Web App Firewall (WAF)

Creating and Using a WAF in DuploCloud AWS

The creation of a Web Application Firewall (WAF) is a one-time process. Create a WAF in the public cloud Console, fetch the ID/ARN, and update the Plan in DuploCloud. Once updated, the WAF can be attached to the Load Balancer.

Creating a Web Application Firewall (WAF)

When you create a WAF in DuploCloud, an entry is added to the Web ACL. You use this entry in a later step to attach an ALB Load Balancer to your WAF.

1. In the DuploCloud Portal, navigate to Administrator -> Plans. The Plans page displays.

2. From the Name column, select the Plan you want to update.

3. Click the WAF tab.

   

   The Plans page WAF tab
4. Click Add. The Add WAF pane displays.

The Add WAF pane

1. In the Name field, type the name of your WAF.

2. In the WAF ARN field, enter the Amazon Resource Name (ARN).

3. Optionally, enter your WAF Dashboard URL.

4. Click Create.

Attaching the WAF to a Load Balancer

Only ALB Load Balancers can be attached to a WAF.

1. If you don't yet have an Application Load Balancer (ALB), create one.

2. In the Other Settings card, click Edit. The Other Load Balancer Settings pane displays.

   

   Other Load Balancer Settings for attaching a WAF (via the Web ACL field) to an ALB Load Balancer
3. From the Web ACL list box, select a WAF that you have added to DuploCloud.

4. Complete the other required fields in the Other Load Balancer Settings pane.

5. Click Update.

Updating an existing WAF

1. From the DuploCloud portal, navigate to Administrator -> Plans.

2. From the Name column, select the Plan associated with the WAF you want to update.

3. Click the WAF tab.

4. Click on the menu icon () in the row of the existing WAF that you want to update, and select Edit. The Update WAF YOUR_WAF_NAME pane displays.

   
5. Update the Name and/or WAF ARN.

6. Update or add a WAF Dashboard URL.

7. Click Update. The WAF is updated.

Analyzing inbound traffic with the WAF dashboard

DuploCloud also provides a WAF Dashboard through which you can analyze the traffic that is coming in and the requests that are blocked. The Dashboard can be accessed from the left navigation panel: Observability -> WAF.

WAF Dashboard