forked from docs/doc-exports
Li, Qiao
e227be9021
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-authored-by: Li, Qiao <qiaoli@huawei.com> Co-committed-by: Li, Qiao <qiaoli@huawei.com>
1082 lines
43 KiB
JSON
1082 lines
43 KiB
JSON
[
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Service Overview",
|
|
"uri":"waf_01_0064.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"1"
|
|
},
|
|
{
|
|
"desc":"Web Application Firewall (WAF) keeps web services stable and secure. It examines all HTTP and HTTPS requests to detect and block the following attacks: Structured Query L",
|
|
"product_code":"dwaf",
|
|
"title":"What Is Web Application Firewall?",
|
|
"uri":"waf_01_0045.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"1",
|
|
"code":"2"
|
|
},
|
|
{
|
|
"desc":"WAF is deployed in dedicated mode. The following tables describe specifications and functions of the dedicated WAF instances.Table 1 describes dedicated WAF instances.For",
|
|
"product_code":"dwaf",
|
|
"title":"Specifications",
|
|
"uri":"waf_01_0272.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"1",
|
|
"code":"3"
|
|
},
|
|
{
|
|
"desc":"WAF makes it easier for you to handle web security risks.WAF keeps applications stable and secure. It examines HTTP and HTTPS requests to detect and block attacks, such a",
|
|
"product_code":"dwaf",
|
|
"title":"Functions",
|
|
"uri":"waf_01_0094.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"1",
|
|
"code":"4"
|
|
},
|
|
{
|
|
"desc":"WAF examines web traffic from multiple dimensions to accurately identify malicious requests and filter attacks, reducing the risks of data being tampered with or stolen.W",
|
|
"product_code":"dwaf",
|
|
"title":"Product Advantages",
|
|
"uri":"waf_01_0065.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"1",
|
|
"code":"5"
|
|
},
|
|
{
|
|
"desc":"WAF helps you defend against common web attacks, such as command injection and sensitive file access.Countless malicious requests may be sent to service interfaces during",
|
|
"product_code":"dwaf",
|
|
"title":"Application Scenarios",
|
|
"uri":"waf_01_0046.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"1",
|
|
"code":"6"
|
|
},
|
|
{
|
|
"desc":"If you need to assign different permissions to employees in your enterprise to access your WAF resources, IAM is a good choice for fine-grained permissions management. IA",
|
|
"product_code":"dwaf",
|
|
"title":"WAF Permissions Management",
|
|
"uri":"waf_01_0052.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"1",
|
|
"code":"7"
|
|
},
|
|
{
|
|
"desc":"This topic describes WAF and other cloud services.Cloud Eye monitors the indicators of the dedicated WAF, so that you can understand the protection status of the dedicate",
|
|
"product_code":"dwaf",
|
|
"title":"WAF and Other Services",
|
|
"uri":"waf_01_0051.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"1",
|
|
"code":"8"
|
|
},
|
|
{
|
|
"desc":"Sort out all website services you want to protect with WAF. This helps you learn about your workloads and specific data of your workloads so that you can choose and confi",
|
|
"product_code":"dwaf",
|
|
"title":"Overview",
|
|
"uri":"waf_01_0071.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"9"
|
|
},
|
|
{
|
|
"desc":"If your service servers are deployed on the cloud, you can buy dedicated WAF instances (or dedicated WAF engines) to protect important websites through domain names or to",
|
|
"product_code":"dwaf",
|
|
"title":"Applying for a Dedicated WAF Instance",
|
|
"uri":"waf_01_1072.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"10"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Enabling WAF Protection",
|
|
"uri":"waf_01_0070.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"11"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Connecting a Website to WAF",
|
|
"uri":"waf_01_0249.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"11",
|
|
"code":"12"
|
|
},
|
|
{
|
|
"desc":"If your service servers are deployed on the cloud, you can add the domain name or IP address of the website to WAF so that the website traffic is forwarded to WAF for ins",
|
|
"product_code":"dwaf",
|
|
"title":"Step 1: Add a Website to WAF",
|
|
"uri":"waf_01_0250.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"12",
|
|
"code":"13"
|
|
},
|
|
{
|
|
"desc":"To ensure your dedicated WAF instance reliability, after you add a website to it, use Elastic Load Balance (ELB) to configure a load balancer and a health check for the d",
|
|
"product_code":"dwaf",
|
|
"title":"Step 2: Configure a Load Balancer",
|
|
"uri":"waf_01_0251.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"12",
|
|
"code":"14"
|
|
},
|
|
{
|
|
"desc":"After you configure a load balancer for your dedicated WAF instance, you need to unbind the EIP from the origin server and then bind this EIP to the load balancer you con",
|
|
"product_code":"dwaf",
|
|
"title":"Step 3: Bind an EIP to a Load Balancer",
|
|
"uri":"waf_01_0252.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"12",
|
|
