Web App Firewall (WAF)

Creating and Using a WAF in DuploCloud AWS
The creation of a Web Application Firewall (WAF) is a one-time process. Create a WAF in the Azure Console, fetch the ID/ARN, and update the Plan in DuploCloud. Once updated, the WAF can be attached to the Load Balancer.

Creating a Web Application Firewall (WAF)

When you create a WAF in DuploCloud, an entry is added to the AWS Web ACL. You use this entry in a later step to attach an ALB Load Balancer to your WAF.
  1. 1.
    In the DuploCloud Portal, navigate to Administrator -> Plans. The Plans page displays.
    Plans page with WAF tab
  2. 2.
    From the Name column, select the Plan you want to update.
  3. 3.
    Click Add. The Add WAF pane displays.
    Add WAF pane
  4. 4.
    In the Name field, type the name of your WAF.
  5. 5.
    In the WAF ARN field, enter the Amazon Resource Name (ARN).
  6. 6.
    Click Create.

Attaching the WAF to a Load Balancer

Only ALB Load Balancers can be attached to a WAF.
  1. 1.
    If you don't yet have an Application Load Balancer (ALB), create one.
  2. 2.
    In the DuploCloud Portal, navigate to DevOps -> Containers -> EKS/Native.
  3. 3.
    From the Name column, select the Service running the ALB Load Balancer.
  4. 4.
    Click the Load Balancers tab.
  5. 5.
    Use the LB Listeners card to add a Load Balancer Listener for your ALB Load Balancer. If you have a Load Balancer Listener for ALB, click the Edit Icon (
    ) to display or Update details, as in the graphic below.
    Edit Load Balancer Listener pane displaying details of an ALB Load Balancer for a WAF
  6. 6.
    In the Other Settings card, click Edit. The Other Load Balancer Settings pane displays.
    Other Load Balancer Settings for attaching a WAF (via the Web ACL field) to an ALB Load Balancer
  7. 7.
    From the Web ACL list box, select a WAF that you have added to DuploCloud.
  8. 8.
    Complete the other required fields in the Other Load Balancer Settings pane.
  9. 9.
    Click Update.

Analyzing inbound traffic with the WAF dashboard

DuploCloud also provides a WAF Dashboard through which you can analyze the traffic that is coming in and the requests that are blocked. The Dashboard can be accessed from the left navigation panel: Security > WAF.
WAF Dashboard