container waf