"code":"15"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Website Domain Name Management",
|
|
"uri":"waf_01_0067.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"16"
|
|
},
|
|
{
|
|
"desc":"This topic describes how to view the basic information about a protected website, switch WAF working mode, and delete a domain name of a protected website from WAF.A webs",
|
|
"product_code":"dwaf",
|
|
"title":"Viewing Basic Information",
|
|
"uri":"waf_01_0020.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"16",
|
|
"code":"17"
|
|
},
|
|
{
|
|
"desc":"You can change the working mode of WAF. WAF can work in Enabled or Suspended mode.The domain name of the website to be protected has been connected to WAF.Enabled: In thi",
|
|
"product_code":"dwaf",
|
|
"title":"Switching WAF Working Mode",
|
|
"uri":"waf_01_0003.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"16",
|
|
"code":"18"
|
|
},
|
|
{
|
|
"desc":"Transport Layer Security (TLS) provides confidentiality and ensures data integrity for data sent between applications over the Internet. HTTPS is a network protocol const",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring PCI DSS/3DS Certification Check and TLS Version",
|
|
"uri":"waf_01_0169.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"16",
|
|
"code":"19"
|
|
},
|
|
{
|
|
"desc":"If you want to set a timeout duration for each request between your WAF instance and origin server, enable Timeout Settings and specify WAF-to-Server connection timeout (",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring Connection Timeout",
|
|
"uri":"waf_01_1171.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"16",
|
|
"code":"20"
|
|
},
|
|
{
|
|
"desc":"If a large number of 502 Bad Gateway and 504 Gateway Timeout errors are detected, you can enable WAF breakdown protection and connection protection to let WAF suspend you",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring Connection Protection",
|
|
"uri":"waf_01_1172.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"16",
|
|
"code":"21"
|
|
},
|
|
{
|
|
"desc":"If you set Client Protocol to HTTPS when you add a website to WAF, upload a certificate and use it for your website.If your website certificate is about to expire, purcha",
|
|
"product_code":"dwaf",
|
|
"title":"Updating a Certificate",
|
|
"uri":"waf_01_0262.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"16",
|
|
"code":"22"
|
|
},
|
|
{
|
|
"desc":"WAF allows you to configure traffic identifiers by IP address, session, or user tag to block possibly malicious requests from known attack sources based on IP address, Co",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring a Traffic Identifier for a Known Attack Source",
|
|
"uri":"waf_01_0270.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"16",
|
|
"code":"23"
|
|
},
|
|
{
|
|
"desc":"This topic describes how to edit or add server information for a website to be protected.Applicable scenarios:Modify server information, including Client Protocol, Server",
|
|
"product_code":"dwaf",
|
|
"title":"Editing Server Information",
|
|
"uri":"waf_01_0001.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"16",
|
|
"code":"24"
|
|
},
|
|
{
|
|
"desc":"If a visitor is blocked by WAF, the Default block page of WAF is returned by default. You can also configure Custom or Redirection for the block page to be returned as re",
|
|
"product_code":"dwaf",
|
|
"title":"Modifying the Alarm Page",
|
|
"uri":"waf_01_0154.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"16",
|
|
"code":"25"
|
|
},
|
|
{
|
|
"desc":"This topic describes how to remove a website from WAF if you no longer need to protect it.A website domain name has been added to WAF.It takes about a minute to remove a ",
|
|
"product_code":"dwaf",
|
|
"title":"Removing a Protected Website from WAF",
|
|
"uri":"waf_01_0005.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"16",
|
|
"code":"26"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Certificate Management",
|
|
"uri":"waf_01_0261.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"27"
|
|
},
|
|
{
|
|
"desc":"If you select HTTPS for Client Protocol when you add a website to WAF, a certificate must be associated with the website.You can upload a certificate to WAF. Then you can",
|
|
"product_code":"dwaf",
|
|
"title":"Uploading a Certificate",
|
|
"uri":"waf_01_0078.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"27",
|
|
"code":"28"
|
|
},
|
|
{
|
|
"desc":"If you configure Client Protocol to HTTPS for your website, the website needs an SSL certificate. This topic describes how to bind an SSL certificate that you have upload",
|
|
"product_code":"dwaf",
|
|
"title":"Binding a Certificate to a Protected Website",
|
|
"uri":"waf_01_0367.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"27",
|
|
"code":"29"
|
|
},
|
|
{
|
|
"desc":"This topic describes how to delete an expired or invalid certificate.The certificate you want to delete is not bound to a protected website.If a certificate to be deleted",
|
|
"product_code":"dwaf",
|
|
