Web Application Firewall
- Release Notes and Announcements
- Product Announcement
- Security Advisory
- Product Introduction
- Purchase Guide
- Billing Overview
- Getting Started
- Operation Guide
- SaaS WAF Connection
- CLB WAF Connection
- Connect Via Instance Object
- Bot and Application Security
- Bot Settings
- Bot Management
- Bot Traffic Visibility
- Basic Security Configurations
- API Security Management
- Threat Operation
- Blocklist/Allowlist Protection Settings
- Statistics and Logs
- Practical Tutorial
- Bot Management
- API Security
- Integration
- API Documentation
- Making API Requests
- Asset Management APIs
- Protection Settings APIs
- Other APIs
- IP Management APIs
- Integration APIs
- Security Overview APIs
- FAQS
Plans and Editions
Last updated: 2025-03-27 16:33:30
Chinese Mainland Editions
SaaS WAF
Feature | Item | Premium | Enterprise | Ultimate | Exclusive |
Basic support | Use case | Applicable to standardized protection for small and medium websites | Applicable to protection for small and medium website applications and customized protection for medium and large websites | Applicable to protection for large and super large website applications and customized protection for complex website applications | Applicable to protection for large and super large web and API services, with dedicated resources and customizable protection capabilities |
| Peak QPS | 2,500 QPS | 5,000 QPS | 10,000 QPS | 50,000 QPS |
| Bandwidth | 50 Mbps | 100 Mbps | 200 Mbps | 1,000 Mbps |
| Dedicated IP | – | √ | √ | √ |
| Primary domain names | 2 | 3 | 4 | 1,000 (customizable) |
| Domain names (primary domain names+subdomain names) | 20 | 30 | 40 | 20,000 (customizable) |
| Wildcard domain name protection | – | √ | √ | √ |
| IPv6 protection | – | √ | √ | √ |
| Certificate customization | – | – | – | √ |
| HTTP2/WebSocket | √ | √ | √ | √ |
Basic security protection | Rule protection engine | √ | √ | √ | √ |
| Virtual zero-day vulnerability patching | √ | √ | √ | √ |
| IP blocklist/allowlist | 1,000 pcs/domain name | 5,000 pcs/domain name | 20,000 pcs/domain name | 20,000 pcs/domain name (customizable) |
| Regional blocking | √ | √ | √ | √ |
| Access control | 10 pcs/domain name | 20 pcs/domain name | 50 pcs/domain name | 200 pcs/domain name |
| Emergency CC protection | √ | √ | √ | √ |
| IP/Session-based CC protection | 5 pcs/domain name | 20 pcs/domain name | 50 pcs/domain name | 50 pcs/domain name |
| Data leakage prevention | 5 pcs/domain name | 10 pcs/domain name | 20 pcs/domain name | 50 pcs/domain name |
| Tamper protection | 10 pcs/domain name | 20 pcs/domain name | 50 pcs/domain name | 50 pcs/domain name |
| AI engine | – | – | √ | √ |
| Advanced vulnerability protection (AI engine) | – | – | √ | √ |
Log processing | Attack log query and download | √ | √ | √ | √ |
| Access log query and download (with log package required) | √ | √ | √ | √ |
Professional services | Non-standard port support | – | √ | √ | √ |
| One-to-one presales support | – | √ | √ | √ |
| 24/7 remote + Weixin group support | – | √ | √ | √ |
| Remote expert service | – | – | √ | √ |
| One-to-one on-site expert support | – | – | – | 5 times |
| Presales and aftersales support through ticket | √ | √ | √ | √ |
CLB WAF
Feature | Item | Premium | Enterprise | Ultimate | Exclusive |
Basic support | Use case | Applicable to standardized protection for small and medium websites | Applicable to protection for small and medium website applications and customized protection for medium and large websites | Applicable to protection for large and super large website applications and customized protection for complex website applications | Applicable to protection for large and super large web and API services, with dedicated resources and customizable protection capabilities |
| Peak QPS | 2,500 QPS | 5,000 QPS | 10,000 QPS | 50,000 QPS |
| Bandwidth | 100 Mbps | 200 Mbps | 400 Mbps | 400 Mbps |
| Multi-region linkage | – | – | 10 regions | √ |
| CLB listeners | 200 | 300 | 500 | 1,000 (customizable) |
| Primary domain names | 2 | 3 | 4 | 1,000 (customizable) |
| Domain names (primary domain names+subdomain names) | 20 | 30 | 40 | 20,000 (customizable) |
| Wildcard domain name | – | √ | √ | √ |
| IPv6 protection | √ | √ | √ | √ |
Basic security protection | Rule protection engine | √ | √ | √ | √ |
| Virtual zero-day vulnerability patching | √ | √ | √ | √ |
| IP blocklist/allowlist | 1,000 pcs/domain name | 5,000 pcs/domain name | 20,000 pcs/domain name | 20,000 pcs/domain name (customizable) |
| Regional blocking | √ | √ | √ | √ |
| Access control | 10 pcs/domain name | 20 pcs/domain name | 50 pcs/domain name | 200 pcs/domain name |
| IP/Session-based custom CC protection | 5 pcs/domain name | 20 pcs/domain name | 50 pcs/domain name | 50 pcs/domain name |
| AI engine | – | – | √ | √ |
| Advanced vulnerability protection (AI engine) | – | – | √ | √ |
