Can WAF Protect a Private IP Address?

No. WAF cannot obtain the private IP address of the user site because Virtual Private Cloud (VPC) is isolated.