How do I connect a domain name with WAF?
Does WAF support wildcard domain names?
Yes. You can add a wildcard domain name in the WAF console. Note:
When a wildcard domain is added to WAF, other Tencent Cloud users can still add subdomain names that match the wildcard domain name to WAF.
If you add both a wildcard and a precise domain name (e.g. *.test.com
and a.test.com
), policies of the precise domain name prevail.
How long does it take to update the DNS resolution (protection) status of my domain name?
After you add the CNAME record at your DNS provider, status of the domain name on WAF is updated in 10 to 20 minutes. If you don’t see the update in 30 minutes, please check the CNAME configuration or submit a ticket. The intermediate IP is subject to be changed by WAF. You will be notified by an SMS message, an email, or a message in Message Center if your intermediate IP address changes. You can check the effective intermediate IP o the Domain Name List page of the WAF console.
Will the SaaS WAF-connected VIP address change?
Yes. VIP address may change when WAF is maintaining and upgrading its in/cross-region disaster recovery capabilities. To ensure the service availability, WAF only supports configuring VIP addresses by adding the CNAME.
Can I modify the SaaS WAF-connected VIP address?
No. A SaaS WAF-connected VIP address cannot be modified. If the associated domain name fails due to DDoS attacks, you can submit a ticket for assistance. What are the requirements for connecting a domain name to WAF?
If the domain name points to a real server in the Chinese mainland, an ICP filling number is required.
If the domain name is not
If you have obtained an ICP filing for the domain name through another service provider, you must add Tencent Cloud as a service provider to the ICP filing.
Note:
If the instance to which you add the domain name is a SaaS WAF instance, you also need to add a CNAME record at the DNS service provider of the domain name. Set the record value to the CNAME allocated by WAF.
What options does WAF offer for domain name origin-pull?
WAF performs origin-pull based on domain name or IP. You can choose which option to configure as you need. For more information, see Add a Domain Name. How do I bind a CNAME to my domain name connected to WAF?
If I remove a domain name and add it back to WAF, does the CNAME change?
What is the forwarding domain name?
When you add a domain name to WAF, you must specify a forwarding domain name. It can be the CNAME of proxy or another domain name. The protocol type (HTTP or HTTPS) is not required.
Was this page helpful?