All Products
Search

This Product

    Web Application Firewall:Upgrade or downgrade a subscription WAF 3.0 instance

    Document Center

    Web Application Firewall:Upgrade or downgrade a subscription WAF 3.0 instance

    Last Updated:Mar 12, 2025

    You can upgrade the edition of your Web Application Firewall (WAF) instance. You can also upgrade or downgrade the specifications of the value-added services that you purchased. This topic describes how to upgrade or downgrade a WAF instance.

    Upgrade

    Supported upgrade operations

    • Upgrade the edition of a WAF instance

      You can upgrade the edition of a WAF instance. WAF 3.0 provides the following editions: Basic, Pro, Enterprise, and Ultimate. The editions are listed in ascending order of protection capabilities.

    • Purchase value-added services

      You can purchase the following value-added services: hybrid cloud protection, bot management for web application protection, bot management for app protection, API security, additional queries per second (QPS), burstable QPS (pay-as-you-go), additional domain names, exclusive IP addresses, intelligent load balancing, and Simple Log Service for WAF.

    • Upgrade the specifications of value-added services

      You can upgrade the following specifications of the value-added services: additional hybrid cloud protection nodes, additional QPS quota, additional quota for burstable QPS (pay-as-you-go), additional domain name quota, number of exclusive IP addresses, and log storage capacity.

    Billing

    You are charged when you upgrade the specifications of value-added services. The new specifications immediately take effect.

    Note

    On the Web Application Firewall 3.0 (Subscription) | Upgrade/Downgrade page in the WAF console, you can view the fees required for upgrading specifications.

    Procedure

    1. Log on to the WAF 3.0 console. In the top navigation bar, select the resource group and region of the WAF instance. You can select Chinese Mainland or Outside Chinese Mainland.

    2. In the left-side navigation pane, click Overview.

    3. In the Protected Assets section of the Overview page, click Upgrade Now.

      Note

      You can also click Upgrade below Intelligent Load Balancing or click Resize below Protected Domain Names, Clean QPS, or Exclusive IP Addresses.

    4. On the Web Application Firewall 3.0 (Subscription) | Upgrade/Downgrade page, configure the parameters, read and select Terms of Service, and then click Buy Now to complete the payment.

    Downgrade

    In WAF 3.0, you can downgrade specifications within the same edition, but you cannot directly downgrade the edition. For example, if your WAF instance runs the Enterprise edition, you can downgrade existing specifications to reduce costs, but you cannot downgrade the edition from Enterprise to Pro.

    Unsupported scenarios

    • The value of the Extra Domains or Exclusive IP Address parameter must be greater than or equal to the number of additional domain names or exclusive IP addresses that you used. For example, you purchased a subscription WAF Pro instance and set the Extra Domains parameter to 10. The instance provides a default domain name quota of 5 and an additional domain name quota of 10. If you added 7 domain names to WAF, the additional quota of 2 is consumed, and you cannot modify the Extra Domains parameter to be less than 2.

    Supported downgrade operations

    • Downgrade the specifications of value-added services

      You can downgrade the following specifications of value-added services: additional QPS quota, additional quota for burstable QPS (pay-as-you-go), additional domain name quota, number of exclusive IP addresses, and log storage capacity.

    • Disable value-added services

      You can submit a ticket to disable the following value-added services: bot management for web application protection, bot management for app protection, and API security.

    Downgrade impacts

    • If you specify a smaller value for the Extended QPS or Burstable QPS (Pay-as-you-go) parameter, the possibility that the WAF instance is added to the sandbox increases. We recommend that you do not downgrade the QPS quotas of your WAF instance. For more information, see Sandbox overview.

    • If the log storage usage reaches the upper limit, WAF logs are no longer written. We recommend that you do not reduce the log storage capacity of your WAF instance. The minimum log storage capacity that you can purchase is 3 TB.

    Refunds

    You can request a refund when you perform a downgrade operation. For more information about how to calculate refunds, see Rules for unsubscribing from resources.降配..png

    Note

    You can calculate refunds by using the following formula: Refunds = Paid amount - Fees for consumed resources. Fees for consumed resources = Usage duration (days) × Daily unit price × 1.5.

      Procedure

      Note

      You can perform the downgrade operation once a month.

      1. Log on to the WAF 3.0 console. In the top navigation bar, select the resource group and region of the WAF instance. You can select Chinese Mainland or Outside Chinese Mainland.

      2. In the left-side navigation pane, click Overview.

      3. In the Protected Assets section of the Overview page, click More and then click Downgrade.

      4. On the Web Application Firewall 3.0 (Subscription) | Downgrade page, configure the parameters, read and select Terms of Service, and then click Buy Now to complete the payment.