This topic describes the billing of Anti-DDoS Native 2.0 (Pay-as-you-go).
The billing method described in this topic is available only to existing customers. If you are a new customer, we recommend Anti-DDoS Native 2.0 (Subscription).
Usage notes
Anti-DDoS Native 2.0 supports the pay-as-you-go billing method and can protect What is Anti-DDoS Native? and What is Anti-DDoS Native?.
After you activate Anti-DDoS Native 2.0 (Pay-as-you-go), the DDoS protection fee is an additional security feature fee and does not change the original billing of your cloud services.
Each Alibaba Cloud account can protect up to 50 Anti-DDoS Advanced EIPs (EIPs with Anti-DDoS Proxy enabled). To request a higher quota, contact your business manager.
Each Anti-DDoS Native 2.0 (Pay-as-you-go) instance can contain up to 2,000 protected objects.
Log on to the Traffic Security console, set the region to All Regions, and then view the Anti-DDoS Native 2.0 (Pay-as-you-go) instances that you have activated.
Billable items
Billing formula: DDoS protection fee = protection feature fee + protected IP count fee + clean traffic protection fee.
Billing cycle: The usage of all resources is measured on a calendar-day basis, and the fees incurred are settled based on that usage. Bills are typically issued at 12:00 (UTC+8) on the next day. The actual issue time is subject to the system.
Part 1: Protection feature fee
This fee is charged based on the number of days the service is activated. The rate varies with the region where your assets are located.
After you activate Anti-DDoS Native 2.0 (Pay-as-you-go), Alibaba Cloud considers that you have officially started to use the service and starts billing as soon as you add any protected asset. After the official use starts, if you have no protected asset on a given day, the protection feature fee for that day is charged by default at the rate for regions outside the Chinese mainland.
The protection feature fee is charged per Alibaba Cloud account and is unrelated to the number of asset IP addresses to be protected. For example, if all the asset IP addresses protected on Day T are in the Chinese mainland, no matter how many asset IP addresses there are, the protection feature fee for Day T is USD 231.
Region of the protected asset IP addresses | Fee(USD/day/account) |
Chinese mainland (the asset IP addresses are in the Chinese mainland) | 231 |
Outside the Chinese mainland (the asset IP addresses are in China (Hong Kong), Macao (China), Taiwan (China), or overseas regions) | 100 |
All Regions (the asset IP addresses are in both the Chinese mainland and regions outside the Chinese mainland) | 331 |
For example, if the regions of the asset IP addresses protected on Day T include both the Chinese mainland and regions outside the Chinese mainland, the protection feature fee for Day T is USD 331. If on Day T+1 you remove the asset IP addresses outside the Chinese mainland and keep only the asset IP addresses in the Chinese mainland, the protection feature fee for Day T+1 is USD 231.
Part 2: Protected IP count fee
Tiered pricing applies based on the number of IP addresses. The IP count includes the IP addresses of both regular Alibaba Cloud services and Anti-DDoS Advanced EIPs.
The IP usage of Day T is measured on Day T+1. The value is the number of IP addresses at approximately 23:00 (UTC+8) on Day T. For example, suppose that you actually protect 10 IP addresses on July 2, 2024 and 20 IP addresses on July 3, 2024. When the IP usage data is measured on July 3, 2024, the value is 10.
Pricing tier | Unit price(USD/day/IP) |
0 < IP count ≤ 100 | 1 |
100 < IP count ≤ 300 | 0.8 |
300 < IP count ≤ 500 | 0.6 |
500 < IP count ≤ 700 | 0.5 |
700 < IP count ≤ 1,000 | 0.4 |
1,000 < IP count ≤ 10,000,000 | 0.3 |
For example, if you protect 400 IP addresses on Day T, the protected IP count fee for Day T is 100 × 1 + 200 × 0.8 + 100 × 0.6 = USD 320.
Part 3: Clean traffic protection fee
Clean traffic is the normal service traffic generated on your cloud services. Attack traffic is not counted. Regular Alibaba Cloud services and Anti-DDoS Advanced EIPs have different unit prices and are billed separately. Traffic in the Chinese mainland and traffic outside the Chinese mainland are charged separately based on tiered pricing. The clean traffic usage of Day T is measured on Day T+1.
Clean traffic measurement rules
To simplify and unify the billing model, the traffic measurement data comes from the cloud service and is the greater of the outbound traffic and the inbound traffic of the cloud service.
If you protect multiple cloud services, the traffic measurement data is the sum of the cloud services in the Chinese mainland and the sum of the cloud services outside the Chinese mainland (China (Hong Kong), Macao (China), Taiwan (China), and overseas regions).
Traffic measurement uses a minimum traffic mechanism. If the daily traffic does not exceed the daily minimum traffic, the fee is calculated based on the daily minimum traffic.
Asset type
Asset IP region
Asset IP count range
Daily minimum traffic per IP
Regular Alibaba Cloud service
Chinese mainland
No minimum traffic mechanism applies. The actual service traffic prevails.
Outside the Chinese mainland
Anti-DDoS Advanced EIP
Chinese mainland
IP count ≤ 30
0 GB
31 ≤ IP count ≤ 99
20 GB
IP count ≥ 100
40 GB
Outside the Chinese mainland
No minimum traffic mechanism applies. The actual service traffic prevails.
Example 1: You protect 32 Anti-DDoS Advanced EIP assets. Among them, 12 IP addresses generate 10 GB of traffic each per day and 20 IP addresses generate 15 GB of traffic each per day.
The measured daily traffic bill is 32 × 20 = 640 GB.
Example 2: You protect 32 Anti-DDoS Advanced EIP assets. Among them, 12 IP addresses generate 30 GB of traffic each per day and 20 IP addresses generate 15 GB of traffic each per day.