"title":"Deleting a Certificate",
|
|
"uri":"waf_01_0263.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"27",
|
|
"code":"30"
|
|
},
|
|
{
|
|
"desc":"This topic describes how to view certificate details, including the certificate name, domain name a certificate is used for, and expiration time.You have created or pushe",
|
|
"product_code":"dwaf",
|
|
"title":"Viewing Certificate Information",
|
|
"uri":"waf_01_0282.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"27",
|
|
"code":"31"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Rule Configuration",
|
|
"uri":"waf_01_0007.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"32"
|
|
},
|
|
{
|
|
"desc":"The built-in protection rules of WAF help you defend against common web application attacks, including XSS attacks, SQL injection, crawlers, and web shells. You can custo",
|
|
"product_code":"dwaf",
|
|
"title":"Configuration Guidance",
|
|
"uri":"waf_01_0129.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"32",
|
|
"code":"33"
|
|
},
|
|
{
|
|
"desc":"After this function is enabled, WAF can defend against common web attacks, such as SQL injections, XSS, remote overflow vulnerabilities, file inclusions, Bash vulnerabili",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring Basic Web Protection Rules",
|
|
"uri":"waf_01_0008.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"32",
|
|
"code":"34"
|
|
},
|
|
{
|
|
"desc":"You can customize a CC attack protection rule to restrict access to a specific URL on your website based on an IP address, cookie, or Referer, mitigating CC attacks. To m",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring a CC Attack Protection Rule",
|
|
"uri":"waf_01_0009.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"32",
|
|
"code":"35"
|
|
},
|
|
{
|
|
"desc":"WAF allows you to customize protection rules by combining HTTP headers, cookies, URLs, request parameters, and client IP addresses.You can combine common HTTP fields, suc",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring a Precise Protection Rule",
|
|
"uri":"waf_01_0010.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"32",
|
|
"code":"36"
|
|
},
|
|
{
|
|
"desc":"This topic describes how to create a reference table to batch configure protection metrics of a single type, such as Path, User Agent, IP, Params, Cookie, Referer, and He",
|
|
"product_code":"dwaf",
|
|
"title":"Adding a Reference Table",
|
|
"uri":"waf_01_0081.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"32",
|
|
"code":"37"
|
|
},
|
|
{
|
|
"desc":"You can configure blacklist and whitelist rules to block, log only, or allow access requests from specific IP addresses or IP address ranges.A website has been added to W",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring an IP Address Blacklist or Whitelist Rule",
|
|
"uri":"waf_01_0012.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"32",
|
|
"code":"38"
|
|
},
|
|
{
|
|
"desc":"If WAF blocks a malicious request by IP address, Cookie, or Params, you can configure a known attack source rule to let WAF automatically block all requests from the atta",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring a Known Attack Source Rule",
|
|
"uri":"waf_01_0271.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"32",
|
|
"code":"39"
|
|
},
|
|
{
|
|
"desc":"This topic describes how to configure a geolocation access control rule. A geolocation access control rule allows you to control IP addresses forwarded from or to specifi",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring a Geolocation Access Control Rule",
|
|
"uri":"waf_01_0013.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"32",
|
|
"code":"40"
|
|
},
|
|
{
|
|
"desc":"WAF can cache configuration for static web pages of websites. After you configure a web tamper protection rule, WAF can:Return directly the cached web page to the normal ",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring a Web Tamper Protection Rule",
|
|
"uri":"waf_01_0014.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"32",
|
|
"code":"41"
|
|
},
|
|
{
|
|
"desc":"You can configure website anti-crawler protection rules to protect against search engines, scanners, script tools, and other crawlers, and use JavaScript to create custom",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring Anti-Crawler Rules",
|
|
"uri":"waf_01_0015.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"32",
|
|
"code":"42"
|
|
},
|
|
{
|
|
"desc":"You can add two types of information leakage prevention rules.Sensitive information filtering: prevents disclosure of sensitive information (such as ID numbers, phone num",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring an Information Leakage Prevention Rule",
|
|
"uri":"waf_01_0054.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"32",
|
|
"code":"43"
|
|
},
|
|
{
|
|
"desc":"Once an attack hits a WAF basic web protection rule or a feature-library anti-crawler rule, WAF will respond to the attack immediately according to the protective action ",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring a Global Protection Whitelist (Formerly False Alarm Masking) Rule",