Log processing | Attack log query and download | √ | √ | √ | √ |
| Access log query and download (with log package required) | √ | √ | √ | √ |
Professional services | Two-way certificate authentication | √ | √ | √ | √ |
| One-to-one presales support service | – | √ | √ | √ |
| 24/7 remote + Weixin group support | – | √ | √ | √ |
| Remote expert service | – | – | √ | √ |
| One-to-one on-site expert support | – | – | – | 5 times |
| Presales and aftersales support through ticket | √ | √ | √ | √ |
Non-Chinese Mainland Editions
Notes
SaaS WAF
Feature | Item | Premium | Enterprise | Ultimate | Exclusive |
Basic support | Use case | Applicable to standardized protection for small and medium websites | Applicable to protection for small and medium website applications and customized protection for medium and large websites | Applicable to protection for large and super large website applications and customized protection for complex website applications | Applicable to protection for large and super large web and API services, with dedicated resources and customizable protection capabilities |
| Peak QPS | 2,500 QPS | 5,000 QPS | 10,000 QPS | 50,000 QPS |
| Bandwidth | 50 Mbps | 80 Mbps | 100 Mbps | 1,000 Mbps |
| Dedicated IP | – | √ | √ | √ |
| Primary domain names | 2 | 3 | 4 | 1,000 (customizable) |
| Domain names (primary domain names+subdomain names) | 20 | 30 | 40 | 20000 (customizable) |
| Wildcard domain name protection | – | √ | √ | √ |
| Certificate customization | – | – | – | √ |
| HTTP2/WebSocket | √ | √ | √ | √ |
Basic security protection | Rule protection engine | √ | √ | √ | √ |
| Virtual zero-day vulnerability patching | √ | √ | √ | √ |
| IP blocklist/allowlist | 1,000 pcs/domain name | 5,000 pcs/domain name | 20,000 pcs/domain name | 20,000 pcs/domain name (customizable) |
| Regional blocking | √ | √ | √ | √ |
| Access control | 10 pcs/domain name | 20 pcs/domain name | 50 pcs/domain name | 200 pcs/domain name |
| Emergency CC protection | √ | √ | √ | √ |
| IP/Session-based CC protection | 5 pcs/domain name | 20 pcs/domain name | 50 pcs/domain name | 50 pcs/domain name |
| Data leakage prevention | 5 pcs/domain name | 10 pcs/domain name | 20 pcs/domain name | 50 pcs/domain name |
| Tamper protection | 10 pcs/domain name | 20 pcs/domain name | 50 pcs/domain name | 50 pcs/domain name |
| AI engine | – | – | √ | √ |
Log processing | Attack log query and download | √ | √ | √ | √ |
| Access log query and download (with log package required) | √ | √ | √ | √ |
Professional services | Non-standard port support | – | √ | √ | √ |
| One-to-one presales support | – | √ | √ | √ |
| 24/7 remote + Weixin group support | – | √ | √ | √ |
| Remote expert service | – | – | √ | √ |
| One-to-one on-site expert support | – | – | – | 5 times |
| Presales and aftersales support through ticket | √ | √ | √ | √ |
CLB WAF
Feature | Item | Premium | Enterprise | Ultimate | Exclusive |
Basic support | Use case | Applicable to standardized protection for small and medium websites | Applicable to protection for small and medium website applications and customized protection for medium and large websites | Applicable to protection for large and super large website applications and customized protection for complex website applications | Applicable to protection for large and super large web and API services, with dedicated resources and customizable protection capabilities |
| Peak QPS | 2,500 QPS | 5,000 QPS | 10,000 QPS | 50,000 QPS |
| Bandwidth | 100 Mbps | 200 Mbps | 400 Mbps | 400 Mbps |
| Multi-region linkage | – | – | 10 regions | √ |
| CLB listeners | 200 | 300 | 500 | 1,000 (customizable) |
| Primary domain names | 2 | 3 | 4 | 1,000 (customizable) |
| Domain names (primary domain names+subdomain names) | 20 | 30 | 40 | 20,000 (customizable) |
| Wildcard domain name | – | √ | √ | √ |
Basic security protection | Rule protection engine | √ | √ | √ | √ |
| Virtual zero-day vulnerability patching | √ | √ | √ | √ |
| IP blocklist/allowlist | 1,000 pcs/domain name | 5,000 pcs/domain name | 20,000 pcs/domain name | 20,000 pcs/domain name (customizable) |
| Regional blocking | √ | √ | √ | √ |
| Access control | 10 pcs/domain name | 20 pcs/domain name | 50 pcs/domain name | 200 pcs/domain name |
| IP/Session-based CC protection | 5 pcs/domain name | 20 pcs/domain name | 50 pcs/domain name | 50 pcs/domain name |
| AI engine | – | – | √ | √ |
Log processing | Attack log query and download | √ | √ | √ | √ |
| Access log query and download (with log package required) | √ | √ | √ | √ |
Professional services | Two-way certificate authentication | √ | √ | √ | √ |
| One-to-one presales support | – | √ | √ | √ |
| 24/7 remote + Weixin group support | – | √ | √ | √ |
| Remote expert service | – | – | √ | √ |
| One-to-one on-site expert support | – | – | – | 5 times |
| Presales and aftersales support through ticket | √ | √ | √ | √ |
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No