ESA plan details - Edge Security Acceleration - Alibaba Cloud Documentation Center

ESA offers four subscription plans: Entrance, Pro, Premium, and Enterprise. Choose a plan that best suits your needs.

This video shows how to choose a suitable plan.

Recommendations

Item	Entrance	Pro	Premium	Enterprise
Target users	Personal websites or small, cost-sensitive businesses	Small and medium-sized enterprises	Medium and large enterprises	Large enterprises requiring custom solutions
Price	0 USD/month	15 USD/month	USD 249 / month	Contact our sales team to customize
Plan features	Free data transfer. Free requests.	SLA commitment Accelerated API calls. Malicious scan detection and vulnerability prevention. Real-time logs. No charge for blocked data transfer. No charge for HTTPS or WAF requests.	Twice the number of security rules as the Pro plan. Bot traffic protection. Waiting Room. Version Management. No charge for blocked data transfer. No charge for HTTPS or WAF requests.	Layer 4 acceleration for TCP/UDP. Back-to-origin load balancing. Deep learning and protection. Advanced bot traffic protection. Instance-level Anti-DDoS protection.
Service-Level Agreement (SLA)	Not supported	Supported	Supported	Supported
Free accelerated traffic included in the plan (Plan fees)	None	500 GB	1500 GB	Contact our sales team to customize
Acceleration region	Outside the Chinese mainland	Global (including the Chinese mainland)	Global (including the Chinese mainland)	Global (including the Chinese mainland)
Core capabilities	Basic website management Basic security protection Configuration of a few rules Basic edge computing	In addition to the Entrance plan: More website records More rules Scheduled prefetch WAF protection such as managed rules, scan protection, origin protection, and slider CAPTCHA Cache analytics	In addition to the Pro plan: More website records More rules Rules with the regular expression operator Supports strict slider CAPTCHA Waiting room and version management	In addition to the Premium plan: Special website management features such as subdomain connection and Site Hold mode Cache persistence and caching on special ports Free wildcard certificates and client IP headers A full set of native edge security features and advanced security analytics Edge containers and Layer 4 proxy ESA expert services and more

Detailed feature comparison

Website management

Category	Feature	Entrance (0 USD/month)	Pro (15 USD/month)	Premium (249 USD/month)	Enterprise (Custom)
Websites	NS setup	Supported	Supported	Supported	Supported
	CNAME setup	Supported	Supported	Supported	Supported
	Connect a subdomain	Not supported	Supported	Supported	Supported
	Number of wildcard domain names	1	2	3	Contact our sales team to customize
	Number of websites	1	1	1	Contact our sales team to customize
	Site Hold	Not supported	Not supported	Not supported	Supported
	CNAME flattening	Supported	Supported	Supported	Supported
	3 acceleration scenarios (Web, API, and Image/Video)	Supported	Supported	Supported	Supported

DNS configuration

Category	Feature	Entrance (0 USD/month)	Pro (15 USD/month)	Premium (249 USD/month)	Enterprise (Custom)
DNS Management	Number of records per website	100	200	500	500
	12 types of DNS records	Supported	Supported	Supported	Supported
	Custom NS names	Not supported	Not supported	Not supported	Supported
	Number of wildcard domain name records	1	2	3	Contact our sales team to customize (up to 7)
	DNS analytics	Supported	Supported	Supported	Supported

