Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Volcengine
  3. API Docs
  4. waf
  5. WafDomain
Volcengine v0.0.34 published on Wednesday, Jul 2, 2025 by Volcengine
volcengine/pulumi-volcengine

volcengine.waf.WafDomain

Explore with Pulumi AI

volcengine logo
Volcengine v0.0.34 published on Wednesday, Jul 2, 2025 by Volcengine
volcengine/pulumi-volcengine

    Provides a resource to manage waf domain

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as volcengine from "@volcengine/pulumi";

const foo = new volcengine.waf.WafDomain("foo", {
    accessMode: 10,
    backendGroups: [{
        accessPorts: [80],
        backends: [
            {
                ip: "192.168.0.0",
                port: 80,
                protocol: "HTTP",
                weight: 40,
            },
            {
                ip: "192.168.1.0",
                port: 80,
                protocol: "HTTP",
                weight: 60,
            },
        ],
        name: "default",
    }],
    clientIpLocation: 0,
    clientMaxBodySize: 1024,
    customHeaders: [
        "x-top-1",
        "x-top-2",
    ],
    domain: "www.tf-test.com",
    enableIpv6: 0,
    keepAliveRequest: 200,
    keepAliveTimeOut: 100,
    lbAlgorithm: "wlc",
    protocolPorts: {
        https: [80],
    },
    protocols: ["HTTP"],
    proxyConfig: 1,
    proxyConnectTimeOut: 10,
    proxyKeepAlive: 101,
    proxyKeepAliveTimeOut: 20,
    proxyReadTimeOut: 200,
    proxyRetry: 10,
    proxyWriteTimeOut: 120,
    publicRealServer: 0,
    vpcId: "vpc-2d6485y7p95og58ozfcvxxxxx",
});

    import pulumi
import pulumi_volcengine as volcengine

foo = volcengine.waf.WafDomain("foo",
    access_mode=10,
    backend_groups=[volcengine.waf.WafDomainBackendGroupArgs(
        access_ports=[80],
        backends=[
            volcengine.waf.WafDomainBackendGroupBackendArgs(
                ip="192.168.0.0",
                port=80,
                protocol="HTTP",
                weight=40,
            ),
            volcengine.waf.WafDomainBackendGroupBackendArgs(
                ip="192.168.1.0",
                port=80,
                protocol="HTTP",
                weight=60,
            ),
        ],
        name="default",
    )],
    client_ip_location=0,
    client_max_body_size=1024,
    custom_headers=[
        "x-top-1",
        "x-top-2",
    ],
    domain="www.tf-test.com",
    enable_ipv6=0,
    keep_alive_request=200,
    keep_alive_time_out=100,
    lb_algorithm="wlc",
    protocol_ports=volcengine.waf.WafDomainProtocolPortsArgs(
        https=[80],
    ),
    protocols=["HTTP"],
    proxy_config=1,
    proxy_connect_time_out=10,
    proxy_keep_alive=101,
    proxy_keep_alive_time_out=20,
    proxy_read_time_out=200,
    proxy_retry=10,
    proxy_write_time_out=120,
    public_real_server=0,
    vpc_id="vpc-2d6485y7p95og58ozfcvxxxxx")

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/volcengine/pulumi-volcengine/sdk/go/volcengine/waf"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := waf.NewWafDomain(ctx, "foo", &waf.WafDomainArgs{
			AccessMode: pulumi.Int(10),
			BackendGroups: waf.WafDomainBackendGroupArray{
				&waf.WafDomainBackendGroupArgs{
					AccessPorts: pulumi.IntArray{
						pulumi.Int(80),
					},
					Backends: waf.WafDomainBackendGroupBackendArray{
						&waf.WafDomainBackendGroupBackendArgs{
							Ip:       pulumi.String("192.168.0.0"),
							Port:     pulumi.Int(80),
							Protocol: pulumi.String("HTTP"),
							Weight:   pulumi.Int(40),
						},
						&waf.WafDomainBackendGroupBackendArgs{
							Ip:       pulumi.String("192.168.1.0"),
							Port:     pulumi.Int(80),
							Protocol: pulumi.String("HTTP"),
							Weight:   pulumi.Int(60),
						},
					},
					Name: pulumi.String("default"),
				},
			},
			ClientIpLocation:  pulumi.Int(0),
			ClientMaxBodySize: pulumi.Int(1024),
			CustomHeaders: pulumi.StringArray{
				pulumi.String("x-top-1"),
				pulumi.String("x-top-2"),
			},
			Domain:           pulumi.String("www.tf-test.com"),
			EnableIpv6:       pulumi.Int(0),
			KeepAliveRequest: pulumi.Int(200),
			KeepAliveTimeOut: pulumi.Int(100),
			LbAlgorithm:      pulumi.String("wlc"),
			ProtocolPorts: &waf.WafDomainProtocolPortsArgs{
				Https: pulumi.IntArray{
					pulumi.Int(80),
				},
			},
			Protocols: pulumi.StringArray{
				pulumi.String("HTTP"),
			},
			ProxyConfig:           pulumi.Int(1),
			ProxyConnectTimeOut:   pulumi.Int(10),
			ProxyKeepAlive:        pulumi.Int(101),
			ProxyKeepAliveTimeOut: pulumi.Int(20),
			ProxyReadTimeOut:      pulumi.Int(200),
			ProxyRetry:            pulumi.Int(10),
			ProxyWriteTimeOut:     pulumi.Int(120),
			PublicRealServer:      pulumi.Int(0),
			VpcId:                 pulumi.String("vpc-2d6485y7p95og58ozfcvxxxxx"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Volcengine = Pulumi.Volcengine;

return await Deployment.RunAsync(() => 
{
    var foo = new Volcengine.Waf.WafDomain("foo", new()
    {
        AccessMode = 10,
        BackendGroups = new[]
        {
            new Volcengine.Waf.Inputs.WafDomainBackendGroupArgs
            {
                AccessPorts = new[]
                {
                    80,
                },
                Backends = new[]
                {
                    new Volcengine.Waf.Inputs.WafDomainBackendGroupBackendArgs
                    {
                        Ip = "192.168.0.0",
                        Port = 80,
                        Protocol = "HTTP",
                        Weight = 40,
                    },
                    new Volcengine.Waf.Inputs.WafDomainBackendGroupBackendArgs
                    {
                        Ip = "192.168.1.0",
                        Port = 80,
                        Protocol = "HTTP",
                        Weight = 60,
                    },
                },
                Name = "default",
            },
        },
        ClientIpLocation = 0,
        ClientMaxBodySize = 1024,
        CustomHeaders = new[]
        {
            "x-top-1",
            "x-top-2",
        },
        Domain = "www.tf-test.com",
        EnableIpv6 = 0,
        KeepAliveRequest = 200,
        KeepAliveTimeOut = 100,
        LbAlgorithm = "wlc",
        ProtocolPorts = new Volcengine.Waf.Inputs.WafDomainProtocolPortsArgs
        {
            Https = new[]
            {
                80,
            },
        },
        Protocols = new[]
        {
            "HTTP",
        },
        ProxyConfig = 1,
        ProxyConnectTimeOut = 10,
        ProxyKeepAlive = 101,
        ProxyKeepAliveTimeOut = 20,
        ProxyReadTimeOut = 200,
        ProxyRetry = 10,
        ProxyWriteTimeOut = 120,
        PublicRealServer = 0,
        VpcId = "vpc-2d6485y7p95og58ozfcvxxxxx",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.volcengine.waf.WafDomain;
import com.pulumi.volcengine.waf.WafDomainArgs;
import com.pulumi.volcengine.waf.inputs.WafDomainBackendGroupArgs;
import com.pulumi.volcengine.waf.inputs.WafDomainProtocolPortsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var foo = new WafDomain("foo", WafDomainArgs.builder()        
            .accessMode(10)
            .backendGroups(WafDomainBackendGroupArgs.builder()
                .accessPorts(80)
                .backends(                
                    WafDomainBackendGroupBackendArgs.builder()
                        .ip("192.168.0.0")
                        .port(80)
                        .protocol("HTTP")
                        .weight(40)
                        .build(),
                    WafDomainBackendGroupBackendArgs.builder()
                        .ip("192.168.1.0")
                        .port(80)
                        .protocol("HTTP")
                        .weight(60)
                        .build())
                .name("default")
                .build())
            .clientIpLocation(0)
            .clientMaxBodySize(1024)
            .customHeaders(            
                "x-top-1",
                "x-top-2")
            .domain("www.tf-test.com")
            .enableIpv6(0)
            .keepAliveRequest(200)
            .keepAliveTimeOut(100)
            .lbAlgorithm("wlc")
            .protocolPorts(WafDomainProtocolPortsArgs.builder()
                .https(80)
                .build())
            .protocols("HTTP")
            .proxyConfig(1)
            .proxyConnectTimeOut(10)
            .proxyKeepAlive(101)
            .proxyKeepAliveTimeOut(20)
            .proxyReadTimeOut(200)
            .proxyRetry(10)
            .proxyWriteTimeOut(120)
            .publicRealServer(0)
            .vpcId("vpc-2d6485y7p95og58ozfcvxxxxx")
            .build());

    }
}

    resources:
  foo:
    type: volcengine:waf:WafDomain
    properties:
      accessMode: 10
      backendGroups:
        - accessPorts:
            - 80
          backends:
            - ip: 192.168.0.0
              port: 80
              protocol: HTTP
              weight: 40
            - ip: 192.168.1.0
              port: 80
              protocol: HTTP
              weight: 60
          name: default
      clientIpLocation: 0
      clientMaxBodySize: 1024
      customHeaders:
        - x-top-1
        - x-top-2
      domain: www.tf-test.com
      enableIpv6: 0
      keepAliveRequest: 200
      keepAliveTimeOut: 100
      lbAlgorithm: wlc
      protocolPorts:
        https:
          - 80
      protocols:
        - HTTP
      proxyConfig: 1
      proxyConnectTimeOut: 10
      proxyKeepAlive: 101
      proxyKeepAliveTimeOut: 20
      proxyReadTimeOut: 200
      proxyRetry: 10
      proxyWriteTimeOut: 120
      publicRealServer: 0
      vpcId: vpc-2d6485y7p95og58ozfcvxxxxx

    Create WafDomain Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new WafDomain(name: string, args: WafDomainArgs, opts?: CustomResourceOptions);
    @overload
def WafDomain(resource_name: str,
              args: WafDomainArgs,
              opts: Optional[ResourceOptions] = None)

@overload
def WafDomain(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              access_mode: Optional[int] = None,
              domain: Optional[str] = None,
              api_enable: Optional[int] = None,
              auto_cc_enable: Optional[int] = None,
              backend_groups: Optional[Sequence[WafDomainBackendGroupArgs]] = None,
              black_ip_enable: Optional[int] = None,
              black_lct_enable: Optional[int] = None,
              bot_dytoken_enable: Optional[int] = None,
              bot_frequency_enable: Optional[int] = None,
              bot_repeat_enable: Optional[int] = None,
              bot_sequence_default_action: Optional[int] = None,
              bot_sequence_enable: Optional[int] = None,
              cc_enable: Optional[int] = None,
              certificate_id: Optional[int] = None,
              certificate_platform: Optional[str] = None,
              client_ip_location: Optional[int] = None,
              client_max_body_size: Optional[int] = None,
              cloud_access_configs: Optional[Sequence[WafDomainCloudAccessConfigArgs]] = None,
              custom_bot_enable: Optional[int] = None,
              custom_headers: Optional[Sequence[str]] = None,
              custom_rsp_enable: Optional[int] = None,
              custom_sni: Optional[str] = None,
              defence_mode: Optional[int] = None,
              dlp_enable: Optional[int] = None,
              enable_custom_redirect: Optional[int] = None,
              enable_http2: Optional[int] = None,
              enable_ipv6: Optional[int] = None,
              enable_sni: Optional[int] = None,
              extra_defence_mode_lb_instances: Optional[Sequence[WafDomainExtraDefenceModeLbInstanceArgs]] = None,
              keep_alive_request: Optional[int] = None,
              keep_alive_time_out: Optional[int] = None,
              lb_algorithm: Optional[str] = None,
              llm_available: Optional[bool] = None,
              project_name: Optional[str] = None,
              protocol_follow: Optional[int] = None,
              protocol_ports: Optional[WafDomainProtocolPortsArgs] = None,
              protocols: Optional[Sequence[str]] = None,
              proxy_config: Optional[int] = None,
              proxy_connect_time_out: Optional[int] = None,
              proxy_keep_alive: Optional[int] = None,
              proxy_keep_alive_time_out: Optional[int] = None,
              proxy_read_time_out: Optional[int] = None,
              proxy_retry: Optional[int] = None,
              proxy_write_time_out: Optional[int] = None,
              public_real_server: Optional[int] = None,
              redirect_https: Optional[bool] = None,
              ssl_ciphers: Optional[Sequence[str]] = None,
              ssl_protocols: Optional[Sequence[str]] = None,
              system_bot_enable: Optional[int] = None,
              tamper_proof_enable: Optional[int] = None,
              tls_enable: Optional[int] = None,
              tls_fields_config: Optional[WafDomainTlsFieldsConfigArgs] = None,
              volc_certificate_id: Optional[str] = None,
              vpc_id: Optional[str] = None,
              waf_enable: Optional[int] = None,
              waf_white_req_enable: Optional[int] = None,
              white_enable: Optional[int] = None,
              white_field_enable: Optional[int] = None)
    func NewWafDomain(ctx *Context, name string, args WafDomainArgs, opts ...ResourceOption) (*WafDomain, error)
    public WafDomain(string name, WafDomainArgs args, CustomResourceOptions? opts = null)
    public WafDomain(String name, WafDomainArgs args)
public WafDomain(String name, WafDomainArgs args, CustomResourceOptions options)

