Guide for combining GTM and WAF

Scenario

You can combine Alibaba Cloud DNS, Web Application Firewall (WAF), and Global Traffic Manager to build a network architecture.

Prerequisites

Resource	Quantity	Description
Website domain name	1	example.com
Alibaba Cloud DNS	1	Alibaba Cloud DNS Ultimate Edition
Global Traffic Manager	1	Standard Edition
Web Application Firewall	1	WAF (Chinese mainland)
SLB instance	2	China (Beijing) and China (Shanghai)

Procedure

Step 1: Configure Global Traffic Manager

1. Go to the Alibaba Cloud DNS - Global Traffic Manager page.

2. Click the Purchase Instance button, select Global Traffic Manager 3.0 (Subscription), select Standard Edition, and complete the purchase.

3. Configure the address pool. The following settings are examples. Replace them with your actual values. For the complete procedure, see Get started.

   Name	Type	Minimum quantity	Address (SLB instance IP. Use your actual IP address.)
   China (Beijing)	IP	1	192.168.1.1
   China (Shanghai)	IP	1	192.168.1.2

4. Obtain the final access domain name, for example, gtm.example.com.

Step 2: Configure WAF

1. Log on to the Web Application Firewall console. On the provisioning page, select CNAME and configure WAF protection for your website. For details, see Enable WAF protection for a website using a CNAME record.

   Configuration Item	Description
   Domain Name	gtm.example.com
   Protocol Type	HTTP

2. After the configuration is complete and the status changes to Normal, retrieve the generated CNAME record.

Step 3: Configure Alibaba Cloud DNS

1. Go to the Alibaba Cloud DNS - Public Zone page. In the Actions column for the target domain name, click Settings.

2. On the Settings page, click Add Record.

   Note: The following values are examples. Replace them with your actual values.

   Parameter	Example Value
   Record Type	CNAME
   Host	@
   Parse a line	Default
   Value	The WAF CNAME record obtained in the previous step. Example: hgojkqkmvkxxxxxzlvhl8dxxxxxxxx.yundunwaf5.com