Contents
Licenses and add-ons
What the license is
The controller registers with the license service using a license code and verifies it regularly. The license decides the number of nodes, the features, and add-ons such as WAF Plus and Rules Update.
Check the license state
Open the License page in the panel to see the license state, its expiry, and whether each add-on is enabled. License changes go through your provider; after the License page is updated, the matching settings appear directly.
Network and grace
The controller must be able to reach the license service. When fetching keeps failing:
- Licensed features keep working until 7 days after the last successful fetch;
- After the license lapses there is a grace period, and the panel shows "License grace: N hours left";
- When grace ends it becomes "License locked": adding sites, layer-4 forwards, nodes and similar actions are unavailable, while existing business keeps serving.
Caution When a node fails to verify its license itself (not received, expired or failed validation), the node keeps serving as usual. Check the License page and the controller's connectivity to the license platform; once restored, the controller renews the node's license automatically.
Add-ons
- WAF Plus: deeper inspection, signature databases and the security posture big screen. At expiry it enters a read-only grace period (settings can only be turned off or weakened), then falls back to the basic edition; settings are kept and everything returns after renewal.
- WAF Rules Update: rules synced hourly. At expiry they stay at the last version.
- L2 origin layer: edge nodes ask L2 before the origin, which lowers origin load.
For the differences, see Paid protection add-ons.
Tip Reminders are sent daily from 7 days before the license, WAF Plus, Rules Update or IP geolocation expires; plan renewal so the lock never triggers.