A WAF That Tells You the Origin Can Still Be Reached Around It

A domain on a Tencent Cloud SaaS WAF, rules set to block, with block and allow lists. It reads back the CNAME, the mode the WAF reports and the addresses the WAF forwards from, so the origin can refuse everything else. An allowlist here lets addresses through; it does not make a site private. The client IP is taken from the connection unless you say a proxy sits in front.

This is the operations reference: version drift, dependants and neighbours. For what the module provisions, its inputs and outputs, and how to buy it, see the catalogue entry.

terraformTencent CloudSecurity & Identityv1.0.0static-validated

Provider drift

This artifact declares no Terraform provider requirements, so there is nothing to drift. Provider freshness applies to Terraform and OpenTofu modules.

What depends on this

No reference architecture names this module, so changing it affects only configurations that reference it directly.

Nearest alternatives

Same cloud, same category. These are what you would weigh against it without changing provider.

A Bastion That Carves a Range Out of Your VPC and Caps What You Can Register A CAM Role a Service May Assume, No Console Login, with a Custom Policy A Customer User Store That Admits It Does Not Configure Sign-In A Risk Scan Whose Settings Are Words Instead of Digits A Security Group Written as One Ordered Rule Set with a Deny at the End Edge Policies plus the Switch Without Which They Inspect Nothing at All

The same job on other clouds

WAF & Edge Security on other providers. Useful when the cloud is still open, or when you are pricing a second one. How far a comparison like that can be trusted is covered in comparing clouds.

A Dedicated WAF in Your VPC, a Policy that Blocks, and the Domain with TLS 1.2Huawei Cloud A WAF Policy that Blocks rather than NarratesAzure A WAF That Tells You Removing It Leaves It RunningIBM Cloud A WAF that Blocks rather than NarratesOracle Cloud A Zone WAF Whose Managed Rulesets Actually ExecuteCloudflare Akamai App & API Protector (WAF)Akamai Cloud Armor Security Policy (WAF)Google Cloud WAF 3.0 in Front of a Domain: HTTPS Only, TLS 1.2+, the Origin over HTTPSAlibaba Cloud WAFv2 Web ACL (managed rules + rate limit)AWS

Installing it

module "tencent_waf" {
  source  = "www.iac-bazaar.com/iac-bazaar/tencent-waf/tencentcloud"
  version = "1.0.0"
}

A registry token is required for the download itself. Installing through the registry protocol has the two credential steps.