Get started with WAF-Web Application Firewall(WAF)-阿里云帮助中心

If you are using Web Application Firewall (WAF) for the first time, use this document as a starting point to purchase a WAF instance and find the quick start guide for your WAF version.

Overview

Web Application Firewall (WAF) protects your websites and applications from common web attacks. When you use WAF for the first time, you must purchase and activate a WAF instance before you can configure protection for your services. Before your services are protected, complete the following configuration steps in order: purchase a WAF instance, add your website or application, and configure protection rules.

The flowchart below illustrates the complete process from purchasing and activating a WAF instance to having protection take effect. Follow the quick start documents linked below for detailed step-by-step instructions.

WAF quick start flowchart: complete process from purchase and activation to protection activation

Quick start documents

WAF provides two versions: 3.0 and 2.0. Select the quick start document for your WAF version:

WAF 3.0 (recommended): Getting started: Protect an ECS instance from HTTP flood attacks
WAF 2.0 (New purchases discontinued; available for existing users only): WAF 2.0 (New purchases discontinued; available for existing users only)