{"id":24718,"date":"2024-06-07T00:00:04","date_gmt":"2024-06-06T16:00:04","guid":{"rendered":"https:\/\/beyond-shenzhen.cn\/?post_type=blog&p=24718"},"modified":"2026-07-08T22:34:41","modified_gmt":"2026-07-08T14:34:41","slug":"alibaba-cloud-waf","status":"publish","type":"blog","link":"https:\/\/beyond-shenzhen.cn\/en\/blog\/alibaba-cloud-waf\/","title":{"rendered":"\u3010SaaS\u3011Alibaba Cloud WAF Features\u3010Security\u3011"},"content":{"rendered":"

In this post, we will outline the features and functions of “Alibaba Cloud WAF,” a WAF service provided by Alibaba Cloud.<\/p>\n

* Information is current as of September 2021.<\/p>\n

 <\/p>\n

Alibaba Cloud Security History<\/h2>\n

\"\"<\/p>\n

Alibaba Cloud is dedicated to developing security products aimed at protecting its infrastructure from a wide range of external cyber attacks.<\/p>\n

One of these products, Alibaba Cloud WAF (Web Application Firewall), is a security service built on over 10 years of security expertise. It is designed to defend against internet attacks and features an advanced defense mechanism that leverages big data capabilities.<\/p>\n

 <\/p>\n

Alibaba Cloud WAF Service Overview<\/h2>\n

Alibaba Cloud WAF can be implemented not only on Alibaba Cloud but also in on-premises environments, VPS (Virtual Private Servers), and infrastructure environments provided by other cloud platforms\u2014simply by switching DNS.<\/p>\n

As such, it is not restricted by the infrastructure environment in which it is deployed.<\/p>\n

\"\"<\/p>\n

 <\/p>\n

Key Features of Alibaba Cloud WAF<\/h3>\n\n\n\n\n\n\n\n\n\n\n
Category<\/span><\/td>\nFeature<\/span><\/td>\nOverview<\/span><\/td>\n<\/tr>\n
Web Application Protection<\/td>\nZero-day Attack Defense<\/td>\nEnables prompt risk mitigation by dynamically updating defense rules within 24 hours.\u3002<\/td>\n<\/tr>\n
Website Protection<\/td>\nProtects sites from intruders by using DNS to reroute traffic.<\/td>\n<\/tr>\n
OWASP Attack Defense<\/td>\nProvides various defense policies and isolation features to accurately identify and block known attacks, such as SQL injection.<\/td>\n<\/tr>\n
Site Access Control<\/td>\nAdd HTTPS Functionality<\/td>\nAdds HTTPS capabilities to a site simply by uploading the private key file.<\/td>\n<\/tr>\n
Access Control<\/td>\nIdentifies and blocks information-gathering activities required for intrusions through multi-layered protection.<\/td>\n<\/tr>\n
High-Precision Traffic Analysis<\/td>\nAccurate Malicious Access Identification<\/td>\nAccurately identifies malicious access, such as bots, and performs an evaluation when blocking.<\/td>\n<\/tr>\n
Custom Policies<\/td>\nAllows for the flexible modification and application of defense rules as needed.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

Alibaba Cloud WAF Features (by Edition)<\/h2>\n

Alibaba Cloud WAF offers four editions to choose from, depending on processing capacity, defense capabilities, and specific use cases.<\/p>\n