    type: volcengine:waf:WafDomain
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args WafDomainArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args WafDomainArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args WafDomainArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args WafDomainArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args WafDomainArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var wafDomainResource = new Volcengine.Waf.WafDomain("wafDomainResource", new()
{
    AccessMode = 0,
    Domain = "string",
    ApiEnable = 0,
    AutoCcEnable = 0,
    BackendGroups = new[]
    {
        new Volcengine.Waf.Inputs.WafDomainBackendGroupArgs
        {
            AccessPorts = new[]
            {
                0,
            },
            Backends = new[]
            {
                new Volcengine.Waf.Inputs.WafDomainBackendGroupBackendArgs
                {
                    Ip = "string",
                    Port = 0,
                    Protocol = "string",
                    Weight = 0,
                },
            },
            Name = "string",
        },
    },
    BlackIpEnable = 0,
    BlackLctEnable = 0,
    BotDytokenEnable = 0,
    BotFrequencyEnable = 0,
    BotRepeatEnable = 0,
    BotSequenceDefaultAction = 0,
    BotSequenceEnable = 0,
    CcEnable = 0,
    CertificateId = 0,
    CertificatePlatform = "string",
    ClientIpLocation = 0,
    ClientMaxBodySize = 0,
    CloudAccessConfigs = new[]
    {
        new Volcengine.Waf.Inputs.WafDomainCloudAccessConfigArgs
        {
            InstanceId = "string",
            AccessProtocol = "string",
            InstanceName = "string",
            ListenerId = "string",
            LostAssociationFromAlb = 0,
            Port = "string",
            Protocol = "string",
        },
    },
    CustomBotEnable = 0,
    CustomHeaders = new[]
    {
        "string",
    },
    CustomRspEnable = 0,
    CustomSni = "string",
    DefenceMode = 0,
    DlpEnable = 0,
    EnableCustomRedirect = 0,
    EnableHttp2 = 0,
    EnableIpv6 = 0,
    EnableSni = 0,
    ExtraDefenceModeLbInstances = new[]
    {
        new Volcengine.Waf.Inputs.WafDomainExtraDefenceModeLbInstanceArgs
        {
            DefenceMode = 0,
            InstanceId = "string",
        },
    },
    KeepAliveRequest = 0,
    KeepAliveTimeOut = 0,
    LbAlgorithm = "string",
    LlmAvailable = false,
    ProjectName = "string",
    ProtocolFollow = 0,
    ProtocolPorts = new Volcengine.Waf.Inputs.WafDomainProtocolPortsArgs
    {
        Http = new[]
        {
            0,
        },
        Https = new[]
        {
            0,
        },
    },
    Protocols = new[]
    {
        "string",
    },
    ProxyConfig = 0,
    ProxyConnectTimeOut = 0,
    ProxyKeepAlive = 0,
    ProxyKeepAliveTimeOut = 0,
    ProxyReadTimeOut = 0,
    ProxyRetry = 0,
    ProxyWriteTimeOut = 0,
    PublicRealServer = 0,
    RedirectHttps = false,
    SslCiphers = new[]
    {
        "string",
    },
    SslProtocols = new[]
    {
        "string",
    },
    SystemBotEnable = 0,
    TamperProofEnable = 0,
    TlsEnable = 0,
    TlsFieldsConfig = new Volcengine.Waf.Inputs.WafDomainTlsFieldsConfigArgs
    {
        HeadersConfig = new Volcengine.Waf.Inputs.WafDomainTlsFieldsConfigHeadersConfigArgs
        {
            Enable = 0,
            ExcludedKeyLists = new[]
            {
                "string",
            },
            StatisticalKeyLists = new[]
            {
                "string",
            },
        },
    },
    VolcCertificateId = "string",
    VpcId = "string",
    WafEnable = 0,
    WafWhiteReqEnable = 0,
    WhiteEnable = 0,
    WhiteFieldEnable = 0,
});

    example, err := waf.NewWafDomain(ctx, "wafDomainResource", &waf.WafDomainArgs{
	AccessMode:   pulumi.Int(0),
	Domain:       pulumi.String("string"),
	ApiEnable:    pulumi.Int(0),
	AutoCcEnable: pulumi.Int(0),
	BackendGroups: waf.WafDomainBackendGroupArray{
		&waf.WafDomainBackendGroupArgs{
			AccessPorts: pulumi.IntArray{
				pulumi.Int(0),
			},
			Backends: waf.WafDomainBackendGroupBackendArray{
				&waf.WafDomainBackendGroupBackendArgs{
					Ip:       pulumi.String("string"),
					Port:     pulumi.Int(0),
					Protocol: pulumi.String("string"),
					Weight:   pulumi.Int(0),
				},
			},
			Name: pulumi.String("string"),
		},
	},
	BlackIpEnable:            pulumi.Int(0),
	BlackLctEnable:           pulumi.Int(0),
	BotDytokenEnable:         pulumi.Int(0),
	BotFrequencyEnable:       pulumi.Int(0),
	BotRepeatEnable:          pulumi.Int(0),
	BotSequenceDefaultAction: pulumi.Int(0),
	BotSequenceEnable:        pulumi.Int(0),
	CcEnable:                 pulumi.Int(0),
	CertificateId:            pulumi.Int(0),
	CertificatePlatform:      pulumi.String("string"),
	ClientIpLocation:         pulumi.Int(0),
	ClientMaxBodySize:        pulumi.Int(0),
	CloudAccessConfigs: waf.WafDomainCloudAccessConfigArray{
		&waf.WafDomainCloudAccessConfigArgs{
			InstanceId:             pulumi.String("string"),
			AccessProtocol:         pulumi.String("string"),
			InstanceName:           pulumi.String("string"),
			ListenerId:             pulumi.String("string"),
			LostAssociationFromAlb: pulumi.Int(0),
			Port:                   pulumi.String("string"),
			Protocol:               pulumi.String("string"),
		},
	},
	CustomBotEnable: pulumi.Int(0),
	CustomHeaders: pulumi.StringArray{
		pulumi.String("string"),
	},
	CustomRspEnable:      pulumi.Int(0),
	CustomSni:            pulumi.String("string"),
	DefenceMode:          pulumi.Int(0),
	DlpEnable:            pulumi.Int(0),
	EnableCustomRedirect: pulumi.Int(0),
	EnableHttp2:          pulumi.Int(0),
	EnableIpv6:           pulumi.Int(0),
	EnableSni:            pulumi.Int(0),
	ExtraDefenceModeLbInstances: waf.WafDomainExtraDefenceModeLbInstanceArray{
		&waf.WafDomainExtraDefenceModeLbInstanceArgs{
			DefenceMode: pulumi.Int(0),
			InstanceId:  pulumi.String("string"),
		},
	},
	KeepAliveRequest: pulumi.Int(0),
	KeepAliveTimeOut: pulumi.Int(0),
	LbAlgorithm:      pulumi.String("string"),
	LlmAvailable:     pulumi.Bool(false),
	ProjectName:      pulumi.String("string"),
	ProtocolFollow:   pulumi.Int(0),
	ProtocolPorts: &waf.WafDomainProtocolPortsArgs{
		Http: pulumi.IntArray{
			pulumi.Int(0),
		},
		Https: pulumi.IntArray{
			pulumi.Int(0),
		},
	},
	Protocols: pulumi.StringArray{
		pulumi.String("string"),
	},
	ProxyConfig:           pulumi.Int(0),
	ProxyConnectTimeOut:   pulumi.Int(0),
	ProxyKeepAlive:        pulumi.Int(0),
	ProxyKeepAliveTimeOut: pulumi.Int(0),
	ProxyReadTimeOut:      pulumi.Int(0),
	ProxyRetry:            pulumi.Int(0),
	ProxyWriteTimeOut:     pulumi.Int(0),
	PublicRealServer:      pulumi.Int(0),
	RedirectHttps:         pulumi.Bool(false),
	SslCiphers: pulumi.StringArray{
		pulumi.String("string"),
	},
	SslProtocols: pulumi.StringArray{
		pulumi.String("string"),
	},
	SystemBotEnable:   pulumi.Int(0),
	TamperProofEnable: pulumi.Int(0),
	TlsEnable:         pulumi.Int(0),
	TlsFieldsConfig: &waf.WafDomainTlsFieldsConfigArgs{
		HeadersConfig: &waf.WafDomainTlsFieldsConfigHeadersConfigArgs{
			Enable: pulumi.Int(0),
			ExcludedKeyLists: pulumi.StringArray{
				pulumi.String("string"),
			},
			StatisticalKeyLists: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	VolcCertificateId: pulumi.String("string"),
	VpcId:             pulumi.String("string"),
	WafEnable:         pulumi.Int(0),
	WafWhiteReqEnable: pulumi.Int(0),
	WhiteEnable:       pulumi.Int(0),
	WhiteFieldEnable:  pulumi.Int(0),
})

    var wafDomainResource = new WafDomain("wafDomainResource", WafDomainArgs.builder()
    .accessMode(0)
    .domain("string")
    .apiEnable(0)
    .autoCcEnable(0)
    .backendGroups(WafDomainBackendGroupArgs.builder()
        .accessPorts(0)
        .backends(WafDomainBackendGroupBackendArgs.builder()
            .ip("string")
            .port(0)
            .protocol("string")
            .weight(0)
            .build())
        .name("string")
        .build())
    .blackIpEnable(0)
    .blackLctEnable(0)
    .botDytokenEnable(0)
    .botFrequencyEnable(0)
    .botRepeatEnable(0)
    .botSequenceDefaultAction(0)
    .botSequenceEnable(0)
    .ccEnable(0)
    .certificateId(0)
    .certificatePlatform("string")
    .clientIpLocation(0)
    .clientMaxBodySize(0)
    .cloudAccessConfigs(WafDomainCloudAccessConfigArgs.builder()
        .instanceId("string")
        .accessProtocol("string")
        .instanceName("string")
        .listenerId("string")
        .lostAssociationFromAlb(0)
        .port("string")
        .protocol("string")
        .build())
    .customBotEnable(0)
    .customHeaders("string")
    .customRspEnable(0)
    .customSni("string")
    .defenceMode(0)
    .dlpEnable(0)
    .enableCustomRedirect(0)
    .enableHttp2(0)
    .enableIpv6(0)
    .enableSni(0)
    .extraDefenceModeLbInstances(WafDomainExtraDefenceModeLbInstanceArgs.builder()
        .defenceMode(0)
        .instanceId("string")
        .build())
    .keepAliveRequest(0)
    .keepAliveTimeOut(0)
    .lbAlgorithm("string")
    .llmAvailable(false)
    .projectName("string")
    .protocolFollow(0)
    .protocolPorts(WafDomainProtocolPortsArgs.builder()
        .http(0)
        .https(0)
        .build())
    .protocols("string")
    .proxyConfig(0)
    .proxyConnectTimeOut(0)
    .proxyKeepAlive(0)
    .proxyKeepAliveTimeOut(0)
    .proxyReadTimeOut(0)
    .proxyRetry(0)
    .proxyWriteTimeOut(0)
    .publicRealServer(0)
    .redirectHttps(false)
    .sslCiphers("string")
    .sslProtocols("string")
    .systemBotEnable(0)
    .tamperProofEnable(0)
    .tlsEnable(0)
    .tlsFieldsConfig(WafDomainTlsFieldsConfigArgs.builder()
        .headersConfig(WafDomainTlsFieldsConfigHeadersConfigArgs.builder()
            .enable(0)
            .excludedKeyLists("string")
            .statisticalKeyLists("string")
            .build())
        .build())
    .volcCertificateId("string")
    .vpcId("string")
    .wafEnable(0)
    .wafWhiteReqEnable(0)
    .whiteEnable(0)
    .whiteFieldEnable(0)
    .build());

    waf_domain_resource = volcengine.waf.WafDomain("wafDomainResource",
    access_mode=0,
    domain="string",
    api_enable=0,
    auto_cc_enable=0,
    backend_groups=[{
        "access_ports": [0],
        "backends": [{
            "ip": "string",
            "port": 0,
            "protocol": "string",
            "weight": 0,
        }],
        "name": "string",
    }],
    black_ip_enable=0,
    black_lct_enable=0,
    bot_dytoken_enable=0,
    bot_frequency_enable=0,
    bot_repeat_enable=0,
    bot_sequence_default_action=0,
    bot_sequence_enable=0,
    cc_enable=0,
    certificate_id=0,
    certificate_platform="string",
    client_ip_location=0,
    client_max_body_size=0,
    cloud_access_configs=[{
        "instance_id": "string",
        "access_protocol": "string",
        "instance_name": "string",
        "listener_id": "string",
        "lost_association_from_alb": 0,
        "port": "string",
        "protocol": "string",
    }],
    custom_bot_enable=0,
    custom_headers=["string"],
    custom_rsp_enable=0,
    custom_sni="string",
    defence_mode=0,
    dlp_enable=0,
    enable_custom_redirect=0,
    enable_http2=0,
    enable_ipv6=0,
    enable_sni=0,
    extra_defence_mode_lb_instances=[{
        "defence_mode": 0,
        "instance_id": "string",
    }],
    keep_alive_request=0,
    keep_alive_time_out=0,
    lb_algorithm="string",
    llm_available=False,
    project_name="string",
    protocol_follow=0,
    protocol_ports={
        "http": [0],
        "https": [0],
    },
    protocols=["string"],
    proxy_config=0,
    proxy_connect_time_out=0,
    proxy_keep_alive=0,
    proxy_keep_alive_time_out=0,
    proxy_read_time_out=0,
    proxy_retry=0,
    proxy_write_time_out=0,
    public_real_server=0,
    redirect_https=False,
    ssl_ciphers=["string"],
    ssl_protocols=["string"],
    system_bot_enable=0,
    tamper_proof_enable=0,
    tls_enable=0,
    tls_fields_config={
        "headers_config": {
            "enable": 0,
            "excluded_key_lists": ["string"],
            "statistical_key_lists": ["string"],
        },
    },
    volc_certificate_id="string",
    vpc_id="string",
    waf_enable=0,
    waf_white_req_enable=0,
    white_enable=0,
    white_field_enable=0)

