Creating a SolidWall WAF profile
Note
SolidWall WAF is currently at the Preview stage.
A SolidWall WAF profile groups applications to set a unified service plan and peak load for them. Each application integrates the domains of a single website or service.
Setup steps
To get started with SolidWall WAF:
- Select an existing Smart Web Security proxy server or create a new one. It receives user requests and forwards them to your web application server.
- Add your website or API domain to the proxy server. Specify a single target and version
HTTP/1.1for connecting to it. If the domain is already added, check these settings. - Connect a security profile with at least one Smart Protection rule to the domain. Employ an existing profile or create a new one.
- Configure DNS so that the domain’s A record points to the proxy server’s IP address. Verify the target is available and make sure your website or API responds to requests via the domain name.
- Create a SolidWall WAF profile with the required service plan and load.
- Create an application in the profile and connect domains to it so their traffic starts flowing into SolidWall WAF.
You can create the domain and the SolidWall WAF profile in any order.
Create a SolidWall WAF profile
To create a profile:
-
Make sure your account has the smart-web-security.editor role for the folder housing your SolidWall WAF resources.
Creating a proxy server also requires the iam.serviceAccounts.admin role for the folder.
When first creating a profile, you need the smart-web-security.admin role for at least one cloud in the organization. Otherwise, you will not be able to accept the HTTP request data usage agreement. The agreement is accepted once per organization. To revoke consent, contact support.
-
In the management console, select the folder.
-
Navigate to Smart Web Security.
-
In the left-hand panel, select WAF profiles.
-
If you still do not have access to SolidWall WAF, fill out the access request form: describe how you intend to use SolidWall WAF, submit your request, and wait for access to be granted.
-
When creating the first profile, accept the HTTP request data usage agreement.
-
Click Create profile and select SolidWall WAF profile.
-
Name the profile.
-
Optionally, provide a description for the profile.
-
Under Peak load on applications, select the desired RPS tier to accommodate your needs. Take into account the total load on all applications in the profile and focus on the peak daily RPS.
-
Under Service plan, select the service plan.
-
Check the selected plan and load in the cost calculator to the right of the form.
-
Click Create.
-
In the Review the payment procedure window, read the terms and click Continue.
The new profile will appear in the list. Now you can add your application and connect a domain to it.