This allows for flexible scaling; for instance, you can start small with the Pro Edition and upgrade as your web traffic grows, adapting to your specific needs and situation.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Category<\/span><\/td>\nOverview<\/span><\/td>\nPro Edition<\/span><\/td>\nBusiness Edition<\/span><\/td>\nEnterprise Edition<\/span><\/td>\nExclusive Edition<\/span>
\n(submit tickets to purchase)<\/span><\/td>\n<\/tr>\n
Peak Request Rate<\/td>\n–<\/td>\n2,000 QPS<\/td>\n5,000 QPS<\/td>\n10,000 + QPS<\/td>\n5,000 QPS<\/td>\n<\/tr>\n
Maximum Bandwidth<\/td>\nIf the origin server is deployed on Alibaba Cloud<\/td>\n50 Mbit \/ s<\/td>\n100 Mbit \/ s<\/td>\n\u00a0200 Mbit \/ s<\/td>\n100 Mbit \/ s<\/td>\n<\/tr>\n
If the origin server is not deployed on Alibaba Cloud<\/td>\n10 Mbit \/ s<\/td>\n30 Mbit \/ s<\/td>\n50 Mbit \/ s<\/td>\n30 Mbit \/ s<\/td>\n<\/tr>\n
Max Domains (Standard Support)<\/td>\n–<\/td>\n1<\/td>\n1<\/td>\n1<\/td>\n1,000<\/td>\n<\/tr>\n
Max Subdomains (Standard Support)<\/td>\nSupports wildcard domains<\/td>\n10<\/td>\n10<\/td>\n10<\/td>\n1,000<\/td>\n<\/tr>\n
HTTPS Protection<\/td>\nImplement with just a few clicks<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
HTTP\/2 Protection<\/td>\nProtect websites using HTTP\/2<\/td>\n\u00d7<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Non-standard Port Protection<\/td>\nProtect ports other than 80, 8080, 443, and 8443<\/td>\n\u00d7<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Intelligent Load Balancing<\/td>\nMulti-SLB connection, auto DR, low-latency routing<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Dedicated IP Address<\/td>\nProvides dedicated IPs for specific domains<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Dedicated Cluster<\/td>\nProtection from SQL injection and XSS attacks<\/td>\n\u00d7<\/td>\n\u00d7<\/td>\n\u00d7<\/td>\n\u3007<\/td>\n<\/tr>\n
Protection Rule Engine<\/td>\nProtection against common web attacks<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Web Zero-day Vulnerability Protection<\/td>\nAutomatic rule updates<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Custom Protection Rule Groups<\/td>\nCustomization of protection rule groups<\/td>\n\u00d7<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Big Data Deep Learning Engine<\/td>\nDetects web zero-day vulnerabilities<\/td>\n\u00d7<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Whitelist Security Model<\/td>\nProactive defense based on traffic learning<\/td>\n\u00d7<\/td>\n\u00d7<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Website Anti-Defacement<\/td>\nPrevents tampering via web page locking<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Data Leakage Prevention<\/td>\nProtection against leakage of personal information (IDs, phone numbers, etc.)<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
HTTP Flood Protection<\/td>\nDefense against attacks in preventive and emergency modes<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Blacklist (IP \/ CIDR)<\/td>\nBlocks access from specific IPs\/CIDRs<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Scan Protection<\/td>\nCollaborative defense against web attacks and scanning tools<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Scan Protection (Custom Rules)<\/td>\nCustom blocking of high-frequency attacks and path traversal<\/td>\n\u00d7<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Custom Protection Policies (Basic Fields)<\/td>\nACL control based on IP, URL, Referer, User-Agent, and parameters<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Custom Protection Policies (Detailed Fields)<\/td>\nACL control based on Cookie, Content-Type, Header, and HTTP-Method<\/td>\n\u00d7<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Rate Limiting (IP \/ Session)<\/td>\nCustomize HTTP flood protection rules with matching conditions<\/td>\n\u00d7<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Rate Limiting (IP \/ Session \/ Custom Fields)<\/td>\nMore advanced rate limiting policies<\/td>\n\u00d7<\/td>\n\u00d7<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Data Risk Management<\/td>\nProtects critical services such as registration, login, and forums<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Allowed Crawler Whitelist<\/td>\nGrants access to authorized crawlers like Baidu, Bing, and Google<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Bot Threat Intelligence<\/td>\nProvides intelligence on malicious crawlers, data center IPs, etc.<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
App Protection<\/td>\nSecure connections and bot prevention for native apps<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
Account Security<\/td>\nProtection against dictionary attacks, brute force, SMS flooding, etc.<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n
WAF Log Service<\/td>\nLog collection\/storage, real-time queries, and online reports<\/td>\n\u00d7<\/td>\n\u25cb<\/td>\n\u25cb<\/td>\n\u3007<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

Summary<\/h2>\n

Alibaba Cloud WAF is a SaaS-based WAF service.<\/p>\n

It can be used on cloud platforms other than Alibaba Cloud and can also be deployed in on-premises environments, offering a high degree of versatility.<\/p>\n

Related Services<\/h3>\n\n\n\n\n
Alibaba Cloud Services<\/span><\/td>\nhttps:\/\/beyond-shenzhen.cn\/en\/service\/alibaba-cloud<\/a><\/td>\n<\/tr>\n
Managed Cloud Services<\/span><\/td>\nhttps:\/\/beyond-shenzhen.cn\/en\/service\/server<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

For Website Development and WeChat Solutions<\/a><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

In this post, we will outline the features and functions of “Alibaba Cloud WAF,” a WAF service provided by Alibaba Cloud. * Information is current as of September 2021.   Alibaba Cloud Security History Alibaba Cloud is dedicated to developing security products aimed at protecting its infrastructure from a wide range of external cyber attacks. […]<\/p>\n","protected":false},"author":3,"featured_media":24513,"template":"","meta":{"_acf_changed":false,"_locale":"en_US","_original_post":"https:\/\/beyond-shenzhen.cn\/?p=742"},"tags":[],"blogcat":[12],"class_list":["post-24718","blog","type-blog","status-publish","has-post-thumbnail","hentry","blogcat-it-web","en-US"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t