2023/09/11
Dear WAF users,
Starting September 14, 2023, Web Application Firewall (WAF) will launch the virtual IP address (VIP) isolation mechanism in phases to improve the stability and security of your WAF instances. The mechanism allows access to the domain name that is added to WAF only if the domain name is mapped to the CNAME assigned by WAF to the domain name.
Impacts:
1. If a domain name is mapped to the VIP of your WAF instance by using an A record, access interruptions may occur when the VIP changes, such as when the exclusive IP address or global server loading balancing (GSLB) feature is enabled or disabled.
2. If a domain name is not mapped to the CNAME that is assigned by WAF to the domain name, the domain name may be inaccessible. For example, WAF uses a shared IP address to protect Domain Name A and an exclusive IP address to protect Domain Name B and assigns different CNAMEs to the domain names. If you map Domain Name A to the CNAME that is assigned by WAF to Domain Name B and enable the VIP isolation mechanism, Domain Name A becomes inaccessible.
Solutions:
If you add a domain name to WAF in CNAME record mode, map the domain name to the CNAME that is assigned by WAF to the domain name. For more information, see https://www.alibabacloud.com/help/en/web-application-firewall/latest/modifies-the-dns-resolution-settings-of-a-domain-name. If you have questions, submit a ticket or join the DingTalk group. Thank you for your support and cooperation.
Starting September 14, 2023, Web Application Firewall (WAF) will launch the virtual IP address (VIP) isolation mechanism in phases to improve the stability and security of your WAF instances. The mechanism allows access to the domain name that is added to WAF only if the domain name is mapped to the CNAME assigned by WAF to the domain name.
Impacts:
1. If a domain name is mapped to the VIP of your WAF instance by using an A record, access interruptions may occur when the VIP changes, such as when the exclusive IP address or global server loading balancing (GSLB) feature is enabled or disabled.
2. If a domain name is not mapped to the CNAME that is assigned by WAF to the domain name, the domain name may be inaccessible. For example, WAF uses a shared IP address to protect Domain Name A and an exclusive IP address to protect Domain Name B and assigns different CNAMEs to the domain names. If you map Domain Name A to the CNAME that is assigned by WAF to Domain Name B and enable the VIP isolation mechanism, Domain Name A becomes inaccessible.
Solutions:
If you add a domain name to WAF in CNAME record mode, map the domain name to the CNAME that is assigned by WAF to the domain name. For more information, see https://www.alibabacloud.com/help/en/web-application-firewall/latest/modifies-the-dns-resolution-settings-of-a-domain-name. If you have questions, submit a ticket or join the DingTalk group. Thank you for your support and cooperation.
