Anti-DDoS Origin Enterprise uses the subscription billing model. This topic covers billable items, the business scale estimation method, bandwidth overuse rules, renewal, refunds, and bill queries.
Billing overview
Anti-DDoS Origin directly protects your Alibaba Cloud resources against DDoS attacks without requiring changes to your existing deployment. It supports multiple IP addresses and ports under a single instance.
Two billing methods are available:
Subscription — covered in this topic. Applicable to Anti-DDoS Origin Enterprise instances.
Pay-as-you-go — applicable to Elastic IP Address (EIP) with Anti-DDoS (Enhanced) Enabled. Provides mitigation capabilities up to the Tbit/s level.
Billable items
The actual prices on the Anti-DDoS Origin buy page take precedence over any prices listed here.
| Item | Description | Billing method |
|---|---|---|
| Instance | Unit price varies based on the clean bandwidth you select. Each instance covers up to 100 IP addresses. | Subscription |
| Additional IP addresses | USD 360 per IP address per year, for each IP address beyond the first 100. To protect IP addresses across regions, create a separate instance per region. | Subscription |
Billing formula:
Total fee = [Instance unit price + (Number of protected IP addresses − 100) × USD 360] × Subscription duration (years)Business scale estimation
Anti-DDoS Origin uses the 95th percentile bandwidth method to measure your business scale, which determines whether your traffic exceeds your purchased clean bandwidth.
How it works:
Sample inbound and outbound bandwidth at 5-minute intervals.
For each sample point, take the greater of the inbound and outbound averages as the sample value.
At the end of each month, sort all sample points in descending order.
Discard the top 5% of sample points.
The first value in the remaining 95% is your 95th percentile bandwidth for that month.
Example: Over a 30-day month, Anti-DDoS Origin collects 8,640 sample points (30 days × 288 points/day). After sorting all values from highest to lowest, discard the top 432 points (8,640 × 5% = 432). The 433rd value is your 95th percentile bandwidth.
The following figure illustrates this calculation over a 30-day period.
Bandwidth overuse
Your peak traffic may temporarily exceed your instance's clean bandwidth. Alibaba Cloud tracks cumulative overuse duration each month and notifies you through your configured notification channels on the morning of the T+1 day when the accumulated excess reaches:
1 hour
9 hours
18 hours
27 hours
36 hours
When cumulative overuse reaches 36 hours, Anti-DDoS Origin mitigation becomes ineffective. Only basic protection remains active. View overuse details on the Billing Management page.
Restore protection after overuse
Two options are available to restore mitigation:
Option 1: Wait for the next billing cycle
Mitigation restores automatically at the start of the next billing cycle.
Option 2: Upgrade the instance bandwidth
Upgrade the instance's clean bandwidth. Protection restores immediately and the overuse counter resets.
If overuse has already reached 36 hours before you upgrade, mitigation is already inactive. After upgrading, if overuse occurs again within the same month, protection is downgraded again on the T+1 day after you receive the next overuse notification.
If overuse has not yet reached 36 hours before you upgrade, the overuse counter continues accumulating after the upgrade. Once the total reaches 36 hours, protection is downgraded on the T+1 day after you receive the overuse notification.
Overdue payments
Subscription instances are prepaid, so no overdue payments occur. Make sure your account balance is sufficient before purchasing, upgrading, or renewing an instance. To avoid service interruption when an instance expires, enable auto-renewal.
Renew an instance
Log on to the Traffic Security console.
In the left-side navigation pane, choose Network Security > Anti-DDoS Origin > Instance Management.
Find the instance and click Renew in the Actions column.
Configure the Subscription Duration parameter and read and select the Terms of Service.
Click Buy Now and complete the payment.
Refunds
Subscription Anti-DDoS Origin Enterprise instances are non-refundable after purchase.
Query bills
Query your bills in the Expenses and Costs console.