    const wafDomainResource = new volcengine.waf.WafDomain("wafDomainResource", {
    accessMode: 0,
    domain: "string",
    apiEnable: 0,
    autoCcEnable: 0,
    backendGroups: [{
        accessPorts: [0],
        backends: [{
            ip: "string",
            port: 0,
            protocol: "string",
            weight: 0,
        }],
        name: "string",
    }],
    blackIpEnable: 0,
    blackLctEnable: 0,
    botDytokenEnable: 0,
    botFrequencyEnable: 0,
    botRepeatEnable: 0,
    botSequenceDefaultAction: 0,
    botSequenceEnable: 0,
    ccEnable: 0,
    certificateId: 0,
    certificatePlatform: "string",
    clientIpLocation: 0,
    clientMaxBodySize: 0,
    cloudAccessConfigs: [{
        instanceId: "string",
        accessProtocol: "string",
        instanceName: "string",
        listenerId: "string",
        lostAssociationFromAlb: 0,
        port: "string",
        protocol: "string",
    }],
    customBotEnable: 0,
    customHeaders: ["string"],
    customRspEnable: 0,
    customSni: "string",
    defenceMode: 0,
    dlpEnable: 0,
    enableCustomRedirect: 0,
    enableHttp2: 0,
    enableIpv6: 0,
    enableSni: 0,
    extraDefenceModeLbInstances: [{
        defenceMode: 0,
        instanceId: "string",
    }],
    keepAliveRequest: 0,
    keepAliveTimeOut: 0,
    lbAlgorithm: "string",
    llmAvailable: false,
    projectName: "string",
    protocolFollow: 0,
    protocolPorts: {
        http: [0],
        https: [0],
    },
    protocols: ["string"],
    proxyConfig: 0,
    proxyConnectTimeOut: 0,
    proxyKeepAlive: 0,
    proxyKeepAliveTimeOut: 0,
    proxyReadTimeOut: 0,
    proxyRetry: 0,
    proxyWriteTimeOut: 0,
    publicRealServer: 0,
    redirectHttps: false,
    sslCiphers: ["string"],
    sslProtocols: ["string"],
    systemBotEnable: 0,
    tamperProofEnable: 0,
    tlsEnable: 0,
    tlsFieldsConfig: {
        headersConfig: {
            enable: 0,
            excludedKeyLists: ["string"],
            statisticalKeyLists: ["string"],
        },
    },
    volcCertificateId: "string",
    vpcId: "string",
    wafEnable: 0,
    wafWhiteReqEnable: 0,
    whiteEnable: 0,
    whiteFieldEnable: 0,
});

    type: volcengine:waf:WafDomain
properties:
    accessMode: 0
    apiEnable: 0
    autoCcEnable: 0
    backendGroups:
        - accessPorts:
            - 0
          backends:
            - ip: string
              port: 0
              protocol: string
              weight: 0
          name: string
    blackIpEnable: 0
    blackLctEnable: 0
    botDytokenEnable: 0
    botFrequencyEnable: 0
    botRepeatEnable: 0
    botSequenceDefaultAction: 0
    botSequenceEnable: 0
    ccEnable: 0
    certificateId: 0
    certificatePlatform: string
    clientIpLocation: 0
    clientMaxBodySize: 0
    cloudAccessConfigs:
        - accessProtocol: string
          instanceId: string
          instanceName: string
          listenerId: string
          lostAssociationFromAlb: 0
          port: string
          protocol: string
    customBotEnable: 0
    customHeaders:
        - string
    customRspEnable: 0
    customSni: string
    defenceMode: 0
    dlpEnable: 0
    domain: string
    enableCustomRedirect: 0
    enableHttp2: 0
    enableIpv6: 0
    enableSni: 0
    extraDefenceModeLbInstances:
        - defenceMode: 0
          instanceId: string
    keepAliveRequest: 0
    keepAliveTimeOut: 0
    lbAlgorithm: string
    llmAvailable: false
    projectName: string
    protocolFollow: 0
    protocolPorts:
        http:
            - 0
        https:
            - 0
    protocols:
        - string
    proxyConfig: 0
    proxyConnectTimeOut: 0
    proxyKeepAlive: 0
    proxyKeepAliveTimeOut: 0
    proxyReadTimeOut: 0
    proxyRetry: 0
    proxyWriteTimeOut: 0
    publicRealServer: 0
    redirectHttps: false
    sslCiphers:
        - string
    sslProtocols:
        - string
    systemBotEnable: 0
    tamperProofEnable: 0
    tlsEnable: 0
    tlsFieldsConfig:
        headersConfig:
            enable: 0
            excludedKeyLists:
                - string
            statisticalKeyLists:
                - string
    volcCertificateId: string
    vpcId: string
    wafEnable: 0
    wafWhiteReqEnable: 0
    whiteEnable: 0
    whiteFieldEnable: 0

    WafDomain Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The WafDomain resource accepts the following input properties:

