin-bottom:1em;background-color:#ffc}.tiptitle{font-weight:bold}.fastpath{margin-top:1em;margin-bottom:1em;background-color:#ffc}.fastpathtitle{font-weight:bold}.important{margin-top:1em;margin-bottom:1em;background-color:#ffc}.importanttitle{font-weight:bold}.remember{margin-top:1em;margin-bottom:1em;background-color:#ffc}.remembertitle{font-weight:bold}.restriction{margin-top:1em;margin-bottom:1em;background-color:#ffc}.restrictiontitle{font-weight:bold}.attention{margin-top:1em;margin-bottom:1em;background-color:#ffc}.attentiontitle{font-weight:bold}.dangertitle{font-weight:bold}.danger{margin-top:1em;margin-bottom:1em;background-color:#ffc}.noticetitle{font-weight:bold}.notice{margin-top:1em;margin-bottom:1em;background-color:#ffc}.warningtitle{font-weight:bold}.warning{margin-top:1em;margin-bottom:1em;background-color:#ffc}.cautiontitle{font-weight:bold}.caution{margin-top:1em;margin-bottom:1em;background-color:#ffc}ul.simple{list-style-type:none}li ul{margin-top:.6em}li{margin-top:.6em;margin-bottom:.6em}.note li{margin-top:.2em;margin-bottom:.2em}.tip li{margin-top:.2em;margin-bottom:.2em}.danger li{margin-top:.2em;margin-bottom:.2em}.warning li{margin-top:.2em;margin-bottom:.2em}.notice li{margin-top:.2em;margin-bottom:.2em}.caution li{margin-top:.2em;margin-bottom:.2em}.attention li{margin-top:.2em;margin-bottom:.2em}table li{margin-top:.2em;margin-bottom:.2em}ol{margin-top:1em;margin-bottom:1em;margin-left:2.4em;padding-left:0}ul{margin-top:1em;margin-bottom:1em;margin-left:2.0em;padding-left:0}ol ul{list-style:disc}ul ul{list-style:square}ol ul ul{list-style:square}ol ul{list-style-type:disc}table ol{margin-top:.4em;margin-bottom:.4em;list-style:decimal}table ul{margin-top:.4em;margin-bottom:.4em;list-style:disc}table ul ul{margin-top:.4em;margin-bottom:.4em;list-style:square}table ol ol{margin-top:.4em;margin-bottom:.4em;list-style:lower-alpha}table ol ul{margin-top:.4em;margin-bottom:.4em;list-style:disc}table ul ol{margin-top:.4em;margin-bottom:.4em;list-style:decimal}.substepthirdol{list-style-type:lower-roman}.firstcol{font-weight:bold}th{background-color:#cfcfcf}table{margin-top:8pt;margin-bottom:12pt;width:100%}table caption{margin-top:8pt;text-align:left}.bold{font-weight:bold}.boldItalic{font-weight:bold;font-style:italic}.italic{font-style:italic}.underlined{text-decoration:underline}.var{font-style:italic}.shortcut{text-decoration:underline}.dlterm{font-weight:bold}dd{margin-top:.5em;margin-bottom:.5em}.dltermexpand{font-weight:bold;margin-top:1em}*[compact="yes"]>li{margin-top:0}*[compact="no"]>li{margin-top:.53em}.liexpand{margin-top:1em;margin-bottom:1em}.sliexpand{margin-top:1em;margin-bottom:1em}.dlexpand{margin-top:1em;margin-bottom:1em}.ddexpand{margin-top:1em;margin-bottom:1em}.stepexpand{margin-top:.3em;margin-bottom:.3em}.substepexpand{margin-top:.3em;margin-bottom:.3em}div.imageleft{text-align:left}div.imagecenter{text-align:center}div.imageright{text-align:right}div.imagejustify{text-align:justify}div.noblankline{text-align:center}div.noblankline img{margin-top:0}pre.screen{margin-top:2px;margin-bottom:2px;padding:1.5px 1.5px 0 1.5px;border:0;background-color:#ddd;white-space:pre}pre.codeblock{margin-top:2px;margin-bottom:2px;padding:1.5px 1.5px 0 1.5px;border:0;background-color:#ddd;white-space:pre}.hrcopyright{color:#3f4e5d;margin-top:18pt}.hwcopyright{text-align:center}.comment{margin:2px 2px 2px 2px;font-family:Arial;font-size:10pt;background-color:#bfb;color:#000}.dropdownAllButtonexpand{cursor:pointer;background-repeat:no-repeat;background-position:0 4px;padding-left:15px;background-image:url(icon-arrowrt.gif);text-decoration:underline;color:#007af4}.dropdownAllButtoncollapse{cursor:pointer;background-repeat:no-repeat;background-position:0 4px;padding-left:15px;background-image:url(icon-arrowdn.gif);text-decoration:underline;color:#007af4;text-decoration:underline;color:#007af4}.dropdowntitle{background-repeat:no-repeat;background-position:0 4px;padding-left:15px;cursor:pointer;text-decoration:underline;color:#007af4}.dropdownexpand .dropdowntitle{background-image:url(icon-arrowdn.gif);text-decoration:underline;color:#007af4;margin:0 0 8px 0}.dropdowncollapse .dropdowncontext{display:none}.dropdowncollapse .dropdowntitle{background-image:url(icon-arrowrt.gif);text-decoration:underline;color:#007af4}.dropdowncollapsetable{border:0}.dropdowncollapsetable .dropdowncontext{display:none}.dropdowncollapsetable .dropdowntitle{background-image:url(icon-arrowrt.gif);text-decoration:underline;color:#007af4}pre{font-size:10pt;font-weight:normal;margin-left:9;margin-top:2;margin-bottom:2}.termcolor{color:blue;cursor:pointer}#dhtmlgoodies_tooltip{background-color:#f0f0d2;border:1px solid #000;position:absolute;display:none;z-index:20000;padding:2px;font-size:.9em;-moz-border-radius:6px;font-family:"Trebuchet MS","Lucida Sans Unicode",Arial,sans-serif}#dhtmlgoodies_tooltipShadow{position:absolute;background-color:#555;display:none;z-index:10000;opacity:.7;filter:alpha(opacity=70);-khtml-opacity:.7;-moz-opacity:.7;-moz-border-radius:6px}.freeze{position:fixed;_position:absolute;_top:expression(eval(document.documentElement.scrollTop));left:10;top:0} \ No newline at end of file diff --git a/docs/wafd/umn/public_sys-resources/commonltr_print.css b/docs/wafd/umn/public_sys-resources/commonltr_print.css new file mode 100644 index 000000000..a59823141 --- /dev/null +++ b/docs/wafd/umn/public_sys-resources/commonltr_print.css @@ -0,0 +1 @@ +body{font-size:12.0pt;margin:1.5em;margin-left:1.6cm}.msgph{font-family:Courier New}.rowlinecopyright{color:red;margin-top:10pt}.unresolved{background-color:skyblue}.noTemplate{background-color:yellow}.base{background-color:#fff}.nested0{margin-top:1em}.p{margin-top:1em}p{margin-top:.5em;margin-bottom:.5em}.note p{margin-top:.5em;margin-bottom:.5em}.tip p{margin-top:.5em;margin-bottom:.5em}.danger p{margin-top:.5em;margin-bottom:.5em}.warning p{margin-top:.5em;margin-bottom:.5em}.notice p{margin-top:.5em;margin-bottom:.5em}.caution p{margin-top:.5em;margin-bottom:.5em}.attention p{margin-top:.5em;margin-bottom:.5em}table p{margin-top:.2em;margin-bottom:.2em}table .p{margin-top:.4em;margin-bottom:.2em}.covertable{border:0;width:100% cellpadding:8pt;cellspacing:8pt}.cover_productname{font-size:15.0pt;font-family:"Arial"}.cover_manualtitle{font-size:24.0pt;font-weight:bold;font-family:"Arial"}.cover_manualsubtitle{font-size:18.0pt;font-weight:bold;font-family:"Arial"}.cover_heading{font-size:12.0pt;font-weight:bold;font-family:"Arial"}.cover_text{font-size:9.0pt;font-family:"Arial"}.tocheading,.heading1,.topictitle1{margin-top:40.0pt;margin-right:0;margin-bottom:20.0pt;margin-left:-1cm;text-align:left;border:0;border-bottom:solid windowtext .5pt;font-size:22.0pt;font-family:"Arial";font-weight:bold}.topictitlenumber1{font-size:72.0pt;font-family:"Book Antiqua";font-weight:bold}.topictitle2{margin-top:10.0pt;margin-right:0;margin-bottom:8.0pt;margin-left:-1cm;text-indent:0;font-size:18.0pt;font-family:"Arial";font-weight:bold}.topictitle3{margin-top:10.0pt;margin-right:0;margin-bottom:8.0pt;margin-left:0;text-indent:0;font-size:16.0pt;font-family:"Book Antiqua";font-weight:bold}.topictitle4{margin-top:10.0pt;margin-right:0;margin-bottom:8.0pt;margin-left:0;text-indent:0;font-size:14.0pt;font-family:"Book Antiqua";font-weight:bold}.topictitle5{margin-top:10.0pt;margin-right:0;margin-bottom:8.0pt;margin-left:0;text-indent:0;font-size:13.0pt;font-family:"Book Antiqua";font-weight:bold}.blocklabel,.topictitle6{margin-top:15.0pt;margin-right:0;margin-bottom:4.0pt;margin-left:0;text-indent:0;font-size:13.0pt;font-family:"Book Antiqua";font-weight:bold}.sectiontitle{margin-top:15.0pt;margin-right:0;margin-bottom:4.0pt;margin-left:-1cm;text-indent:0;font-size:13.0pt;font-family:"Arial";font-weight:bold}.tocentry1{margin-top:8.0pt;margin-right:0;margin-bottom:4.0pt;margin-left:0;line-height:12.0pt;font-size:12.0pt;font-family:"Book Antiqua";font-weight:bold}.tocentry2{margin-top:4.0pt;margin-right:0;margin-bottom:4.0pt;margin-left:0;line-height:12.0pt;font-size:11.0pt;font-family:"Times New Roman"}.tocentry3{margin-top:4.0pt;margin-right:0;margin-bottom:4.0pt;margin-left:0;line-height:12.0pt;font-size:11.0pt;font-family:"Times New Roman"}.tocentry4{margin-top:4.0pt;margin-right:0;margin-bottom:4.0pt;margin-left:0;line-height:12.0pt;font-size:11.0pt;font-family:"Times New Roman"}.tocentry5{margin-top:4.0pt;margin-right:0;margin-bottom:4.0pt;margin-left:0;line-height:12.0pt;font-size:11.0pt;font-family:"Times New Roman"}.tofentry1{margin-top:8.0pt;margin-right:0;margin-bottom:4.0pt;margin-left:0;line-height:12.0pt;font-size:11.0pt;font-family:"Times New Roman";font-weight:normal}.totentry1{margin-top:8.0pt;margin-right:0;margin-bottom:4.0pt;margin-left:0;line-height:12.0pt;font-size:11.0pt;font-family:"Times New Roman";font-weight:normal}.indexheading{margin-top:15.0pt;margin-right:0;margin-bottom:4.0pt;margin-left:0;text-indent:0;font-size:13.0pt;font-family:"Book Antiqua";font-weight:bold}.indexentry1{margin-top:4pt;margin-right:0;margin-bottom:0;margin-left:0;line-height:12.0pt;font-size:12.0pt;font-family:"Times New Roman"}.indexentry2{margin-top:0;margin-right:0;margin-bottom:0;margin-left:24.0pt;line-height:12.0pt;font-size:12.0pt}.indexentry3{margin-top:0;margin-right:0;margin-bottom:0;margin-left:48pt;line-height:12.0pt;font-size:12.0pt}.figurenumber{font-weight:bold}.tablenumber{font-weight:bold}.familylinks{margin-top:1.5em;margin-bottom:1em}.figcap{font-size:11.0pt}.tablecap{font-size:11.0pt}.figdesc{font-style:normal}.fignone{margin-top:8.0pt}.figborder{border-style:solid;padding-left:3px;border-width:2px;padding-right:3px;margin-top:1em;border-color:Silver}.figsides{border-left:2px solid;padding-left:3px;border-right:2px solid;padding-right:3px;margin-top:1em;border-color:Silver}.figtop{border-top:2px solid;margin-top:1em;border-color:Silver}.figbottom{border-bottom:2px solid;border-color:Silver}.figtopbot{border-top:2px solid;border-bottom:2px solid;margin-top:1em;border-color:Silver}.ullinks{margin-left:0;list-style-type:none}.ulchildlink{margin-top:1em;margin-bottom:1em}.olchildlink{margin-top:1em;margin-bottom:1em;margin-left:1em}.linklist{margin-bottom:1em}.linklistwithchild{margin-left:1.5em;margin-bottom:1em}.sublinklist{margin-left:1.5em;margin-bottom:1em}.relconcepts{margin-left:1cm;margin-top:1em;margin-bottom:1em}.reltasks{margin-left:1cm;margin-top:1em;margin-bottom:1em}.relref{margin-left:1cm;margin-top:1em;margin-bottom:1em}.relinfo{margin-top:1em;margin-bottom:1em}.breadcrumb{font-size:smaller;margin-bottom:1em}.prereq{margin-left:0}.parentlink{margin-top:.6em;margin-bottom:.6em}.nextlink{margin-top:.6em;margin-bottom:.6em}.previouslink{margin-top:.6em;margin-bottom:.6em}.section{margin-top:1em;margin-bottom:1em}.example{margin-top:1em;margin-bottom:1em}table .note{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;font-family:"Times New Roman"}.note{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;border-top:solid .5pt;border-bottom:solid .5pt}.notetitle{font-weight:bold;font-size:11.0pt}.notelisttitle{font-weight:bold}table .tip{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;font-family:"Times New Roman"}.tip{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;border-top:solid .5pt;border-bottom:solid .5pt}.tiptitle{font-weight:bold;font-size:11.0pt}table .fastpath{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;font-family:"Times New Roman"}.fastpath{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;border-top:solid .5pt;border-bottom:solid .5pt}.fastpathtitle{font-weight:bold;font-size:11.0pt}table .important{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;font-family:"Times New Roman";font-style:italic}.important{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;border-top:solid .5pt;border-bottom:solid .5pt}.importanttitle{font-weight:bold;font-size:11.0pt}table .remember{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;font-family:"Times New Roman";font-style:italic}.remember{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;border-top:solid .5pt;border-bottom:solid .5pt}.remembertitle{font-weight:bold;font-size:11.0pt}table .restriction{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;font-family:"Times New Roman";font-style:italic}.restriction{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;border-top:solid .5pt;border-bottom:solid .5pt}.restrictiontitle{font-weight:bold;font-size:11.0pt}table .attention{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;font-family:"Times New Roman"}.attention{margin-top:1em;margin-bottom:1em;border:0;border-top:solid .5pt;border-bottom:solid .5pt}.attentiontitle{font-weight:bold}table .danger{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;font-family:"Times New Roman"}.dangertitle{font-weight:bold}.danger{margin-top:1em;margin-bottom:1em;border:0;border-top:solid .5pt;border-bottom:solid .5pt}table .notice{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;font-family:"Times New Roman"}.noticetitle{font-weight:bold}.notice{margin-top:1em;margin-bottom:1em;border:0;border-top:solid .5pt;border-bottom:solid .5pt}table .warning{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;font-family:"Times New Roman"}.warningtitle{font-weight:bold}.warning{margin-top:1em;margin-bottom:1em;border:0;border-top:solid .5pt;border-bottom:solid .5pt}table .caution{margin-top:1em;margin-bottom:1em;border:0;font-size:10.0pt;font-family:"Times New Roman"}table caption{margin-top:8pt;text-align:left;font-weight:bold}.tablenoborder{margin-top:8pt}.cautiontitle{font-weight:bold}.caution{margin-top:1em;margin-bottom:1em;border:0;border-top:solid .5pt;border-bottom:solid .5pt}ul.simple{list-style-type:none}li ul{margin-top:.6em}li{margin-top:.6em;margin-bottom:.6em}.note li{margin-top:.2em;margin-bottom:.2em}.tip li{margin-top:.2em;margin-bottom:.2em}.danger li{margin-top:.2em;margin-bottom:.2em}.warning li{margin-top:.2em;margin-bottom:.2em}.notice li{margin-top:.2em;margin-bottom:.2em}.caution li{margin-top:.2em;margin-bottom:.2em}.attention li{margin-top:.2em;margin-bottom:.2em}table li{margin-top:.2em;margin-bottom:.2em}.firstcol{font-weight:bold}th{background-color:#cfcfcf}.bold{font-weight:bold}.boldItalic{font-weight:bold;font-style:italic}.italic{font-style:italic}.underlined{text-decoration:underline}.var{font-style:italic}.shortcut{text-decoration:underline}.dlterm{font-weight:bold}dd{margin-top:.5em;margin-bottom:.5em}.dltermexpand{font-weight:bold;margin-top:1em}*[compact="yes"]>li{margin-top:0}*[compact="no"]>li{margin-top:.53em}.liexpand{margin-top:1em;margin-bottom:1em}.sliexpand{margin-top:1em;margin-bottom:1em}.dlexpand{margin-top:1em;margin-bottom:1em}.ddexpand{margin-top:1em;margin-bottom:1em}.stepexpand{margin-top:1em;margin-bottom:1em}.substepexpand{margin-top:1em;margin-bottom:1em}table{margin-top:8pt;margin-bottom:10.0pt;width:100%}thead{font-size:10.0pt;font-family:"Book Antiqua";font-weight:bold}tbody{font-size:11.0pt}ol{margin-top:1em;margin-bottom:1em;margin-left:1.7em;-webkit-padding-start:0}ul{margin-top:1em;margin-bottom:1em;margin-left:1.2em;-webkit-padding-start:0}ol ul{list-style:disc}ul ul{list-style:square}ol ol{list-style-type:lower-alpha}table ol{margin-top:.4em;margin-bottom:.4em;list-style:decimal}table ul{margin-top:.4em;margin-bottom:.4em;list-style:disc}table ul ul{margin-top:.4em;margin-bottom:.4em;list-style:square}table ol ol{margin-top:.4em;margin-bottom:.4em;list-style:lower-alpha}table ol ul{margin-top:.4em;margin-bottom:.4em;list-style:disc}table ul ol{margin-top:.4em;margin-bottom:.4em;list-style:decimal}.substepthirdol{list-style-type:lower-roman}div.imageleft{text-align:left}div.imagecenter{text-align:center}div.imageright{text-align:right}div.imagejustify{text-align:justify}div.noblankline{text-align:center}div.noblankline img{margin-top:0}pre{font-size:10.0pt;border-width:2px;padding:2px;margin-top:5px;margin-bottom:5px;white-space:pre-wrap;white-space:-moz-pre-wrap;white-space:-pre-wrap;white-space:-o-pre-wrap;word-wrap:break-word}pre.screen{margin-top:2px;margin-bottom:2px;padding:1.5px 1.5px 0 1.5px;border:0;white-space:pre}pre.codeblock{margin-top:2px;margin-bottom:2px;padding:1.5px 1.5px 0 1.5px;border:0;white-space:pre}.dropdownAllButtonexpand{cursor:pointer;background-repeat:no-repeat;background-position:0 4px;padding-left:15px;background-image:url(icon-arrowrt.gif);text-decoration:underline;color:#007af4}.dropdownAllButtoncollapse{cursor:pointer;background-repeat:no-repeat;background-position:0 4px;padding-left:15px;background-image:url(icon-arrowdn.gif);text-decoration:underline;color:#007af4;text-decoration:underline;color:#007af4}.dropdowntitle{background-repeat:no-repeat;background-position:0 4px;padding-left:15px;cursor:pointer;text-decoration:underline;color:#007af4}.dropdownexpand .dropdowntitle{background-image:url(icon-arrowdn.gif);text-decoration:underline;color:#007af4;margin:0 0 8px 0}.dropdowncollapse .dropdowntitle{background-image:url(icon-arrowrt.gif);text-decoration:underline;color:#007af4;margin:0 0 8px 0}.dropdowncollapsetable .dropdowntitle{background-image:url(icon-arrowrt.gif);text-decoration:underline;color:#007af4;margin:0 0 8px 0}.prefacesectiontitle1{margin-top:10.0pt;margin-right:0;margin-bottom:8.0pt;margin-left:-1cm;text-indent:0;font-size:18.0pt;font-family:"Book Antiqua";font-weight:bold;overflow:auto}.termcolor{color:blue;cursor:pointer}#dhtmlgoodies_tooltip{background-color:#f0f0d2;border:1px solid #000;position:absolute;display:none;z-index:20000;padding:2px;font-size:.9em;-moz-border-radius:6px;font-family:"Trebuchet MS","Lucida Sans Unicode",Arial,sans-serif}#dhtmlgoodies_tooltipShadow{position:absolute;background-color:#555;display:none;z-index:10000;opacity:.7;filter:alpha(opacity=70);-khtml-opacity:.7;-moz-opacity:.7;-moz-border-radius:6px}.freeze{position:fixed;_position:absolute;_top:expression(eval(document.documentElement.scrollTop));left:10;top:0}.hrcopyright{color:#3f4e5d;margin-top:18pt;margin-left:-1cm}.hwcopyright{text-align:center;font-family:Arial;margin-left:-1cm} \ No newline at end of file diff --git a/docs/wafd/umn/public_sys-resources/commonrtl.css b/docs/wafd/umn/public_sys-resources/commonrtl.css new file mode 100644 index 000000000..f261da752 --- /dev/null +++ b/docs/wafd/umn/public_sys-resources/commonrtl.css @@ -0,0 +1,2 @@ +/*! Copyright (c) Huawei Technologies Co., Ltd. 2020-2022. All rights reserved. */.msgph{font-family:Courier New}.unresolved{background-color:#87ceeb}.noTemplate{background-color:#ff0}.base{background-color:#fff}/*! Add space for top level topics */.nested0,.p{margin-top:1em}/*! div with class=p is used for paragraphs that contain blocks, to keep the XHTML valid *//*! Default of italics to set apart figure captions */.figcap,.italic,.var{font-style:italic}.figdesc{font-style:normal}/*! Use @frame to create frames on figures */.figborder{padding-left:3px;padding-right:3px;margin-top:1em;border:2px solid Silver}.figsides{margin-top:1em;padding-left:3px;padding-right:3px;border-left:2px solid Silver;border-right:2px solid Silver}.figtop{border-top:2px solid Silver;margin-top:1em}.figbottom{border-bottom:2px solid Silver}.figtopbot{border-top:2px solid Silver;border-bottom:2px solid Silver;margin-top:1em}/*! Most link groups are created with
This topic describes how to edit or add server information for a website to be protected.
+A website has been added to WAF.
+Modifying the server configuration does not affect services.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
.