|
|
"uri":"waf_01_0016.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"32",
|
|
"code":"44"
|
|
},
|
|
{
|
|
"desc":"This topic describes how to configure data masking rules. You can configure data masking rules to prevent sensitive data such as passwords from being displayed in event l",
|
|
"product_code":"dwaf",
|
|
"title":"Configuring a Data Masking Rule",
|
|
"uri":"waf_01_0017.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"32",
|
|
"code":"45"
|
|
},
|
|
{
|
|
"desc":"This topic describes how to view event logs, including attack and request statistics, event distribution, top 10 attacked domain names, top 10 attack source IP addresses,",
|
|
"product_code":"dwaf",
|
|
"title":"Dashboard",
|
|
"uri":"waf_01_0021.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"46"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Event Management",
|
|
"uri":"waf_01_0018.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"47"
|
|
},
|
|
{
|
|
"desc":"On the Events page, you can view events generated for blocked attacks and logged only attacks. You can view details of WAF events, including the time an event occurs, ori",
|
|
"product_code":"dwaf",
|
|
"title":"Viewing Protection Event Logs",
|
|
"uri":"waf_01_0156.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"47",
|
|
"code":"48"
|
|
},
|
|
{
|
|
"desc":"If you confirm that an attack event on the Events page is a false alarm, you can handle the event as false alarm by ignoring the URL and rule ID in basic web protection, ",
|
|
"product_code":"dwaf",
|
|
"title":"Handling False Alarms",
|
|
"uri":"waf_01_0024.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"47",
|
|
"code":"49"
|
|
},
|
|
{
|
|
"desc":"This topic describes how to download events (logged and blocked events) data for the last five days. One or more CSV files containing the event data of the current day wi",
|
|
"product_code":"dwaf",
|
|
"title":"Downloading Events Data",
|
|
"uri":"waf_01_0077.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"47",
|
|
"code":"50"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Policy Management",
|
|
"uri":"waf_01_0055.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"51"
|
|
},
|
|
{
|
|
"desc":"A policy is a combination of rules, such as basic web protection, blacklist, whitelist, and precise protection rules. A policy can be applied to multiple domain names, bu",
|
|
"product_code":"dwaf",
|
|
"title":"Adding a Policy",
|
|
"uri":"waf_01_0074.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"51",
|
|
"code":"52"
|
|
},
|
|
{
|
|
"desc":"This topic describes how to add rules to one or more policies.A website has been added to WAF.To add a CC attack protection rule, see Table 1.To add a precise protection ",
|
|
"product_code":"dwaf",
|
|
"title":"Adding Rules to One or More Policies",
|
|
"uri":"waf_01_0061.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"51",
|
|
"code":"53"
|
|
},
|
|
{
|
|
"desc":"This topic describes how to apply a policy to your protected website.A website has been added to WAF.A protected domain name can use only one policy, but one policy can b",
|
|
"product_code":"dwaf",
|
|
"title":"Applying a Policy to Your Website",
|
|
"uri":"waf_01_0075.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"51",
|
|
"code":"54"
|
|
},
|
|
{
|
|
"desc":"This topic describes how to manage your dedicated WAF instances (or engines), including viewing instance information, upgrading the instance edition, or deleting an insta",
|
|
"product_code":"dwaf",
|
|
"title":"Dedicated WAF Engine Management",
|
|
"uri":"waf_01_0253.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"55"
|
|
},
|
|
{
|
|
"desc":"On the Product Details page, you can view information about all your WAF instances, including the edition, domain quotas, and specifications.You have purchased a WAF inst",
|
|
"product_code":"dwaf",
|
|
"title":"Viewing Product Details",
|
|
"uri":"waf_01_0319.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"56"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Permissions Management",
|
|
"uri":"waf_01_0096.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"57"
|
|
},
|
|
{
|
|
"desc":"Custom policies can be created to supplement the system-defined policies of WAF.Example 1: Allowing users to query the protected domain list{\n \"Version\": \"1.1\",\n ",
|
|
"product_code":"dwaf",
|
|
"title":"WAF Custom Policies",
|
|
"uri":"waf_01_0243.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"57",
|
|
"code":"58"
|
|
},
|
|
{
|
|
"desc":"This topic describes fine-grained permissions management for your WAF instances. If your account does not need individual IAM users, then you may skip over this topic.By ",
|
|
"product_code":"dwaf",
|
|
"title":"WAF Permissions and Supported Actions",
|
|
"uri":"waf_01_0244.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"57",
|
|
"code":"59"
|
|
},
|
|
{
|
|
