You can attach an IPsec-VPN connection to a VPN gateway instance or a transit router instance. Billing for the IPsec-VPN connection depends on the resource to which it is attached. This topic describes the billing rules for IPsec-VPN connections attached to different resources.
Attach to an enhanced VPN gateway instance
Billing rules
For enhanced VPN gateway instances, you are charged for each attached IPsec-VPN connection. The billable items are the IPsec-VPN connection fee and the Internet traffic fee.
Billable items
Billable item | Unit price | Billing method | Billing cycle |
IPsec-VPN connection fee | 0.1 USD/connection/hour | Pay-as-you-go You are charged for the resources that you use. You use resources first and pay for them later. | 1 hour If you use a resource for less than one hour, the usage is rounded up to one hour. |
Internet traffic fee (charged by CDT) | Charges are pay-as-you-go and apply only to outbound traffic. | 1 hour If you use a resource for less than one hour, the usage is rounded up to one hour. |
Billing example
As shown in the preceding figure, an enterprise has two data centers in Singapore. Each data center connects to an enhanced VPN gateway in the Singapore region using an Internet-based IPsec-VPN connection. This setup enables communication with a VPC. Assume that, during the 24-hour period from 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023, IPsec-VPN Connection 1 sends 250 GB of traffic to Data Center 1 and IPsec-VPN Connection 2 sends 100 GB of traffic to Data Center 2. The fees generated for the IPsec-VPN connections during this period are calculated as follows:
IPsec-VPN connection fee = 0.1 USD/connection/hour × 24 hours × 2 IPsec-VPN connections = 4.8 USD
CDT traffic fee = 0.1 USD/GB × (250 + 100 − 200) GB = 15 USD (For regions outside the Chinese mainland, CDT provides 200 GB of free traffic per month.)
Total fee = IPsec-VPN connection fee + CDT traffic fee = 19.8 USD
Attach to a VPN gateway
Billing rules
Feature enabled for the VPN gateway instance | Billable item | Billing method | Billing cycle |
Only the IPsec-VPN feature is enabled |
| Pay-as-you-go You use resources first and pay for them later. | 1 hour Usage less than one hour is rounded up to one hour. |
Both the SSL-VPN and IPsec-VPN features are enabled |
|
Billable items
The prices in the following tables are for reference only. The prices on the buy page prevail.
The maximum bandwidth of VPN gateway instances in the China (Nanjing - Local Region) region is 500 Mbps.
In the following tables, "Not supported" indicates that the bandwidth specification is not supported by VPN gateway instances in the corresponding region.
IPsec-VPN and SSL-VPN instance fees
VPN Gateway offers multiple bandwidth specifications. For the same bandwidth specification in the same region, the IPsec-VPN instance fee and the SSL-VPN instance fee are identical. Unit prices are listed in the following table. Unit: USD/hour.
Region | 10 Mbps | 100 Mbps | 200 Mbps | 500 Mbps | 1000 Mbps |
The Chinese mainland | 0.059 | 0.209 | 0.209 | 0.767 | 0.767 |
China (Hong Kong) | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Singapore | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Japan (Tokyo) | 0.091 | 0.275 | 0.275 | 0.767 | 0.767 |
South Korea (Seoul) | 0.091 | 0.275 | 0.275 | 0.767 | 0.767 |
Thailand (Bangkok) | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Philippines (Manila) | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Malaysia (Kuala Lumpur) | 0.080 | 0.240 | 0.240 | 0.878 | 0.878 |
Indonesia (Jakarta) | 0.086 | 0.262 | 0.262 | 0.734 | 0.734 |
US (Virginia) | 0.066 | 0.295 | 0.295 | 0.826 | 0.826 |
US (Silicon Valley) | 0.082 | 0.392 | 0.392 | 1.095 | 1.095 |
Germany (Frankfurt) | 0.077 | 0.359 | 0.359 | 1.003 | 1.003 |
UK (London) | 0.077 | 0.359 | 0.359 | 1.003 | 1.003 |
Mexico | 0.066 | 0.295 | 0.295 | 0.826 | 0.826 |
UAE (Dubai) | 0.090 | 0.420 | 0.420 | 1.231 | Not supported |
SAU (Riyadh - Partner Region) | 0.104 | 0.314 | 0.314 | 1.230 | Not supported |
Traffic fee
You are charged for traffic sent from IPsec-VPN connections to data centers. Traffic sent from data centers to IPsec-VPN connections is free. Unit: USD/GB.