You can change the working mode of WAF. WAF can work in Enabled or Suspended mode.
+The domain name of the website to be protected has been connected to WAF.
+In the Suspended mode, your website is not protected because WAF only forwards requests. It does not scan for attacks. To avoid normal requests from being blocked, configure false alarm masking rules, instead of using the Suspended mode.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
and select a working mode.
This topic describes how to remove a website from WAF if you no longer need to protect it.
+A website domain name has been added to WAF.
+It takes about a minute to remove a website from WAF, but once this action is started, it cannot be cancelled. Exercise caution when removing a website from WAF.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.If you want to retain the policy applied to the domain name, select Retain the policy of this domain name.
+
If Domain name deleted successfully is displayed in the upper right corner, the domain name of the website was deleted.
+After this function is enabled, WAF can defend against common web attacks, such as SQL injections, XSS, remote overflow vulnerabilities, file inclusions, Bash vulnerabilities, remote command execution, directory traversal, sensitive file access, and command/code injections. You can also enable other checks in basic web protection, such as web shell detection, deep inspection against evasion attacks, and header inspection.
+
Basic web protection has two modes: Block and Log only.
+A website has been added to WAF.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
In the upper part of the page, set Protection Level to Low, Medium, or High. The default value is Medium.
+ +Protection Level + |
+Description + |
+
|---|---|
Low + |
+WAF only blocks the requests with obvious attack signatures. +If a large number of false alarms are reported, Low is recommended. + |
+
Medium + |
+The default level is Medium, which meets a majority of web protection requirements. + |
+
High + |
+At this level, WAF provides the finest granular protection and can intercept attacks with complex bypass features, such as Jolokia cyber attacks, common gateway interface (CGI) vulnerability detection, and Druid SQL injection attacks. +To let WAF defend against more attacks but make minimum effect on normal requests, observe your workloads for a period of time first. Then, configure a global protection whitelist rule and select High. + |
+
By default, General Check is enabled. You can enable other protection types by referring to Table 3.
+Type + |
+Description + |
+
|---|---|
General Check + |
+Defends against attacks such as SQL injections, XSS, remote overflow vulnerabilities, file inclusions, Bash vulnerabilities, remote command execution, directory traversal, sensitive file access, and command/code injections. SQL injection attacks are mainly detected based on semantics. + NOTE:
+If you enable General Check, WAF checks your websites based on the built-in rules. + |
+
Webshell Detection + |
+Protects against web shells from upload interface. + NOTE:
+If you enable Webshell Detection, WAF detects web page Trojan horses inserted through the upload interface. + |
+
Deep Inspection + |
+Identifies and blocks evasion attacks, such as the ones that use homomorphic character obfuscation, command injection with deformed wildcard characters, UTF7, data URI scheme, and other techniques. + NOTE:
+If you enable Deep Inspection, WAF detects and defends against evasion attacks in depth. + |
+
Header Inspection + |
+This function is disabled by default. When it is disabled, General Check will check some of the header fields, such as User-Agent, Content-type, Accept-Language, and Cookie. + NOTE:
+If you enable this function, WAF checks all header fields in the requests. + |
+
Click
to search for a rule by CVE ID, Risk Severity, Application Type, or Protection Type.
Parameter + |
+Description + |
+
|---|---|
Rule ID + |
+The protection rule ID, which is generated automatically. + |
+
Rule Description + |
+Details of attacks the protection rule is configured for. + |
+
CVE ID + |
+Common Vulnerabilities & Exposures (CVE) ID, which corresponds to the protection rule. For non-CVE vulnerabilities, a double dash (--) is displayed. + |
+
Risk Severity + |
+The severity of the vulnerability, including: +
|
+
Application Type + |
+The application type the protection rule is used for. + |
+
Protection Type + |
+The type of the protection rule. WAF can discover SQL injection, command injection, XSS attacks, XML external entity (XXE) injection, Expression Language (EL) Injection, CSRF, SSRF, local file inclusion, remote file inclusion, website Trojans, malicious crawlers, session fixation attacks, deserialization vulnerabilities, remote command execution, information leakage, DoS attacks, source code/data leakage. + |
+
If General Check is enabled and Mode is set to Block for your domain name, to verify WAF is protecting your website (www.example.com) against general check items:
+You can customize a CC attack protection rule to restrict access to a specific URL on your website based on an IP address, cookie, or Referer, mitigating CC attacks. To make your custom CC attack protection rules take effect, ensure that you have enabled CC attack protection.
+A website has been added to WAF.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Mode + |
+
|
+Standard + |
+
Path + |
+Set this parameter only when Standard is selected for Mode. +Part of the URL without the domain name. +
NOTE:
+
|
+/admin* + |
+
Condition List + |
+Set this parameter only when Advanced is selected for Mode. +Click Add to add conditions. At least one condition is required, but up to 30 conditions are allowed. If you add more than one condition, the rule will only take effect if all of the conditions are met. +
|
+Path Include /admin + |
+
Rate Limit Mode + |
+
|
+Per user + |
+
User Identifier + |
+This parameter is mandatory when you select Per user for Rate Limit Mode. +
|
+name + |
+
Rate Limit + |
+The number of requests allowed from a website visitor in the rate limit period. If the number of requests exceeds the rate limit, WAF takes the action you configure for Protective Action. +All WAF instances: Requests to on one or more WAF instances will be counted together according to the rate limit mode you select. By default, requests to each WAF instance are counted. If you enable this, WAF will count requests to all your WAF instances for triggering this rule. To enable user-based rate limiting, Per user or Other (Referer must be configured) instead of Per IP address must be selected for Rate Limit Mode. This is because IP address-based rate limiting cannot limit the access rate of a specific user. However, in user-based rate limiting, requests may be forwarded to one or more WAF instances. Therefore, All WAF instances must be enabled for triggering the rule precisely. + |
+10 requests allowed in 60 seconds + |
+
Protective Action + |
+The action that WAF will take if the number of requests exceeds Rate Limit you configured. The options are as follows: +
|
+Block + |
+
Allowable Frequency + |
+This parameter can be set if you select Block dynamically for Protective Action. +WAF blocks requests that trigger the rule based on Rate Limit first. Then, in the following rate limit period, WAF blocks requests that trigger the rule based on Allowable Frequency you configure. +Allowable Frequency cannot be larger than Rate Limit. + NOTE:
+If you set Allowable Frequency to 0, WAF blocks all requests that trigger the rule in the next rate limit period. + |
+8 requests allowed in 60 seconds + |
+
Block Duration + |
+Period of time for which to block the item when you set Protective Action to Block. + |
+600 seconds + |
+
Block Page + |
+The page displayed if the maximum number of requests has been reached. This parameter is configured only when Protective Action is set to Block. +
|
+Custom + |
+
Block Page Type + |
+If you select Custom for Block Page, select a type of block page. The options are: +
|
+text/html + |
+
Page Content + |
+If you select Custom for Block Page, configure the content to be returned. + |
+Page content styles corresponding to different page types are as follows: +
|
+
Rule Description + |
+A description of the rule. This parameter is optional. + |
+None + |
+

If you have configured a CC attack protection rule for your domain name, with Protective Action set to Block, as shown in Figure 2, to verify WAF is protecting your website (www.example.com) against the configured CC attack protection rule:
+If you select Verification code for protective action, a verification code is required for visitors to continue the access if they exceed the configured rate limit.
+
WAF allows you to customize protection rules by combining HTTP headers, cookies, URLs, request parameters, and client IP addresses.
+You can combine common HTTP fields, such as IP, Path, Referer, User Agent, and Params in a protection rule to let WAF allow, block, or only log the requests that match the combined conditions.
+A reference table can be added to a precise protection rule. The reference table takes effect for all protected domain names.
+A website has been added to WAF.
+Precise protection rules are used for anti-leeching and website management background protection.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
The settings shown in Figure 3 are used as an example. If a visitor tries to access a URL containing /admin, WAF will block the request.
+
To ensure that WAF blocks only attack requests, configure Protective Action to Log only first and check whether normal requests are blocked on the Events page. If no normal requests are blocked, configure Protective Action to Block.
+Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Protective Action + |
+You can select Block, Allow, or Log only. Default value: Block + |
+Block + |
+
Known Attack Source + |
+If you set Protective Action to Block, you can select a blocking type for a known attack source rule. Then, WAF blocks requests matching the configured IP, Cookie, or Params for a length of time that depends on the selected blocking type. + |
+Long-term IP address blocking + |
+
Effective Date + |
+Select Immediate to enable the rule immediately, or select Custom to configure when you wish the rule to be enabled. + |
+Immediate + |
+
Condition List + |
+Click Add to add conditions. At least one condition needs to be added. You can add up to 30 conditions to a protection rule. If more than one condition is added, all of the conditions must be met for the rule to be applied. A condition includes the following parameters: +Parameters for configuring a condition are described as follows:
+
NOTE:
+For more details about the configurations in general, see Table 2. + |
+Path Include /admin + |
+
Priority + |
+Rule priority. If you have added multiple rules, rules are matched by priority. The smaller the value you set, the higher the priority. + + |
+5 + |
+
Rule Description + |
+A brief description of the rule. This parameter is optional. + |
+None + |
+
Field + |
+Example Subfield + |
+Logic + |
+Example Content + |
+
|---|---|---|---|
Path: Part of a URL that does not include a domain name. This value supports exact matches only. For example, if the path to be protected is /admin, Path must be set to /admin. + |
+None + |
+Select a logical relationship from the drop-down list. + |
+/buy/phone/ + NOTICE:
+If Path is set to /, all paths of the website are protected. + |
+
User Agent: A user agent of the scanner to be checked. + |
+None + |
+Mozilla/5.0 (Windows NT 6.1) + |
+|
IP: An IP address of the visitor for the protection. + |
+None + |
+XXX.XXX.1.1 + |
+|
Params: A request parameter. + |
+sttl + |
+201901150929 + |
+|
Referer: A user-defined request resource. +For example, if the protected path is /admin/xxx and you do not want visitors to access the page from www.test.com, set Content to http://www.test.com. + |
+None + |
+http://www.test.com + |
+|
Cookie: A small piece of data to identify web visitors. + |
+name + |
+jsessionid + |
+|
Header: A user-defined HTTP header. + |
+Accept + |
+text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8 + |
+|
Method: the user-defined request method. + |
+None + |
+GET, POST, PUT, DELETE, and PATCH + |
+|
Request Line: Length of a user-defined request line. + |
+None + |
+50 + |
+|
Request: Length of a user-defined request. It includes the request header, request line, and request body. + |
+None + |
+None + |
+|
Protocol: the protocol of the request. + |
+None + |
+http + |
+

If you have configured a precise protection rule as shown in Figure 3 for your domain name, to verify WAF is protecting your website (www.example.com) against the rule:
+Analysis of a specific type of WordPress pingback attack shows that the User Agent field contains WordPress. See Figure 5.
+ +A precise rule as shown in the figure can block this type of attack.
+
You can configure blacklist and whitelist rules to block, log only, or allow access requests from specific IP addresses or IP address ranges.
+A website has been added to WAF.
+If an IP address is added to a blacklist or whitelist, WAF blocks or allows requests from that IP address without checking whether the requests are malicious.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.

Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Rule Name + |
+Rule name you entered. + |
+WAF + |
+
IP Address/Range + |
+IP addresses or IP address ranges are supported. +
|
+XXX.XXX.2.3 + |
+
Protective Action + |
+
|
+Block + |
+
Known Attack Source + |
+If you select Block for Protective Action, you can select a blocking type of a known attack source rule. WAF will block requests matching the configured IP address, Cookie, or Params for a length of time configured as part of the rule. + |
+Long-term IP address blocking + |
+
Rule Description + |
+A brief description of the rule. This parameter is optional. + |
+None + |
+

If you have added domain name www.example.com to this rule, to verify WAF is protecting the corresponding website:
+This topic describes how to configure a geolocation access control rule. A geolocation access control rule allows you to control IP addresses forwarded from or to specified countries and regions.
+A website has been added to WAF.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.

Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Rule Description + |
+A brief description of the rule. This parameter is optional. + |
+waf + |
+
Geolocation + |
+Geographical scope of the IP address. + |
+- + |
+
Protective Action + |
+Action WAF will take if the rule is hit. You can select Block, Allow, or Log only. + |
+Block + |
+

To verify WAF is protecting your website (www.example.com) against a rule:
+So, if the URL in the value of the Referer request header is the same as the configured anti-tamper path, for example, /admin, all resources (resources ending with png, jpg, jpeg, gif, bmp, css or js) hit by the request are also cached.
+A website has been added to WAF.
+It takes several minutes for a new rule to take effect. After the rule takes effect, protection events triggered by the rule will be displayed on the Events page.
+After a web tamper protection rule is configured, WAF caches static web pages on the server. When receiving a request from a web visitor, WAF directly returns the cached web page to the web visitor.
+If an attacker modifies a static web page on the server, WAF still returns the cached original web page to visitors. Visitors never see the pages that were tampered with.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.

Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Domain Name + |
+Domain name of the website to be protected + |
+www.example.com + |
+
Path + |
+A part of the URL, not including the domain name +A URL is used to define the address of a web page. The basic URL format is as follows: +Protocol name://Domain name or IP address[:Port]/[Path/.../File name]. +For example, if the URL is http://www.example.com/admin, set Path to /admin. + NOTE:
+
|
+/admin + |
+
Rule Description + |
+A brief description of the rule. This parameter is optional. + |
+None + |
+

You can configure website anti-crawler protection rules to protect against search engines, scanners, script tools, and other crawlers, and use JavaScript to create custom anti-crawler protection rules.
+A website has been added to WAF.
+CDN caching may impact JS anti-crawler performance and page accessibility.
+Figure 1 shows how JavaScript anti-crawler detection works, which includes JavaScript challenges (step 1 and step 2) and JavaScript authentication (step 3).
+ +If JavaScript anti-crawler is enabled when a client sends a request, WAF returns a piece of JavaScript code to the client.
+By collecting statistics on the number of JavaScript challenges and authentication responses, the system calculates how many requests the JavaScript anti-crawler defends. In Figure 2, the JavaScript anti-crawler has logged 18 events, 16 of which are JavaScript challenge responses, and 2 of which are JavaScript authentication responses. Others is the number of WAF authentication requests fabricated by the crawler.
+ +
WAF only logs JavaScript challenge and JavaScript authentication events. No other protective actions can be configured for JavaScript challenge and authentication.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.WAF blocks and logs detected attacks.
+Detected attacks are logged only. This is the default protective action.
+Type + |
+Description + |
+Remarks + |
+
|---|---|---|
Search Engine + |
+This rule is used to block web crawlers, such as Googlebot and Baiduspider, from collecting content from your site. + |
+If you enable this rule, WAF detects and blocks search engine crawlers. + NOTE:
+If Search Engine is not enabled, WAF does not block POST requests from Googlebot or Baiduspider. If you want to block POST requests from Baiduspider, use the configuration described in Configuration Example - Search Engine. + |
+
Scanner + |
+This rule is used to block scanners, such as OpenVAS and Nmap. A scanner scans for vulnerabilities, viruses, and other jobs. + |
+After you enable this rule, WAF detects and blocks scanner crawlers. + |
+
Script Tool + |
+This rule is used to block script tools. A script tool is often used to execute automatic tasks and program scripts, such as HttpClient, OkHttp, and Python programs. + |
+If you enable this rule, WAF detects and blocks the execution of automatic tasks and program scripts. + NOTE:
+If your application uses scripts such as HttpClient, OkHttp, and Python, disable Script Tool. Otherwise, WAF will identify such script tools as crawlers and block the application. + |
+
Other + |
+This rule is used to block crawlers used for other purposes, such as site monitoring, using access proxies, and web page analysis. + NOTE:
+To avoid being blocked by WAF, crawlers may use a large number of IP address proxies. + |
+If you enable this rule, WAF detects and blocks crawlers that are used for various purposes. + |
+
JavaScript anti-crawler is disabled by default. To enable it, click
and click Confirm in the displayed dialog box.
indicates that JavaScript anti-crawler is enabled.

CDN caching may impact JS anti-crawler performance and page accessibility.
+Two protective actions are provided: Protect all paths and Protect a specified path.
+Select Protect a specified path. In the upper left corner of the page, click Add Path. In the displayed dialog box, configure required parameters and click OK.
+
Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Rule Name + |
+Name of the rule + |
+wafjs + |
+
Path + |
+A part of the URL, not including the domain name +A URL is used to define the address of a web page. The basic URL format is as follows: +Protocol name://Domain name or IP address[:Port]/[Path/.../File name]. +For example, if the URL is http://www.example.com/admin, set Path to /admin. + NOTE:
+
|
+/admin + |
+
Logic + |
+Select a logical relationship from the drop-down list. + |
+Include + |
+
Rule Description + |
+A brief description of the rule. + |
+None + |
+
To verify that WAF is protecting domain name www.example.com against an anti-crawler rule:
+

The following shows how to allow the search engine of Baidu or Google and block the POST request of Baidu.
+
by referring to the instructions in Step 6.Once an attack hits a WAF basic web protection rule or a feature-library anti-crawler rule, WAF will respond to the attack immediately according to the protective action (Log only or Block) you configured for the rule and display an event on the Events page.
+You can add false alarm masking rules to let WAF ignore certain rule IDs or event types (for example, skip XSS checks for a specific URL).
+A website has been added to WAF.
+Basic web protection defends against common web attacks, such as SQL injection, XSS attacks, remote buffer overflow attacks, file inclusion, Bash vulnerability exploits, remote command execution, directory traversal, sensitive file access, and command and code injections. Basic web protection also detects web shells and evasion attacks.
+Feature-based anti-crawler identifies and blocks crawler behavior from search engines, scanners, script tools, and other crawlers.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Scope + |
+
|
+Specified domain names + |
+
Domain Name + |
+This parameter is mandatory when you select Specified domain names for Scope. +Enter a single domain name that matches the wildcard domain name being protected by the current policy. + |
+www.example.com + |
+
Condition List + |
+Click Add to add conditions. At least one condition needs to be added. You can add up to 30 conditions to a protection rule. If more than one condition is added, all of the conditions must be met for the rule to be applied. A condition includes the following parameters: +Parameters for configuring a condition are described as follows:
+
|
+Path, Include, /product + |
+
Ignore WAF Protection + |
+
|
+Basic Web Protection + |
+
Ignored Protection Type + |
+If you select Basic web protection for Ignored Protection Type, specify the following parameters: +
|
+Attack type + |
+
ID + |
+This parameter is mandatory when you select ID for Ignored Protection Type. +ID of an attack event on the Events page. If the event type is Custom, it has no event ID. Click Handle False Alarm in the row containing the attack event to obtain the ID. You are advised to configure global protection whitelist (formerly false alarm masking) rules on the Events page by referring to Handling False Alarms. + |
+041046 + |
+
Attack type + |
+This parameter is mandatory when you select Attack type for Ignored Protection Type. +Select an attack type from the drop-down list box. +WAF can defend against XSS attacks, web shells, SQL injection attacks, malicious crawlers, remote file inclusions, local file inclusions, command injection attacks, and other attacks. + |
+SQL injection + |
+
Rule Description + |
+A brief description of the rule. This parameter is optional. + |
+SQL injection attacks are not intercepted. + |
+
Advanced Settings + |
+To ignore attacks of a specific field, specify the field in the Advanced Settings area. After you add the rule, WAF will stop blocking attack events of the specified field. +Select a target field from the first drop-down list box on the left. The following fields are supported: Params, Cookie, Header, Body, and Multipart.
+
NOTE:
+If All is selected, WAF will not block all attack events of the selected field. + |
+Params +All + |
+

This topic describes how to configure data masking rules. You can configure data masking rules to prevent sensitive data such as passwords from being displayed in event logs.
+A website has been added to WAF.
+Sensitive data in the events will be masked to protect your website visitor's privacy.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.

Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Path + |
+Part of the URL that does not include the domain name. +
NOTE:
+
|
+/admin/login.php +For example, if the URL to be protected is http://www.example.com/admin/login.php, set Path to /admin/login.php. + |
+
Masked Field + |
+A field set to be masked
+
|
+
|
+
Field Name + |
+Set the parameter based on Masked Field. The masked field will not be displayed in logs. + NOTICE:
+The length of a subfield cannot exceed 2,048 bytes. Only digits, letters, underscores (_), and hyphens (-) are allowed. + |
+|
Rule Description + |
+A brief description of the rule. This parameter is optional. + |
+None + |
+
To verify that WAF is protecting your domain name www.example.com against a data masking rule (with Cookie selected for Masked Field and jsessionid entered in Field Name):
+
Data in the jsessionid cookie field is masked.
+This topic describes how to view the basic information about a protected website, switch WAF working mode, and delete a domain name of a protected website from WAF.
+A website has been connected to WAF.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
Parameter + |
+Description + |
+
|---|---|
Domain Name + |
+Domain name or IP address of a website to be protected. + |
+
Deployment Mode + |
+How your WAF instance is deployed for your website. Only Dedicated mode is available. + |
+
Last 3 Days + |
+Protection status of the domain name over the past three days. + |
+
Mode + |
+WAF mode of the protected domain name. Click Switch and select one of the following working modes: Click
|
+
Policy + |
+The total number of protection policies configured in WAF. You can click a number to go to the rule configuration page. + |
+
Access Progress/Status + |
+The progress of connecting your website to WAF or the website access status. + |
+
Operation + |
+To remove a protected website from WAF, click Delete. + WARNING:
+The deletion operation cannot be cancelled. Exercise caution when performing this operation. + |
+
next to the certificate name in the Certificate Name row. Then, in the displayed dialog box, upload a new certificate or select an existing certificate. For more details, see Updating a Certificate.
next to the TLS Configuration field. Then, in the displayed dialog box, select the desired TLS version and TLS cipher suite. For more details, see Configuring PCI DSS/3DS Certification Check and TLS Version.
. In the displayed dialog box, select Yes if your web server is using a proxy.
. In the displayed dialog box, select Custom or Redirection and complete required configurations. By default, Alarm Page is Default.
to specify WAF-to-Server Connection Timeout (s), Read Timeout (s), and Write Timeout (s). This function cannot be disabled after being enabled. For details, see Configuring Connection Timeout.This topic describes how to view event logs, including attack and request statistics, event distribution, top 10 attacked domain names, top 10 attack source IP addresses, and top 10 attacked URLs in a specified time range, such as yesterday, today, past 3 days, past 7 days, or past 30 days.
+On the Dashboard page, protection data of a maximum of 30 days can be viewed.
+The QPS calculation method varies depending on the time range. For details, see Table 1.
+ +Time Range + |
+Average QPS Description + |
+Peak QPS Description + |
+
|---|---|---|
Yesterday or Today + |
+The QPS curve is made with the average QPSs in every minute. + |
+The QPS curve is made with each peak QPS in every minute. + |
+
Past 3 days + |
+The QPS curve is made with the average QPSs in every five minutes. + |
+The QPS curve is made with each peak QPS in every five minutes. + |
+
Past 7 days + |
+The QPS curve is made with the maximum value among the average QPSs in every five minutes at a 10-minute interval. + |
+The QPS curve is made with each peak QPS in every 10 minutes. + |
+
Past 30 days + |
+The QPS curve is made with the maximum value among the average QPSs in every five minutes at a one-hour interval. + |
+The QPS curve is made with the peak QPSs in every hour. + |
+
Queries Per Second (QPS) indicates the number of requests per second. For example, an HTTP GET request is also called a query. The number of requests is the total number of requests in a specific time range.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.