"desc":"This topic describes metrics reported by dedicated WAF to Cloud Eye as well as their namespaces and dimensions. You can use APIs provided by Cloud Eye to query the metric",
|
|
"product_code":"dwaf",
|
|
"title":"Monitored Metrics",
|
|
"uri":"waf_01_1372.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"60"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"FAQs",
|
|
"uri":"waf_01_0022.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"61"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"About WAF",
|
|
"uri":"waf_01_0025.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"61",
|
|
"code":"62"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"WAF Functions",
|
|
"uri":"waf_01_0292.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"62",
|
|
"code":"63"
|
|
},
|
|
{
|
|
"desc":"A WAF instance can protect IP addresses.A dedicated or load balancing WAF instance can protect websites through either domain names or IP addresses.The origin server IP a",
|
|
"product_code":"dwaf",
|
|
"title":"Can WAF Protect an IP Address?",
|
|
"uri":"waf_01_0029.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"64"
|
|
},
|
|
{
|
|
"desc":"WAF can protect domain names or IP addresses.",
|
|
"product_code":"dwaf",
|
|
"title":"What Objects Does WAF Protect?",
|
|
"uri":"waf_01_0134.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"65"
|
|
},
|
|
{
|
|
"desc":"WAF is deployed on the cloud, which is irrelevant to an OS. Therefore, WAF supports any OS. A domain name server on any OS can be connected to WAF for protection.",
|
|
"product_code":"dwaf",
|
|
"title":"Which OSs Does WAF Support?",
|
|
"uri":"waf_01_0026.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"66"
|
|
},
|
|
{
|
|
"desc":"WAF provides protection at seven layers, namely, the physical layer, data link layer, network layer, transport layer, session layer, presentation layer, and application l",
|
|
"product_code":"dwaf",
|
|
"title":"Which Layers Does WAF Provide Protection At?",
|
|
"uri":"waf_01_0030.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"67"
|
|
},
|
|
{
|
|
"desc":"WAF caches only static web pages that are configured with web tamper protection and sends the cached web pages that are not tampered with to web visitors.",
|
|
"product_code":"dwaf",
|
|
"title":"Does WAF Support File Caching?",
|
|
"uri":"waf_01_0149.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"68"
|
|
},
|
|
{
|
|
"desc":"WAF supports access control over content at the application layer. HTTP and HTTPS are both application layer protocols.",
|
|
"product_code":"dwaf",
|
|
"title":"Does WAF Support Application Layer Protocol- and Content-Based Access Control?",
|
|
"uri":"waf_01_0229.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"69"
|
|
},
|
|
{
|
|
"desc":"The built-in detection of WAF checks POST data, and web shells are the files submitted in POST requests. WAF checks all data, such as forms and JSON files in POST request",
|
|
"product_code":"dwaf",
|
|
"title":"Can WAF Check the Body I Add to the POST Request?",
|
|
"uri":"waf_01_0187.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"70"
|
|
},
|
|
{
|
|
"desc":"No. However, you can customize a CC attack protection rule to restrict access to a specific URL on your website based on an IP address, cookie, or Referer, mitigating CC ",
|
|
"product_code":"dwaf",
|
|
"title":"Can WAF Limit the Access Speed of a Domain Name?",
|
|
"uri":"waf_01_0257.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"71"
|
|
},
|
|
{
|
|
"desc":"No. WAF can only detect and restrict source IP addresses.",
|
|
"product_code":"dwaf",
|
|
"title":"Can WAF Block URL Requests That Contain Special Characters?",
|
|
"uri":"waf_01_0211.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"72"
|
|
},
|
|
{
|
|
"desc":"WAF cannot block business-related attacks, such as spam and malicious user registrations. To prevent these attacks, configure the registration verification mechanism on y",
|
|
"product_code":"dwaf",
|
|
"title":"Can WAF Block Spam and Malicious User Registrations?",
|
|
"uri":"waf_01_0280.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"73"
|
|
},
|
|
{
|
|
"desc":"If the request data for calling other APIs on the web page is included in the domain names protected by WAF, the request data passes through WAF. WAF checks the request d",
|
|
"product_code":"dwaf",
|
|
"title":"Can WAF Block Requests for Calling Other APIs from Web Pages?",
|
|
"uri":"waf_01_0212.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"74"
|
|
},
|
|
{
|
|
"desc":"WAF is deployed on the cloud.Web Application Firewall (WAF) keeps web services stable and secure. It examines all HTTP and HTTPS requests to detect and block the followin",
|
|
"product_code":"dwaf",
|
|
"title":"Which Web Service Framework Protocols Does WAF Support?",
|
|
"uri":"waf_01_0027.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"75"
|
|
},
|
|
{
|
|
"desc":"Yes. WAF can protect HTTP and HTTPS applications.If a website uses the HTTP Strict Transport Security (HSTS) policy, the client (such as a browser) is forced to use HTTPS",
