All Products
Search
Document Center

Web Application Firewall:Extra domain packages

Last Updated:Jan 21, 2026

An extra domain package increases the number of domain names that a Web Application Firewall (WAF) instance can protect. Each extra domain package lets you protect one primary domain name and nine of its subdomains. This topic describes what an extra domain package is and how to purchase one.

What is an extra domain package

By default, a WAF instance can protect one primary domain name and nine of its subdomains. The subdomains can include wildcard characters. For example, you can add one primary domain name, such as example.com, and up to nine related subdomains, such as www.example.com, *.example.com, mail.example.com, user.pay.example.com, or x.y.z.example.com.

You must purchase an extra domain package in the following scenarios. Otherwise, you cannot add all your domain names to WAF.

  • The number of primary domain names or subdomains that you want to protect exceeds the default quota of your WAF instance.

  • You want to add a domain name that belongs to a different primary domain. For example, if you have added example.com or its subdomains and you try to add aliyun.com (another primary domain name) or its subdomains, a message appears. The message indicates that the number of primary domain names has reached its limit and that you must upgrade the service by purchasing an extra domain package.

Purchase an extra domain package

You can purchase extra domain packages by upgrading your instance. For more information, see Upgrades and downgrades.