Web App Firewall (WAF)

Creating and Using a WAF in DuploCloud AWS

The creation of a Web Application Firewall (WAF) is a one-time process. Create a WAF in the public cloud Console, fetch the ID/ARN, and update the Plan in DuploCloud. Once updated, the WAF can be attached to the Load Balancer.

Creating a Web Application Firewall (WAF)

When you create a WAF in DuploCloud, an entry is added to the Web ACL. You use this entry in a later step to attach an ALB Load Balancer to your WAF.

  1. In the DuploCloud Portal, navigate to Administrator -> Plans. The Plans page displays.

  2. From the Name column, select the Plan you want to update.

  3. Click the WAF tab.

  4. Click Add. The Add WAF pane displays.

  5. In the Name field, type the name of your WAF.

  6. In the WAF ARN field, enter the Amazon Resource Name (ARN).

  7. Optionally, enter your WAF Dashboard URL.

  8. Click Create.

Attaching the WAF to a Load Balancer

Only ALB Load Balancers can be attached to a WAF.

  1. If you don't yet have an Application Load Balancer (ALB), create one.

  2. In the Other Settings card, click Edit. The Other Load Balancer Settings pane displays.

  3. From the Web ACL list box, select a WAF that you have added to DuploCloud.

  4. Complete the other required fields in the Other Load Balancer Settings pane.

  5. Click Update.

Updating an existing WAF

  1. From the DuploCloud portal, navigate to Administrator -> Plans.

  2. From the Name column, select the Plan associated with the WAF you want to update.

  3. Click the WAF tab.

  4. Update the Name and/or WAF ARN.

  5. Update or add a WAF Dashboard URL.

  6. Click Update. The WAF is updated.

Analyzing inbound traffic with the WAF dashboard

DuploCloud also provides a WAF Dashboard through which you can analyze the traffic that is coming in and the requests that are blocked. The Dashboard can be accessed from the left navigation panel: Observability -> WAF.

Last updated


© DuploCloud, Inc. All rights reserved. DuploCloud trademarks used herein are registered trademarks of DuploCloud and affiliates