This topic describes the billing methods, instance specifications, and expiration of Anti-DDoS Pro instances.

Basic protection (monthly subscription)

Basic protection bandwidth Line Price (standard function plan) Price (enhanced function plan)
30 Gbit/s Eight BGP lines USD 3,120/month USD 4,320/month
60 Gbit/s Eight BGP lines USD 7,020/month USD 8,220/month
100 Gbit/s Eight BGP lines USD 49,230/year (discount price) USD 63,630/year (discount price)
300 Gbit/s Eight BGP lines USD 79,260/year (discount price) USD 93,660/year (discount price)
400 Gbit/s Eight BGP lines USD 145,300/year (discount price) USD 159,700/year (discount price)
500 Gbit/s Eight BGP lines USD 563,430/year (discount price) USD 577,830/year (discount price)
600 Gbit/s Eight BGP lines USD 670,610/year (discount price) USD 685,010/year (discount price)
Note
  • For more information about the differences between the standard and enhanced function plans, see Function plan.
  • If you need higher protection bandwidth, you can submit a ticket.
The following table shows the default specifications of Anti-DDoS Pro instances. If the default specifications cannot meet your service needs, you can upgrade the instance or scale up the specifications when you purchase instances.
Item Description Default value Price for extra specifications
Ports The number of TCP and UDP ports that the instance can protect. 50 Every 5 additional ports: USD 7.5/month
Domains The number of HTTP and HTTPS domain names that the instance can protect. 50
Note The domain names that you add to an instance can belong to no more than five top-level domain names.
  • Standard function plan: USD 4.5 per month for every 10 additional domain names
  • Enhanced function plan: USD 7.5 per month for every 10 additional domain names
Note For every 10 additional domain names, the total number of supported top-level domain names increases by one.
Clean Bandwidth The maximum bandwidth of your services if no attacks are detected 100 Mbit/s
  • 100 Mbit/s < Bandwidth ≤ 600 Mbit/s: You are charged USD 15 per Mbit/s for the bandwidth over the default bandwidth. The additional fees are added onto your regular monthly fee.
  • 600 Mbit/s < Bandwidth ≤ 5,000 Mbit/s: You are charged USD 11 per Mbit/s for the bandwidth over 600 Mbit/s. The additional fees are added onto your regular monthly fee.
QPS The maximum number of HTTP and HTTPS requests that the instance can concurrently process per second if no attacks are detected. 3,000 Every 100 additional QPS: USD 1.5/month
Note
  • For more information about clean bandwidth, see Clean bandwidth.
  • For more information about domain names, seeDomains.

Burstable protection (pay-as-you-go on a daily basis)

Burstable protection of Anti-DDoS Pro is provided to protect your services when the highest peak bandwidth of DDoS attacks exceeds the basic protection bandwidth. Burstable protection is charged based on the difference between the peak bandwidth of DDoS attacks and the basic protection bandwidth during a day.

Note If you set the burstable bandwidth and basic protection bandwidth to the same value, no additional fees are incurred but your Anti-DDoS Pro instance provides no burstable protection.

For example, the basic protection bandwidth of your Anti-DDoS Pro instance is 30 Gbit/s and the burstable bandwidth is 100 Gbit/s. Two DDoS attacks are launched at the instance on the same day. The peak bandwidths of the two DDoS attacks are 80 Gbit/s and 40 Gbit/s. Burstable protection is charged based on the higher peak bandwidth (80 Gbit/s). The difference between the peak bandwidth and basic protection bandwidth (30 Gbit/s) is 50 Gbit/s. Based on the price tier table in the following table, Anti-DDoS Pro charges USD 960 for burstable protection.