Parameter + |
+Description + |
+
|---|---|
Requests + |
+You can view how many requests for your website as well as total attacks and attacks of each attack type. + |
+
QPS + |
+Average number of requests per second for the domain name. For details about the values of QPS, see How to Calculate QPS. +Queries Per Second (QPS) indicates the number of requests per second. For example, an HTTP GET request is also called a query. + |
+
Bandwidth + |
+Bandwidth usage + |
+
Response Code + |
+Response codes returned by WAF to the client or returned by the origin server to WAF along with the corresponding number of responses. You can click WAF to Client or Origin Server to WAF to view the corresponding information. +The number of response codes is accumulated based on the sequence of response codes (from left to right) in the lower part of the chart. The number of response codes is the difference between two lines. If the value of a response code is 0, the line of the response code overlaps that of the previous response code. + |
+
Event Distribution + |
+Types of attack events +Click an area in the Event Distribution area to view the type, number, and proportion of an attack. + |
+
Top 10 Attacked Domain Names + |
+The ten most attacked domain names and the number of attacks on each domain name. +Click View More to go to the Events page and view more protection data. + |
+
Top 10 Attack Source IP Addresses + |
+The ten source IP addresses with the most attacks and the number of attacks from each source IP address. +Click View More to go to the Events page and view more protection data. + |
+
Top 10 Attacked URLs + |
+The ten most attacked URLs and the number of attacks on each URL. +Click View More to go to the Events page and view more protection data. + |
+
If you confirm that an attack event on the Events page is a false alarm, you can handle the event as false alarm by ignoring the URL and rule ID in basic web protection, or by deleting or disabling the corresponding protection rule you configured. After an attack event is handled as a false alarm, the event will not be displayed on the Events page anymore. You will no longer receive any alarm notifications about the event.
+WAF detects attacks by using built-in basic web protection rules, built-in features in anti-crawler protection, and custom rules you configured (such as CC attack protection, precise access protection, blacklist, whitelist, and geolocation access control rules). WAF will respond to detected attacks based on the protective actions (such as Block and Log only) defined in the rules and display attack events on the Events page.
+There is at least one false alarm event in the event list.
+The attack event will not be displayed on the Events page. You will no longer receive any alarm notifications about the event.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.Parameter + |
+Description + |
+
|---|---|
Event Type + |
+Type of attack. +By default, All is selected. You can view logs of all attack types or select an attack type to view corresponding attack logs. + |
+
Protective Action + |
+The options are Block, Log only, and Verification code. + |
+
Source IP Address + |
+Public IP address of the web visitor/attacker +By default, All is selected. You can view logs of all attack source IP addresses, select an attack source IP address, or enter an attack source IP address to view corresponding attack logs. + |
+
URL + |
+Attacked URL + |
+
Event ID + |
+ID of the event + |
+
Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Time + |
+When the attack occurred + |
+2021/02/04 13:20:04 + |
+
Source IP Address + |
+Public IP address of the web visitor/attacker + |
+None + |
+
Geolocation + |
+Location where the IP address of the attack originates from + |
+- + |
+
Domain Name + |
+Attacked domain name + |
+www.example.com + |
+
URL + |
+Attacked URL + |
+/admin + |
+
Malicious Load + |
+The location or part of the attack that causes damage or the number of times that the URL was accessed. + NOTE:
+
|
+id=1 and 1='1 + |
+
Event Type + |
+Type of attack + |
+SQL injection + |
+
Protective Action + |
+Protective actions configured in the rule. The options are Block, Log only, and Verification code. + NOTE:
+If an access request matches a web tamper protection rule, information leakage prevention rule, or data masking rule, the protective action is marked as Mismatch. + |
+Block + |
+
Status Code + |
+HTTP status code returned on the block page. + |
+418 + |
+
To view event details, click Details in the Operation column of the event list.
+Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Scope + |
+
|
+Specified domain names + |
+
Domain Name + |
+This parameter is mandatory when you select Specified domain names for Scope. +Enter a single domain name that matches the wildcard domain name being protected by the current policy. + |
+www.example.com + |
+
Condition List + |
+Click Add to add conditions. At least one condition needs to be added. You can add up to 30 conditions to a protection rule. If more than one condition is added, all of the conditions must be met for the rule to be applied. A condition includes the following parameters: +Parameters for configuring a condition are described as follows:
+
|
+Path, Include, /product + |
+
Ignore WAF Protection + |
+
|
+Basic Web Protection + |
+
Ignored Protection Type + |
+If you select Basic web protection for Ignored Protection Type, specify the following parameters: +
|
+Attack type + |
+
ID + |
+This parameter is mandatory when you select ID for Ignored Protection Type. +ID of an attack event on the Events page. If the event type is Custom, it has no event ID. Click Handle False Alarm in the row containing the attack event to obtain the ID. You are advised to configure global protection whitelist (formerly false alarm masking) rules on the Events page by referring to Handling False Alarms. + |
+041046 + |
+
Attack type + |
+This parameter is mandatory when you select Attack type for Ignored Protection Type. +Select an attack type from the drop-down list box. +WAF can defend against XSS attacks, web shells, SQL injection attacks, malicious crawlers, remote file inclusions, local file inclusions, command injection attacks, and other attacks. + |
+SQL injection + |
+
Rule Description + |
+A brief description of the rule. This parameter is optional. + |
+SQL injection attacks are not intercepted. + |
+
Advanced Settings + |
+To ignore attacks of a specific field, specify the field in the Advanced Settings area. After you add the rule, WAF will stop blocking attack events of the specified field. +Select a target field from the first drop-down list box on the left. The following fields are supported: Params, Cookie, Header, Body, and Multipart.
+
NOTE:
+If All is selected, WAF will not block all attack events of the selected field. + |
+Params +All + |
+
A false alarm will be deleted within about a minute after the handling configuration is done. It will no longer be displayed in the attack event details list. You can refresh the browser cache and request the page for which the false alarm masking rule is configured to check whether the configuration takes effect.
+If an event is handled as a false alarm, the rule hit will be added to the global protection whitelist (formerly false alarm masking) rule list. You can go to the Policies page and then switch to the Global Protection Whitelist (Formerly False Alarm Masking) page to manage the rule, including querying, disabling, deleting, and modifying the rule. For details, see Configuring a Global Protection Whitelist (Formerly False Alarm Masking) Rule.
+WAF is deployed on the cloud, which is irrelevant to an OS. Therefore, WAF supports any OS. A domain name server on any OS can be connected to WAF for protection.
+WAF is deployed on the cloud.
+Web Application Firewall (WAF) keeps web services stable and secure. It examines all HTTP and HTTPS requests to detect and block the following attacks: Structured Query Language (SQL) injection, cross-site scripting (XSS), web shells, command and code injections, file inclusion, sensitive file access, third-party vulnerability exploits, Challenge Collapsar (CC) attacks, malicious crawlers, and cross-site request forgery (CSRF).
+WAF can examine the following requests:
+The protection rules supported by WAF are described below.
+WAF can defend against common web attacks, such as SQL injection, XSS, web shells, and Trojans in HTTP upload channels. Once these functions are enabled, protection takes effect immediately.
+Flexible rate limiting policies can be set based on the IP addresses, cookies, or Referer field, mitigating CC attacks.
+Common HTTP fields can be combined to customize protection policies, such as CSRF protection. With user-defined rules, WAF can accurately detect malicious requests and protect sensitive information in websites.
+Blacklist or whitelist rules allow you to block or allow specific IP addresses or address ranges, improving defense accuracy.
+Geolocation access control rules allow you to customize access control based on the source IP addresses.
+Cache configuration is performed on static web pages. When a user accesses a web page, the system returns a cached page to the user and randomly checks whether the page is tampered with.
+This function dynamically analyzes website service models and accurately identifies crawler behavior based on data risk control and bot identification systems, such as JS Challenge.
+This function ignores certain attack detection rules for specific requests.
+Data masking prevents such data as passwords from being displayed in event logs.
+WAF prevents user's sensitive information on web pages from being disclosed, such as ID numbers, phone numbers, and email addresses.
+A WAF instance can protect IP addresses.
+A dedicated or load balancing WAF instance can protect websites through either domain names or IP addresses.
+The origin server IP address configured in WAF can be a public IP address or internal IP address.
+For details about how to add a domain name to WAF, see How Do I Add a Domain Name/IP Address to WAF?.
+WAF provides protection at seven layers, namely, the physical layer, data link layer, network layer, transport layer, session layer, presentation layer, and application layer.
+When a service interface is under an HTTP flood attack, you can set a CC attack protection rule on the WAF console to relieve service pressure.
+WAF provides the following settings for a CC attack protection rule:
+For details, see Configuring a CC Attack Protection Rule.
+During the configuration of a CC attack protection rule, if IP addresses cannot identify users precisely, for example, when many users share an egress IP address, use Cookie to identify users.
+If the cookie contains key values, such as the session value, of users, the key value can be used as the basis for identifying users.
+Once an attack hits a WAF rule, WAF will respond to the attack immediately according to the protective action (Log only or Block) you configured for the rule and display an event on the Events page.
+If a large number of false alarms are reported for a specific service, handle them on the Events page. To do so, you can ignore the specific URL and rule ID. Then, WAF will no longer block the same type of request to the URL.
+In the row containing the false alarm event, click Details in the Operation column and view the event details. If you are sure that the event is a false positive, handle it as a false alarm by referring to Table 1. After an event is handled as a false alarm, WAF stops blocking corresponding type of event. No such type of event will be displayed on the Events page and you will no longer receive alarm notifications accordingly.
+ +Type of Hit Rule + |
+Hit Rule + |
+Handling Method + |
+
|---|---|---|
WAF built-in protection rules + |
+
|
+In the row containing the attack event, click Handle False Alarm in the Operation column. For details, see Handling False Alarms. + |
+
Custom protection rules + |
+
|
+Go to the page displaying the hit rule and delete it. + |
+
Other + |
+Invalid access requests + NOTE:
+If either of the following numbers in an access request exceeds 512, WAF blocks the access request as an invalid request:
+
|
+Allow the blocked requests by referring to Configuring a Precise Protection Rule. The Handle False Alarm button for invalid access events are grayed out as such events are generated against a precise protection rule. + |
+
For details, see Handling False Alarms.
+The deletion operation cannot be cancelled. Exercise caution when performing this operation.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.If you want to retain the policy applied to the domain name, select Retain the policy of this domain name.
+
If Domain name deleted successfully is displayed in the upper right corner, the domain name of the website was deleted.
+Web Application Firewall (WAF) keeps web services stable and secure. It examines all HTTP and HTTPS requests to detect and block the following attacks: Structured Query Language (SQL) injection, cross-site scripting (XSS), web shells, command and code injections, file inclusion, sensitive file access, third-party vulnerability exploits, Challenge Collapsar (CC) attacks, malicious crawlers, and cross-site request forgery (CSRF).
+After you enable a WAF instance, add your website domain to the WAF instance on the WAF console. All public network traffic for your website then goes to WAF first. WAF identifies and filters out the illegitimate traffic, and routes only the legitimate traffic to your origin server to ensure site security.
+WAF helps you defend against common web attacks, such as command injection and sensitive file access.
+Countless malicious requests may be sent to service interfaces during online promotions. WAF allows configurable rate limiting policies to defend against CC attacks. This prevents services from breaking down due to many concurrent requests, ensuring response to legitimate requests.
+Services cannot recover quickly from impact of zero-day vulnerabilities in third-party web frameworks and plug-ins. WAF updates the preset protection rules immediately to add an additional protection layer to such web frameworks and plug-ins, and this layer can react faster than fixing the vulnerabilities.
+WAF prevents malicious actors from using methods such as SQL injection and web shells to bypass application security and gain remote access to web databases. You can configure anti-data leakage rules on WAF to provide the following functions:
+ +WAF ensures that attackers cannot leave backdoors on your web servers or tamper with your web page content, preventing damage to your credibility. You can configure web tamper protection rules on WAF to provide the following functions:
+You can configure WAF to detect malicious code injected into web servers and ensure secure visits to web pages.
+WAF prevents attackers from tampering with web page content or publishing inappropriate information that can damage your reputation.
+This topic describes WAF and other cloud services.
+Operation + |
+Resource Type + |
+Trace Name + |
+
|---|---|---|
Creating a WAF instance + |
+instance + |
+createInstance + |
+
Deleting a WAF instance + |
+instance + |
+deleteInstance + |
+
Modifying a WAF instance + |
+instance + |
+alterInstanceName + |
+
Modifying the protection status of a WAF instance + |
+instance + |
+modifyProtectStatus + |
+
Modifying the connection status of a WAF instance + |
+instance + |
+modifyAccessStatus + |
+
Creating a WAF policy + |
+policy + |
+createPolicy + |
+
Applying a WAF policy + |
+policy + |
+applyToHost + |
+
Modifying a policy + |
+policy + |
+modifyPolicy + |
+
Deleting a WAF policy + |
+policy + |
+deletePolicy + |
+
Uploading a certificate + |
+certificate + |
+createCertificate + |
+
Changing the name of a certificate + |
+certificate + |
+modifyCertificate + |
+
Adding a CC attack protection rule + |
+policy + |
+createCc + |
+
Modifying a CC attack protection rule + |
+policy + |
+modifyCc + |
+
Deleting a CC attack protection rule + |
+policy + |
+deleteCc + |
+
Adding a precise protection rule + |
+policy + |
+createCustom + |
+
Modifying a precise protection rule + |
+policy + |
+modifyCustom + |
+
Deleting a precise protection rule + |
+policy + |
+deleteCustom + |
+
Adding an IP address blacklist or whitelist rule + |
+policy + |
+createWhiteblackip + |
+
Modifying an IP address blacklist or whitelist rule + |
+policy + |
+modifyWhiteblackip + |
+
Deleting an IP address blacklist or whitelist rule + |
+policy + |
+deleteWhiteblackip + |
+
Creating/updating a web tamper protection rule + |
+policy + |
+createAntitamper + |
+
Deleting a web tamper protection rule + |
+policy + |
+deleteAntitamper + |
+
Creating a false alarm maskingglobal protection whitelist (formerly false alarm masking) rule + |
+policy + |
+createIgnore + |
+
Deleting a false alarm maskingglobal protection whitelist (formerly false alarm masking) rule + |
+policy + |
+deleteIgnore + |
+
Adding a data masking rule + |
+policy + |
+createPrivacy + |
+
Modifying a data masking rule + |
+policy + |
+modifyPrivacy + |
+
Deleting a data masking rule + |
+policy + |
+deletePrivacy + |
+
Cloud Eye monitors the indicators of the dedicated WAF, so that you can understand the protection status of the dedicated WAF in a timely manner, and set protection policies accordingly. For details, see the Cloud Eye User Guide.
+For details about WAF monitored metrics, see WAF Monitored Metrics.
+You can add your WAF instances to a load balancer so that your website traffic is distributed by the load balancer across WAF instances for detection and then forwarded by WAF to the origin server. In this way, website traffic will be protected even if one of your WAF instances becomes faulty.
+Identity and Access Management (IAM) provides the permission management function for WAF. Only users granted WAF Administrator permissions can use WAF. To obtain this permission, contact the users who have the Security Administrator permissions.
+Tag Management Service (TMS) is a visualized service for fast and unified tag management that enables you to label and manage WAF instances by tags.
+ +Operation + |
+Resource Type + |
+Trace Name + |
+
|---|---|---|
Creating a WAF instance tag + |
+Tag + |
+createResourceTag + |
+
Deleting a WAF instance tag + |
+Tag + |
+deleteResourceTag + |
+
If you need to assign different permissions to employees in your enterprise to access your WAF resources, IAM is a good choice for fine-grained permissions management. IAM provides identity authentication, permissions management, and access control, helping you secure access to your resources.
+With IAM, you can use your account to create IAM users, and assign permissions to the users to control their access to specific resources. For example, some software developers in your enterprise need to use WAF resources but must not delete them or perform any high-risk operations. To achieve this result, you can create IAM users for the software developers and grant them only the permissions required for using WAF resources.
+If your account does not need individual IAM users for permissions management, then you may skip over this chapter.
+By default, new IAM users do not have any permissions assigned. You need to add a user to one or more groups, and attach permissions policies or roles to these groups. Users inherit permissions from the groups to which they are added and can perform specified operations on cloud services based on the permissions.
+WAF is a project-level service deployed and accessed in specific physical regions. To assign WAF permissions to a user group, specify the scope as region-specific projects and select projects for the permissions to take effect. If All projects is selected, the permissions will take effect for the user group in all region-specific projects. When accessing WAF, the users need to switch to a region where they have been authorized to use the WAF service.
+Table 1 lists all the system roles supported by WAF.
+ +Role/Policy Name + |
+Description + |
+Category + |
+Dependencies + |
+
|---|---|---|---|
WAF Administrator + |
+Administrator permissions for WAF + |
+System-defined role + |
+Dependent on the Tenant Guest and Server Administrator roles. +
|
+
WAF FullAccess + |
+All permissions for WAF + |
+System-defined policy + |
+None. + |
+
WAF ReadOnlyAccess + |
+Read-only permissions for WAF. + |
+System-defined policy + |
+
This FAQ guides you to switch the mode of basic web protection to Block.
+Perform the following operations:
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
Log only and Block are merely modes of basic web protection. CC attack protection and precise protection have their own protective actions.
+You can add two types of information leakage prevention rules.
+A website has been added to WAF.
+It takes several minutes for a new rule to take effect. After the rule takes effect, protection events triggered by the rule will be displayed on the Events page.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
Information leakage prevention rules prevent sensitive information (such as ID numbers, phone numbers, and email addresses) from being disclosed. This type of rule can also block specified HTTP status codes.
+
To verify that WAF is protecting your domain name www.example.com against an information leakage prevention rule:
+The email address, phone number, and identity number on the returned page are masked.
+This topic describes how to add rules to one or more policies.
+A website has been added to WAF.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.