    AccessMode int
    Access mode.
    Domain string
    List of domain names that need to be protected by WAF.
    ApiEnable int
    Whether to enable the API protection policy. Works only on modified scenes.
    AutoCcEnable int
    Whether to enable the intelligent CC protection strategy. Works only on modified scenes.
    BackendGroups List<WafDomainBackendGroup>
    The configuration of source station.
    BlackIpEnable int
    Whether to enable the access ban list policy. Works only on modified scenes.
    BlackLctEnable int
    Whether to enable the geographical location access control policy. Works only on modified scenes.
    BotDytokenEnable int
    Whether to enable the bot dynamic token. Works only on modified scenes.
    BotFrequencyEnable int
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    BotRepeatEnable int
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    BotSequenceDefaultAction int
    Set the default actions of the bot behavior map strategy. Works only on modified scenes.
    BotSequenceEnable int
    Whether to enable the bot behavior map. Works only on modified scenes.
    CcEnable int
    Whether to enable the CC protection policy. Works only on modified scenes.
    CertificateId int
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    CertificatePlatform string
    Certificate custody platform.
    ClientIpLocation int
    The method of obtaining the client IP.
    ClientMaxBodySize int
    The client requests the maximum value of body.
    CloudAccessConfigs List<WafDomainCloudAccessConfig>
    Access port information.If AccessMode is Alb/CLB, this field is required.
    CustomBotEnable int
    Whether to enable the custom Bot classification strategy. Works only on modified scenes.
    CustomHeaders List<string>
    Custom Header.
    CustomRspEnable int
    Whether to enable the custom response interception policy. Works only on modified scenes.
    CustomSni string
    Custom SNI needs to be configured when EnableSNI=1. Works only on modified scenes.
    DefenceMode int
    The protection mode of the instance. Works only on modified scenes.
    DlpEnable int
    Whether to activate the strategy for preventing the leakage of sensitive information. Works only on modified scenes.
    EnableCustomRedirect int
    Whether to enable user-defined redirection. Works only on modified scenes.
    EnableHttp2 int
    Whether to enable HTTP 2.0.
    EnableIpv6 int
    Whether it supports protecting IPv6 requests.
    EnableSni int
    Whether to enable the SNI configuration. Works only on modified scenes.
    ExtraDefenceModeLbInstances List<WafDomainExtraDefenceModeLbInstance>
    The protection mode of the exception instance. It takes effect when the access mode is accessed through an application load balancing (ALB) instance (AccessMode=20). Works only on modified scenes.
    KeepAliveRequest int
    The number of long connection multiplexes.
    KeepAliveTimeOut int
    Long connection retention time.
    LbAlgorithm string
    The types of load balancing algorithms.
    LlmAvailable bool
    Is LLM available. Works only on modified scenes.
    ProjectName string
    The name of project. Works only on modified scenes.
    ProtocolFollow int
    Whether to enable protocol following.
    ProtocolPorts WafDomainProtocolPorts
    Access port information.
    Protocols List<string>
    Access protocol types.
    ProxyConfig int
    Whether to enable proxy configuration.
    ProxyConnectTimeOut int
    The timeout period for establishing a connection between the WAF and the backend server.
    ProxyKeepAlive int
    The number of reusable WAF origin long connections.
    ProxyKeepAliveTimeOut int
    Idle long connection timeout period.
    ProxyReadTimeOut int
    The timeout period during which WAF reads the response from the backend server.
    ProxyRetry int
    The number of retries for WAF back to source.
    ProxyWriteTimeOut int
    The timeout period during which the WAF transmits the request to the backend server.
    PublicRealServer int
    Connect to the source return mode.
    RedirectHttps bool
    When only the HTTPS protocol is enabled, whether to redirect HTTP requests to HTTPS. Works only on modified scenes.
    SslCiphers List<string>
    Encryption kit.
    SslProtocols List<string>
    TLS protocol version.
    SystemBotEnable int
    Whether to enable the managed Bot classification strategy. Works only on modified scenes.
    TamperProofEnable int
    Whether to enable the page tamper-proof policy. Works only on modified scenes.
    TlsEnable int
    Whether to enable the log service.
    TlsFieldsConfig WafDomainTlsFieldsConfig
    Details of log field configuration. Works only on modified scenes.
    VolcCertificateId string
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    VpcId string
    The ID of vpc.
    WafEnable int
    Whether to enable the vulnerability protection strategy. Works only on modified scenes.
    WafWhiteReqEnable int
    Whether to enable the whitening strategy for vulnerability protection requests. Works only on modified scenes.
    WhiteEnable int
    Whether to enable the access list policy. Works only on modified scenes.
    WhiteFieldEnable int
    Whether to enable the whitening strategy for vulnerability protection fields. Works only on modified scenes.
    AccessMode int
    Access mode.
    Domain string
    List of domain names that need to be protected by WAF.
    ApiEnable int
    Whether to enable the API protection policy. Works only on modified scenes.
    AutoCcEnable int
    Whether to enable the intelligent CC protection strategy. Works only on modified scenes.
    BackendGroups []WafDomainBackendGroupArgs
    The configuration of source station.
    BlackIpEnable int
    Whether to enable the access ban list policy. Works only on modified scenes.
    BlackLctEnable int
    Whether to enable the geographical location access control policy. Works only on modified scenes.
    BotDytokenEnable int
    Whether to enable the bot dynamic token. Works only on modified scenes.
    BotFrequencyEnable int
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    BotRepeatEnable int
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    BotSequenceDefaultAction int
    Set the default actions of the bot behavior map strategy. Works only on modified scenes.
    BotSequenceEnable int
    Whether to enable the bot behavior map. Works only on modified scenes.
    CcEnable int
    Whether to enable the CC protection policy. Works only on modified scenes.
    CertificateId int
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    CertificatePlatform string
    Certificate custody platform.
    ClientIpLocation int
    The method of obtaining the client IP.
    ClientMaxBodySize int
    The client requests the maximum value of body.
    CloudAccessConfigs []WafDomainCloudAccessConfigArgs
    Access port information.If AccessMode is Alb/CLB, this field is required.
    CustomBotEnable int
    Whether to enable the custom Bot classification strategy. Works only on modified scenes.
    CustomHeaders []string
    Custom Header.
    CustomRspEnable int
    Whether to enable the custom response interception policy. Works only on modified scenes.
    CustomSni string
    Custom SNI needs to be configured when EnableSNI=1. Works only on modified scenes.
    DefenceMode int
    The protection mode of the instance. Works only on modified scenes.
    DlpEnable int
    Whether to activate the strategy for preventing the leakage of sensitive information. Works only on modified scenes.
    EnableCustomRedirect int
    Whether to enable user-defined redirection. Works only on modified scenes.
    EnableHttp2 int
    Whether to enable HTTP 2.0.
    EnableIpv6 int
    Whether it supports protecting IPv6 requests.
    EnableSni int
    Whether to enable the SNI configuration. Works only on modified scenes.
    ExtraDefenceModeLbInstances []WafDomainExtraDefenceModeLbInstanceArgs
    The protection mode of the exception instance. It takes effect when the access mode is accessed through an application load balancing (ALB) instance (AccessMode=20). Works only on modified scenes.
    KeepAliveRequest int
    The number of long connection multiplexes.
    KeepAliveTimeOut int
    Long connection retention time.
    LbAlgorithm string
    The types of load balancing algorithms.
    LlmAvailable bool
    Is LLM available. Works only on modified scenes.
    ProjectName string
    The name of project. Works only on modified scenes.
    ProtocolFollow int
    Whether to enable protocol following.
    ProtocolPorts WafDomainProtocolPortsArgs
    Access port information.
    Protocols []string
    Access protocol types.
    ProxyConfig int
    Whether to enable proxy configuration.
    ProxyConnectTimeOut int
    The timeout period for establishing a connection between the WAF and the backend server.
    ProxyKeepAlive int
    The number of reusable WAF origin long connections.
    ProxyKeepAliveTimeOut int
    Idle long connection timeout period.
    ProxyReadTimeOut int
    The timeout period during which WAF reads the response from the backend server.
    ProxyRetry int
    The number of retries for WAF back to source.
    ProxyWriteTimeOut int
    The timeout period during which the WAF transmits the request to the backend server.
    PublicRealServer int
    Connect to the source return mode.
    RedirectHttps bool
    When only the HTTPS protocol is enabled, whether to redirect HTTP requests to HTTPS. Works only on modified scenes.
    SslCiphers []string
    Encryption kit.
    SslProtocols []string
    TLS protocol version.
    SystemBotEnable int
    Whether to enable the managed Bot classification strategy. Works only on modified scenes.
    TamperProofEnable int
    Whether to enable the page tamper-proof policy. Works only on modified scenes.
    TlsEnable int
    Whether to enable the log service.
    TlsFieldsConfig WafDomainTlsFieldsConfigArgs
    Details of log field configuration. Works only on modified scenes.
    VolcCertificateId string
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    VpcId string
    The ID of vpc.
    WafEnable int
    Whether to enable the vulnerability protection strategy. Works only on modified scenes.
    WafWhiteReqEnable int
    Whether to enable the whitening strategy for vulnerability protection requests. Works only on modified scenes.
    WhiteEnable int
    Whether to enable the access list policy. Works only on modified scenes.
    WhiteFieldEnable int
    Whether to enable the whitening strategy for vulnerability protection fields. Works only on modified scenes.
    accessMode Integer
    Access mode.
    domain String
    List of domain names that need to be protected by WAF.
    apiEnable Integer
    Whether to enable the API protection policy. Works only on modified scenes.
    autoCcEnable Integer
    Whether to enable the intelligent CC protection strategy. Works only on modified scenes.
    backendGroups List<WafDomainBackendGroup>
    The configuration of source station.
    blackIpEnable Integer
    Whether to enable the access ban list policy. Works only on modified scenes.
    blackLctEnable Integer
    Whether to enable the geographical location access control policy. Works only on modified scenes.
    botDytokenEnable Integer
    Whether to enable the bot dynamic token. Works only on modified scenes.
    botFrequencyEnable Integer
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    botRepeatEnable Integer
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    botSequenceDefaultAction Integer
    Set the default actions of the bot behavior map strategy. Works only on modified scenes.
    botSequenceEnable Integer
    Whether to enable the bot behavior map. Works only on modified scenes.
    ccEnable Integer
    Whether to enable the CC protection policy. Works only on modified scenes.
    certificateId Integer
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    certificatePlatform String
    Certificate custody platform.
    clientIpLocation Integer
    The method of obtaining the client IP.
    clientMaxBodySize Integer
    The client requests the maximum value of body.
    cloudAccessConfigs List<WafDomainCloudAccessConfig>
    Access port information.If AccessMode is Alb/CLB, this field is required.
    customBotEnable Integer
    Whether to enable the custom Bot classification strategy. Works only on modified scenes.
    customHeaders List<String>
    Custom Header.
    customRspEnable Integer
    Whether to enable the custom response interception policy. Works only on modified scenes.
    customSni String
    Custom SNI needs to be configured when EnableSNI=1. Works only on modified scenes.
    defenceMode Integer
    The protection mode of the instance. Works only on modified scenes.
    dlpEnable Integer
    Whether to activate the strategy for preventing the leakage of sensitive information. Works only on modified scenes.
    enableCustomRedirect Integer
    Whether to enable user-defined redirection. Works only on modified scenes.
    enableHttp2 Integer
    Whether to enable HTTP 2.0.
    enableIpv6 Integer
    Whether it supports protecting IPv6 requests.
    enableSni Integer
    Whether to enable the SNI configuration. Works only on modified scenes.
    extraDefenceModeLbInstances List<WafDomainExtraDefenceModeLbInstance>
    The protection mode of the exception instance. It takes effect when the access mode is accessed through an application load balancing (ALB) instance (AccessMode=20). Works only on modified scenes.
    keepAliveRequest Integer
    The number of long connection multiplexes.
    keepAliveTimeOut Integer
    Long connection retention time.
    lbAlgorithm String
    The types of load balancing algorithms.
    llmAvailable Boolean
    Is LLM available. Works only on modified scenes.
    projectName String
    The name of project. Works only on modified scenes.
    protocolFollow Integer
    Whether to enable protocol following.
    protocolPorts WafDomainProtocolPorts
    Access port information.
    protocols List<String>
    Access protocol types.
    proxyConfig Integer
    Whether to enable proxy configuration.
    proxyConnectTimeOut Integer
    The timeout period for establishing a connection between the WAF and the backend server.
    proxyKeepAlive Integer
    The number of reusable WAF origin long connections.
    proxyKeepAliveTimeOut Integer
    Idle long connection timeout period.
    proxyReadTimeOut Integer
    The timeout period during which WAF reads the response from the backend server.
    proxyRetry Integer
    The number of retries for WAF back to source.
    proxyWriteTimeOut Integer
    The timeout period during which the WAF transmits the request to the backend server.
    publicRealServer Integer
    Connect to the source return mode.
    redirectHttps Boolean
    When only the HTTPS protocol is enabled, whether to redirect HTTP requests to HTTPS. Works only on modified scenes.
    sslCiphers List<String>
    Encryption kit.
    sslProtocols List<String>
    TLS protocol version.
    systemBotEnable Integer
    Whether to enable the managed Bot classification strategy. Works only on modified scenes.
    tamperProofEnable Integer
    Whether to enable the page tamper-proof policy. Works only on modified scenes.
    tlsEnable Integer
    Whether to enable the log service.
    tlsFieldsConfig WafDomainTlsFieldsConfig
    Details of log field configuration. Works only on modified scenes.
    volcCertificateId String
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    vpcId String
    The ID of vpc.
    wafEnable Integer
    Whether to enable the vulnerability protection strategy. Works only on modified scenes.
    wafWhiteReqEnable Integer
    Whether to enable the whitening strategy for vulnerability protection requests. Works only on modified scenes.
    whiteEnable Integer
    Whether to enable the access list policy. Works only on modified scenes.
    whiteFieldEnable Integer
    Whether to enable the whitening strategy for vulnerability protection fields. Works only on modified scenes.
    accessMode number
    Access mode.
    domain string
    List of domain names that need to be protected by WAF.
    apiEnable number
    Whether to enable the API protection policy. Works only on modified scenes.
    autoCcEnable number
    Whether to enable the intelligent CC protection strategy. Works only on modified scenes.
    backendGroups WafDomainBackendGroup[]
    The configuration of source station.
    blackIpEnable number
    Whether to enable the access ban list policy. Works only on modified scenes.
    blackLctEnable number
    Whether to enable the geographical location access control policy. Works only on modified scenes.
    botDytokenEnable number
    Whether to enable the bot dynamic token. Works only on modified scenes.
    botFrequencyEnable number
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    botRepeatEnable number
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    botSequenceDefaultAction number
    Set the default actions of the bot behavior map strategy. Works only on modified scenes.
    botSequenceEnable number
    Whether to enable the bot behavior map. Works only on modified scenes.
    ccEnable number
    Whether to enable the CC protection policy. Works only on modified scenes.
    certificateId number
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    certificatePlatform string
    Certificate custody platform.
    clientIpLocation number
    The method of obtaining the client IP.
    clientMaxBodySize number
    The client requests the maximum value of body.
    cloudAccessConfigs WafDomainCloudAccessConfig[]
    Access port information.If AccessMode is Alb/CLB, this field is required.
    customBotEnable number
    Whether to enable the custom Bot classification strategy. Works only on modified scenes.
    customHeaders string[]
    Custom Header.
    customRspEnable number
    Whether to enable the custom response interception policy. Works only on modified scenes.
    customSni string
    Custom SNI needs to be configured when EnableSNI=1. Works only on modified scenes.
    defenceMode number
    The protection mode of the instance. Works only on modified scenes.
    dlpEnable number
    Whether to activate the strategy for preventing the leakage of sensitive information. Works only on modified scenes.
    enableCustomRedirect number
    Whether to enable user-defined redirection. Works only on modified scenes.
    enableHttp2 number
    Whether to enable HTTP 2.0.
    enableIpv6 number
    Whether it supports protecting IPv6 requests.
    enableSni number
    Whether to enable the SNI configuration. Works only on modified scenes.
    extraDefenceModeLbInstances WafDomainExtraDefenceModeLbInstance[]
    The protection mode of the exception instance. It takes effect when the access mode is accessed through an application load balancing (ALB) instance (AccessMode=20). Works only on modified scenes.
    keepAliveRequest number
    The number of long connection multiplexes.
    keepAliveTimeOut number
    Long connection retention time.
    lbAlgorithm string
    The types of load balancing algorithms.
    llmAvailable boolean
    Is LLM available. Works only on modified scenes.
    projectName string
    The name of project. Works only on modified scenes.
    protocolFollow number
    Whether to enable protocol following.
    protocolPorts WafDomainProtocolPorts
    Access port information.
    protocols string[]
    Access protocol types.
    proxyConfig number
    Whether to enable proxy configuration.
    proxyConnectTimeOut number
    The timeout period for establishing a connection between the WAF and the backend server.
    proxyKeepAlive number
    The number of reusable WAF origin long connections.
    proxyKeepAliveTimeOut number
    Idle long connection timeout period.
    proxyReadTimeOut number
    The timeout period during which WAF reads the response from the backend server.
    proxyRetry number
    The number of retries for WAF back to source.
    proxyWriteTimeOut number
    The timeout period during which the WAF transmits the request to the backend server.
    publicRealServer number
    Connect to the source return mode.
    redirectHttps boolean
    When only the HTTPS protocol is enabled, whether to redirect HTTP requests to HTTPS. Works only on modified scenes.
    sslCiphers string[]
    Encryption kit.
    sslProtocols string[]
    TLS protocol version.
    systemBotEnable number
    Whether to enable the managed Bot classification strategy. Works only on modified scenes.
    tamperProofEnable number
    Whether to enable the page tamper-proof policy. Works only on modified scenes.
    tlsEnable number
    Whether to enable the log service.
    tlsFieldsConfig WafDomainTlsFieldsConfig
    Details of log field configuration. Works only on modified scenes.
    volcCertificateId string
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    vpcId string
    The ID of vpc.
    wafEnable number
    Whether to enable the vulnerability protection strategy. Works only on modified scenes.
    wafWhiteReqEnable number
    Whether to enable the whitening strategy for vulnerability protection requests. Works only on modified scenes.
    whiteEnable number
    Whether to enable the access list policy. Works only on modified scenes.
    whiteFieldEnable number
    Whether to enable the whitening strategy for vulnerability protection fields. Works only on modified scenes.
    access_mode int
    Access mode.
    domain str
    List of domain names that need to be protected by WAF.
    api_enable int
    Whether to enable the API protection policy. Works only on modified scenes.
    auto_cc_enable int
    Whether to enable the intelligent CC protection strategy. Works only on modified scenes.
    backend_groups Sequence[WafDomainBackendGroupArgs]
    The configuration of source station.
    black_ip_enable int
    Whether to enable the access ban list policy. Works only on modified scenes.
    black_lct_enable int
    Whether to enable the geographical location access control policy. Works only on modified scenes.
    bot_dytoken_enable int
    Whether to enable the bot dynamic token. Works only on modified scenes.
    bot_frequency_enable int
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    bot_repeat_enable int
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    bot_sequence_default_action int
    Set the default actions of the bot behavior map strategy. Works only on modified scenes.
    bot_sequence_enable int
    Whether to enable the bot behavior map. Works only on modified scenes.
    cc_enable int
    Whether to enable the CC protection policy. Works only on modified scenes.
    certificate_id int
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    certificate_platform str
    Certificate custody platform.
    client_ip_location int
    The method of obtaining the client IP.
    client_max_body_size int
    The client requests the maximum value of body.
    cloud_access_configs Sequence[WafDomainCloudAccessConfigArgs]
    Access port information.If AccessMode is Alb/CLB, this field is required.
    custom_bot_enable int
    Whether to enable the custom Bot classification strategy. Works only on modified scenes.
    custom_headers Sequence[str]
    Custom Header.
    custom_rsp_enable int
    Whether to enable the custom response interception policy. Works only on modified scenes.
    custom_sni str
    Custom SNI needs to be configured when EnableSNI=1. Works only on modified scenes.
    defence_mode int
    The protection mode of the instance. Works only on modified scenes.
    dlp_enable int
    Whether to activate the strategy for preventing the leakage of sensitive information. Works only on modified scenes.
    enable_custom_redirect int
    Whether to enable user-defined redirection. Works only on modified scenes.
    enable_http2 int
    Whether to enable HTTP 2.0.
    enable_ipv6 int
    Whether it supports protecting IPv6 requests.
    enable_sni int
    Whether to enable the SNI configuration. Works only on modified scenes.
    extra_defence_mode_lb_instances Sequence[WafDomainExtraDefenceModeLbInstanceArgs]
    The protection mode of the exception instance. It takes effect when the access mode is accessed through an application load balancing (ALB) instance (AccessMode=20). Works only on modified scenes.
    keep_alive_request int
    The number of long connection multiplexes.
    keep_alive_time_out int
    Long connection retention time.
    lb_algorithm str
    The types of load balancing algorithms.
    llm_available bool
    Is LLM available. Works only on modified scenes.
    project_name str
    The name of project. Works only on modified scenes.
    protocol_follow int
    Whether to enable protocol following.
    protocol_ports WafDomainProtocolPortsArgs
    Access port information.
    protocols Sequence[str]
    Access protocol types.
    proxy_config int
    Whether to enable proxy configuration.
    proxy_connect_time_out int
    The timeout period for establishing a connection between the WAF and the backend server.
    proxy_keep_alive int
    The number of reusable WAF origin long connections.
    proxy_keep_alive_time_out int
    Idle long connection timeout period.
    proxy_read_time_out int
    The timeout period during which WAF reads the response from the backend server.
    proxy_retry int
    The number of retries for WAF back to source.
    proxy_write_time_out int
    The timeout period during which the WAF transmits the request to the backend server.
    public_real_server int
    Connect to the source return mode.
    redirect_https bool
    When only the HTTPS protocol is enabled, whether to redirect HTTP requests to HTTPS. Works only on modified scenes.
    ssl_ciphers Sequence[str]
    Encryption kit.
    ssl_protocols Sequence[str]
    TLS protocol version.
    system_bot_enable int
    Whether to enable the managed Bot classification strategy. Works only on modified scenes.
    tamper_proof_enable int
    Whether to enable the page tamper-proof policy. Works only on modified scenes.
    tls_enable int
    Whether to enable the log service.
    tls_fields_config WafDomainTlsFieldsConfigArgs
    Details of log field configuration. Works only on modified scenes.
    volc_certificate_id str
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    vpc_id str
    The ID of vpc.
    waf_enable int
    Whether to enable the vulnerability protection strategy. Works only on modified scenes.
    waf_white_req_enable int
    Whether to enable the whitening strategy for vulnerability protection requests. Works only on modified scenes.
    white_enable int
    Whether to enable the access list policy. Works only on modified scenes.
    white_field_enable int
    Whether to enable the whitening strategy for vulnerability protection fields. Works only on modified scenes.
    accessMode Number
    Access mode.
    domain String
    List of domain names that need to be protected by WAF.
    apiEnable Number
    Whether to enable the API protection policy. Works only on modified scenes.
    autoCcEnable Number
    Whether to enable the intelligent CC protection strategy. Works only on modified scenes.
    backendGroups List<Property Map>
    The configuration of source station.
    blackIpEnable Number
    Whether to enable the access ban list policy. Works only on modified scenes.
    blackLctEnable Number
    Whether to enable the geographical location access control policy. Works only on modified scenes.
    botDytokenEnable Number
    Whether to enable the bot dynamic token. Works only on modified scenes.
    botFrequencyEnable Number
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    botRepeatEnable Number
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    botSequenceDefaultAction Number
    Set the default actions of the bot behavior map strategy. Works only on modified scenes.
    botSequenceEnable Number
    Whether to enable the bot behavior map. Works only on modified scenes.
    ccEnable Number
    Whether to enable the CC protection policy. Works only on modified scenes.
    certificateId Number
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    certificatePlatform String
    Certificate custody platform.
    clientIpLocation Number
    The method of obtaining the client IP.
    clientMaxBodySize Number
    The client requests the maximum value of body.
    cloudAccessConfigs List<Property Map>
    Access port information.If AccessMode is Alb/CLB, this field is required.
    customBotEnable Number
    Whether to enable the custom Bot classification strategy. Works only on modified scenes.
    customHeaders List<String>
    Custom Header.
    customRspEnable Number
    Whether to enable the custom response interception policy. Works only on modified scenes.
    customSni String
    Custom SNI needs to be configured when EnableSNI=1. Works only on modified scenes.
    defenceMode Number
    The protection mode of the instance. Works only on modified scenes.
    dlpEnable Number
    Whether to activate the strategy for preventing the leakage of sensitive information. Works only on modified scenes.
    enableCustomRedirect Number
    Whether to enable user-defined redirection. Works only on modified scenes.
    enableHttp2 Number
    Whether to enable HTTP 2.0.
    enableIpv6 Number
    Whether it supports protecting IPv6 requests.
    enableSni Number
    Whether to enable the SNI configuration. Works only on modified scenes.
    extraDefenceModeLbInstances List<Property Map>
    The protection mode of the exception instance. It takes effect when the access mode is accessed through an application load balancing (ALB) instance (AccessMode=20). Works only on modified scenes.
    keepAliveRequest Number
    The number of long connection multiplexes.
    keepAliveTimeOut Number
    Long connection retention time.
    lbAlgorithm String
    The types of load balancing algorithms.
    llmAvailable Boolean
    Is LLM available. Works only on modified scenes.
    projectName String
    The name of project. Works only on modified scenes.
    protocolFollow Number
    Whether to enable protocol following.
    protocolPorts Property Map
    Access port information.
    protocols List<String>
    Access protocol types.
    proxyConfig Number
    Whether to enable proxy configuration.
    proxyConnectTimeOut Number
    The timeout period for establishing a connection between the WAF and the backend server.
    proxyKeepAlive Number
    The number of reusable WAF origin long connections.
    proxyKeepAliveTimeOut Number
    Idle long connection timeout period.
    proxyReadTimeOut Number
    The timeout period during which WAF reads the response from the backend server.
    proxyRetry Number
    The number of retries for WAF back to source.
    proxyWriteTimeOut Number
    The timeout period during which the WAF transmits the request to the backend server.
    publicRealServer Number
    Connect to the source return mode.
    redirectHttps Boolean
    When only the HTTPS protocol is enabled, whether to redirect HTTP requests to HTTPS. Works only on modified scenes.
    sslCiphers List<String>
    Encryption kit.
    sslProtocols List<String>
    TLS protocol version.
    systemBotEnable Number
    Whether to enable the managed Bot classification strategy. Works only on modified scenes.
    tamperProofEnable Number
    Whether to enable the page tamper-proof policy. Works only on modified scenes.
    tlsEnable Number
    Whether to enable the log service.
    tlsFieldsConfig Property Map
    Details of log field configuration. Works only on modified scenes.
    volcCertificateId String
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    vpcId String
    The ID of vpc.
    wafEnable Number
    Whether to enable the vulnerability protection strategy. Works only on modified scenes.
    wafWhiteReqEnable Number
    Whether to enable the whitening strategy for vulnerability protection requests. Works only on modified scenes.
    whiteEnable Number
    Whether to enable the access list policy. Works only on modified scenes.
    whiteFieldEnable Number
    Whether to enable the whitening strategy for vulnerability protection fields. Works only on modified scenes.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the WafDomain resource produces the following output properties:

    AdvancedDefenseIp string
    High-defense instance IP.
    AdvancedDefenseIpv6 string
    High-defense instance IPv6.
    AttackStatus int
    The status of the attack.
    CertificateName string
    The name of the certificate.
    Cname string
    The CNAME value generated by the WAF instance.
    DefenceModeComputed int
    The protection mode of the instance.
    Id string
    The provider-assigned unique ID for this managed resource.
    ServerIps string
    The IP of the WAF protection instance.
    SrcIps string
    WAF source IP.
    Status int
    The status of access.
    UpdateTime string
    The update time.
    AdvancedDefenseIp string
    High-defense instance IP.
    AdvancedDefenseIpv6 string
    High-defense instance IPv6.
    AttackStatus int
    The status of the attack.
    CertificateName string
    The name of the certificate.
    Cname string
    The CNAME value generated by the WAF instance.
    DefenceModeComputed int
    The protection mode of the instance.
    Id string
    The provider-assigned unique ID for this managed resource.
    ServerIps string
    The IP of the WAF protection instance.
    SrcIps string
    WAF source IP.
    Status int
    The status of access.
    UpdateTime string
    The update time.
    advancedDefenseIp String
    High-defense instance IP.
    advancedDefenseIpv6 String
    High-defense instance IPv6.
    attackStatus Integer
    The status of the attack.
    certificateName String
    The name of the certificate.
    cname String
    The CNAME value generated by the WAF instance.
    defenceModeComputed Integer
    The protection mode of the instance.
    id String
    The provider-assigned unique ID for this managed resource.
    serverIps String
    The IP of the WAF protection instance.
    srcIps String
    WAF source IP.
    status Integer
    The status of access.
    updateTime String
    The update time.
    advancedDefenseIp string
    High-defense instance IP.
    advancedDefenseIpv6 string
    High-defense instance IPv6.
    attackStatus number
    The status of the attack.
    certificateName string
    The name of the certificate.
    cname string
    The CNAME value generated by the WAF instance.
    defenceModeComputed number
    The protection mode of the instance.
    id string
    The provider-assigned unique ID for this managed resource.
    serverIps string
    The IP of the WAF protection instance.
    srcIps string
    WAF source IP.
    status number
    The status of access.
    updateTime string
    The update time.
    advanced_defense_ip str
    High-defense instance IP.
    advanced_defense_ipv6 str
    High-defense instance IPv6.
    attack_status int
    The status of the attack.
    certificate_name str
    The name of the certificate.
    cname str
    The CNAME value generated by the WAF instance.
    defence_mode_computed int
    The protection mode of the instance.
    id str
    The provider-assigned unique ID for this managed resource.
    server_ips str
    The IP of the WAF protection instance.
    src_ips str
    WAF source IP.
    status int
    The status of access.
    update_time str
    The update time.
    advancedDefenseIp String
    High-defense instance IP.
    advancedDefenseIpv6 String
    High-defense instance IPv6.
    attackStatus Number
    The status of the attack.
    certificateName String
    The name of the certificate.
    cname String
    The CNAME value generated by the WAF instance.
    defenceModeComputed Number
    The protection mode of the instance.
    id String
    The provider-assigned unique ID for this managed resource.
    serverIps String
    The IP of the WAF protection instance.
    srcIps String
    WAF source IP.
    status Number
    The status of access.
    updateTime String
    The update time.

