Web Application Firewall:WAF 3.0 released, WAF 2.0 end-of-sale

WAF 3.0 provides the following advantages compared with WAF 2.0:

• New cloud native architecture

  WAF 3.0 is deeply integrated as an SDK module into the gateways of cloud services, such as ALB and Microservices Engine (MSE), to detect threats and protect traffic. During the protection process, WAF does not forward traffic. You can enable WAF protection for cloud service instances in specific regions without the need to modify the DNS records or the settings of certificates, ports, and back-to-origin algorithms. This helps improve the stability and performance of your business and reduce access latency. For more information, see Cloud native architecture.

• New protection configuration mode

  WAF 3.0 allows you to add cloud service instances or domain names as protected objects and create protected object groups. WAF 3.0 also allows you to create protection rule templates for different protected objects in different protection modules. WAF 3.0 allows you to perform the following operations, which helps you configure protection in a more efficient manner:

  • Create protected object groups to apply a set of protection rules to multiple protected objects that have similar protection requirements. You can also configure custom protection rules for specific protected objects.

  • Configure default protection templates to apply predefined protection rules to new protected objects.

  For more information, see Protection configuration overview.

• New billing mode

  WAF 3.0 supports the pay-as-you-go billing method. The billing unit is security capacity units (SeCUs). All fees are calculated based on SeCUs. This helps simplify the calculation process and billing logic. Bills are generated on an hourly basis based on your SeCU usage. You can purchase resource plans to offset SeCU usage fees based on your business requirements. For more information, see Billing overview.

• New features and improved user experience

  WAF 3.0 provides new features, such as the custom response feature. In WAF 3.0, the fees of the Simple Log Service for WAF feature are included in the bills of Simple Log Service. The Simple Log Service for WAF feature allows you to specify a custom storage capacity and retention period for logs. WAF 3.0 also optimizes the configurations for adding services in CNAME record mode and the configurations for security reports and rule searches. For more information, see Configure protection rules for the custom response module to configure custom block pages, Overview of log management, Add a domain name to WAF, and Security reports.