WAF 3.0 in Front of a Domain: HTTPS Only, TLS 1.2+, the Origin over HTTPS

WAF 3.0 in front of a domain on the pay-as-you-go instance the account has (adopted, not purchased), listening on HTTPS only with your certificate (plain HTTP by name), TLS 1.2 and 1.3 with a modern cipher suite, HTTP/2 and IPv6, the client address trusted from the first X-Forwarded-For hop, and origins reached over HTTPS with SNI, keepalive and retries.

This is the operations reference: version drift, dependants and neighbours. For what the module provisions, its inputs and outputs, and how to buy it, see the catalogue entry.

terraformAlibaba CloudSecurity & Identityv1.0.0static-validated

Provider drift

This artifact declares no Terraform provider requirements, so there is nothing to drift. Provider freshness applies to Terraform and OpenTofu modules.

What depends on this

No reference architecture names this module, so changing it affects only configurations that reference it directly.

Nearest alternatives

Same cloud, same category. These are what you would weigh against it without changing provider.

A Bastion That Says Out Loud What Owning It Does Not Do A RAM Role a Service May Assume, with a Custom Policy and an Hour-Long Session A Security Group Whose Members Cannot Reach Each Other Unless Told Brute-Force Rules That Are Reachable, and Baseline Checks That Only Report Cloud Firewall Policy in a Declared Order, with an IPS That Blocks Rather Than Watches

The same job on other clouds

WAF & Edge Security on other providers. Useful when the cloud is still open, or when you are pricing a second one. How far a comparison like that can be trusted is covered in comparing clouds.

A Dedicated WAF in Your VPC, a Policy that Blocks, and the Domain with TLS 1.2Huawei Cloud A WAF Policy that Blocks rather than NarratesAzure A WAF that Blocks rather than NarratesOracle Cloud A Zone WAF Whose Managed Rulesets Actually ExecuteCloudflare Akamai App & API Protector (WAF)Akamai Cloud Armor Security Policy (WAF)Google Cloud WAFv2 Web ACL (managed rules + rate limit)AWS

Installing it

module "alicloud_waf" {
  source  = "www.iac-bazaar.com/iac-bazaar/alicloud-waf/alicloud"
  version = "1.0.0"
}

A registry token is required for the download itself. Installing through the registry protocol has the two credential steps.