SSL/TLS

Category	Feature	Entrance (0 USD/month)	Pro (15 USD/month)	Premium (249 USD/month)	Enterprise (Custom)
SSL/TLS	Free edge certificate - Let's Encrypt	10	50	70	100
	Free edge certificates - DigiCert	Not supported	10	20	50
	Edge certificate - Free wildcard certificate	Not supported	Not supported	Not supported	10
	Edge certificate - Upload custom certificate	5	10	20	50
	Certificate availability monitoring	Supported	Supported	Supported	Supported
	Edge certificate - Always Use HTTPS	Supported	Supported	Supported	Supported
	Edge certificate - TLS cipher suite and protocol version configuration	Supported	Supported	Supported	Supported
	Edge certificate - OCSP Stapling	Supported	Supported	Supported	Supported
	Edge certificate - Opportunistic Encryption	Supported	Supported	Supported	Supported
	Edge certificate - HSTS	Supported	Supported	Supported	Supported
	Origin certificate - Origin protocol and port	Not supported	Supported	Supported	Supported
	Origin certificate - Origin certificate validation	Supported	Supported	Supported	Supported
	Origin certificate - Mutual Transport Layer Security (mTLS)	Supported	Supported	Supported	Supported

Cache and rules

Cache

Category	Feature	Entrance (0 USD/month)	Pro (15 USD/month)	Premium (249 USD/month)	Enterprise (Custom)
Static content acceleration	Global static content delivery	Supported	Supported	Supported	Supported
Cache analytics	Cache analytics	Not supported	Supported	Supported	Supported
Cache configuration	Edge TTL	Supported	Supported	Supported	Supported
	Browser TTL	Supported	Supported	Supported	Supported
	Query string	Supported	Supported	Supported	Supported
	Query string sorting	Supported	Supported	Supported	Supported
Tiered Caching	Edge Tiered Cache	Supported	Supported	Supported	Supported
	Edge Tiered Cache + Regional Tiered Cache	Not supported	Supported	Supported	Supported
	Edge Tiered Cache + Smart Tiered Cache	Not supported	Supported	Supported	Supported
	All Caching Tiers	Not supported	Not supported	Not supported	Contact our sales team to customize
Cache Reserve	Cache reserve	Not supported	Not supported	Not supported	Contact our sales team to customize
Cache purge	Purge by URL	1,000	50,000	100,000	500,000
	Purge by directory	Not supported	100	1,000	2,000
	Purge by hostname	Not supported	100	1,000	2,000
	Purge cache by custom cache key	Not supported	Not supported	Not supported	2,000
	Purge by ignoring query string	Not supported	Not supported	Not supported	2,000
	Purge by tag	Not supported	Not supported	Not supported	2,000
	Purge all (times)	5	80	125	200
Cache prefetch	Scheduled prefetch	Not supported	Supported	Supported	Supported
Cache prefetch	Cache prefetch	Not supported	50,000	100,000	500,000
Cache configuration	Development Mode	Supported	Supported	Supported	Supported

Rules

Category	Feature	Entrance (0 USD/month)	Pro (15 USD/month)	Premium (249 USD/month)	Enterprise (Custom)
Get started with rules	Number of nested conditions in a rule	3	10	20	20
Get started with rules	Regular expression	Not supported	Not supported	Supported	Supported
HTTPS Rules	SSL/TLS rules, HTTPS rules (shared quota)	10	25	50	125
Security rules		5	25	50	125
Transform Rules	Rewrite URL	10	25	50	125
	Modify request headers
	Modify inbound response headers
	Managed transform - Real client IP header	Supported	Supported	Supported	Supported
	Managed transform - Client geolocation header	Supported	Supported	Supported	Supported
Redirect Rules	URL redirection	10	25	50	125
Cache rules	Cache eligibility	10	25	50	125
	Browser TTL
	Edge TTL
	Status code TTL
	Custom cache key
	Custom port caching	Not supported	Not supported	Not supported	Supported
	Serve stale content	Supported	Supported	Supported	Supported
	Cache Reserve	Supported	Supported	Supported	Supported
Network optimization rules		10	25	50	100
Content optimization rules	File compression, Image optimization, Video processing (shared quota)	10	25	50	100
Origin Rules	Number of rules	10	25	50	125
	Custom Origin Host	Supported	Supported	Supported	Supported
	Origin protocol and port	Unsupported	Supported	Supported	Supported
	Origin SNI	Supported	Supported	Supported	Supported
	DNS record	Not supported	Not supported	Not supported	Supported
	Range requests	Supported	Supported	Supported	Supported
	Origin HTTP request timeout	Supported	Supported	Supported	Supported
	Configure 301/302 redirect follow	Supported	Supported	Supported	Supported