    Look up Existing WafDomain Resource

    Get an existing WafDomain resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: WafDomainState, opts?: CustomResourceOptions): WafDomain
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        access_mode: Optional[int] = None,
        advanced_defense_ip: Optional[str] = None,
        advanced_defense_ipv6: Optional[str] = None,
        api_enable: Optional[int] = None,
        attack_status: Optional[int] = None,
        auto_cc_enable: Optional[int] = None,
        backend_groups: Optional[Sequence[WafDomainBackendGroupArgs]] = None,
        black_ip_enable: Optional[int] = None,
        black_lct_enable: Optional[int] = None,
        bot_dytoken_enable: Optional[int] = None,
        bot_frequency_enable: Optional[int] = None,
        bot_repeat_enable: Optional[int] = None,
        bot_sequence_default_action: Optional[int] = None,
        bot_sequence_enable: Optional[int] = None,
        cc_enable: Optional[int] = None,
        certificate_id: Optional[int] = None,
        certificate_name: Optional[str] = None,
        certificate_platform: Optional[str] = None,
        client_ip_location: Optional[int] = None,
        client_max_body_size: Optional[int] = None,
        cloud_access_configs: Optional[Sequence[WafDomainCloudAccessConfigArgs]] = None,
        cname: Optional[str] = None,
        custom_bot_enable: Optional[int] = None,
        custom_headers: Optional[Sequence[str]] = None,
        custom_rsp_enable: Optional[int] = None,
        custom_sni: Optional[str] = None,
        defence_mode: Optional[int] = None,
        defence_mode_computed: Optional[int] = None,
        dlp_enable: Optional[int] = None,
        domain: Optional[str] = None,
        enable_custom_redirect: Optional[int] = None,
        enable_http2: Optional[int] = None,
        enable_ipv6: Optional[int] = None,
        enable_sni: Optional[int] = None,
        extra_defence_mode_lb_instances: Optional[Sequence[WafDomainExtraDefenceModeLbInstanceArgs]] = None,
        keep_alive_request: Optional[int] = None,
        keep_alive_time_out: Optional[int] = None,
        lb_algorithm: Optional[str] = None,
        llm_available: Optional[bool] = None,
        project_name: Optional[str] = None,
        protocol_follow: Optional[int] = None,
        protocol_ports: Optional[WafDomainProtocolPortsArgs] = None,
        protocols: Optional[Sequence[str]] = None,
        proxy_config: Optional[int] = None,
        proxy_connect_time_out: Optional[int] = None,
        proxy_keep_alive: Optional[int] = None,
        proxy_keep_alive_time_out: Optional[int] = None,
        proxy_read_time_out: Optional[int] = None,
        proxy_retry: Optional[int] = None,
        proxy_write_time_out: Optional[int] = None,
        public_real_server: Optional[int] = None,
        redirect_https: Optional[bool] = None,
        server_ips: Optional[str] = None,
        src_ips: Optional[str] = None,
        ssl_ciphers: Optional[Sequence[str]] = None,
        ssl_protocols: Optional[Sequence[str]] = None,
        status: Optional[int] = None,
        system_bot_enable: Optional[int] = None,
        tamper_proof_enable: Optional[int] = None,
        tls_enable: Optional[int] = None,
        tls_fields_config: Optional[WafDomainTlsFieldsConfigArgs] = None,
        update_time: Optional[str] = None,
        volc_certificate_id: Optional[str] = None,
        vpc_id: Optional[str] = None,
        waf_enable: Optional[int] = None,
        waf_white_req_enable: Optional[int] = None,
        white_enable: Optional[int] = None,
        white_field_enable: Optional[int] = None) -> WafDomain
    func GetWafDomain(ctx *Context, name string, id IDInput, state *WafDomainState, opts ...ResourceOption) (*WafDomain, error)
    public static WafDomain Get(string name, Input<string> id, WafDomainState? state, CustomResourceOptions? opts = null)
    public static WafDomain get(String name, Output<String> id, WafDomainState state, CustomResourceOptions options)
    resources:  _:    type: volcengine:waf:WafDomain    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccessMode int
    Access mode.
    AdvancedDefenseIp string
    High-defense instance IP.
    AdvancedDefenseIpv6 string
    High-defense instance IPv6.
    ApiEnable int
    Whether to enable the API protection policy. Works only on modified scenes.
    AttackStatus int
    The status of the attack.
    AutoCcEnable int
    Whether to enable the intelligent CC protection strategy. Works only on modified scenes.
    BackendGroups List<WafDomainBackendGroup>
    The configuration of source station.
    BlackIpEnable int
    Whether to enable the access ban list policy. Works only on modified scenes.
    BlackLctEnable int
    Whether to enable the geographical location access control policy. Works only on modified scenes.
    BotDytokenEnable int
    Whether to enable the bot dynamic token. Works only on modified scenes.
    BotFrequencyEnable int
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    BotRepeatEnable int
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    BotSequenceDefaultAction int
    Set the default actions of the bot behavior map strategy. Works only on modified scenes.
    BotSequenceEnable int
    Whether to enable the bot behavior map. Works only on modified scenes.
    CcEnable int
    Whether to enable the CC protection policy. Works only on modified scenes.
    CertificateId int
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    CertificateName string
    The name of the certificate.
    CertificatePlatform string
    Certificate custody platform.
    ClientIpLocation int
    The method of obtaining the client IP.
    ClientMaxBodySize int
    The client requests the maximum value of body.
    CloudAccessConfigs List<WafDomainCloudAccessConfig>
    Access port information.If AccessMode is Alb/CLB, this field is required.
    Cname string
    The CNAME value generated by the WAF instance.
    CustomBotEnable int
    Whether to enable the custom Bot classification strategy. Works only on modified scenes.
    CustomHeaders List<string>
    Custom Header.
    CustomRspEnable int
    Whether to enable the custom response interception policy. Works only on modified scenes.
    CustomSni string
    Custom SNI needs to be configured when EnableSNI=1. Works only on modified scenes.
    DefenceMode int
    The protection mode of the instance. Works only on modified scenes.
    DefenceModeComputed int
    The protection mode of the instance.
    DlpEnable int
    Whether to activate the strategy for preventing the leakage of sensitive information. Works only on modified scenes.
    Domain string
    List of domain names that need to be protected by WAF.
    EnableCustomRedirect int
    Whether to enable user-defined redirection. Works only on modified scenes.
    EnableHttp2 int
    Whether to enable HTTP 2.0.
    EnableIpv6 int
    Whether it supports protecting IPv6 requests.
    EnableSni int
    Whether to enable the SNI configuration. Works only on modified scenes.
    ExtraDefenceModeLbInstances List<WafDomainExtraDefenceModeLbInstance>
    The protection mode of the exception instance. It takes effect when the access mode is accessed through an application load balancing (ALB) instance (AccessMode=20). Works only on modified scenes.
    KeepAliveRequest int
    The number of long connection multiplexes.
    KeepAliveTimeOut int
    Long connection retention time.
    LbAlgorithm string
    The types of load balancing algorithms.
    LlmAvailable bool
    Is LLM available. Works only on modified scenes.
    ProjectName string
    The name of project. Works only on modified scenes.
    ProtocolFollow int
    Whether to enable protocol following.
    ProtocolPorts WafDomainProtocolPorts
    Access port information.
    Protocols List<string>
    Access protocol types.
    ProxyConfig int
    Whether to enable proxy configuration.
    ProxyConnectTimeOut int
    The timeout period for establishing a connection between the WAF and the backend server.
    ProxyKeepAlive int
    The number of reusable WAF origin long connections.
    ProxyKeepAliveTimeOut int
    Idle long connection timeout period.
    ProxyReadTimeOut int
    The timeout period during which WAF reads the response from the backend server.
    ProxyRetry int
    The number of retries for WAF back to source.
    ProxyWriteTimeOut int
    The timeout period during which the WAF transmits the request to the backend server.
    PublicRealServer int
    Connect to the source return mode.
    RedirectHttps bool
    When only the HTTPS protocol is enabled, whether to redirect HTTP requests to HTTPS. Works only on modified scenes.
    ServerIps string
    The IP of the WAF protection instance.
    SrcIps string
    WAF source IP.
    SslCiphers List<string>
    Encryption kit.
    SslProtocols List<string>
    TLS protocol version.
    Status int
    The status of access.
    SystemBotEnable int
    Whether to enable the managed Bot classification strategy. Works only on modified scenes.
    TamperProofEnable int
    Whether to enable the page tamper-proof policy. Works only on modified scenes.
    TlsEnable int
    Whether to enable the log service.
    TlsFieldsConfig WafDomainTlsFieldsConfig
    Details of log field configuration. Works only on modified scenes.
    UpdateTime string
    The update time.
    VolcCertificateId string
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    VpcId string
    The ID of vpc.
    WafEnable int
    Whether to enable the vulnerability protection strategy. Works only on modified scenes.
    WafWhiteReqEnable int
    Whether to enable the whitening strategy for vulnerability protection requests. Works only on modified scenes.
    WhiteEnable int
    Whether to enable the access list policy. Works only on modified scenes.
    WhiteFieldEnable int
    Whether to enable the whitening strategy for vulnerability protection fields. Works only on modified scenes.
    AccessMode int
    Access mode.
    AdvancedDefenseIp string
    High-defense instance IP.
    AdvancedDefenseIpv6 string
    High-defense instance IPv6.
    ApiEnable int
    Whether to enable the API protection policy. Works only on modified scenes.
    AttackStatus int
    The status of the attack.
    AutoCcEnable int
    Whether to enable the intelligent CC protection strategy. Works only on modified scenes.
    BackendGroups []WafDomainBackendGroupArgs
    The configuration of source station.
    BlackIpEnable int
    Whether to enable the access ban list policy. Works only on modified scenes.
    BlackLctEnable int
    Whether to enable the geographical location access control policy. Works only on modified scenes.
    BotDytokenEnable int
    Whether to enable the bot dynamic token. Works only on modified scenes.
    BotFrequencyEnable int
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    BotRepeatEnable int
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    BotSequenceDefaultAction int
    Set the default actions of the bot behavior map strategy. Works only on modified scenes.
    BotSequenceEnable int
    Whether to enable the bot behavior map. Works only on modified scenes.
    CcEnable int
    Whether to enable the CC protection policy. Works only on modified scenes.
    CertificateId int
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    CertificateName string
    The name of the certificate.
    CertificatePlatform string
    Certificate custody platform.
    ClientIpLocation int
    The method of obtaining the client IP.
    ClientMaxBodySize int
    The client requests the maximum value of body.
    CloudAccessConfigs []WafDomainCloudAccessConfigArgs
    Access port information.If AccessMode is Alb/CLB, this field is required.
    Cname string
    The CNAME value generated by the WAF instance.
    CustomBotEnable int
    Whether to enable the custom Bot classification strategy. Works only on modified scenes.
    CustomHeaders []string
    Custom Header.
    CustomRspEnable int
    Whether to enable the custom response interception policy. Works only on modified scenes.
    CustomSni string
    Custom SNI needs to be configured when EnableSNI=1. Works only on modified scenes.
    DefenceMode int
    The protection mode of the instance. Works only on modified scenes.
    DefenceModeComputed int
    The protection mode of the instance.
    DlpEnable int
    Whether to activate the strategy for preventing the leakage of sensitive information. Works only on modified scenes.
    Domain string
    List of domain names that need to be protected by WAF.
    EnableCustomRedirect int
    Whether to enable user-defined redirection. Works only on modified scenes.
    EnableHttp2 int
    Whether to enable HTTP 2.0.
    EnableIpv6 int
    Whether it supports protecting IPv6 requests.
    EnableSni int
    Whether to enable the SNI configuration. Works only on modified scenes.
    ExtraDefenceModeLbInstances []WafDomainExtraDefenceModeLbInstanceArgs
    The protection mode of the exception instance. It takes effect when the access mode is accessed through an application load balancing (ALB) instance (AccessMode=20). Works only on modified scenes.
    KeepAliveRequest int
    The number of long connection multiplexes.
    KeepAliveTimeOut int
    Long connection retention time.
    LbAlgorithm string
    The types of load balancing algorithms.
    LlmAvailable bool
    Is LLM available. Works only on modified scenes.
    ProjectName string
    The name of project. Works only on modified scenes.
    ProtocolFollow int
    Whether to enable protocol following.
    ProtocolPorts WafDomainProtocolPortsArgs
    Access port information.
    Protocols []string
    Access protocol types.
    ProxyConfig int
    Whether to enable proxy configuration.
    ProxyConnectTimeOut int
    The timeout period for establishing a connection between the WAF and the backend server.
    ProxyKeepAlive int
    The number of reusable WAF origin long connections.
    ProxyKeepAliveTimeOut int
    Idle long connection timeout period.
    ProxyReadTimeOut int
    The timeout period during which WAF reads the response from the backend server.
    ProxyRetry int
    The number of retries for WAF back to source.
    ProxyWriteTimeOut int
    The timeout period during which the WAF transmits the request to the backend server.
    PublicRealServer int
    Connect to the source return mode.
    RedirectHttps bool
    When only the HTTPS protocol is enabled, whether to redirect HTTP requests to HTTPS. Works only on modified scenes.
    ServerIps string
    The IP of the WAF protection instance.
    SrcIps string
    WAF source IP.
    SslCiphers []string
    Encryption kit.
    SslProtocols []string
    TLS protocol version.
    Status int
    The status of access.
    SystemBotEnable int
    Whether to enable the managed Bot classification strategy. Works only on modified scenes.
    TamperProofEnable int
    Whether to enable the page tamper-proof policy. Works only on modified scenes.
    TlsEnable int
    Whether to enable the log service.
    TlsFieldsConfig WafDomainTlsFieldsConfigArgs
    Details of log field configuration. Works only on modified scenes.
    UpdateTime string
    The update time.
    VolcCertificateId string
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    VpcId string
    The ID of vpc.
    WafEnable int
    Whether to enable the vulnerability protection strategy. Works only on modified scenes.
    WafWhiteReqEnable int
    Whether to enable the whitening strategy for vulnerability protection requests. Works only on modified scenes.
    WhiteEnable int
    Whether to enable the access list policy. Works only on modified scenes.
    WhiteFieldEnable int
    Whether to enable the whitening strategy for vulnerability protection fields. Works only on modified scenes.
    accessMode Integer
    Access mode.
    advancedDefenseIp String
    High-defense instance IP.
    advancedDefenseIpv6 String
    High-defense instance IPv6.
    apiEnable Integer
    Whether to enable the API protection policy. Works only on modified scenes.
    attackStatus Integer
    The status of the attack.
    autoCcEnable Integer
    Whether to enable the intelligent CC protection strategy. Works only on modified scenes.
    backendGroups List<WafDomainBackendGroup>
    The configuration of source station.
    blackIpEnable Integer
    Whether to enable the access ban list policy. Works only on modified scenes.
    blackLctEnable Integer
    Whether to enable the geographical location access control policy. Works only on modified scenes.
    botDytokenEnable Integer
    Whether to enable the bot dynamic token. Works only on modified scenes.
    botFrequencyEnable Integer
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    botRepeatEnable Integer
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    botSequenceDefaultAction Integer
    Set the default actions of the bot behavior map strategy. Works only on modified scenes.
    botSequenceEnable Integer
    Whether to enable the bot behavior map. Works only on modified scenes.
    ccEnable Integer
    Whether to enable the CC protection policy. Works only on modified scenes.
    certificateId Integer
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    certificateName String
    The name of the certificate.
    certificatePlatform String
    Certificate custody platform.
    clientIpLocation Integer
    The method of obtaining the client IP.
    clientMaxBodySize Integer
    The client requests the maximum value of body.
    cloudAccessConfigs List<WafDomainCloudAccessConfig>
    Access port information.If AccessMode is Alb/CLB, this field is required.
    cname String
    The CNAME value generated by the WAF instance.
    customBotEnable Integer
    Whether to enable the custom Bot classification strategy. Works only on modified scenes.
    customHeaders List<String>
    Custom Header.
    customRspEnable Integer
    Whether to enable the custom response interception policy. Works only on modified scenes.
    customSni String
    Custom SNI needs to be configured when EnableSNI=1. Works only on modified scenes.
    defenceMode Integer
    The protection mode of the instance. Works only on modified scenes.
    defenceModeComputed Integer
    The protection mode of the instance.
    dlpEnable Integer
    Whether to activate the strategy for preventing the leakage of sensitive information. Works only on modified scenes.
    domain String
    List of domain names that need to be protected by WAF.
    enableCustomRedirect Integer
    Whether to enable user-defined redirection. Works only on modified scenes.
    enableHttp2 Integer
    Whether to enable HTTP 2.0.
    enableIpv6 Integer
    Whether it supports protecting IPv6 requests.
    enableSni Integer
    Whether to enable the SNI configuration. Works only on modified scenes.
    extraDefenceModeLbInstances List<WafDomainExtraDefenceModeLbInstance>
    The protection mode of the exception instance. It takes effect when the access mode is accessed through an application load balancing (ALB) instance (AccessMode=20). Works only on modified scenes.
    keepAliveRequest Integer
    The number of long connection multiplexes.
    keepAliveTimeOut Integer
    Long connection retention time.
    lbAlgorithm String
    The types of load balancing algorithms.
    llmAvailable Boolean
    Is LLM available. Works only on modified scenes.
    projectName String
    The name of project. Works only on modified scenes.
    protocolFollow Integer
    Whether to enable protocol following.
    protocolPorts WafDomainProtocolPorts
    Access port information.
    protocols List<String>
    Access protocol types.
    proxyConfig Integer
    Whether to enable proxy configuration.
    proxyConnectTimeOut Integer
    The timeout period for establishing a connection between the WAF and the backend server.
    proxyKeepAlive Integer