The measured daily traffic bill is 30 × 12 + 20 × 20 = 760 GB.
Bandwidth limits
Anti-DDoS Advanced EIPs are subject to the following bandwidth limits, which vary with the region of the cloud service. Regular Alibaba Cloud services are not subject to these limits:
Peak inbound bandwidth for local region access: 2 Gbps outside the Chinese mainland and 20 Gbps in the Chinese mainland.
Peak inbound bandwidth for cross-region access: 100 Mbps outside the Chinese mainland and unlimited in the Chinese mainland.
If the bandwidth does not meet your business requirements, log on to the Traffic Security console. On the page, click Details to request an adjustment to the peak access bandwidth.
Local region access: Your business clients and the Anti-DDoS Advanced EIPs are in the same region.
Cross-region access: Your business clients and the Anti-DDoS Advanced EIPs are in different regions.
For example, you purchased an Anti-DDoS Advanced EIP in the China (Hong Kong) region. If your business clients are mainly located in the China (Hong Kong) region, this is local region access. If your business clients are mainly located in the US (Virginia) region, this is cross-region access.
Pricing details
Pricing tier | Regular Alibaba Cloud service | Anti-DDoS Advanced EIP | ||
Chinese mainland unit price(USD/GB) | Unit price outside the Chinese mainland(USD/GB) | Chinese mainland unit price(USD/GB) | Unit price outside the Chinese mainland(USD/GB) | |
0 TB < traffic ≤ 100 TB | 0.1045 | 0.0500 | 0.1125 | 0.0500 |
100 TB < traffic ≤ 500 TB | 0.0804 | 0.0400 | 0.0900 | 0.0400 |
500 TB < traffic ≤ 1,000 TB | 0.0579 | 0.0300 | 0.0675 | 0.0300 |
1,000 TB < traffic ≤ 1,500 TB | 0.0386 | 0.0200 | 0.0450 | 0.0200 |
Traffic > 1,500 TB | Contact your business manager for a custom plan. For more information, see Contact us. | |||
Billing example
Example: An Anti-DDoS Advanced EIP generates 200 TB of traffic from November 1 to November 5, of which 50 TB comes from the Chinese mainland and 150 TB comes from outside the Chinese mainland. On November 6, it generates 700 GB of traffic, of which 300 GB comes from the Chinese mainland and 400 GB comes from outside the Chinese mainland. The clean traffic protection fee for November 6 is calculated as follows:
Unit price for the 300 GB of traffic from the Chinese mainland: The cumulative traffic from the Chinese mainland in the current month is 50 TB + 300 GB, which falls in the 0 TB < traffic ≤ 100 TB tier. In the pricing details table, the unit price for this 300 GB of traffic is USD 0.1125/GB.
Unit price for the 400 GB of traffic from outside the Chinese mainland: The cumulative traffic from outside the Chinese mainland in the current month is 150 TB + 400 GB, which falls in the 100 TB < traffic ≤ 500 TB tier. In the pricing details table, the unit price for this 400 GB of traffic is USD 0.0400/GB.
The clean traffic protection fee for November 6 is 300 GB × USD 0.1125/GB + 400 GB × USD 0.0400/GB = USD 49.75
Disable the service
If you purchased an Anti-DDoS Native 2.0 (Pay-as-you-go) instance but have not added any asset, no pay-as-you-go fees are incurred and you can disable the service yourself.
If you purchased an Anti-DDoS Native 2.0 (Pay-as-you-go) instance and added assets, you must use the service for 30 days before you can disable it.
Before you disable an Anti-DDoS Native 2.0 (Pay-as-you-go) instance, first disable your Anti-DDoS Advanced EIPs and make sure that the service traffic has been migrated away from them. You do not need to disable regular Alibaba Cloud services. After the Anti-DDoS Native 2.0 (Pay-as-you-go) instance is disabled, their protection status automatically expires.
Instance configuration deletion
Fifteen days after you disable the service, the instance configurations are permanently deleted and cannot be recovered.
Procedure
Log on to the Traffic Security console. In the upper-right corner of the page, click Disable Protection.
Overdue payments
When your current available balance (including cash, vouchers, and coupons) cannot settle the issued bills, the system considers your account to have an overdue payment.
After a payment becomes overdue, the service is suspended immediately. Fifteen days after the service is suspended, the instance is released and the instance configurations are permanently deleted and cannot be recovered.
After your account has an overdue payment, top up your account in time to keep a sufficient balance and avoid interruptions to your pay-as-you-go services.
Bills and usage
Bill query: You can query your bills in Expenses and Costs.
By default, the bill for the fees incurred on Day T is pushed on Day T+1. However, to protect your interests, Alibaba Cloud may recheck a bill when the amount is large and delay pushing the bill by one to three days. If a delay occurs, the pushed bill may consolidate the bills of multiple days. You can log on to the Traffic Security console and go to the page to query your specific daily usage.
Traffic fees support a cost protection mechanism. In rare cases, attack traffic may be counted into the clean traffic usage. For example, an HTTP GET flood attack may cause an abnormal increase in outbound traffic. In this case, you can contact technical support to request a reduction or exemption of the abnormal fees in the traffic fee bill. When you contact technical support, provide materials such as server logs or traffic monitoring data (for example, the normal and abnormal QPS logs during an HTTP GET flood attack) to help Alibaba Cloud distinguish and locate the abnormal part of the bill more quickly.
Usage query: Log on to the Traffic Security console and go to the page to view your usage.
References
For information about the mitigation capabilities and features of Anti-DDoS Native 2.0 (Pay-as-you-go), see What is Anti-DDoS Native?.
For information about how to purchase Anti-DDoS Native 2.0 (Pay-as-you-go), see Purchase an Anti-DDoS Native instance.