After you connect a website to your WAF instance, WAF works as a reverse proxy between the client and the server. The real IP address of the server is hidden and only the IP address of WAF is visible to web visitors.
+Generally, a proxy such as CDN, WAF, and anti-DDoS service is deployed between the client and server. Web visitors cannot directly access the server. For example, .
+When forwarding requests to the downstream server, the transparent proxy server adds an X-Forwarded-For field to the HTTP header to identify the web visitor's real IP address in the format of X-Forwarded-For: real IP address of the web visitor, proxy 1-IP address, proxy 2-IP address, proxy 3-IP address, ........->....
+Therefore, you can obtain the web visitor's real IP address from the X-Forwarded-For field. The first IP address in this field is the web visitor's real IP address.
+WAF examines web traffic from multiple dimensions to accurately identify malicious requests and filter attacks, reducing the risks of data being tampered with or stolen.
+A specialized security team provides 24/7 service support to fix zero-day vulnerabilities within 2 hours.
+If an error, such as 404 Not Found, 502 Bad Gateway, or 504 Gateway Timeout, occurs after a domain name is connected to WAF, use the following methods to locate the cause and remove the error:
+Solution: Add the non-standard port to the URL and access the origin server again, for example, https://www.example.com:8080.
+
If no non-standard port is configured, WAF protects services on port 80/443 by default. To protect services on other ports, re-configure domain settings.
+Solution: The domain name needs to be accessed directly. For example, https://www.example.com.
+Scenario 2: When a visitor accesses your website, another 404 error page is displayed instead of the page shown in Figure 1.
+Cause: The website does not exist or has been deleted.
+Solution: Check your website.
+
If your web server is not deployed on the cloud, consult your server provider about whether the server has default block settings. If there are default block settings, ask the service provider to remove them.
+Possible causes are as follows:
+Solution: Add the WAF IP address ranges to the whitelist of the firewall (hardware or software), security protection software, and rate limiting module.
+
. On the displayed page, check whether the client protocol, server protocol, origin server address, and port used by the origin server are correct.curl http://xx.xx.xx.xx:yy -kvv+
xx.xx.xx.xx indicates the IP address of the origin server. yy indicates the port of the origin server. xx.xx.xx.xx and yy must belong to the same origin server.
+
If connection refused is displayed, the origin server is unreachable and website cannot be accessed. Perform the following operations:
+Solution: Contact your website owner to rectify the fault.
+Scenario: After the configuration of connecting a domain name to WAF is complete, your website works properly. However, with the increasing traffic volume, the number of 504 errors also increases. If you directly access the IP address of the origin server, the 504 error code is returned sometimes.
+The possible causes are as follows:
+Method 1: Add a backend server group to the ELB.
+
. On the displayed page, click Add.Solution: Whitelist the WAF back-to-source IP addresses in the corresponding ECS security groups.
+Solution: Whitelist the WAF back-to-source IP addresses in the corresponding ECS security groups or uninstall the firewall software except WAF.
+Solution
+Solution: Increase the bandwidth of the origin server.
+Sort out all website services you want to protect with WAF. This helps you learn about your workloads and specific data of your workloads so that you can choose and configure appropriate protection policies.
+ +Item + |
+Description + |
+
|---|---|
Website and Service Information + |
+|
Daily peak traffic of website/web application services, including the bandwidth (in Mbit/s) and QPS + |
+Use it as the basis for selecting the service bandwidth and QPS specifications. + NOTE:
+If your website traffic peak exceeds the maximum QPS specifications you are using, WAF will stop checking the traffic and directly forward it to the origin server. There is no protection for your website or applications. + |
+
Major user group (for example, major locations where the requests originate from) + |
+Determine the attack source and then set geolocation access control rules to block users from these locations. + |
+
Whether the service uses a C/S architecture + |
+If yes, check whether there is an app client, Windows client, Linux client, code callback, or any other client. + |
+
Location where the origin server is deployed + |
+Decide which region you want to buy the instance. + |
+
Operating system (Linux or Windows) and web service middleware (Apache, Nginx, or IIS) of the origin server + |
+Check whether access control is enabled for the origin server. If yes, whitelist WAF IP addresses. + |
+
Domain protocol + |
+Check whether WAF supports the communication protocol used by your site. + NOTE:
+WAF can protect your website only when Client Protocol and Server Protocol are configured based on the real situation of your website.
+
|
+
Service port + |
+Check whether your service ports are within the port range supported by WAF. +
|
+
Whether TLSv1.0 or weak encryption suite is supported + |
+Check whether WAF supports the encryption suite used by your site. + |
+
Whether advanced anti-DDoS, CDN, or other proxy services are deployed in front of WAF. + |
+Check whether a proxy is used and whether domain name is resolved to a correct address. + |
+
Whether the client supports Server Name Indication (for HTTPS services) + |
+If your domain name supports HTTPS, the client and server must support Server Name Indication (SNI). + |
+
Service interaction + |
+Understand the service interaction process and service processing logic to facilitate subsequent configuration of protection policies. + |
+
Active users + |
+Determine the severity of an attack event to take a low-risk measure to respond it. + |
+
Services and Attacks + |
+|
Service types and features (such as games, cards, websites, or apps) + |
+Help analyze the attack signatures. + |
+
Inbound traffic range and connection status of a single user or a single IP address + |
+Help determine whether a rate limiting policy can be configured per IP address. + |
+
User group attribute + |
+For example, individual users, Internet cafe users, or proxy users + |
+
Whether your website experienced large-volumetric attacks, the attack type, and maximum peak traffic + |
+Determine whether a DDoS protection service is required and determine the DDoS protection specifications based on the peak attack traffic. + |
+
Whether your website experienced CC attacks and the maximum peak QPS in a CC attack + |
+Configure the protection policies based on attack signatures. + |
+
Whether the pressure test has been performed + |
+Evaluate the request processing performance of the origin server to determine whether service anomaly occurs due to attacks. + |
+
Step + |
+Description + |
+
|---|---|
Applying for dedicated WAF instances + |
+Apply for a dedicated WAF instance. +For details, see Applying for a Dedicated WAF Instance. + |
+
Adding a website to WAF + |
+Add the website you want to protect to WAF. +For details, see Step 1: Add a Website to WAF. + |
+
Enabling WAF protection + |
+Enable WAF protection to protect added website. + NOTE:
+
|
+
Configuring protection rules + |
+Use WAF built-in protection rules and configure custom rules to protect your website. For more details, see Rule Configuration. + |
+
Handling false alarms + |
+Mask blocked or logged events which are handled as false alarms. For more details, see Handling False Alarms. + |
+
Viewing Dashboard + |
+View protection data of yesterday, today, last 3 days, last 7 days, or last 30 days. For more details, see Dashboard. + |
+
A policy is a combination of rules, such as basic web protection, blacklist, whitelist, and precise protection rules. A policy can be applied to multiple domain names, but only one policy can be used for a domain name. This topic describes how to add a policy to your WAF instance.
+A website has been added to WAF.
+A protected website domain name can use only one policy.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.

next to the policy name. In the dialog box displayed, enter a new policy name.This topic describes how to apply a policy to your protected website.
+A website has been added to WAF.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
This topic describes how to download events (logged and blocked events) data for the last five days. One or more CSV files containing the event data of the current day will be generated at the beginning of the next day.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.+
Parameter + |
+Description + |
+
|---|---|
File Name + |
+The format is file-name.csv. + |
+
Number of Events + |
+Total number of blocked and logged events + NOTE:
+The maximum number of events in a file is 10,000. If there are more than 10,000 events, another file is generated. + |
+
Field + |
+Description + |
+Example Value + |
+
|---|---|---|
action + |
+Protective action taken in response to the event + |
+block + |
+
attack + |
+Attack type + |
+SQL Injection + |
+
body + |
+Request content of the attack + |
+N/A + |
+
cookie + |
+Cookie of the attacker + |
+N/A + |
+
headers + |
+Header of the attacker + |
+N/A + |
+
host + |
+Domain name or IP address of the protected website + |
+www.example.com + |
+
id + |
+ID of the event. + |
+02-11-16-20201121060347-feb42002 + |
+
payload + |
+The part of the attack that causes damage to the protected website + |
+python-requests/2.20.1 + |
+
payload_location + |
+The location of the attack that causes damage or the number of times that the URL is accessed by the attacker + |
+user-agent + |
+
policyid + |
+Policy ID. + |
+d5580c8f6cd4403ebbf85892d4bbb8e4 + |
+
request_line + |
+Request line of the attack + |
+GET / + |
+
rule + |
+ID of the rule against which the event is generated. + |
+81066 + |
+
sip + |
+Public IP address of the web visitor/attacker + |
+N/A + |
+
time + |
+When the event occurred. + |
+2020/11/21 0:20:44 + |
+
url + |
+URL of the protected domain name + |
+N/A + |
+
If you select HTTPS for Client Protocol when you add a website to WAF, a certificate must be associated with the website.
+You can upload a certificate to WAF. Then you can directly select the uploaded certificate for the protected website.
+You have obtained the certificate file and certificate private key.
+You can create as many certificates in WAF as the number of domain names that can be protected by your WAF instances in the same account. For example, if WAF can protect 10 domain names, you can create 10 certificates in WAF.
+If you import a new certificate when adding a protected website or updating a certificate, the certificate is added to the certificate list on the Certificates page, and the imported certificates is counted in the number of created certificates.
+If you select HTTPS for Client Protocol, a certificate is required.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.

Format + |
+Conversion Method + |
+
|---|---|
CER/CRT + |
+Rename the cert.crt certificate file to cert.pem. + |
+
PFX + |
+
|
+
P7B + |
+
|
+
DER + |
+
|
+
The certificate you created is displayed in the certificate list.
+
, and enter a certificate name.
If the certificate is in use, unbind the certificate from the domain name first. Otherwise, the certificate name cannot be changed.
+This topic describes how to create a reference table to batch configure protection metrics of a single type, such as Path, User Agent, IP, Params, Cookie, Referer, and Header. A reference table can be referenced by CC attack protection rules and precise protection rules.
+A website has been added to WAF.
+You can use a reference table when you configure protection fields in batches for CC attack protection rules and precise access protection rules.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.


Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Name + |
+Table name you entered + |
+test + |
+
Type + |
+
|
+Path + |
+
Value + |
+Value of the corresponding Type. Wildcards are not allowed. + NOTE:
+Click Add to add more than one value. + |
+/buy/phone/ + |
+
If the certificate provided by the certificate authority is not found in the built-in trust store on your platform and the certificate chain does not have a certificate authority, the certificate is incomplete. If you use the incomplete certificate to access the website corresponding to the protected domain name, the access will fail.
+Use either of the following methods to fix it:
+The latest Google Chrome version supports automatic verification of the trust chain. The following describes how to manually create a complete certificate chain:
+If your visitors receive a page similar to the one in Figure 1 when they try to access your website through a mobile phone, an incomplete certificate chain is uploaded when you connect the website to WAF. Rectify the fault by referring to How Do I Fix an Incomplete Certificate Chain?
+ +WAF makes it easier for you to handle web security risks.
+WAF keeps applications stable and secure. It examines HTTP and HTTPS requests to detect and block attacks, such as Structure Query Language (SQL) injections, cross-site scripting (XSS), web shell upload, command or code injections, file inclusion, sensitive file access, third-party vulnerability exploits, CC attacks, malicious crawlers, and cross-site request forgery (CSRF).
+WAF supports the WebSocket/WebSockets protocol, which is enabled by default.
+With an extensive preset reputation database, WAF defends against Open Web Application Security Project (OWASP) top 10 threats, malicious scanners, IP addresses, web shells, and other threats.
+WAF detects and blocks varied attacks, such as SQL injection, XSS, remote overflow vulnerabilities, file inclusions, Bash vulnerabilities, directory (path) traversal attacks, sensitive file access, command and code injections, web shells, backdoors, malicious HTTP requests, and third-party vulnerability exploits.
+WAF can decode the following types of code: url_encode, Unicode, XML, OCT, hexadecimal, HTML escape, and base64 code, case confusion, JavaScript, shell, and PHP concatenation confusion
+You can customize a CC attack protection rule to restrict access to a specific URL on your website based on an IP address, cookie, or Referer, mitigating CC attacks. Protective actions of CC attack protection rules include Verification code, Block, Dynamically block, and Log only.
+ +WAF provides a GUI-based interface for you to monitor attack information and event logs in real time.
+On the WAF console, you can configure policies applicable to multiple protected domain names in a centralized manner so that the policies can be quickly delivered and take effect.
+WAF displays the number of requests, the number and types of security events, and log information in real time.
+WAF can protect standard ports, such as 80 and 443 and a wide range of non-standard ports.
+ +Port Category + |
+HTTP Protocol + |
+HTTPS Protocol + |
+Port Limit + |
+
|---|---|---|---|
Standard ports + |
+80 + |
+443 + |
+Unlimited + |
+
Non-standard ports (182 in total) + |
+9945, 9770, 81, 82, 83, 84, 88, 89, 800, 808, 1000, 1090, 3128, 3333, 3501, 3601, 4444, 5000, 5222, 5555, 5601, 6001, 6666, 6788, 6789, 6842, 6868, 7000, 7001, 7002, 7003, 7004, 7005, 7006, 7009, 7010, 7011, 7012, 7013, 7014, 7015, 7016, 7018, 7019, 7020, 7021, 7022, 7023, 7024, 7025, 7026, 7070, 7081, 7082, 7083, 7088, 7097, 7777, 7800, 7979, 8000, 8001, 8002, 8003, 8008, 8009, 8010, 8020, 8021, 8022, 8025, 8026, 8077, 8078, 8080, 8085, 8086, 8087, 8088, 8089, 8090, 8091, 8092, 8093, 8094, 8095, 8096, 8097, 8098, 8106, 8118, 8181, 8334, 8336, 8800, 8686, 8888, 8889, 8989, 8999, 9000, 9001, 9002, 9003, 9080, 9200, 9802, 10000, 10001, 10080, 12601, 86, 9021, 9023, 9027, 9037, 9081, 9082, 9201, 9205, 9207, 9208, 9209, 9210, 9211, 9212, 9213, 48800, 87, 97, 7510, 9180, 9898, 9908, 9916, 9918, 9919, 9928, 9929, 9939, 28080, 33702, 8011, 8012, 8013, 8014, 8015, 8016, 8017, and 8070 + |
+8750, 8445, 18010, 4443, 5443, 6443, 7443, 8081, 8082, 8083, 8084, 8443, 8843, 9443, 8553, 8663, 9553, 9663, 18110, 18381, 18980, 28443, 18443, 8033, 18000, 19000, 7072, 7073, 8803, 8804, 8805, and 9999 + |
+Unlimited + |
+
Support precise logic- and parameter-based access control policies.
+Set conditions with combinations of common HTTP parameters, such as IP, URL, Referer, User Agent, Params, and Header.
+WAF blocks or allows traffic based on logical conditions, such as "Include", "Exclude", "Equal to", "Not equal to", "Prefix is", and "Prefix is not."
+Blocks web page crawling with user-defined scanner and crawler rules. This feature improves protection accuracy.
+This function allows you to blacklist or whitelist IP addresses or an IP address range to improve defense accuracy.
+If a large number of 502 Bad Gateway and 504 Gateway Timeout errors are detected, you can enable WAF breakdown protection and connection protection to let WAF suspend your website and protect your origin servers from being crashed. When the 502/504 error requests and pending URL requests reach the thresholds you configure, WAF enables corresponding protection for your website.
+In the Basic Information area on the website information page, enable Timeout Settings. Then, click
next to WAF-to-Server Connection Timeout, Read Timeout, and Write Timeout, modify settings one by one, and click
to save.
You can allow some web requests and block others based on the geographical locations of IP addresses that the requests originate from.
+You can configure cache for static web pages. When a user accesses a web page, the system returns a cached page to the user and randomly checks whether the page is tampered with.
+WAF dynamically analyzes your website service models and accurately identifies crawler behavior based on data risk control and bot identification systems.
+ +This function enables you to ignore certain attack detection rules for specific requests.
+WAF masks sensitive information, such as usernames and passwords, in the event log.
+WAF prevents your sensitive information from being disclosed on web pages, such as ID numbers, phone numbers, and email addresses.
+WAF can be deployed on multiple clusters in multiple regions based on the load balancing principle. This can prevent single point of failures (SPOFs) and ensure online smooth capacity expansion, maximizing service stability.
+After your website is connected to WAF, the file visitors can upload each time cannot exceed 512 MB.
+To upload a file greater than 512 MB, upload the file through:
+Normally, all requests destined for your site will pass through WAF. However, if your site is using CDN and WAF, the WAF policy targeted at the requests for caching static content will not take effect because CDN directly returns these requests to the client.
+The client protocol, server protocol, and server for each piece of server configuration must be the same.
+The client protocol, server protocol, and server for each piece of server configuration can be different.
+Before using WAF, you need to add domain names to be protected to WAF based on your web service protection requirements. WAF supports addition of single domain names and wildcard domain names. This section describes how to configure domain names to be protected.
+A wildcard domain name is a domain name that contains the wildcard * and starts with *..
+For example, *.example.com is a correct wildcard domain name, but *.*.example.com is not.
+
A wildcard domain name counts as one domain name.
+A single domain name is also called a common domain name and is a specific domain name (a non-wildcard domain name).
+For example, www.example.com or example.com is a single domain name.
+
For example, www.example.com counts as a domain name and so does a.www.example.com.
+WAF supports single domain names and wildcard domain names.
+
You are advised to set the added domain name to be protected to be the same as the domain name that is set at the DNS provider.
+The built-in protection rules of WAF help you defend against common web application attacks, including XSS attacks, SQL injection, crawlers, and web shells. You can customize protection rules to let WAF better protect your website services using these custom rules. Figure 1 shows how WAF engine built-in protection rules work. Figure 2 shows the detection sequence of user-defined rules.
+ + +WAF provides the following customized configuration methods to simplify the configuration process. Select a proper configuration method to meet your service requirements.
+Method 1: Configuring protection rules for a single domain name
+
After a domain name is added to WAF, WAF automatically associates a protection policy with the domain name, and protection rules configured for the domain name are also added to the protection policy by default. If there are domain names applicable to the protection policy, you can directly add them to the policy. For details, see Applying a Policy to Your Website.
+Protection Rule + |
+Description + |
+Reference + |
+
|---|---|---|
Basic web protection rules + |
+With an extensive reputation database, WAF defends against Open Web Application Security Project (OWASP) top 10 threats, and detects and blocks threats, such as malicious scanners, IP addresses, and web shells. + |
++ | +
CC attack protection rules + |
+CC attack protection rules can be customized to restrict access to a specific URL on your website based on a unique IP address, cookie, or referer field, mitigating CC attacks. + |
++ | +
Precise protection rules + |
+You can customize protection rules by combining HTTP headers, cookies, URLs, request parameters, and client IP addresses. + |
++ | +
Blacklist and whitelist rules + |
+You can configure blacklist and whitelist rules to block, log only, or allow access requests from specified IP addresses. + |
++ | +
Geolocation access control rules + |
+You can customize these rules to allow or block requests from a specific country or region. + |
++ | +
Web tamper protection rules + |
+You can configure these rules to prevent a static web page from being tampered with. + |
++ | +
Website anti-crawler protection + |
+This function dynamically analyzes website service models and accurately identifies crawler behavior based on data risk control and bot identification systems, such as JS Challenge. + |
++ | +
Information leakage prevention rules + |
+You can add two types of information leakage prevention rules. +
|
++ | +
Global protection whitelist (formerly false alarm masking) rules + |
+You can configure these rules to let WAF ignore certain rules for specific requests. + |
+Configuring a Global Protection Whitelist (Formerly False Alarm Masking) Rule + |
+
Data masking rules + |
+You can configure data masking rules to prevent sensitive data such as passwords from being displayed in event logs. + |
++ | +
Method 2: Configuring protection rules for multiple domain names
+WAF can protect domain names or IP addresses.
+Each domain name must correspond to a certificate. A wildcard domain name can only be used for a wildcard domain certificate. If you only have single-domain certificates, you need to add domain names one by one in WAF.
+WAF caches only static web pages that are configured with web tamper protection and sends the cached web pages that are not tampered with to web visitors.
+All paths configured for protection rules of WAF are case-sensitive.
+If a visitor is blocked by WAF, the Default block page of WAF is returned by default. You can also configure Custom or Redirection for the block page to be returned as required.
+A website has been added to WAF.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
next to the page template name in the row where Alarm Page is located. In the displayed Alarm Page dialog box, specify Page Template.


