WAF can be connected with servers in data centers outside Tencent Cloud. WAF protects servers in any public networks, including but not limited to Tencent Cloud, and clouds and IDCs from other vendors.
Domain names connected in the Chinese mainland must be ICP filed as required by the Ministry of Industry and Information Technology of China.
WAF fully supports HTTPS services. You just need to upload the SSL certificate and private key as instructed or select the Tencent Cloud-hosted certificate to use WAF for HTTPS traffic protection.
Up to 20 forwarding IPs can be set for one protected domain name in WAF.
Health check is enabled for WAF by default. WAF checks the connection status of all real server IPs. For the real server IP that does not respond, WAF will not forward requests to this IP until its connection status becomes normal.
Session persistence is supported and enabled by default in WAF.
In general, a configuration change takes effect within 10 seconds.
It is supported by CLB WAF but not by SaaS WAF.
No, you can't change it in principle. However, if an exception occurs to your WAF service, you can submit a ticket for application, and we will switch it to another working VIP address for you.
WAF performs origin-pull based on domain name or IP. You can choose which option to configure as you need. For more information, see Add a Domain Name.
See CNAME Configuration for how to bind CNAME with your DNS service provider.
Once WAF is disabled, all its protection features are unavailable, and only the traffic forwarding mode starts to run instead, with no logs recorded.
No, it won't. You can go to the WAF console, click the domain name, and view the CNAME in Basic settings.