All Products
Search
Document Center

Anti-DDoS:Anti-DDoS Origin 1.0 (subscription)

Last Updated:May 29, 2025

This topic describes the billing of Anti-DDoS Origin Enterprise.

Background

Anti-DDoS Origin directly protects your Alibaba Cloud services against DDoS attacks and allows you to add multiple IP addresses and ports for protection without the need to change your existing resource deployment.

Anti-DDoS Origin supports the following billing methods: subscription and pay-as-you-go. The pay-as-you-go billing method is supported for Elastic IP Address (EIP) with Anti-DDoS (Enhanced) Enabled. The pay-as-you-go billing method allows EIP with Anti-DDoS (Enhanced) Enabled to provide more mitigation capabilities than a subscription Anti-DDoS Origin instance. The mitigation capabilities can be up to the Tbit/s level.

Billable items

Important

The actual prices on the Anti-DDoS Origin buy page shall prevail.

Billable item

Description

Billing method

Billing formula

Instance

The unit price of an instance varies based on the clean bandwidth that you specify.

Subscription

Total fee = [Unit price of the instance + (Number of IP addresses that you want to protect - 100) × Unit price of an IP address that you want to protect] × Subscription duration

IP address that you want to protect

One IP address: USD 360 per year

If you want to protect IP addresses across regions, you must create multiple instances.

Business scale estimation

You can estimate your business scale by using the following method:

Sample inbound and outbound bandwidth at five-minute intervals. Calculate the average inbound and outbound bandwidth. Use the greater average value as the bandwidth of the sample point. At the end of each month, sort all sample points in descending order, ignore the top 5% of sample points, and then use the first value of the remaining 95% of sample points as the 95th percentile bandwidth.

The following figure illustrates how the calculation works over a 30-day period.

image

Bandwidth overuse

Anti-DDoS Origin allows your peak traffic to temporarily exceed the instance's clean bandwidth. When the accumulated excess duration reaches 1h, 9h, 18h, 27h, or 36h per month, Alibaba Cloud will send bandwidth overuse reminders through your configured notification channels on the morning of the T+1 day. Upon receiving the 36h overuse reminder, the Anti-DDoS Origin capability will become ineffective, retaining only the basic protection. You can view the overuse details in the Billing Management page.

There are two ways to restore Anti-DDoS Origin mitigation capabilities:

  1. Automatic restoration: Wait for the next billing cycle for automatic restoration.

  2. Upgrade bandwidth: Upgrade the Anti-DDoS Origin instance's bandwidth. Protection will automatically restore, and the overuse time will reset.

Important
  • If the clean bandwidth has been overused for 36 hours before using Method 2, the Anti-DDoS Origin protection will be ineffective. If overuse occurs again within the same month after using Method 2, protection will be downgraded again on the T+1 day following the overuse notification.

  • If the clean bandwidth has been overused but has not reached 36 hours before using Method 2, the overuse duration will continue to accumulate. Once it hits 36 hours, protection will be downgraded on the T+1 day after you receive the overuse notification.

Overdue payments

An Anti-DDoS Origin Enterprise instance uses the subscription billing method. Therefore, no overdue payments occur for an Anti-DDoS Origin Enterprise instance. Before you can purchase, upgrade, or renew an instance, make sure that your account balance is sufficient. To prevent your services from being adversely affected by instance expiration, we recommend that you enable auto-renewal for your instance.

Renewal

  1. Log on to the Traffic Security console.

  2. In the left-side navigation pane, choose Network Security > Anti-DDoS Origin > Instance Management.

  3. Find the instance that you want to renew and click Renew in the Actions column. On the page that appears, configure the Subscription Duration parameter and read and select Terms of Service.

  4. Click Buy Now and complete the payment.

Refunds

Subscription Anti-DDoS Origin Enterprise instances are non-refundable after purchase.

Bill query

You can query bills in the Expenses and Costs console.