    The number of reusable WAF origin long connections.
    proxyKeepAliveTimeOut Integer
    Idle long connection timeout period.
    proxyReadTimeOut Integer
    The timeout period during which WAF reads the response from the backend server.
    proxyRetry Integer
    The number of retries for WAF back to source.
    proxyWriteTimeOut Integer
    The timeout period during which the WAF transmits the request to the backend server.
    publicRealServer Integer
    Connect to the source return mode.
    redirectHttps Boolean
    When only the HTTPS protocol is enabled, whether to redirect HTTP requests to HTTPS. Works only on modified scenes.
    serverIps String
    The IP of the WAF protection instance.
    srcIps String
    WAF source IP.
    sslCiphers List<String>
    Encryption kit.
    sslProtocols List<String>
    TLS protocol version.
    status Integer
    The status of access.
    systemBotEnable Integer
    Whether to enable the managed Bot classification strategy. Works only on modified scenes.
    tamperProofEnable Integer
    Whether to enable the page tamper-proof policy. Works only on modified scenes.
    tlsEnable Integer
    Whether to enable the log service.
    tlsFieldsConfig WafDomainTlsFieldsConfig
    Details of log field configuration. Works only on modified scenes.
    updateTime String
    The update time.
    volcCertificateId String
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    vpcId String
    The ID of vpc.
    wafEnable Integer
    Whether to enable the vulnerability protection strategy. Works only on modified scenes.
    wafWhiteReqEnable Integer
    Whether to enable the whitening strategy for vulnerability protection requests. Works only on modified scenes.
    whiteEnable Integer
    Whether to enable the access list policy. Works only on modified scenes.
    whiteFieldEnable Integer
    Whether to enable the whitening strategy for vulnerability protection fields. Works only on modified scenes.
    accessMode number
    Access mode.
    advancedDefenseIp string
    High-defense instance IP.
    advancedDefenseIpv6 string
    High-defense instance IPv6.
    apiEnable number
    Whether to enable the API protection policy. Works only on modified scenes.
    attackStatus number
    The status of the attack.
    autoCcEnable number
    Whether to enable the intelligent CC protection strategy. Works only on modified scenes.
    backendGroups WafDomainBackendGroup[]
    The configuration of source station.
    blackIpEnable number
    Whether to enable the access ban list policy. Works only on modified scenes.
    blackLctEnable number
    Whether to enable the geographical location access control policy. Works only on modified scenes.
    botDytokenEnable number
    Whether to enable the bot dynamic token. Works only on modified scenes.
    botFrequencyEnable number
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    botRepeatEnable number
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    botSequenceDefaultAction number
    Set the default actions of the bot behavior map strategy. Works only on modified scenes.
    botSequenceEnable number
    Whether to enable the bot behavior map. Works only on modified scenes.
    ccEnable number
    Whether to enable the CC protection policy. Works only on modified scenes.
    certificateId number
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    certificateName string
    The name of the certificate.
    certificatePlatform string
    Certificate custody platform.
    clientIpLocation number
    The method of obtaining the client IP.
    clientMaxBodySize number
    The client requests the maximum value of body.
    cloudAccessConfigs WafDomainCloudAccessConfig[]
    Access port information.If AccessMode is Alb/CLB, this field is required.
    cname string
    The CNAME value generated by the WAF instance.
    customBotEnable number
    Whether to enable the custom Bot classification strategy. Works only on modified scenes.
    customHeaders string[]
    Custom Header.
    customRspEnable number
    Whether to enable the custom response interception policy. Works only on modified scenes.
    customSni string
    Custom SNI needs to be configured when EnableSNI=1. Works only on modified scenes.
    defenceMode number
    The protection mode of the instance. Works only on modified scenes.
    defenceModeComputed number
    The protection mode of the instance.
    dlpEnable number
    Whether to activate the strategy for preventing the leakage of sensitive information. Works only on modified scenes.
    domain string
    List of domain names that need to be protected by WAF.
    enableCustomRedirect number
    Whether to enable user-defined redirection. Works only on modified scenes.
    enableHttp2 number
    Whether to enable HTTP 2.0.
    enableIpv6 number
    Whether it supports protecting IPv6 requests.
    enableSni number
    Whether to enable the SNI configuration. Works only on modified scenes.
    extraDefenceModeLbInstances WafDomainExtraDefenceModeLbInstance[]
    The protection mode of the exception instance. It takes effect when the access mode is accessed through an application load balancing (ALB) instance (AccessMode=20). Works only on modified scenes.
    keepAliveRequest number
    The number of long connection multiplexes.
    keepAliveTimeOut number
    Long connection retention time.
    lbAlgorithm string
    The types of load balancing algorithms.
    llmAvailable boolean
    Is LLM available. Works only on modified scenes.
    projectName string
    The name of project. Works only on modified scenes.
    protocolFollow number
    Whether to enable protocol following.
    protocolPorts WafDomainProtocolPorts
    Access port information.
    protocols string[]
    Access protocol types.
    proxyConfig number
    Whether to enable proxy configuration.
    proxyConnectTimeOut number
    The timeout period for establishing a connection between the WAF and the backend server.
    proxyKeepAlive number
    The number of reusable WAF origin long connections.
    proxyKeepAliveTimeOut number
    Idle long connection timeout period.
    proxyReadTimeOut number
    The timeout period during which WAF reads the response from the backend server.
    proxyRetry number
    The number of retries for WAF back to source.
    proxyWriteTimeOut number
    The timeout period during which the WAF transmits the request to the backend server.
    publicRealServer number
    Connect to the source return mode.
    redirectHttps boolean
    When only the HTTPS protocol is enabled, whether to redirect HTTP requests to HTTPS. Works only on modified scenes.
    serverIps string
    The IP of the WAF protection instance.
    srcIps string
    WAF source IP.
    sslCiphers string[]
    Encryption kit.
    sslProtocols string[]
    TLS protocol version.
    status number
    The status of access.
    systemBotEnable number
    Whether to enable the managed Bot classification strategy. Works only on modified scenes.
    tamperProofEnable number
    Whether to enable the page tamper-proof policy. Works only on modified scenes.
    tlsEnable number
    Whether to enable the log service.
    tlsFieldsConfig WafDomainTlsFieldsConfig
    Details of log field configuration. Works only on modified scenes.
    updateTime string
    The update time.
    volcCertificateId string
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    vpcId string
    The ID of vpc.
    wafEnable number
    Whether to enable the vulnerability protection strategy. Works only on modified scenes.
    wafWhiteReqEnable number
    Whether to enable the whitening strategy for vulnerability protection requests. Works only on modified scenes.
    whiteEnable number
    Whether to enable the access list policy. Works only on modified scenes.
    whiteFieldEnable number
    Whether to enable the whitening strategy for vulnerability protection fields. Works only on modified scenes.
    access_mode int
    Access mode.
    advanced_defense_ip str
    High-defense instance IP.
    advanced_defense_ipv6 str
    High-defense instance IPv6.
    api_enable int
    Whether to enable the API protection policy. Works only on modified scenes.
    attack_status int
    The status of the attack.
    auto_cc_enable int
    Whether to enable the intelligent CC protection strategy. Works only on modified scenes.
    backend_groups Sequence[WafDomainBackendGroupArgs]
    The configuration of source station.
    black_ip_enable int
    Whether to enable the access ban list policy. Works only on modified scenes.
    black_lct_enable int
    Whether to enable the geographical location access control policy. Works only on modified scenes.
    bot_dytoken_enable int
    Whether to enable the bot dynamic token. Works only on modified scenes.
    bot_frequency_enable int
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    bot_repeat_enable int
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    bot_sequence_default_action int
    Set the default actions of the bot behavior map strategy. Works only on modified scenes.
    bot_sequence_enable int
    Whether to enable the bot behavior map. Works only on modified scenes.
    cc_enable int
    Whether to enable the CC protection policy. Works only on modified scenes.
    certificate_id int
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    certificate_name str
    The name of the certificate.
    certificate_platform str
    Certificate custody platform.
    client_ip_location int
    The method of obtaining the client IP.
    client_max_body_size int
    The client requests the maximum value of body.
    cloud_access_configs Sequence[WafDomainCloudAccessConfigArgs]
    Access port information.If AccessMode is Alb/CLB, this field is required.
    cname str
    The CNAME value generated by the WAF instance.
    custom_bot_enable int
    Whether to enable the custom Bot classification strategy. Works only on modified scenes.
    custom_headers Sequence[str]
    Custom Header.
    custom_rsp_enable int
    Whether to enable the custom response interception policy. Works only on modified scenes.
    custom_sni str
    Custom SNI needs to be configured when EnableSNI=1. Works only on modified scenes.
    defence_mode int
    The protection mode of the instance. Works only on modified scenes.
    defence_mode_computed int
    The protection mode of the instance.
    dlp_enable int
    Whether to activate the strategy for preventing the leakage of sensitive information. Works only on modified scenes.
    domain str
    List of domain names that need to be protected by WAF.
    enable_custom_redirect int
    Whether to enable user-defined redirection. Works only on modified scenes.
    enable_http2 int
    Whether to enable HTTP 2.0.
    enable_ipv6 int
    Whether it supports protecting IPv6 requests.
    enable_sni int
    Whether to enable the SNI configuration. Works only on modified scenes.
    extra_defence_mode_lb_instances Sequence[WafDomainExtraDefenceModeLbInstanceArgs]
    The protection mode of the exception instance. It takes effect when the access mode is accessed through an application load balancing (ALB) instance (AccessMode=20). Works only on modified scenes.
    keep_alive_request int
    The number of long connection multiplexes.
    keep_alive_time_out int
    Long connection retention time.
    lb_algorithm str
    The types of load balancing algorithms.
    llm_available bool
    Is LLM available. Works only on modified scenes.
    project_name str
    The name of project. Works only on modified scenes.
    protocol_follow int
    Whether to enable protocol following.
    protocol_ports WafDomainProtocolPortsArgs
    Access port information.
    protocols Sequence[str]
    Access protocol types.
    proxy_config int
    Whether to enable proxy configuration.
    proxy_connect_time_out int
    The timeout period for establishing a connection between the WAF and the backend server.
    proxy_keep_alive int
    The number of reusable WAF origin long connections.
    proxy_keep_alive_time_out int
    Idle long connection timeout period.
    proxy_read_time_out int
    The timeout period during which WAF reads the response from the backend server.
    proxy_retry int
    The number of retries for WAF back to source.
    proxy_write_time_out int
    The timeout period during which the WAF transmits the request to the backend server.
    public_real_server int
    Connect to the source return mode.
    redirect_https bool
    When only the HTTPS protocol is enabled, whether to redirect HTTP requests to HTTPS. Works only on modified scenes.
    server_ips str
    The IP of the WAF protection instance.
    src_ips str
    WAF source IP.
    ssl_ciphers Sequence[str]
    Encryption kit.
    ssl_protocols Sequence[str]
    TLS protocol version.
    status int
    The status of access.
    system_bot_enable int
    Whether to enable the managed Bot classification strategy. Works only on modified scenes.
    tamper_proof_enable int
    Whether to enable the page tamper-proof policy. Works only on modified scenes.
    tls_enable int
    Whether to enable the log service.
    tls_fields_config WafDomainTlsFieldsConfigArgs
    Details of log field configuration. Works only on modified scenes.
    update_time str
    The update time.
    volc_certificate_id str
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    vpc_id str
    The ID of vpc.
    waf_enable int
    Whether to enable the vulnerability protection strategy. Works only on modified scenes.
    waf_white_req_enable int
    Whether to enable the whitening strategy for vulnerability protection requests. Works only on modified scenes.
    white_enable int
    Whether to enable the access list policy. Works only on modified scenes.
    white_field_enable int
    Whether to enable the whitening strategy for vulnerability protection fields. Works only on modified scenes.
    accessMode Number
    Access mode.
    advancedDefenseIp String
    High-defense instance IP.
    advancedDefenseIpv6 String
    High-defense instance IPv6.
    apiEnable Number
    Whether to enable the API protection policy. Works only on modified scenes.
    attackStatus Number
    The status of the attack.
    autoCcEnable Number
    Whether to enable the intelligent CC protection strategy. Works only on modified scenes.
    backendGroups List<Property Map>
    The configuration of source station.
    blackIpEnable Number
    Whether to enable the access ban list policy. Works only on modified scenes.
    blackLctEnable Number
    Whether to enable the geographical location access control policy. Works only on modified scenes.
    botDytokenEnable Number
    Whether to enable the bot dynamic token. Works only on modified scenes.
    botFrequencyEnable Number
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    botRepeatEnable Number
    Whether to enable the bot frequency limit policy. Works only on modified scenes.
    botSequenceDefaultAction Number
    Set the default actions of the bot behavior map strategy. Works only on modified scenes.
    botSequenceEnable Number
    Whether to enable the bot behavior map. Works only on modified scenes.
    ccEnable Number
    Whether to enable the CC protection policy. Works only on modified scenes.
    certificateId Number
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    certificateName String
    The name of the certificate.
    certificatePlatform String
    Certificate custody platform.
    clientIpLocation Number
    The method of obtaining the client IP.
    clientMaxBodySize Number
    The client requests the maximum value of body.
    cloudAccessConfigs List<Property Map>
    Access port information.If AccessMode is Alb/CLB, this field is required.
    cname String
    The CNAME value generated by the WAF instance.
    customBotEnable Number
    Whether to enable the custom Bot classification strategy. Works only on modified scenes.
    customHeaders List<String>
    Custom Header.
    customRspEnable Number
    Whether to enable the custom response interception policy. Works only on modified scenes.
    customSni String
    Custom SNI needs to be configured when EnableSNI=1. Works only on modified scenes.
    defenceMode Number
    The protection mode of the instance. Works only on modified scenes.
    defenceModeComputed Number
    The protection mode of the instance.
    dlpEnable Number
    Whether to activate the strategy for preventing the leakage of sensitive information. Works only on modified scenes.
    domain String
    List of domain names that need to be protected by WAF.
    enableCustomRedirect Number
    Whether to enable user-defined redirection. Works only on modified scenes.
    enableHttp2 Number
    Whether to enable HTTP 2.0.
    enableIpv6 Number
    Whether it supports protecting IPv6 requests.
    enableSni Number
    Whether to enable the SNI configuration. Works only on modified scenes.
    extraDefenceModeLbInstances List<Property Map>
    The protection mode of the exception instance. It takes effect when the access mode is accessed through an application load balancing (ALB) instance (AccessMode=20). Works only on modified scenes.
    keepAliveRequest Number
    The number of long connection multiplexes.
    keepAliveTimeOut Number
    Long connection retention time.
    lbAlgorithm String
    The types of load balancing algorithms.
    llmAvailable Boolean
    Is LLM available. Works only on modified scenes.
    projectName String
    The name of project. Works only on modified scenes.
    protocolFollow Number
    Whether to enable protocol following.
    protocolPorts Property Map
    Access port information.
    protocols List<String>
    Access protocol types.
    proxyConfig Number
    Whether to enable proxy configuration.
    proxyConnectTimeOut Number
    The timeout period for establishing a connection between the WAF and the backend server.
    proxyKeepAlive Number
    The number of reusable WAF origin long connections.
    proxyKeepAliveTimeOut Number
    Idle long connection timeout period.
    proxyReadTimeOut Number
    The timeout period during which WAF reads the response from the backend server.
    proxyRetry Number
    The number of retries for WAF back to source.
    proxyWriteTimeOut Number
    The timeout period during which the WAF transmits the request to the backend server.
    publicRealServer Number
    Connect to the source return mode.
    redirectHttps Boolean
    When only the HTTPS protocol is enabled, whether to redirect HTTP requests to HTTPS. Works only on modified scenes.
    serverIps String
    The IP of the WAF protection instance.
    srcIps String
    WAF source IP.
    sslCiphers List<String>
    Encryption kit.
    sslProtocols List<String>
    TLS protocol version.
    status Number
    The status of access.
    systemBotEnable Number
    Whether to enable the managed Bot classification strategy. Works only on modified scenes.
    tamperProofEnable Number
    Whether to enable the page tamper-proof policy. Works only on modified scenes.
    tlsEnable Number
    Whether to enable the log service.
    tlsFieldsConfig Property Map
    Details of log field configuration. Works only on modified scenes.
    updateTime String
    The update time.
    volcCertificateId String
    When the protocol type is HTTPS, the bound certificate ID needs to be entered.
    vpcId String
    The ID of vpc.
    wafEnable Number
    Whether to enable the vulnerability protection strategy. Works only on modified scenes.
    wafWhiteReqEnable Number
    Whether to enable the whitening strategy for vulnerability protection requests. Works only on modified scenes.
    whiteEnable Number
    Whether to enable the access list policy. Works only on modified scenes.
    whiteFieldEnable Number
    Whether to enable the whitening strategy for vulnerability protection fields. Works only on modified scenes.

