Web Application Firewall

alibabacloud Web application firewallalibaba-waf

Inspects HTTP and HTTPS traffic for protected objects and blocks requests that match its core protection rule group.

Provider: alibabacloud
Kind: Web application firewall
Category: Security
Official docs: https://www.alibabacloud.com/help/en/waf/

Properties · 3 set by this component

property	type	values	required	kind default	this component
botProtection	boolean	—	no	—	inherited
completeSqlStatementDetection · component property	boolean	—	no	true	inherited
customRuleCount	integer	—	no	—	inherited
intelligentOps · component property	boolean	—	no	false	inherited
managed	boolean	—	no	false	▸ true
managedRuleSet	string	—	no	—	▸ medium
mode	enum	detection \| prevention \| off	no	—	▸ prevention
rateLimiting	boolean	—	no	—	inherited
semanticProtectionMode · component property	enum	log \| block	no	log	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "waf", component: "alibaba-waf" }

Other Web application firewall products · 13

AWS WAF web ACLaws-wafawswaf AWS WAF Classicaws-waf-classicawswaf Azure Web Application Firewallazure-web-application-firewallazurewaf Firewall for AIcloudflare-firewall-for-aicloudflarewaf Cloudflare WAFcloudflare-wafcloudflarewaf Corazacorazawaf Imperva Application Securityimpervawaf ModSecuritymodsecuritywaf NAXSInaxsiwaf Generic web application firewallwafwaf Google Cloud Armorgoogle-cloud-armorgcpwaf reCAPTCHA Enterprisegoogle-recaptcha-enterprisegcpwaf Web Application Firewalloci-wafociwaf

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Web Application Firewall 3.0: inspects HTTP and HTTPS traffic for protected objects such as ALB,
3# CLB, ECS and Function Compute, or for domains pointed at it by CNAME. "What is Web Application
4# Firewall": modules for web attack protection, HTTP flood protection, bot management, fine-grained
5# access control, API security and AI application protection. "Configure core web protection rules
6# and rule groups": the rule protection module is enabled by default with the Medium rule group in
7# Block mode, semantic protection defaults to Log mode with complete SQL statement detection on,
8# and the intelligent O&M module is off.
9schemaVersion: "1"
10type: "component"
11id: "alibaba-waf"
12kind: "waf"
13provider: "alibabacloud"
14docs: "https://www.alibabacloud.com/help/en/waf/"
15defaults:
16  mode: "prevention"
17  managedRuleSet: "medium"
18  managed: true
19properties:
20  semanticProtectionMode:
21    type: "enum"
22    values: ["log", "block"]
23    default: "log"
24  completeSqlStatementDetection:
25    type: "boolean"
26    default: true
27  intelligentOps:
28    type: "boolean"
29    default: false

The same page as markdown, for an agent: /catalogue/components/alibaba-waf.md