Setup

• CAA Records and Certificate Renewal
• Changing Your Domain
• Changing Your Heroku App Name
• Choosing a Domain
• Common WAF Use Cases
• DNS CNAME and A Records
• Domain Verification CNAME Questions
• ExpeditedWAF Setup and Onboarding
• File Upload API Blocked
• Heroku ACM and the WAF
• Heroku App URL and Custom Domains
• Heroku Private Space Trusted IP Range Configuration
• HTTP_X_FORWARDED_FOR Header Handling
• Maximum Request Size
• Pentesting Considerations
• Removing the WAF
• SNI (Server Name Indication) Requirement
• SSL Certificate Renewal Process
• SSL Key Requirements
• Troubleshooting 403 WAF Blocks
• Troubleshooting 502 and 504 Errors
• Troubleshooting API Blocks
• Troubleshooting SSL Certificate Issues
• Troubleshooting WAF Provisioning
• Understanding HTTP Responses and Network Timeouts
• Upgrading Your WAF Plan
• Verifying SSL Prior to DNS Rollover
• WAF and Email Security
• WAF and Outbound Connections
• Websockets
• Why Do I Need to Verify my Domain?
• Wildcard Certificate Renewal