☁ Huawei Cloud WAF(Web Application Firewall) Service in Dedicated Mode

Feyza Seyrek
Huawei Developers
Published in
4 min readOct 30, 2023

Introduction πŸŽ‰

Huawei Cloud WAF (Web Application Firewall) is a security service that protects web applications from common attacks, such as SQL injection, cross-site scripting (XSS), and denial-of-service (DoS) attacks. WAF can be deployed in either cloud mode or dedicated mode.

Cloud mode WAF is suitable for web applications that are deployed in Huawei Cloud, any other clouds, or on-premises data centers. Dedicated mode WAF is suitable for web applications that are deployed on Huawei Cloud and accessible over domain names or IP addresses.

This article will provide a detailed overview of Huawei Cloud WAF service in dedicated mode.

Features πŸ’₯

Huawei Cloud WAF in dedicated mode offers the following features:

  • Comprehensive protection against common web attacks: WAF can protect web applications from a wide range of attacks, including SQL injection, XSS, DoS attacks, and more.
  • High performance and scalability: WAF can handle high traffic loads and scale to meet the needs of growing businesses.
  • Easy to use and manage: WAF is easy to deploy and manage, even for users with limited experience in security.
  • Affordable pricing: WAF is available at a competitive price, making it an affordable solution for businesses of all sizes.

Architecture πŸ’«

Huawei Cloud WAF in dedicated mode is a two-tier architecture:

  • WAF instances: WAF instances are responsible for inspecting and filtering traffic to web applications.
  • Load balancers: Load balancers distribute traffic to WAF instances and ensure high availability.

Deployment πŸ’₯

To deploy Huawei Cloud WAF in dedicated mode, you need to:

  1. Purchase a dedicated WAF instance.
  2. Configure a load balancer for WAF.
  3. Bind an EIP (Elastic IP) to the load balancer.
  4. Add your website to WAF.

Configuration ✨

Once you have deployed WAF, you can configure it to meet your specific needs. Some of the key configuration options include:

  • WAF policies: WAF policies define the rules that WAF uses to inspect and filter traffic.
  • WAF rules: WAF rules are specific rules that detect and block attacks.
  • WAF exceptions: WAF exceptions allow you to bypass WAF filtering for specific traffic.

Monitoring 🟦

WAF provides a variety of monitoring metrics that you can use to track its performance and identify potential problems. Some of the key monitoring metrics include:

  • Request rate: The number of requests that WAF receives per second.
  • Block rate: The number of requests that WAF blocks per second.
  • Average latency: The average time it takes WAF to process a request.

Use Cases πŸ”·

Huawei Cloud WAF in dedicated mode is suitable for a wide range of use cases, including:

  • Protecting e-commerce websites: WAF can protect e-commerce websites from attacks that target customer data and financial information.
  • Protecting enterprise websites: WAF can protect enterprise websites from attacks that target sensitive data, such as customer information and intellectual property.
  • Protecting government websites: WAF can protect government websites from attacks that target critical infrastructure and sensitive data.
Use case
Applicable Scenarios

Conclusion πŸ’―

Huawei Cloud WAF in dedicated mode is a powerful and easy-to-use security service that can protect web applications from a wide range of attacks. It is a suitable solution for businesses of all sizes, from small businesses to large enterprises.

Advantages of WAF

Additional Information ❗

For more information about Huawei Cloud WAF in dedicated mode, please see the following resources:

  • Huawei Cloud WAF documentation:
  • Huawei Cloud WAF pricing:
  • Huawei Cloud WAF case studies:

--

--