diff --git a/pkg/serverconfigs/firewallconfigs/firewall_scope.go b/pkg/serverconfigs/firewallconfigs/firewall_scope.go
new file mode 100644
index 0000000..853b15c
--- /dev/null
+++ b/pkg/serverconfigs/firewallconfigs/firewall_scope.go
@@ -0,0 +1,10 @@
+// Copyright 2021 Liuxiangchao iwind.liu@gmail.com. All rights reserved.
+
+package firewallconfigs
+
+type FirewallScope = string
+
+const (
+	FirewallScopeGlobal  FirewallScope = "global"
+	FirewallScopeService FirewallScope = "service"
+)
diff --git a/pkg/serverconfigs/firewallconfigs/http_firewall_action_block.go b/pkg/serverconfigs/firewallconfigs/http_firewall_action_block.go
index 0a22709..442031e 100644
--- a/pkg/serverconfigs/firewallconfigs/http_firewall_action_block.go
+++ b/pkg/serverconfigs/firewallconfigs/http_firewall_action_block.go
@@ -2,8 +2,9 @@ package firewallconfigs
 
 // HTTPFirewallBlockAction url client configure
 type HTTPFirewallBlockAction struct {
-	StatusCode int    `yaml:"statusCode" json:"statusCode"`
-	Body       string `yaml:"body" json:"body"` // supports HTML
-	URL        string `yaml:"url" json:"url"`
-	Timeout    int32  `yaml:"timeout" json:"timeout"`
+	StatusCode int           `yaml:"statusCode" json:"statusCode"`
+	Body       string        `yaml:"body" json:"body"` // supports HTML
+	URL        string        `yaml:"url" json:"url"`
+	Timeout    int32         `yaml:"timeout" json:"timeout"`
+	Scope      FirewallScope `yaml:"scope" json:"scope"`
 }
diff --git a/pkg/serverconfigs/firewallconfigs/http_firewall_action_get_302.go b/pkg/serverconfigs/firewallconfigs/http_firewall_action_get_302.go
index 9568939..d3c4eff 100644
--- a/pkg/serverconfigs/firewallconfigs/http_firewall_action_get_302.go
+++ b/pkg/serverconfigs/firewallconfigs/http_firewall_action_get_302.go
@@ -3,5 +3,6 @@
 package firewallconfigs
 
 type HTTPFirewallGet302Action struct {
-	Life int32 `yaml:"life" json:"life"`
+	Life  int32         `yaml:"life" json:"life"`
+	Scope FirewallScope `yaml:"scope" json:"scope"`
 }
diff --git a/pkg/serverconfigs/firewallconfigs/http_firewall_action_post_307.go b/pkg/serverconfigs/firewallconfigs/http_firewall_action_post_307.go
index 0f4ab6a..8b24c15 100644
--- a/pkg/serverconfigs/firewallconfigs/http_firewall_action_post_307.go
+++ b/pkg/serverconfigs/firewallconfigs/http_firewall_action_post_307.go
@@ -3,5 +3,6 @@
 package firewallconfigs
 
 type HTTPFirewallPost307Action struct {
-	Life int32 `yaml:"life" json:"life"`
+	Life  int32         `yaml:"life" json:"life"`
+	Scope FirewallScope `yaml:"scope" json:"scope"`
 }
diff --git a/pkg/serverconfigs/firewallconfigs/http_firewall_action_record_ip.go b/pkg/serverconfigs/firewallconfigs/http_firewall_action_record_ip.go
index 3109b6d..56393fe 100644
--- a/pkg/serverconfigs/firewallconfigs/http_firewall_action_record_ip.go
+++ b/pkg/serverconfigs/firewallconfigs/http_firewall_action_record_ip.go
@@ -3,8 +3,9 @@
 package firewallconfigs
 
 type HTTPFirewallRecordIPAction struct {
-	Type     string `yaml:"type" json:"type"`
-	IPListId int64  `yaml:"ipListId" json:"ipListId"`
-	Level    string `yaml:"level" json:"level"`
-	Timeout  int32  `yaml:"timeout" json:"timeout"`
+	Type     string        `yaml:"type" json:"type"`
+	IPListId int64         `yaml:"ipListId" json:"ipListId"`
+	Level    string        `yaml:"level" json:"level"`
+	Timeout  int32         `yaml:"timeout" json:"timeout"`
+	Scope    FirewallScope `yaml:"scope" json:"scope"`
 }