Security

Intelligent protection

Category

Feature

Entrance

(USD 0/month)

Pro

(15 USD/month)

Premium

(249 USD/month)

Enterprise

(Custom)

Intelligent protection

Intelligent rate limiting

Supported

One-Click Abuse Prevention

Supported

DDoS

Category	Feature	Getting Started (USD 0/month)	Pro (15 USD/month)	Premium (249 USD/month)	Enterprise (Custom)
DDoS	Basic DDoS protection	Supported	Supported	Supported	Supported
	Best-effort protection	Not supported	Not supported	Not supported	Contact our sales team to customize
	DDoS attack mitigation	Not supported	Not supported	Not supported	Supported
	Deep learning and protection	Not supported	Not supported	Not supported	Supported
	Scenario-specific policies	Not supported	Not supported	Not supported	Supported

WAF

Category	Feature	Entrance (USD 0/month)	Pro (15 USD per month)	Premium ( / USD 249/month)	Enterprise (Custom)
WAF	Custom rules	5	20	100	100
	Rate limiting rules	1	2	5	10
	Rate limiting - Statistics period enumeration	Not supported	10 seconds 1 minute 15 minutes	10 seconds 1 minute 2 minutes 5 minutes 10 minutes 15 minutes	5 seconds 10 seconds 1 minute 2 minutes 5 minutes 10 minutes 15 minutes 1 hour
	Rate limiting - Duration enumeration	Not supported	10 seconds 1 minute 10 minutes 1 hour	10 seconds 1 minute 2 minutes 5 minutes 10 minutes 1 hour	10 seconds 1 minute 2 minutes 5 minutes 10 minutes 1 hour 1 day
	Rate limiting - Characteristics	Not supported	Hostname Client IP Header URI query string Cookie value	Hostname Client IP Header URI query string Cookie value URI URI path ASN	Hostname Client IP Header URI query string Cookie value URI URI path ASN URI specified query string HTTP version User Agent X-Forwarded-For MIME type
	Rate limiting - Apply to cached requests	Not supported	Supported	Supported	Supported
	IP access rules	50	200	400	400
	Whitelist rules	2	3	5	10
	Managed rules	Supports basic rules	Supports all rules	Supports all rules	Supports all rules
	Scan protection rules	Not supported	5	10	20
	JavaScript challenge	Supported	Supported	Supported	Supported
	Slider challenge	Not supported	Supported	Supported	Supported
	Strict slider	Not supported	Not supported	Supported	Supported
	Custom scenario-specific policies	Account-level quota. Default: 10 rules.
	Custom pages
	Custom rule groups
	IP ranges/groups
	DDoS alerts	Not supported	Not supported	Not supported	Supported
	Layer 4 proxy (includes Layer 4 DDoS protection)	Not supported	Not supported	Not supported	Supported

Bot management

Category	Feature	Access (USD 0/month)	Pro (15 USD/month)	Premium (USD 249/month)	Enterprise (Custom)
Get started with Bots	Smart bot management	Supported	Supported	Supported	Supported
	Professional bot management	Not supported	Not supported	Not supported	Contact our sales team to customize
	Professional bot management with SDK	Not supported	Not supported	Not supported	Contact our sales team to customize

Origin protection

Category

Feature

Entrance

( USD 0/month)

Pro

( / USD 15/month)

Premium

( / 249 USD/month)

Enterprise

(Custom)