|
|
"product_code":"dwaf",
|
|
"title":"Can WAF Protect Websites Accessed Through HSTS or NTLM Authentication?",
|
|
"uri":"waf_01_0329.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"76"
|
|
},
|
|
{
|
|
"desc":"WAF protects user data on the application layer. It supports cache configuration on static web pages. When a user accesses a web page, the system returns a cached page to",
|
|
"product_code":"dwaf",
|
|
"title":"Does WAF Cache Website Data?",
|
|
"uri":"waf_01_0345.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"77"
|
|
},
|
|
{
|
|
"desc":"A Structured Query Language (SQL) injection is a common web attack. The attacker injects malicious SQL commands into database query strings to deceive the server into exe",
|
|
"product_code":"dwaf",
|
|
"title":"How Does WAF Detect SQL Injection and XSS Attacks?",
|
|
"uri":"waf_01_0457.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"63",
|
|
"code":"78"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"WAF Usage",
|
|
"uri":"waf_01_0293.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"62",
|
|
"code":"79"
|
|
},
|
|
{
|
|
"desc":"WAF protects web application pages. After your website is connected to WAF, there is no impact on your email port or email sending or receiving.",
|
|
"product_code":"dwaf",
|
|
"title":"Does WAF Affect Email Ports or Email Receiving and Sending?",
|
|
"uri":"waf_01_0218.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"79",
|
|
"code":"80"
|
|
},
|
|
{
|
|
"desc":"After you connect a website to your WAF instance, WAF works as a reverse proxy between the client and the server. The real IP address of the server is hidden and only the",
|
|
"product_code":"dwaf",
|
|
"title":"How Do I Obtain the Real IP Address of a Web Visitor?",
|
|
"uri":"waf_01_0062.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"79",
|
|
"code":"81"
|
|
},
|
|
{
|
|
"desc":"You can view security events such as file inclusion in WAF protection events to quickly locate attack sources or analyze attack events.Program developers write repeatedly",
|
|
"product_code":"dwaf",
|
|
"title":"What Are Local File Inclusion and Remote File Inclusion?",
|
|
"uri":"waf_01_0196.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"79",
|
|
"code":"82"
|
|
},
|
|
{
|
|
"desc":"Queries Per Second (QPS) indicates the number of requests per second. For example, an HTTP GET request is also called a query. The number of requests is the total number ",
|
|
"product_code":"dwaf",
|
|
"title":"What Is the Difference Between QPS and the Number of Requests?",
|
|
"uri":"waf_01_0179.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"79",
|
|
"code":"83"
|
|
},
|
|
{
|
|
"desc":"The number of concurrent requests refers to the number of requests that the system can process simultaneously. When it comes to a website, concurrent requests refer to th",
|
|
"product_code":"dwaf",
|
|
"title":"What Are Concurrent Requests?",
|
|
"uri":"waf_01_0222.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"79",
|
|
"code":"84"
|
|
},
|
|
{
|
|
"desc":"WAF preferentially forwards access requests to the single domain name. If the single domain name cannot be identified, access requests will be forwarded to the wildcard d",
|
|
"product_code":"dwaf",
|
|
"title":"How Does WAF Forward Access Requests When Both a Wildcard Domain Name and a Single Domain Name Are Connected to WAF?",
|
|
"uri":"waf_01_0361.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"79",
|
|
"code":"85"
|
|
},
|
|
{
|
|
"desc":"No. After a website is connected to WAF, all website access requests are forwarded to WAF first. WAF detects and filters out malicious attack traffic, and returns normal ",
|
|
"product_code":"dwaf",
|
|
"title":"Does WAF Affect Data Transmission from the Internal Network to an External Network?",
|
|
"uri":"waf_01_0366.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"79",
|
|
"code":"86"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Website Domain Name Access Configuration",
|
|
"uri":"waf_01_0124.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"61",
|
|
"code":"87"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Domain Name and Port Configuration",
|
|
"uri":"waf_01_0299.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"87",
|
|
"code":"88"
|
|
},
|
|
{
|
|
"desc":"After you connect a domain name or IP address of the website you want to protect to WAF, WAF works as a reverse proxy between the client and the server. The real IP addre",
|
|
"product_code":"dwaf",
|
|
"title":"How Do I Add a Domain Name/IP Address to WAF?",
|
|
"uri":"waf_01_0176.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"88",
|
|
"code":"89"
|
|
},
|
|
{
|
|
"desc":"Before using WAF, you need to add domain names to be protected to WAF based on your web service protection requirements. WAF supports addition of single domain names and ",
|
|
"product_code":"dwaf",
|
|
"title":"How Do I Configure Domain Names to Be Protected When Adding Domain Names?",
|
|