Region | Unit price |
The Chinese mainland | 0.125 |
China (Hong Kong) | 0.153 |
Singapore | 0.117 |
Japan (Tokyo) | 0.120 |
South Korea (Seoul) | 0.125 |
Thailand (Bangkok) | 0.117 |
Philippines (Manila) | 0.110 |
Malaysia (Kuala Lumpur) | 0.125 |
Indonesia (Jakarta) | 0.110 |
US (Virginia) | 0.078 |
US (Silicon Valley) | 0.078 |
Germany (Frankfurt) | 0.070 |
UK (London) | 0.070 |
Mexico | 0.078 |
UAE (Dubai) | 0.447 |
SAU (Riyadh - Partner Region) | 0.140 |
SSL-VPN specification fee
After enabling the SSL-VPN feature, you must select a specification based on the maximum number of concurrent client connections. The following table lists the hourly prices for different specifications across regions. Unit: USD/hour.
Region | 5 | 10 | 20 | 50 | 100 | 500 | 1000 |
The Chinese mainland | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
China (Hong Kong) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Singapore | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Japan (Tokyo) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
South Korea (Seoul) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Thailand (Bangkok) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Philippines (Manila) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Malaysia (Kuala Lumpur) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Indonesia (Jakarta) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
US (Virginia) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
US (Silicon Valley) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Germany (Frankfurt) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
UK (London) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Mexico | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
UAE (Dubai) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
SAU (Riyadh - Partner Region) | 0.058 | 0.089 | 0.14 | 0.271 | 0.394 | 1.308 | 1.856 |
Billing example
As shown in the preceding figure, a data center in the Chinese mainland communicates with a VPC through an IPsec-VPN connection. Assume that only the IPsec-VPN feature is enabled for the VPN gateway, the bandwidth of the VPN gateway instance is 10 Mbps, and the total traffic sent from the VPN gateway instance to the data center is 10 GB. During the 24-hour period from 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023, the fees generated for using the IPsec-VPN connection are calculated as follows:
IPsec-VPN instance fee = 0.059 USD/hour × 24 hours = 1.416 USD
Traffic fee = 0.125 USD/GB × 10 GB = 1.25 USD
Total fee = IPsec-VPN instance fee + Traffic fee = 2.666 USD
Attach to a transit router
Billing rules
Network type of the IPsec-VPN connection | Billable item | Billing method | Billing cycle |
Internet |
| Pay-as-you-go You are charged for the resources that you use. You use resources first and pay for them later. | 1 hour If you use a resource for less than one hour, the usage is rounded up to one hour. |
Private network |
|
Billable items
The prices in the following tables are for reference only. The prices on the buy page prevail.
This topic covers only the IPsec-VPN connection instance fee and the traffic fee for scenarios where an IPsec-VPN connection is attached to a transit router instance. For information about the transit router connection fee and the transit router traffic processing fee, see Cloud Enterprise Network billing.
IPsec-VPN connection instance fee
The IPsec-VPN connection instance fee is USD 0.06 per instance per hour in the UAE (Dubai) and SAU (Riyadh - Partner Region) regions. The fee is USD 0.05 per instance per hour in all other regions.
Traffic fee
The system charges for the total traffic sent from the IPsec-VPN connection to the data center. The charge unit is USD/GB. Traffic sent from the data center to the IPsec-VPN connection is free of charge.
Region | Price (USD/GB) |
The Chinese mainland | 0.125 |
China (Hong Kong) | 0.153 |
Singapore | 0.117 |
Japan (Tokyo) | 0.120 |
South Korea (Seoul) | 0.125 |
Thailand (Bangkok) | 0.117 |
Philippines (Manila) | 0.110 |
Malaysia (Kuala Lumpur) | 0.125 |
Indonesia (Jakarta) | 0.110 |
US (Virginia) | 0.078 |
US (Silicon Valley) | 0.078 |
Germany (Frankfurt) | 0.070 |
UK (London) | 0.070 |
Mexico | 0.078 |
UAE (Dubai) | 0.12 |
SAU (Riyadh - Partner Region) | 0.140 |
Billing example
As shown in the preceding figure, a data center in the Chinese mainland connects to a transit router instance over an Internet-based IPsec-VPN connection. This setup enables communication with a VPC. Assume that 5 GB of traffic is sent to the transit router instance and 10 GB of traffic is sent to the data center over the IPsec-VPN connection. During the 24-hour period from 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023, the fees generated for the IPsec-VPN connection are calculated as follows:
IPsec-VPN connection instance fee = 0.05 USD/connection/hour × 24 hours × 1 IPsec-VPN connection = 1.2 USD
Traffic fee = 0.125 USD/GB × 10 GB = 1.25 USD
Transit router connection fee = 0.05 USD/connection/hour × 24 hours × 1 IPsec-VPN connection = 1.2 USD
Transit router traffic processing fee = 0.02 USD/GB × 5 GB = 0.1 USD
Total fee = IPsec-VPN connection instance fee + Traffic fee + Transit router connection fee + Transit router traffic processing fee = 3.75 USD
View bills
Log on to the Alibaba Cloud Expenses and Costs console. In the left navigation pane, choose , and refer to Bill Management.