The root domain name of the redirection URL must be the same as the currently protected domain name (including a wildcard domain name). For example, if the protected domain name is www.example.com and the port is 8080, the redirection URL can be set to http://www.example.com:8080/error.html.
+On the Events page, you can view events generated for blocked attacks and logged only attacks. You can view details of WAF events, including the time an event occurs, origin server IP address, geographic location of the origin server IP address, malicious load, and hit rule.
+The website to be protected has been connected to WAF.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
Parameter + |
+Parameters + |
+
|---|---|
Event Type + |
+Type of the attack. +By default, All is selected. You can view logs of all attack types or select an attack type to view corresponding attack logs. + |
+
Protective Action + |
+The options are Block, Log only, and Verification code. + |
+
Source IP Address + |
+Public IP address of the web visitor/attacker +By default, All is selected. You can view logs of all attack source IP addresses, select an attack source IP address, or enter an attack source IP address to view corresponding attack logs. + |
+
URL + |
+Attacked URL. + |
+
Event ID + |
+ID of the event. + |
+
Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Time + |
+When the attack occurred + |
+2021/02/04 13:20:04 + |
+
Source IP Address + |
+Public IP address of the web visitor/attacker + |
+None + |
+
Geolocation + |
+Location where the IP address of the attack originates from + |
+- + |
+
Domain Name + |
+Attacked domain name + |
+www.example.com + |
+
URL + |
+Attacked URL + |
+/admin + |
+
Malicious Load + |
+The location or part of the attack that causes damage or the number of times that the URL was accessed. + NOTE:
+
|
+id=1 and 1='1 + |
+
Event Type + |
+Type of attack + |
+SQL injection + |
+
Protective Action + |
+Protective actions configured in the rule. The options are Block, Log only, and Verification code. + NOTE:
+If an access request matches a web tamper protection rule, information leakage prevention rule, or data masking rule, the protective action is marked as Mismatch. + |
+Block + |
+
Status Code + |
+HTTP status code returned on the block page. + |
+418 + |
+
To view event details, click Details in the Operation column of the event list.
+Prepare information required for connecting a domain name or IP address to WAF based on the mode of WAF instance you plan to buy.
+The following data is required:
+On the Basic Information page, enable Timeout Settings and click
. Then, specify WAF-to-Server connection timeout (s), Read timeout (s), and Write timeout (s) and click
to save settings.
Transport Layer Security (TLS) provides confidentiality and ensures data integrity for data sent between applications over the Internet. HTTPS is a network protocol constructed based on TLS and HTTP and can be used for encrypted transmission and identity authentication. If you set Client Protocol to HTTPS, set the minimum TLS version and cipher suite (a set of multiple cryptographic algorithms) for your domain name to block requests that use a TLS version earlier than the configured one.
+TLS v1.0 and the cipher suite 1 are configured by default in WAF for general security. To protect your websites better, set the minimum TLS version to a later version and select a more secure cipher suite.
+By default, the minimum TLS version configured for WAF is TLS v1.0. To ensure website security, configure the right TLS version for your service requirements. Table 1 lists the recommended minimum TLS versions for different scenarios.
+ +Scenario + |
+Minimum TLS Version (Recommended) + |
+Protection Effect + |
+
|---|---|---|
Websites that handle critical business data, such as sites used in banking, finance, securities, and e-commerce. + |
+TLS v1.2 + |
+WAF automatically blocks website access requests that use TLS v1.0 or TLS v1.1. + |
+
Websites with basic security requirements, for example, small- and medium-sized enterprise websites. + |
+TLS v1.1 + |
+WAF automatically blocks website access requests that use TLS v1.0. + |
+
Client applications with no special security requirements + |
+TLS v1.0 + |
+Requests using any TLS protocols can access the website. + |
+
The recommended cipher suite in WAF is Cipher suite 1. Cipher suite 1 offers a good mix of browser compatibility and security. For details about each cipher suite, see Table 2.
+ +Cipher Suite Name + |
+Supported cryptographic algorithms + |
+Description + |
+
|---|---|---|
Default cipher suite + |
+
|
++ | +
Cipher suite 1 + |
+
|
+Recommended configuration. + + |
+
Cipher suite 2 + |
+
|
++ | +
Cipher suite 3 + |
+
|
++ | +
Cipher suite 4 + |
+
|
++ | +
The TLS cipher suites in WAF are compatible with all browsers and clients of later versions but are incompatible with some browsers of earlier versions. Table 3 lists the incompatible browsers and clients if the TLS v1.0 protocol is used.
+
It is recommended that compatibility tests should be carried out on the service environment to ensure service stability.
+Browser/Client + |
+Default Cipher Suite + |
+Cipher Suite 1 + |
+Cipher Suite 2 + |
+Cipher Suite 3 + |
+Cipher Suite 4 + |
+
|---|---|---|---|---|---|
Google Chrome 63 /macOS High Sierra 10.13.2 + |
+Not compatible + |
+Compatible + |
+Compatible + |
+Compatible + |
+Not compatible + |
+
Google Chrome 49/ Windows XP SP3 + |
+Not compatible + |
+Not compatible + |
+Not compatible + |
+Not compatible + |
+Not compatible + |
+
Internet Explorer 6 +/Windows XP + |
+Not compatible + |
+Not compatible + |
+Not compatible + |
+Not compatible + |
+Not compatible + |
+
Internet Explorer 8 +/Windows XP + |
+Not compatible + |
+Not compatible + |
+Not compatible + |
+Not compatible + |
+Not compatible + |
+
Safari 6/iOS 6.0.1 + |
+Compatible + |
+Compatible + |
+Not compatible + |
+Compatible + |
+Compatible + |
+
Safari 7/iOS 7.1 + |
+Compatible + |
+Compatible + |
+Not compatible + |
+Compatible + |
+Compatible + |
+
Safari 7/OS X 10.9 + |
+Compatible + |
+Compatible + |
+Not compatible + |
+Compatible + |
+Compatible + |
+
Safari 8/iOS 8.4 + |
+Compatible + |
+Compatible + |
+Not compatible + |
+Compatible + |
+Compatible + |
+
Safari 8/OS X 10.10 + |
+Compatible + |
+Compatible + |
+Not compatible + |
+Compatible + |
+Compatible + |
+
Internet Explorer +7/Windows Vista + |
+Compatible + |
+Compatible + |
+Not compatible + |
+Compatible + |
+Compatible + |
+
Internet Explorer 8, 9, or 10 +/Windows 7 + |
+Compatible + |
+Compatible + |
+Not compatible + |
+Compatible + |
+Compatible + |
+
Internet Explorer 10 +/Windows Phone 8.0 + |
+Compatible + |
+Compatible + |
+Not compatible + |
+Compatible + |
+Compatible + |
+
Java 7u25 + |
+Compatible + |
+Compatible + |
+Not compatible + |
+Compatible + |
+Compatible + |
+
OpenSSL 0.9.8y + |
+Not compatible + |
+Not compatible + |
+Not compatible + |
+Not compatible + |
+Not compatible + |
+
Safari 5.1.9/OS X 10.6.8 + |
+Compatible + |
+Compatible + |
+Not compatible + |
+Compatible + |
+Compatible + |
+
Safari 6.0.4/OS X 10.8.4 + |
+Compatible + |
+Compatible + |
+Not compatible + |
+Compatible + |
+Compatible + |
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Security > Web Application Firewall (Dedicated).
to complete TLS configuration. Figure 1 shows an example.
+
If PCI DSS certification check is enabled, the minimum TLS version and cypher suite cannot be changed.
+
If the Minimum TLS Version is set to TLS v1.2, the website can be accessed over connections secured by TLS v1.2 or later, but cannot be accessed over connections secured by TLS v1.1 or earlier.
+After you connect a domain name or IP address of the website you want to protect to WAF, WAF works as a reverse proxy between the client and the server. The real IP address of the server is hidden and only the IP address of WAF is visible to web visitors. For details, see Step 1: Add a Website to WAF.
+ +Queries Per Second (QPS) indicates the number of requests per second. For example, an HTTP GET request is also called a query. The number of requests is the total number of requests in a specific time range.
+Queries Per Second (QPS) is the number of requests a server can handle per second.
+
QPS is used to measure the number of queries, or requests, per second.
+For details about QPS on the Dashboard page, see Table 1.
+ +Time Range + |
+Average QPS Description + |
+Peak QPS Description + |
+
|---|---|---|
Yesterday or Today + |
+The QPS curve is made with the average QPSs in every minute. + |
+The QPS curve is made with each peak QPS in every minute. + |
+
Past 3 days + |
+The QPS curve is made with the average QPSs in every five minutes. + |
+The QPS curve is made with each peak QPS in every five minutes. + |
+
Past 7 days + |
+The QPS curve is made with the maximum value among the average QPSs in every five minutes at a 10-minute interval. + |
+The QPS curve is made with each peak QPS in every 10 minutes. + |
+
Past 30 days + |
+The QPS curve is made with the maximum value among the average QPSs in every five minutes at a one-hour interval. + |
+The QPS curve is made with the peak QPSs in every hour. + |
+
The built-in detection of WAF checks POST data, and web shells are the files submitted in POST requests. WAF checks all data, such as forms and JSON files in POST requests based on the default protection policies.
+You can configure a precise protection rule to check the body added to POST requests.
+Yes. When adding a domain name to WAF, you can configure a single domain name or a wildcard domain name based on your service requirements. The details are as follows:
+Configure a single domain name to be protected. For example, www.example.com
+You can view security events such as file inclusion in WAF protection events to quickly locate attack sources or analyze attack events.
+Program developers write repeatedly used functions into a single file. When such functions need to be used, the file is directly invoked. The file invoking process is called file inclusion. File inclusion vulnerabilities are classified into two categories, based on whether the file is a remotely hosted file or a local file available on the web server:
+A file inclusion vulnerability allows an attacker to access unauthorized or sensitive files available on the web server or to execute malicious files on the web server by using such a file. This vulnerability is mainly due to a bad input validation mechanism, wherein the user's input that is passed to the file include commands without proper validation. The impact of this vulnerability can lead to malicious code execution on the server or reveal data present in sensitive files.
+If the request contains malicious load and is intercepted by WAF, error 418 is reported when you access the domain name protected by WAF. You can view WAF protection logs to view the cause.
+WAF provides three basic web protection levels: Low, Medium, and High. The default option is Medium. For details, see Table 1.
+ +Protection Level + |
+Description + |
+
|---|---|
Low + |
+WAF only blocks the requests with obvious attack signatures. +If a large number of false alarms are reported, Low is recommended. + |
+
Medium + |
+The default level is Medium, which meets a majority of web protection requirements. + |
+
High + |
+At this level, WAF provides the finest granular protection and can intercept attacks with complex bypass features, such as Jolokia cyber attacks, common gateway interface (CGI) vulnerability detection, and Druid SQL injection attacks. +To let WAF defend against more attacks but make minimum effect on normal requests, observe your workloads for a period of time first. Then, configure a global protection whitelist rule and select High. + |
+
No. WAF can only detect and restrict source IP addresses.
+If the request data for calling other APIs on the web page is included in the domain names protected by WAF, the request data passes through WAF. WAF checks the request data and blocks it if it is an attack.
+If the request data for calling other APIs on the web page is not included in the domain names protected by WAF, the request data does not pass through WAF. WAF cannot block the request data.
+WAF protects web application pages. After your website is connected to WAF, there is no impact on your email port or email sending or receiving.
+The number of concurrent requests refers to the number of requests that the system can process simultaneously. When it comes to a website, concurrent requests refer to the requests from the visitors at the same time.
+WAF supports access control over content at the application layer. HTTP and HTTPS are both application layer protocols.
+Custom policies can be created to supplement the system-defined policies of WAF.
+{
+ "Version": "1.1",
+ "Statement": [
+ {
+ "Effect": "Allow",
+ "Action": [
+ "waf:instance:list"
+ ]
+ }
+ ]
+}
+A deny policy must be used together with other policies. If the permissions assigned to a user contain both "Allow" and "Deny", the "Deny" permissions take precedence over the "Allow" permissions.
+The following method can be used if you need to assign permissions of the WAF FullAccess policy to a user but also forbid the user from deleting web tamper protection rules (waf:antiTamperRule:delete). Create a custom policy with the action to delete web tamper protection rules, set its Effect to Deny, and assign both this policy and the WAF FullAccess policy to the group the user belongs to. Then the user can perform all operations on WAF except deleting web tamper protection rules. The following is a policy for denying web tamper protection rule deletion.
+{
+ "Version": "1.1",
+ "Statement": [
+ {
+ "Effect": "Deny",
+ "Action": [
+ "waf:antiTamperRule:delete"
+ ]
+ },
+ ]
+}
+A custom policy can contain the actions of multiple services that are of the project-level type. The following is an example policy containing actions of multiple services:
+{
+ "Version": "1.1",
+ "Statement": [
+ {
+ "Effect": "Allow",
+ "Action": [
+ "waf:instance:get",
+ "waf:certificate:get"
+ ]
+ },
+ {
+ "Effect": "Allow",
+ "Action": [
+ "hss:hosts:switchVersion",
+ "hss:hosts:manualDetect",
+ "hss:manualDetectStatus:get"
+ ]
+ }
+ ]
+}
+This topic describes fine-grained permissions management for your WAF instances. If your account does not need individual IAM users, then you may skip over this topic.
+By default, new IAM users do not have any permissions assigned. You need to add a user to one or more groups, and assign permissions policies to these groups. Users inherit permissions from the groups to which they are added and can perform specified operations on cloud services based on the permissions.
+You can grant users permissions by using roles and policies. Roles are provided by IAM to define service-based permissions depending on user's job responsibilities. Policies: A type of fine-grained authorization mechanism that defines permissions required to perform operations on specific cloud resources under certain conditions.
+WAF provides system-defined policies that can be directly used in IAM. You can also create custom policies and use them to supplement system-defined policies, implementing more refined access control.
+Permission + |
+Action + |
+
|---|---|
Querying an information leakage prevention rule + |
+waf:antiLeakageRule:get + |
+
Querying a web tamper protection rule + |
+waf:antiTamperRule:get + |
+
Querying a CC attack protection rule + |
+waf:ccRule:get + |
+
Querying a precise protection rule + |
+waf:preciseProtectionRule:get + |
+
Querying a false alarm masking rule + |
+waf:falseAlarmMaskRule:get + |
+
Querying a data masking rule + |
+waf:privacyRule:get + |
+
Querying a blacklist or whitelist rule + |
+waf:whiteBlackIpRule:get + |
+
Querying a geolocation access control rule + |
+waf:geoIpRule:get + |
+
Querying a certificate + |
+waf:certificate:get + |
+
Modifying WAF certificates + |
+waf:certificate:put + |
+
Querying a protection event + |
+waf:event:get + |
+
Querying a protected domain + |
+waf:instance:get + |
+
Querying a protection policy + |
+waf:policy:get + |
+
Querying quota package information + |
+waf:bundle:get + |
+
Querying the protection event download link + |
+waf:dumpEventLink:get + |
+
Querying configurations + |
+waf:consoleConfig:get + |
+
Querying the back-to-source IP address segment + |
+waf:sourceIp:get + |
+
Updating an information leakage prevention rule + |
+waf:antiLeakageRule:put + |
+
Updating a web tamper protection rule + |
+waf:antiTamperRule:put + |
+
Updating a CC attack protection rule + |
+waf:ccRuleRule:put + |
+
Updating a precise protection rule + |
+waf:preciseProtectionRule:put + |
+
Updating a false alarm masking rule + |
+waf:falseAlarmMaskRule:put + |
+
Updating a data masking rule + |
+waf:privacyRule:put + |
+
Updating an IP address blacklist or whitelist rule + |
+waf:whiteBlackIpRule:put + |
+
Updating a geolocation access control rule + |
+waf:geoIpRule:put + |
+
Updating a protected domain + |
+waf:instance:put + |
+
Updating a protection policy + |
+waf:policy:put + |
+
Deleting an information leakage prevention rule + |
+waf:antiLeakageRule:delete + |
+
Deleting a web tamper protection rule + |
+waf:antiTamperRule:delete + |
+
Deleting a CC attack protection rule + |
+waf:ccRule:delete + |
+
Configuring a precise protection rule + |
+waf:preciseProtectionRule:delete + |
+
Deleting a false alarm masking rule + |
+waf:falseAlarmMaskRule:delete + |
+
Deleting a data masking rule + |
+waf:privacyRule:delete + |
+
Deleting a blacklist or whitelist rule + |
+waf:whiteBlackIpRule:delete + |
+
Deleting a geolocation access control rule + |
+waf:geoIpRule:delete + |
+
Deleting a protected domain + |
+waf:instance:delete + |
+
Deleting a protection policy + |
+waf:policy:delete + |
+
Adding an information leakage prevention rule + |
+waf:antiLeakageRule:create + |
+
Adding a web tamper protection rule + |
+waf:antiTamperRule:create + |
+
Adding a CC attack protection rules + |
+waf:ccRule:create + |
+
Adding a precise protection rule + |
+waf:preciseProtectionRule:create + |
+
Creating a false alarm masking rule + |
+waf:falseAlarmMaskRule:create + |
+
Adding a data masking rule + |
+waf:privacyRule:create + |
+
Adding a blacklist or whitelist rule + |
+waf:whiteBlackIpRule:create + |
+
Adding a geolocation access control rule + |
+waf:geoIpRule:create + |
+
Adding a certificate + |
+waf:certificate:create + |
+
Adding a domain + |
+waf:instance:create + |
+
Adding a policy + |
+waf:policy:create + |
+
Querying information leakage prevention rules + |
+waf:antiLeakageRule:list + |
+
Querying web tamper protection rules + |
+waf:antiTamperRule:list + |
+
Querying CC attack protection rules + |
+waf:ccRuleRule:list + |
+
Querying precise protection rules + |
+waf:preciseProtectionRule:list + |
+
Querying the false alarm masking rule list + |
+waf:falseAlarmMaskRule:list + |
+
Querying data masking rules + |
+waf:privacyRule:list + |
+
Querying blacklist and whitelist rules + |
+waf:whiteBlackIpRule:list + |
+
Querying geolocation access control rules + |
+waf:geoIpRule:list + |
+
Querying the protection domains + |
+waf:instance:list + |
+
Querying protection policies + |
+waf:policy:list + |
+
If your service servers are deployed on the cloud, you can add the domain name or IP address of the website to WAF so that the website traffic is forwarded to WAF for inspection.
+You have purchased a dedicated WAF instance.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Website Name + |
+Website name you specify. + |
+WAF-DT + |
+
Protected Object + |
+A domain name or IP address of the website to be protected. The domain name can be a single domain name or a wildcard domain name. +
|
+Single domain name: www.example.com +Wildcard domain name: *.example.com +IP address format: XXX.XXX.1.1 + |
+
Website Remarks + |
+Brief description of the website + |
+test + |
+
Protected Port + |
+Select the port that needs to be protected from the drop-down list box. +To protect port 80 or 443, select Standard port from the drop-down list. + |
+Standard ports + |
+
Server Configuration + |
+Address of the web server. The configuration contains the Client Protocol, Server protocol, VPC, Server Address, and Server Port. +
|
+Client Protocol: HTTP +Server Protocol: HTTP +VPC: vpc-default +Server Address: 192.168.1.1 +Server Port: 80 + |
+
Certificate Name + |
+If you set Client Protocol to HTTPS, an SSL certificate is required. You can select an existing certificate or import an external certificate. For details about how to import a certificate, see Importing a New Certificate. +For details about how to create a certificate, see Uploading a Certificate. + NOTICE:
+
|
+- + |
+
If your website has no layer-7 proxy server such as CDN and cloud acceleration service deployed in front of WAF and uses only layer-4 load balancers (or NAT), set Proxy Configured to No. Otherwise, Proxy Configured must be set to Yes. This ensures that WAF obtains real IP addresses of website visitors and takes protective actions configured in protection policies.
+You can select a policy you configured. You can also customize rules after the domain name is connected to WAF.
+System-generated policies:
+The basic web protection defends against attacks such as SQL injections, XSS, remote overflow vulnerabilities, file inclusions, Bash vulnerabilities, remote command execution, directory traversal, sensitive file access, and command/code injections.
+WAF only logs web scanning tasks, such as vulnerability scanning and virus scanning, such as crawling behavior of OpenVAS and Nmap.
+
Log only: WAF only logs detected attack events instead of blocking them.
+To enable WAF protection, there are still several steps, including configuring a load balancer, binding an EIP to the load balancer, and whitelisting WAF IP addresses. You can click Later in this step. Then, follow the instructions and finish those steps by referring to Step 2: Configure a Load Balancer and Step 3: Bind an EIP to a Load Balancer.
+The initial Access Status of a website is Inaccessible. After you configure a load balancer and bind an EIP to the load balancer for your website, when a request reaches the WAF dedicated instance, the access status automatically changes to Accessible.
+If you set Client Protocol to HTTPS, an SSL certificate is required. You can perform the following steps to import a new certificate.
+
WAF encrypts and saves the private key to keep it safe.
+Format + |
+Conversion Method + |
+
|---|---|
CER/CRT + |
+Rename the cert.crt certificate file to cert.pem. + |
+
PFX + |
+
|
+
P7B + |
+
|
+
DER + |
+
|
+
To ensure your dedicated WAF instance reliability, after you add a website to it, use Elastic Load Balance (ELB) to configure a load balancer and a health check for the dedicated WAF instance.
+Add an inbound rule to allow incoming network traffic to pass through over a specified port based on your service requirements. For example, if you want to allow access from port 80, add a rule that allows TCP and port 80.
+Retain the default settings. All outgoing network traffic is allowed by default.
+The listening port of the dedicated WAF instance must be the same as that configured in Step 1: Add a Website to WAF.
+If you select Weighted round robin for Load Balancing Algorithm, disable Sticky Session. If you enable Sticky Session, the same requests will be forwarded to the same dedicated WAF instance. If this instance becomes faulty, an error will occur when the requests come to it next time.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner of the page and choose Elastic Load Balance under Network to go to the ELB console.
If you select Round robin for Load Balancing Algorithm, disable Sticky Session. If you enable Sticky Session, the same requests will be forwarded to the same dedicated WAF instance. If this instance becomes faulty, an error will occur when the requests come to it next time.
+
The listening port of the dedicated WAF instance must be the same as that configured in Step 1: Add a Website to WAF. If you configure a standard port for the website, set the HTTP listening port to 80 and HTTPS listening port to 443.
+After you configure a load balancer for your dedicated WAF instance, you need to unbind the EIP from the origin server and then bind this EIP to the load balancer you configured. For details, see Configuring a Load Balancer. The request traffic then goes to the dedicated WAF instance for attack detection first and then go to the origin server, ensuring the security, stability, and availability of the origin server.
+You have configured a load balancer for a dedicated WAF instance.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner of the page and choose Elastic Load Balance under Network to go to the ELB console.This topic describes how to manage your dedicated WAF instances (or engines), including viewing instance information, upgrading the instance edition, or deleting an instance.
+You have purchased a dedicated WAF instance.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
+
Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Instance Name + |
+Name automatically generated when an instance is created. + |
+None + |
+
Protected Website + |
+Domain name of the website protected by the instance. + |
+www.example.com + |
+
VPC + |
+VPC where the instance resides + |
+vpc-waf + |
+
Subnet + |
+Subnet where an instance resides + |
+subnet-62bb + |
+
IP Addresses + |
+IP address of the subnet in the VPC where the WAF instance is deployed. + |
+192.168.0.186 + |
+
Access Status + |
+Connection status of the instance. + |
+Accessible + |
+
Running Status + |
+Status of the instance. + |
+Running + |
+
Deployment + |
+How the instance is deployed. + |
+Standard mode (reverse proxy) + |
+
Specifications + |
+Specifications of resources hosting the instance. + |
+8 vCPUs | 16 GB + |
+
Operation + |
+
|
+- + |
+
When a WAF instance is in the Running status, you can view the monitored metrics about the instance.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
Only dedicated WAF instances in the Running status can be upgraded to the latest version.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
If you select Network Interface for Instance Type, you can change the security group to which your dedicated instance belongs. After you select a security group, the WAF instance will be protected by the access rules of the security group.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
You can delete a dedicated WAF instance at any time. A deleted dedicated WAF instance will no longer protect the website added to it.
+
Resources on deleted instance are released and cannot be restored. Exercise caution when performing this operation.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.