Note
  • No fees are incurred for burstable protection if the highest peak bandwidth of DDoS attacks in a day is lower than the basic protection bandwidth.
  • No fees are incurred for burstable protection if the highest peak bandwidth of DDoS attacks on the current day is higher than the burstable bandwidth. Therefore, if the domain names protected by an Anti-DDoS Pro instance enter the black hole state, no additional fees are incurred.
  • Bill statements for the burstable protection of a day are generated between 8:00 to 9:00 the next day.
Bandwidth difference Price
0 Gbit/s < Bandwidth difference ≤ 5 Gbit/s USD 120/day
5 Gbit/s < Bandwidth difference ≤ 10 Gbit/s USD 180/day
10 Gbit/s < Bandwidth difference ≤ 20 Gbit/s USD 330/day
20 Gbit/s < Bandwidth difference ≤ 30 Gbit/s USD 540/day
30 Gbit/s < Bandwidth difference ≤ 40 Gbit/s USD 730/day
40 Gbit/s < Bandwidth difference ≤ 50 Gbit/s USD 960/day
50 Gbit/s < Bandwidth difference ≤ 60 Gbit/s USD 1,170/day
60 Gbit/s < Bandwidth difference ≤ 70 Gbit/s USD 1,380/day
70 Gbit/s < Bandwidth difference ≤ 80 Gbit/s USD 1,590/day
80 Gbit/s < Bandwidth difference ≤ 100 Gbit/s USD 1,770/day
100 Gbit/s < Bandwidth difference ≤ 150 Gbit/s USD 2,190/day
150 Gbit/s < Bandwidth difference ≤ 200 Gbit/s USD 3,240/day
200 Gbit/s < Bandwidth difference ≤ 300 Gbit/s USD 4,200/day
300 Gbit/s < Bandwidth difference ≤ 400 Gbit/s USD 6,000/day
400 Gbit/s < Bandwidth difference ≤ 500 Gbit/s USD 7,510/day
500 Gbit/s < Bandwidth difference ≤ 600 Gbit/s USD 9,010/day
600 Gbit/s < Bandwidth difference ≤ 700 Gbit/s USD 10,510/day
700 Gbit/s < Bandwidth difference ≤ 800 Gbit/s USD 12,010/day
800 Gbit/s < Bandwidth difference ≤ 900 Gbit/s USD 13,510/day
900 Gbit/s < Bandwidth difference ≤ 1,000 Gbit/s USD 15,010/day
1,000 Gbit/s < Bandwidth difference ≤ 1,100 Gbit/s USD 16,510/day
1,100 Gbit/s < Bandwidth difference ≤ 1,200 Gbit/s USD 18,010/day
1,200 Gbit/s < Bandwidth difference ≤ 1,300 Gbit/s USD 19,510/day
1,300 Gbit/s < Bandwidth difference ≤ 1,400 Gbit/s USD 21,010/day
1,400 Gbit/s < Bandwidth difference ≤ 1,500 Gbit/s USD 22,520/day

Refunding

The subscription fees paid for your Anti-DDoS Pro instances are non-refundable.

Instance expiration

  • When an Anti-DDoS Pro instance expires, the protection bandwidth immediately reduces to 5 Gbit/s and burstable protection becomes unavailable. However, Anti-DDoS Pro still forwards your traffic for seven days after the expiration.
  • Seven days after the expiration, the instance stops forwarding traffic.
    • After you renew an instance, it continues to forward traffic, and Anti-DDoS Pro is available.
    • Alibaba Cloud reclaims instance resources regularly. If you do not renew the instance within seven days after it expires, the instance may be automatically released.
    Note Your services may be interrupted if Anti-DDoS Pro stops forwarding traffic. We recommend that you read the notifications on instance expiration and renew instances as soon as possible or enable automatic renewal.
    A notification on instance expiration
  • Alibaba Cloud sends you notifications through SMS, emails, and internal messages when an instance is about to expire, expires, and is to be released.
    • You receive a notification seven, three, and one day before your instance expires to remind you of instance expiration and renewals.
    • After your instance expires, Alibaba Cloud notifies you that your instance is still available for seven days. If you want to renew it within seven days, you must renew it promptly.
    • If you do not renew your instance within seven days after it expires, Alibaba Cloud notifies you that the instance has stopped forwarding traffic.