Origin protection

Not supported

Supported

Data analytics and logs

Data analytics

Category	Feature	Entrance (USD 0/month)	Pro (15 USD/month)	Premium (USD 249/month)	Enterprise (Custom)
Data analytics	Traffic analysis filter conditions	Country/Region, Host, Path, Query string, User Agent, Referer, Client IP, Client ASN, HTTP version, HTTP method, Cache status, Device type, Edge status code, Origin status code, Content type, Browser type, Operating system type, X-Requested-With headers
Data analytics	Monitoring event query - time range	31 days	62 days	92 days	185 days
Security analytics	Security analytics	Supported	Supported	Supported	Supported
	Security analytics Pro	Not supported	Not supported	Not supported	Supported
	DDoS analytics	Not supported	Not supported	Not supported	Supported
	Attack details	Not supported	Not supported	Not supported	Supported
Event analytics	Event analytics	Supported	Supported	Supported	Supported
Compute monitoring	Edge function monitoring	Supported	Supported	Supported	Supported
Compute monitoring	Edge storage monitoring	Supported	Supported	Supported	Supported

Logs

Category	Feature	Entrance (USD 0/month)	Pro (15 USD per month)	Premium (USD 249/month)	Enterprise (Custom)
Log collection	Standard log	Supported	Supported	Supported	Supported
	Number of real-time log delivery tasks	Not supported	2 tasks/log type	3 tasks/log type	5 tasks/log type
	Destinations for real-time logs	Not supported	SLS OSS AWS S3 S3-compatible Kafka HTTP server
	Supported log types for real-time collection	Not supported	For a single website: Access logs Mitigation Logs Layer 4 proxy logs DNS logs For all website under the account: Edge function logs Edge container logs
	Instant logs	Not supported	Supported	Supported	Supported

Edge computing

Category	Feature	Entrance (Free)	Pro (USD 15/month)	Premium (USD 249/month)	Enterprise (Custom)
Edge computing	Edge function - Free edition	100,000 requests/day
	Edge function - Paid edition	Pay-as-you-go			Contact our sales team to customize
	Function routing	10	25	50	125
	Edge container	Not supported	Not supported	Not supported	Supported
	Edge storage	Pay-as-you-go			Supported

Other features

Others

Category	Feature	Entrance (Free)	Pro (USD 15/month)	Premium (USD 249/month)	Enterprise (Custom)
Network optimization	IPv6	Supported	Supported	Supported	Supported
	WebSocket	Supported	Supported	Supported	Supported
	gRPC	Supported	Supported	Supported	Supported
Configure protocol optimization	HTTP/2	Supported	Supported	Supported	Supported
Configure protocol optimization	HTTP/3	Supported	Supported	Supported	Supported
Content optimization	Image editing	Supported	Supported	Supported	Supported
	Resource compression	Supported	Supported	Supported	Supported
	Set resource compression	Supported	Supported	Supported	Supported
Traffic	Smart routing	Pay-as-you-go	Pay-as-you-go	Pay-as-you-go	Contact our sales team to customize
	Waiting Room	Not supported	Not supported	1	1
	Waiting Room Pro	Not supported	Not supported	Not supported	Contact our sales team to customize
	China network optimization	Not supported	Not supported	Not supported	Contact our sales team to customize
	Origin address pool	5	10	15	20
	Origin address pool server limit	5	10	15	20
	Load balancing	Not supported	Not supported	Not supported	Contact our sales team to customize
Layer 4 proxy	Configuration	Not supported	Not supported	Not supported	Supported
	Layer 4 proxy website records	Not supported	Not supported	Not supported	10
	Layer 4 proxy analytics	Not supported	Not supported	Not supported	Supported
Version Management	Version Management switch	Not supported	Not supported	Supported	Supported
	Version Management environment limit	Not supported	Not supported	3	10
	Version Management version limit	Not supported	Not supported	10	20
Compliance certifications	MLPS 2.0 Level 3	Supported	Supported	Supported	Supported
	PCI DSS	Supported	Supported	Supported	Supported
	ISO certification	Supported	Supported	Supported	Supported
Support	Alibaba Cloud support tickets	Not supported	Supported	Supported	Supported
Support	ESA expert	Not supported	Not supported	Not supported	Supported
Others	Account permission management	Supported	Supported	Supported	Supported
Others	OpenAPI	Supported	Supported	Supported	Supported