After JavaScript anti-crawler is enabled, WAF returns a piece of JavaScript code to the client when the client sends a request. If the client sends a normal request to the website, triggered by the received JavaScript code, the client will automatically send the request to WAF again. WAF then forwards the request to the origin server. This process is called JavaScript verification. Figure 1 shows how JavaScript verification works.
+ +
Check your services. If your website can be accessed by other means except for a browser, disable JavaScript anti-crawler protection.
+No. However, you can customize a CC attack protection rule to restrict access to a specific URL on your website based on an IP address, cookie, or Referer, mitigating CC attacks.
+If you set Client Protocol to HTTPS when you add a website to WAF, upload a certificate and use it for your website.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
next to the certificate name. In the Update Certificate dialog box, import a new certificate or select an existing certificate.
WAF encrypts and saves the private key to keep it safe.
+Format + |
+Conversion Method + |
+
|---|---|
CER/CRT + |
+Rename the cert.crt certificate file to cert.pem. + |
+
PFX + |
+
|
+
P7B + |
+
|
+
DER + |
+
|
+

This topic describes how to delete an expired or invalid certificate.
+The certificate you want to delete is not bound to a protected website.
+If a certificate to be deleted is bound to a website, unbind it from the website before deletion.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
Released On + |
+Description + |
+
|---|---|
2022-10-30 + |
+This issue is the first official release. + |
+
WAF allows you to configure traffic identifiers by IP address, session, or user tag to block possibly malicious requests from known attack sources based on IP address, Cookie, or Params.
+The website to be protected has been added to WAF.
+If the IP address tag is not configured, WAF identifies the client IP address by default.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
next to IP Tag, Session Tag, or User Tag to configure a traffic identifier by referring to Table 1. Figure 1 shows an example.
+
+
+Tag + |
+Description + |
+Example Value + |
+
|---|---|---|
IP Tag + |
+HTTP request header field of the original client IP address. +Ensure that the protected website has a layer-7 proxy configured in front of WAF and that Proxy Configured under the website basic information settings is set to Yes for this parameter to take effect. + |
+X-Forwarded-For + |
+
Session Tag + |
+This tag is used to block possibly malicious requests based on the cookie attributes of an attack source. Configure this parameter to block requests based on cookie attributes. + |
+jssessionid + |
+
User Tag + |
+This tag is used to block possibly malicious requests based on the Params attribute of an attack source. Configure this parameter to block requests based on the Params attributes. + |
+name + |
+
If WAF blocks a malicious request by IP address, Cookie, or Params, you can configure a known attack source rule to let WAF automatically block all requests from the attack source for a blocking duration set in the known attack source rule. For example, if a blocked malicious request originates from an IP address and you set the blocking duration to 500 seconds, WAF will block the IP address for 500 seconds after the known attack source rule takes effect.
+A website has been added to WAF.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.Parameter + |
+Description + |
+Example Value + |
+
|---|---|---|
Blocking Type + |
+Specifies the blocking type. The options are: +
|
+Long-term IP address blocking + |
+
Blocking Duration (s) + |
+The blocking duration must be an integer and range from: +
|
+500 + |
+
Rule Description + |
+A brief description of the rule. This parameter is optional. + |
+None + |
+

WAF is deployed in dedicated mode. The following tables describe specifications and functions of the dedicated WAF instances.
+Table 1 describes dedicated WAF instances.
+ +Item + |
+Description + |
+
|---|---|
Deployment mode + |
+Dedicated WAF instances + |
+
Application scenarios + |
+Service servers are deployed on the cloud. +Suitable for large enterprise websites that have a large service scale and have customized security requirements. + |
+
Protection objects + |
+Domain names or IP addresses + |
+
Advantages + |
+
|
+
For more details, see Table 2.
+ +Service metrics + |
+Specifications + |
+
|---|---|
Peak rate of normal service requests + |
+
|
+
Service bandwidth threshold (Origin servers are deployed on the cloud.) + |
+
|
+
Number of domains + |
+2,000 (Supports 2,000 top-level domain names) + |
+
Peak rate of CC attack protection + |
+500,000 QPS + |
+
CC attack protection rules + |
+100 + |
+
Precise protection rules + |
+100 + |
+
IP address blacklist and whitelist rules + |
+100 + |
+
Geolocation access control rules + |
+100 + |
+
Web tamper protection rules + |
+100 + |
+
Information leakage prevention rules + |
+100 + |
+
Global Protection Whitelist (Formerly False Alarm Masking) + |
+1,000 + |
+
Data masking rules + |
+100 + |
+
WAF cannot block business-related attacks, such as spam and malicious user registrations. To prevent these attacks, configure the registration verification mechanism on your website.
+WAF is designed to keep web applications stable and secure. It examines all HTTP and HTTPS requests to detect for and block suspicious network attacks, such as Structure Query Language (SQL) injections, cross-site scripting (XSS) attacks, web shell upload, command or code injections, file inclusion, unauthorized sensitive file access, third-party vulnerability exploits, Challenge Collapsar (CC) attacks, malicious crawlers, and cross-site request forgery (CSRF).
+This topic describes how to view certificate details, including the certificate name, domain name a certificate is used for, and expiration time.
+You have created or pushed a certificate to WAF.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
+
Parameter + |
+Parameter description + |
+
|---|---|
Name + |
+Certificate name. + |
+
Expired + |
+Certificate expiration time. +It is recommended that you update the certificate before it expires. Otherwise, all WAF protection rules will be unable to take effect, and there can be massive impacts on the origin server, even more severe than a crashed host or website access failures. For more details, see Updating a Certificate. + |
+
Domain Name + |
+The domain names protected by the certificate. Each domain name must be bound to a certificate. One certificate can be used for multiple domain names. + |
+
, and enter a certificate name.
If the certificate is in use, unbind the certificate from the domain name first. Otherwise, the certificate name cannot be changed.
+Format + |
+Conversion Method + |
+
|---|---|
CER/CRT + |
+Rename the cert.crt certificate file to cert.pem. + |
+
PFX + |
+
|
+
P7B + |
+
|
+
DER + |
+
|
+
On the Product Details page, you can view information about all your WAF instances, including the edition, domain quotas, and specifications.
+You have purchased a WAF instance.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
Yes. WAF can protect HTTP and HTTPS applications.
+WAF can protect applications that use NTLM to authenticate connection between a server and client, such as a browser.
+WAF protects user data on the application layer. It supports cache configuration on static web pages. When a user accesses a web page, the system returns a cached page to the user and randomly checks whether the page has been tampered with.
+WAF preferentially forwards access requests to the single domain name. If the single domain name cannot be identified, access requests will be forwarded to the wildcard domain name.
+For example, if you connect single domain name a.example.com and wildcard domain name *.example.com to WAF, WAF preferentially forwards access requests to single domain name a.example.com.
+If you are configuring a wildcard domain name, pay attention to the following:
+No. After a website is connected to WAF, all website access requests are forwarded to WAF first. WAF detects and filters out malicious attack traffic, and returns normal traffic to the origin server to keep your origin server is secure, stable, and available.
+If you configure Client Protocol to HTTPS for your website, the website needs an SSL certificate. This topic describes how to bind an SSL certificate that you have uploaded to WAF to a website.
+If you configure Client Protocol to HTTPS, a certificate is required.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
The protected website is listed in the Domain Name column of the certificate.
+
, and enter a certificate name.
If the certificate is in use, unbind the certificate from the domain name first. Otherwise, the certificate name cannot be changed.
+A Structured Query Language (SQL) injection is a common web attack. The attacker injects malicious SQL commands into database query strings to deceive the server into executing commands. By exploiting these commands, the attacker can obtain sensitive information, add users, export files, or even gain the highest permissions to the database or system.
+XSS attacks exploit vulnerabilities left during web page development to inject malicious instruction code into web pages so that attackers can trick visitors into loading and executing malicious web page programs attackers fabricated. These malicious web page programs are usually JavaScript, but they can also include Java, VBScript, ActiveX, Flash, or even common HTML. After an attack succeeds, the attacker may obtain various content, including but not limited to higher permissions (for example, permissions for certain operations), private content, sessions, and cookies.
+WAF detects and matches SQL keywords, special characters, operators, and comment symbols.
+WAF checks HTML script tags, event processors, script protocols, and styles to prevent malicious users from injecting malicious XSS statements through client requests.
+
Rich text can be uploaded using multipart upload instead of body. In multipart upload, rich text is stored in forms and can be decoded even if it is encoded using Base64. Analyze your services and do not use quotation marks and angle brackets as far as possible.
+If your service servers are deployed on the cloud, you can buy dedicated WAF instances (or dedicated WAF engines) to protect important websites through domain names or to protect web applications with only IP addresses.
+
It takes about 10 minutes to create a dedicated WAF instance. If the instance is in the Running status, the instance has been created successfully.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.This option is only available if you are logged in using an enterprise account, or if you have enabled enterprise projects. You can use enterprise projects to more efficiently manage cloud resources and project members.
+
default: indicates the default enterprise project. Resources that are not allocated to any enterprise projects under your account are listed in the default enterprise project.
+It takes about 10 minutes to create a dedicated WAF instance. If the instance is in the Running status, the instance has been created.
+After an HTTPS certificate is uploaded to the AAD or WAF console, a message is displayed indicating that the certificate and key do not match.
+ +Possible Cause + |
+How to Fix + |
+
|---|---|
The uploaded certificate does not match the uploaded private key. + |
+
|
+
Incorrect RSA private key format + |
+
|
+
If you want to set a timeout duration for each request between your WAF instance and origin server, enable Timeout Settings and specify WAF-to-Server connection timeout (s), Read timeout (s), and Write timeout (s). This function cannot be disabled once it is enabled.
+
The website you want to protect has been added to WAF.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
, specify WAF-to-Server connection timeout (s), Read timeout (s), and Write timeout (s), and click
to save settings.If a large number of 502 Bad Gateway and 504 Gateway Timeout errors are detected, you can enable WAF breakdown protection and connection protection to let WAF suspend your website and protect your origin servers from being crashed. When the 502/504 error requests and pending URL requests reach the thresholds you configure, WAF enables corresponding protection for your website.
+
in the upper left corner of the management console and select a region or project.
in the upper left corner and choose Web Application Firewall (Dedicated) under Security.
next to each parameter, edit Breakdown Protection and Connection Protection parameters to meet your requirements, and click
to save settings. Table 1 describes these parameters.+
Parameter + |
+Description + |
+Example Value + |
+|
|---|---|---|---|
Breakdown Protection + |
+502/504 Error Threshold + |
+30s 502/504 Error Threshold + |
+1000 + |
+
502/504 Error Percentage (%) + |
+A breakdown is triggered when the 502/504 error threshold and percentage threshold have been reached. + |
+90 + |
+|
Initial Downtime (s) + |
+Protection period upon the first breakdown. During this period, WAF stops forwarding client requests. + |
+180 + |
+|
Multiplier for Consecutive Breakdowns + |
+The maximum multiplier you can use for consecutive breakdowns. The number of breakdowns are counted from 0 every time the accumulated breakdown protection duration reaches 3,600s. +For example, assume that Initial Downtime (s) is set to 180s and Multiplier for Consecutive Breakdowns is set to 3.
+
|
+3 + |
+|
Connection Protection + |
+Pending URL Request Threshold + |
+Connection Protection is triggered when the number of read URL requests reaches the threshold you configure. + |
+6,000 + |
+
Duration (s) + |
+Protection duration. During this period, WAF stops forwarding client requests. + |
+60 + |
+|
The following uses Connection Protection settings in Figure 1 as an example to describe how the protection works.
+This topic describes metrics reported by dedicated WAF to Cloud Eye as well as their namespaces and dimensions. You can use APIs provided by Cloud Eye to query the metrics of the monitored object and alarms generated for dedicated WAF. You can also query them on the Cloud Eye console.
+SYS.WAF
+
A namespace is an abstract collection of resources and objects. Multiple namespaces can be created in a single cluster with the data isolated from each other. This enables namespaces to share the same cluster services without affecting each other.
+Metric ID + |
+Metric Name + |
+Description + |
+Value Range + |
+Monitored Object + |
+Monitoring Interval (Raw Data) + |
+
|---|---|---|---|---|---|
cpu_util + |
+CPU Usage + |
+CPU usage of the monitored object +Unit: percentage (%) +Collection method: 100% minus idle CPU usage percentage + |
+0% to 100% +Value type: Float + |
+Dedicated WAF instances + |
+1 minute + |
+
mem_util + |
+Memory Usage + |
+Memory usage of the monitored object +Unit: percentage (%) +Collection method: 100% minus idle memory percentage + |
+0% to 100% +Value type: Float + |
+Dedicated WAF instances + |
+1 minute + |
+
disk_util + |
+Disk Usage + |
+Disk usage of the monitored object +Unit: percentage (%) +Collection method: 100% minus idle disk space percentage + |
+0% to 100% +Value type: Float + |
+Dedicated WAF instances + |
+1 minute + |
+
disk_avail_size + |
+Available Disk Space + |
+Available disk space of the monitored object +Unit: byte, KB, MB, GB, TB or PB +Collection mode: size of free disk space + |
+≥ 0 bytes +Value type: Float + |
+Dedicated WAF instances + |
+1 minute + |
+
disk_read_bytes_rate + |
+Disk Read Rate + |
+Number of bytes the monitored object reads from the disk per second +Unit: byte/s, KB/s, MB/s, or GB/s +Collection mode: number of bytes read from the disk per second + |
+≥0 byte/s +Value type: Float + |
+Dedicated WAF instances + |
+1 minute + |
+
disk_write_bytes_rate + |
+Disk Write Rate + |
+Number of bytes the monitored object writes into the disk per second +Unit: byte/s, KB/s, MB/s, or GB/s +Collection mode: number of bytes written into the disk per second + |
+≥0 byte/s +Value type: Float + |
+Dedicated WAF instances + |
+1 minute + |
+
disk_read_requests_rate + |
+Disk Read Requests + |
+Number of requests the monitored object reads from the disk per second +Unit: Requests/s +Collection mode: number of read requests processed by the disk per second + |
+≥0 request/s +Value type: Float + |
+Dedicated WAF instances + |
+1 minute + |
+
disk_write_requests_rate + |
+Disk Write Requests + |
+Number of requests the monitored object writes into the disk per second +Unit: Requests/s +Collection method: Number of write requests processed by the disk per second + |
+≥0 request/s +Value type: Float + |
+Dedicated WAF instances + |
+1 minute + |
+
network_incoming_bytes_rate + |
+Incoming Traffic + |
+Incoming traffic per second on the monitored object +Unit: +byte/s, KB/s, MB/s, or GB/s +Collection method: Incoming traffic over the NIC per second + |
+≥0 byte/s +Value type: Float + |
+Dedicated WAF instances + |
+1 minute + |
+
network_outgoing_bytes_rate + |
+Outgoing Traffic + |
+Outgoing traffic per second on the monitored object +Unit: +byte/s, KB/s, MB/s, or GB/s +Collection method: Outgoing traffic over the NIC per second + |
+≥0 byte/s +Value type: Float + |
+Dedicated WAF instances + |
+1 minute + |
+
network_incoming_packets_rate + |
+Incoming Packet Rate + |
+Incoming packets per second on the monitored object +Unit: +packet/s +Collection method: Incoming packets over the NIC per second + |
+≥0 packet/s +Value type: Int + |
+Dedicated WAF instances + |
+1 minute + |
+
network_outgoing_packets_rate + |
+Outgoing Packet Rate + |
+Outgoing packets per second on the monitored object +Unit: +packet/s +Collection method: Outgoing packets over the NIC per second + |
+≥0 packet/s +Value type: Int + |
+Dedicated WAF instances + |
+1 minute + |
+
concurrent_connections + |
+Concurrent Connections + |
+Number of concurrent connections being processed +Unit: count +Collection method: Number of concurrent connections in the system + |
+≥0 count +Value type: Int + |
+Dedicated WAF instances + |
+1 minute + |
+
active_connections + |
+Active Connections + |
+Number of active connections +Unit: count +Collection method: Number of active connections in the system + |
+≥0 count +Value type: Int + |
+Dedicated WAF instances + |
+1 minute + |
+
latest_policy_sync_time + |
+Latest Rule Synchronization + |
+Time elapsed for the WAF to synchronize the latest custom rules +Unit: ms +Collection method: Time elapsed for synchronizing to the last policies + |
+≥0 ms +Value type: Int + |
+Dedicated WAF instances + |
+1 minute + |
+
Key + |
+Value + |
+
|---|---|
instance_id + |
+ID of the dedicated WAF instance + |
+
waf_instance_id + |
+ID of the website protected with WAF + |
+
[
+ {
+ "metric": {
+ // Namespace
+ "namespace": "SYS.WAF",
+ "dimensions": [
+ {
+ // Dimension name, for example, protected website
+ "name": "waf_instance_id",
+ // ID of the monitored object in this dimension, for example, ID of the protected website
+ "value": "082db2f542e0438aa520035b3e99cd99"
+ }
+ ],
+ //Metric ID
+ "metric_name": "waf_http_2xx"
+ },
+ // Time to live, which is predefined for the metric
+ "ttl": 172800,
+ // Metric value
+ "value": 0.0,
+ // Metric unit
+ "unit": "Count",
+ // Metric value type
+ "type": "float",
+ // Collection time for the metric
+ "collect_time": 1637677359778
+ }
+]
+