"uri":"waf_01_0105.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"88",
|
|
"code":"90"
|
|
},
|
|
{
|
|
"desc":"Prepare information required for connecting a domain name or IP address to WAF based on the mode of WAF instance you plan to buy.The following data is required:Domain nam",
|
|
"product_code":"dwaf",
|
|
"title":"What Data Is Required for Connecting a Domain Name/IP Address to WAF?",
|
|
"uri":"waf_01_0157.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"88",
|
|
"code":"91"
|
|
},
|
|
{
|
|
"desc":"The deletion operation cannot be cancelled. Exercise caution when performing this operation.If you want to retain the policy applied to the domain name, select Retain the",
|
|
"product_code":"dwaf",
|
|
"title":"How Do I Safely Delete a Protected Domain Name?",
|
|
"uri":"waf_01_0041.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"88",
|
|
"code":"92"
|
|
},
|
|
{
|
|
"desc":"When configuring multiple server addresses for the same domain name, pay attention to the following:For domain names mapping to non-standard portsThe client protocol, ser",
|
|
"product_code":"dwaf",
|
|
"title":"What Are the Precautions for Configuring Multiple Server Addresses for Backend Servers?",
|
|
"uri":"waf_01_0104.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"88",
|
|
"code":"93"
|
|
},
|
|
{
|
|
"desc":"Yes. When adding a domain name to WAF, you can configure a single domain name or a wildcard domain name based on your service requirements. The details are as follows:Sin",
|
|
"product_code":"dwaf",
|
|
"title":"Does WAF Support Wildcard Domain Names?",
|
|
"uri":"waf_01_0190.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"88",
|
|
"code":"94"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Certificate Management",
|
|
"uri":"waf_01_0301.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"87",
|
|
"code":"95"
|
|
},
|
|
{
|
|
"desc":"Each domain name must correspond to a certificate. A wildcard domain name can only be used for a wildcard domain certificate. If you only have single-domain certificates,",
|
|
"product_code":"dwaf",
|
|
"title":"How Do I Select a Certificate When Configuring a Wildcard Domain Name?",
|
|
"uri":"waf_01_0135.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"95",
|
|
"code":"96"
|
|
},
|
|
{
|
|
"desc":"Only .pem certificates can be used in WAF. If the certificate is not in .pem format, convert it into .pem locally by referring to Table 1 before uploading it.Certificate ",
|
|
"product_code":"dwaf",
|
|
"title":"How Do I Convert a Certificate into PEM Format?",
|
|
"uri":"waf_01_0313.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"95",
|
|
"code":"97"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Service Interruption Check",
|
|
"uri":"waf_01_0127.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"61",
|
|
"code":"98"
|
|
},
|
|
{
|
|
"desc":"If an error, such as 404 Not Found, 502 Bad Gateway, or 504 Gateway Timeout, occurs after a domain name is connected to WAF, use the following methods to locate the cause",
|
|
"product_code":"dwaf",
|
|
"title":"How Do I Troubleshoot 404/502/504 Errors?",
|
|
"uri":"waf_01_0066.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"98",
|
|
"code":"99"
|
|
},
|
|
{
|
|
"desc":"Once an attack hits a WAF rule, WAF will respond to the attack immediately according to the protective action (Log only or Block) you configured for the rule and display ",
|
|
"product_code":"dwaf",
|
|
"title":"How Do I Handle False Alarms as WAF Blocks Normal Requests to My Website?",
|
|
"uri":"waf_01_0038.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"98",
|
|
"code":"100"
|
|
},
|
|
{
|
|
"desc":"The default timeout duration for connections between a browser and WAF is 120 seconds, which cannot be manually set.The default timeout duration for connections between W",
|
|
"product_code":"dwaf",
|
|
"title":"What Is the Connection Timeout Duration of WAF? Can I Manually Set the Timeout Duration?",
|
|
"uri":"waf_01_0160.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"98",
|
|
"code":"101"
|
|
},
|
|
{
|
|
"desc":"If your visitors receive a page similar to the one in Figure 1 when they try to access your website through a mobile phone, an incomplete certificate chain is uploaded wh",
|
|
"product_code":"dwaf",
|
|
"title":"Why Are HTTPS Requests Denied on Some Mobile Phones?",
|
|
"uri":"waf_01_0093.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"98",
|
|
"code":"102"
|
|
},
|
|
{
|
|
"desc":"If the certificate provided by the certificate authority is not found in the built-in trust store on your platform and the certificate chain does not have a certificate a",
|
|
"product_code":"dwaf",
|
|
"title":"How Do I Fix an Incomplete Certificate Chain?",
|
|
"uri":"waf_01_0082.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"98",
|
|
"code":"103"
|
|
},
|
|
{
|
|
"desc":"After an HTTPS certificate is uploaded to the AAD or WAF console, a message is displayed indicating that the certificate and key do not match.How Do I Fix an Incomplete C",
|
|
"product_code":"dwaf",
|
|
