Web Application Firewall (WAF) protects services that use standard and non-standard ports. The standard ports include 80, 8080, 443, and 8443. When you add a website to WAF, you can specify the ports of the origin server. Then, WAF receives and forwards traffic on the specified ports. This topic describes the standard and non-standard ports that are supported by WAF.
Background information
After you add a website to WAF, WAF forwards traffic to the origin server only on the specified ports. WAF does not forward traffic on the ports that are not specified.
Precautions
WAF protects services that use standard or non-standard ports. The number of ports and the range of non-standard ports that are supported by a WAF instance vary based on the WAF edition. For more information, see Ports supported by each WAF edition.
The maximum number of ports supported by a WAF instance is the total number of standard and non-standard ports supported by the instance.
If you use a WAF instance of the Exclusive edition or add a website to WAF in transparent proxy mode, WAF supports all non-standard ports. In other cases, WAF supports only specific non-standard ports.
View the supported ports in the WAF console
Log on to the WAF console and go to the Website Configuration page.
Find the domain name that you want to manage and click Edit in the Actions column.
In the Edit Domain Name panel, find the HTTP Port section and click View Port Range.
For more information, see Specify ports.
Ports supported by each WAF edition
Transparent proxy mode: WAF instances support any non-standard ports from 0 to 65535.
NoteThe number of traffic redirection ports that are supported in transparent proxy mode is limited. For more information, see Transparent proxy mode.
CNAME record mode: Only subscription WAF instances of the Business, Enterprise, or Exclusive edition support non-standard ports.
The following table lists the ports that are supported by each WAF edition in CNAME record mode. The supported ports in the console shall prevail. For more information about how to view the supported ports in the console, see Specify ports.
WAF edition
Maximum number of ports supported by each WAF instance
Supported standard port (default)
Supported non-standard port (custom)
Pro
4
HTTP ports: 80 and 8080
HTTPS ports: 443 and 8443
Not supported
Business
30 (This is the total number of standard ports and non-standard ports.)
HTTP ports: 80 and 8080
HTTPS ports: 443 and 8443
HTTP ports:
81, 82, 83, 84, 86, 87, 88, 89, 97, 800, 808, 1000, 1090, 3333, 3501, 3601, 5000, 5222, 6001, 6666, 7000, 7001, 7002, 7003, 7004, 7005, 7006, 7009, 7010, 7011, 7012, 7013, 7014, 7015, 7016, 7018, 7019, 7020, 7021, 7022 7023, 7024, 7025, 7026, 7070, 7071, 7081, 7082, 7083, 7088, 7097, 7510, 7777, 7800, 8000, 8001, 8002, 8003, 8008, 8009, 8020, 8021, 8022, 8025, 8026, 8077, 8078, 8081, 8082, 8083, 8084, 8085, 8086, 8087, 8088, 8089, 8090, 8091, 8106, 8181, 8334, 8336, 8686, 8800, 8888, 8889, 8999, 9000, 9001, 9002, 9003, 9021, 9023, 9027, 9037, 9080, 9081, 9082, 9180, 9200, 9201, 9205, 9207, 9208, 9209, 9210, 9211, 9212, 9213, 9898, 9908, 9916, 9918, 9919, 9928, 9929, 9939, 9999, 10000, 10001, 10080, 12601, 28080, 33702, and 48800
ImportantOnly WAF instances deployed in the Chinese mainland support port 48800. WAF instances deployed outside the Chinese mainland do not support port 48800.
HTTPS ports:
4443, 5443, 6443, 7443, 8553, 8663, 9443, 9553, 9663, and 18980
ImportantOnly WAF instances deployed in the Chinese mainland support port 18980. WAF instances deployed outside the Chinese mainland do not support port 18980.
Enterprise
50 (This is the total number of standard ports and non-standard ports.)
HTTP ports: 80 and 8080
HTTPS ports: 443 and 8443
HTTP ports:
81, 82, 83, 84, 86, 87, 88, 89, 97, 800, 808, 1000, 1090, 3333, 3501, 3601, 5000, 5222, 6001, 6666, 7000, 7001, 7002, 7003, 7004, 7005, 7006, 7009, 7010, 7011, 7012, 7013, 7014, 7015, 7016, 7018, 7019, 7020, 7021, 7022 7023, 7024, 7025, 7026, 7070, 7071, 7081, 7082, 7083, 7088, 7097, 7510, 7777, 7800, 8000, 8001, 8002, 8003, 8008, 8009, 8020, 8021, 8022, 8025, 8026, 8077, 8078, 8081, 8082, 8083, 8084, 8085, 8086, 8087, 8088, 8089, 8090, 8091, 8106, 8181, 8334, 8336, 8686, 8800, 8888, 8889, 8999, 9000, 9001, 9002, 9003, 9021, 9023, 9027, 9037, 9080, 9081, 9082, 9180, 9200, 9201, 9205, 9207, 9208, 9209, 9210, 9211, 9212, 9213, 9898, 9908, 9916, 9918, 9919, 9928, 9929, 9939, 9999, 10000, 10001, 10080, 12601, 28080, 33702, and 48800
ImportantOnly WAF instances deployed in the Chinese mainland support port 48800. WAF instances deployed outside the Chinese mainland do not support port 48800.
HTTPS ports:
4443, 5443, 6443, 7443, 8553, 8663, 9443, 9553, 9663, and 18980
ImportantOnly WAF instances deployed in the Chinese mainland support port 18980. WAF instances deployed outside the Chinese mainland do not support port 18980.
Exclusive (unavailable for purchase)
50 (This is the total number of standard ports and non-standard ports.)
HTTP ports: 80 and 8080
HTTPS ports: 443 and 8443
All non-standard ports in the range of 0 to 65535 except the following system ports: 22, 53, 4431, 4646, 4985, 4986, 4987, 6060, 8301, 8600, 9100, 15001, and 56688
References
If my website receives requests on an unconfigured port, is the origin server threatened?
Does WAF support custom ports?
What do I do if services on non-standard ports cannot be added to WAF of the Pro edition?