    Supporting Types

    WafDomainBackendGroup, WafDomainBackendGroupArgs

    AccessPorts List<int>
    Access port number.
    Backends List<WafDomainBackendGroupBackend>
    The details of the source station group.
    Name string
    Source station group name.
    AccessPorts []int
    Access port number.
    Backends []WafDomainBackendGroupBackend
    The details of the source station group.
    Name string
    Source station group name.
    accessPorts List<Integer>
    Access port number.
    backends List<WafDomainBackendGroupBackend>
    The details of the source station group.
    name String
    Source station group name.
    accessPorts number[]
    Access port number.
    backends WafDomainBackendGroupBackend[]
    The details of the source station group.
    name string
    Source station group name.
    access_ports Sequence[int]
    Access port number.
    backends Sequence[WafDomainBackendGroupBackend]
    The details of the source station group.
    name str
    Source station group name.
    accessPorts List<Number>
    Access port number.
    backends List<Property Map>
    The details of the source station group.
    name String
    Source station group name.

    WafDomainBackendGroupBackend, WafDomainBackendGroupBackendArgs

    Ip string
    Source station IP address.
    Port int
    Source station port number.
    Protocol string
    The agreement of Source Station.
    Weight int
    The weight of the source station rules.
    Ip string
    Source station IP address.
    Port int
    Source station port number.
    Protocol string
    The agreement of Source Station.
    Weight int
    The weight of the source station rules.
    ip String
    Source station IP address.
    port Integer
    Source station port number.
    protocol String
    The agreement of Source Station.
    weight Integer
    The weight of the source station rules.
    ip string
    Source station IP address.
    port number
    Source station port number.
    protocol string
    The agreement of Source Station.
    weight number
    The weight of the source station rules.
    ip str
    Source station IP address.
    port int
    Source station port number.
    protocol str
    The agreement of Source Station.
    weight int
    The weight of the source station rules.
    ip String
    Source station IP address.
    port Number
    Source station port number.
    protocol String
    The agreement of Source Station.
    weight Number
    The weight of the source station rules.

    WafDomainCloudAccessConfig, WafDomainCloudAccessConfigArgs

    InstanceId string
    The ID of instance.
    AccessProtocol string
    The access protocol needs to be consistent with the monitoring protocol.
    InstanceName string
    The name of instance. Works only on modified scenes.
    ListenerId string
    The ID of listener.
    LostAssociationFromAlb int
    Whether the instance is unbound from the alb and is unbound on the ALB side. Works only on modified scenes.
    Port string
    The port number corresponding to the listener.
    Protocol string
    The type of Listener protocol.
    InstanceId string
    The ID of instance.
    AccessProtocol string
    The access protocol needs to be consistent with the monitoring protocol.
    InstanceName string
    The name of instance. Works only on modified scenes.
    ListenerId string
    The ID of listener.
    LostAssociationFromAlb int
    Whether the instance is unbound from the alb and is unbound on the ALB side. Works only on modified scenes.
    Port string
    The port number corresponding to the listener.
    Protocol string
    The type of Listener protocol.
    instanceId String
    The ID of instance.
    accessProtocol String
    The access protocol needs to be consistent with the monitoring protocol.
    instanceName String
    The name of instance. Works only on modified scenes.
    listenerId String
    The ID of listener.
    lostAssociationFromAlb Integer
    Whether the instance is unbound from the alb and is unbound on the ALB side. Works only on modified scenes.
    port String
    The port number corresponding to the listener.
    protocol String
    The type of Listener protocol.
    instanceId string
    The ID of instance.
    accessProtocol string
    The access protocol needs to be consistent with the monitoring protocol.
    instanceName string
    The name of instance. Works only on modified scenes.
    listenerId string
    The ID of listener.
    lostAssociationFromAlb number
    Whether the instance is unbound from the alb and is unbound on the ALB side. Works only on modified scenes.
    port string
    The port number corresponding to the listener.
    protocol string
    The type of Listener protocol.
    instance_id str
    The ID of instance.
    access_protocol str
    The access protocol needs to be consistent with the monitoring protocol.
    instance_name str
    The name of instance. Works only on modified scenes.
    listener_id str
    The ID of listener.
    lost_association_from_alb int
    Whether the instance is unbound from the alb and is unbound on the ALB side. Works only on modified scenes.
    port str
    The port number corresponding to the listener.
    protocol str
    The type of Listener protocol.
    instanceId String
    The ID of instance.
    accessProtocol String
    The access protocol needs to be consistent with the monitoring protocol.
    instanceName String
    The name of instance. Works only on modified scenes.
    listenerId String
    The ID of listener.
    lostAssociationFromAlb Number
    Whether the instance is unbound from the alb and is unbound on the ALB side. Works only on modified scenes.
    port String
    The port number corresponding to the listener.
    protocol String
    The type of Listener protocol.

    WafDomainExtraDefenceModeLbInstance, WafDomainExtraDefenceModeLbInstanceArgs

    DefenceMode int
    Set the protection mode for exceptional ALB instances. Works only on modified scenes.
    InstanceId string
    The Id of ALB instance. Works only on modified scenes.
    DefenceMode int
    Set the protection mode for exceptional ALB instances. Works only on modified scenes.
    InstanceId string
    The Id of ALB instance. Works only on modified scenes.
    defenceMode Integer
    Set the protection mode for exceptional ALB instances. Works only on modified scenes.
    instanceId String
    The Id of ALB instance. Works only on modified scenes.
    defenceMode number
    Set the protection mode for exceptional ALB instances. Works only on modified scenes.
    instanceId string
    The Id of ALB instance. Works only on modified scenes.
    defence_mode int
    Set the protection mode for exceptional ALB instances. Works only on modified scenes.
    instance_id str
    The Id of ALB instance. Works only on modified scenes.
    defenceMode Number
    Set the protection mode for exceptional ALB instances. Works only on modified scenes.
    instanceId String
    The Id of ALB instance. Works only on modified scenes.

    WafDomainProtocolPorts, WafDomainProtocolPortsArgs

    Http List<int>
    Ports supported by the HTTP protocol.
    Https List<int>
    Ports supported by the HTTPs protocol.
    Http []int
    Ports supported by the HTTP protocol.
    Https []int
    Ports supported by the HTTPs protocol.
    http List<Integer>
    Ports supported by the HTTP protocol.
    https List<Integer>
    Ports supported by the HTTPs protocol.
    http number[]
    Ports supported by the HTTP protocol.
    https number[]
    Ports supported by the HTTPs protocol.
    http Sequence[int]
    Ports supported by the HTTP protocol.
    https Sequence[int]
    Ports supported by the HTTPs protocol.
    http List<Number>
    Ports supported by the HTTP protocol.
    https List<Number>
    Ports supported by the HTTPs protocol.

    WafDomainTlsFieldsConfig, WafDomainTlsFieldsConfigArgs

    HeadersConfig WafDomainTlsFieldsConfigHeadersConfig
    The configuration of Headers. Works only on modified scenes.
    HeadersConfig WafDomainTlsFieldsConfigHeadersConfig
    The configuration of Headers. Works only on modified scenes.
    headersConfig WafDomainTlsFieldsConfigHeadersConfig
    The configuration of Headers. Works only on modified scenes.
    headersConfig WafDomainTlsFieldsConfigHeadersConfig
    The configuration of Headers. Works only on modified scenes.
    headers_config WafDomainTlsFieldsConfigHeadersConfig
    The configuration of Headers. Works only on modified scenes.
    headersConfig Property Map
    The configuration of Headers. Works only on modified scenes.

    WafDomainTlsFieldsConfigHeadersConfig, WafDomainTlsFieldsConfigHeadersConfigArgs

    Enable int
    Whether the log contains this field. Works only on modified scenes.
    ExcludedKeyLists List<string>
    For the use of composite fields, exclude the fields in the keyword list from the JSON of the fields. Works only on modified scenes.
    StatisticalKeyLists List<string>
    Create statistical indexes for the fields of the list. Works only on modified scenes.
    Enable int
    Whether the log contains this field. Works only on modified scenes.
    ExcludedKeyLists []string
    For the use of composite fields, exclude the fields in the keyword list from the JSON of the fields. Works only on modified scenes.
    StatisticalKeyLists []string
    Create statistical indexes for the fields of the list. Works only on modified scenes.
    enable Integer
    Whether the log contains this field. Works only on modified scenes.
    excludedKeyLists List<String>
    For the use of composite fields, exclude the fields in the keyword list from the JSON of the fields. Works only on modified scenes.
    statisticalKeyLists List<String>
    Create statistical indexes for the fields of the list. Works only on modified scenes.
    enable number
    Whether the log contains this field. Works only on modified scenes.
    excludedKeyLists string[]
    For the use of composite fields, exclude the fields in the keyword list from the JSON of the fields. Works only on modified scenes.
    statisticalKeyLists string[]
    Create statistical indexes for the fields of the list. Works only on modified scenes.
    enable int
    Whether the log contains this field. Works only on modified scenes.
    excluded_key_lists Sequence[str]
    For the use of composite fields, exclude the fields in the keyword list from the JSON of the fields. Works only on modified scenes.
    statistical_key_lists Sequence[str]
    Create statistical indexes for the fields of the list. Works only on modified scenes.
    enable Number
    Whether the log contains this field. Works only on modified scenes.
    excludedKeyLists List<String>
    For the use of composite fields, exclude the fields in the keyword list from the JSON of the fields. Works only on modified scenes.
    statisticalKeyLists List<String>
    Create statistical indexes for the fields of the list. Works only on modified scenes.

    Import

    WafDomain can be imported using the id, e.g.

    $ pulumi import volcengine:waf/wafDomain:WafDomain default resource_id

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    volcengine volcengine/pulumi-volcengine
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the volcengine Terraform Provider.
    volcengine logo
    Volcengine v0.0.34 published on Wednesday, Jul 2, 2025 by Volcengine
    volcengine/pulumi-volcengine