"title":"Why Does My Certificate Not Match the Key?",
|
|
"uri":"waf_01_1082.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"98",
|
|
"code":"104"
|
|
},
|
|
{
|
|
"desc":"If the request contains malicious load and is intercepted by WAF, error 418 is reported when you access the domain name protected by WAF. You can view WAF protection logs",
|
|
"product_code":"dwaf",
|
|
"title":"Why Am I Seeing Error Code 418?",
|
|
"uri":"waf_01_0198.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"98",
|
|
"code":"105"
|
|
},
|
|
{
|
|
"desc":"After your website is connected to WAF, the file visitors can upload each time cannot exceed 512 MB.To upload a file greater than 512 MB, upload the file through:IP addre",
|
|
"product_code":"dwaf",
|
|
"title":"How Can I Upload Files After the Website Is Connected to WAF?",
|
|
"uri":"waf_01_0100.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"98",
|
|
"code":"106"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Protection Rule Configuration",
|
|
"uri":"waf_01_0063.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"61",
|
|
"code":"107"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Basic Web Protection",
|
|
"uri":"waf_01_0304.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"107",
|
|
"code":"108"
|
|
},
|
|
{
|
|
"desc":"This FAQ guides you to switch the mode of basic web protection to Block.Perform the following operations:Log only and Block are merely modes of basic web protection. CC a",
|
|
"product_code":"dwaf",
|
|
"title":"How Do I Switch the Mode of Basic Web Protection from Log Only to Block?",
|
|
"uri":"waf_01_0053.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"108",
|
|
"code":"109"
|
|
},
|
|
{
|
|
"desc":"WAF provides three basic web protection levels: Low, Medium, and High. The default option is Medium. For details, see Table 1.",
|
|
"product_code":"dwaf",
|
|
"title":"Which Protection Levels Can Be Set for Basic Web Protection?",
|
|
"uri":"waf_01_0204.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"108",
|
|
"code":"110"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"CC Attack Protection Rules",
|
|
"uri":"waf_01_0305.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"107",
|
|
"code":"111"
|
|
},
|
|
{
|
|
"desc":"When a service interface is under an HTTP flood attack, you can set a CC attack protection rule on the WAF console to relieve service pressure.WAF provides the following ",
|
|
"product_code":"dwaf",
|
|
"title":"How Do I Configure a CC Attack Protection Rule?",
|
|
"uri":"waf_01_0035.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"111",
|
|
"code":"112"
|
|
},
|
|
{
|
|
"desc":"During the configuration of a CC attack protection rule, if IP addresses cannot identify users precisely, for example, when many users share an egress IP address, use Coo",
|
|
"product_code":"dwaf",
|
|
"title":"When Is Cookie Used to Identify Users?",
|
|
"uri":"waf_01_0036.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"111",
|
|
"code":"113"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Anti-Crawler Protection",
|
|
"uri":"waf_01_0308.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"107",
|
|
"code":"114"
|
|
},
|
|
{
|
|
"desc":"After JavaScript anti-crawler is enabled, WAF returns a piece of JavaScript code to the client when the client sends a request. If the client sends a normal request to th",
|
|
"product_code":"dwaf",
|
|
"title":"Why Is the Requested Page Unable to Load After JavaScript Anti-Crawler Is Enabled?",
|
|
"uri":"waf_01_0254.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"114",
|
|
"code":"115"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Others",
|
|
"uri":"waf_01_0309.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"107",
|
|
"code":"116"
|
|
},
|
|
{
|
|
"desc":"Normally, all requests destined for your site will pass through WAF. However, if your site is using CDN and WAF, the WAF policy targeted at the requests for caching stati",
|
|
"product_code":"dwaf",
|
|
"title":"In Which Situations Will the WAF Policies Fail?",
|
|
"uri":"waf_01_0102.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"116",
|
|
"code":"117"
|
|
},
|
|
{
|
|
"desc":"All paths configured for protection rules of WAF are case-sensitive.",
|
|
"product_code":"dwaf",
|
|
"title":"Is the Path of a WAF Protection Rule Case-sensitive?",
|
|
"uri":"waf_01_0151.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"116",
|
|
"code":"118"
|
|
},
|
|
{
|
|
"desc":"The protection rules supported by WAF are described below.Basic Web ProtectionWAF can defend against common web attacks, such as SQL injection, XSS, web shells, and Troja",
|
|
"product_code":"dwaf",
|
|
"title":"What Protection Rules Does WAF Support?",
|
|
"uri":"waf_01_0028.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"116",
|
|
"code":"119"
|
|
},
|
|
{
|
|
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
|
|
"product_code":"dwaf",
|
|
"title":"Change History",
|
|
"uri":"waf_01_0265.html",
|
|
"doc_type":"usermanual",
|
|
"p_code":"",
|
|
"code":"120"
|
|
}
|
|
] |