This topic describes the billing of Anti-DDoS Origin 2.0 (Pay-as-you-go).
Usage notes
Anti-DDoS Origin 2.0 is a pay-as-you-go service that protects Regular Alibaba Cloud services and EIPs with Anti-DDoS (Enhanced) enabled.
After you enable Anti-DDoS Origin 2.0 (Pay-as-you-go), the fee for this service is an additional charge and does not affect the billing for your other Alibaba Cloud services.
Each Alibaba Cloud account can protect a maximum of 50 elastic IP addresses (EIPs) with Anti-DDoS (Enhanced) enabled. To request a larger quota, contact your business manager.
Each Anti-DDoS Origin 2.0 (Pay-as-you-go) instance can protect a maximum of 2,000 objects.
Log on to the Traffic Security console and switch the region to Global to view the purchased Anti-DDoS Origin 2.0 (Pay-as-you-go) instance.
Billable items
Billing formula: Anti-DDoS fee = Basic fee + IP quantity fee + Clean traffic fee.
Billing cycle: Resource usage is measured daily. Fees are settled based on this usage. Bills are typically generated at 12:00 (UTC+8) the following day, but the actual generation time may vary.
Part 1: Basic fee
You are charged based on the number of days you use the service. The fee varies based on the region where your assets are located.
After you enable Anti-DDoS Origin 2.0 (Pay-as-you-go), billing starts as soon as you add a protected asset. If you have enabled the service but have no protected assets on a given day, you are still charged the basic fee for that day. The fee is based on the rate for regions outside the Chinese mainland.
The basic fee is charged per Alibaba Cloud account, regardless of the number of protected IP addresses. For example, if all protected IP addresses are in the Chinese mainland on Day T, the basic fee for Day T is USD 231.
Region of protected IP addresses | Fee (USD/day/account) |
The Chinese mainland (IP addresses are in the Chinese mainland) | 231 |
Outside the Chinese mainland (IP addresses are in Hong Kong (China), Macao (China), Taiwan (China), and other regions) | 100 |
Global (IP addresses are in and outside the Chinese mainland) | 331 |
For example, if you protect IP addresses that are located in and outside the Chinese mainland on Day T, the basic fee for Day T is USD 331. If you remove the IP addresses outside the Chinese mainland from protection on Day T+1 and keep only the IP addresses in the Chinese mainland, the basic fee for Day T+1 is USD 231.
Part 2: IP quantity fee
You are charged a tiered price based on the number of IP addresses. This fee applies to the total number of IP addresses, including those for regular Alibaba Cloud services and EIPs with Anti-DDoS (Enhanced) enabled.
The IP usage for a given day (Day T) is calculated the next day (Day T+1). The calculation is based on the number of protected IP addresses at approximately 23:00 (UTC+8) on Day T. For example, the IP usage calculated on July 3 is based on the number of IP addresses protected on July 2. If you protected 10 IP addresses on July 2, the IP usage for that day is 10.
Tiered pricing | Unit price (USD/day/IP) |
0 < Number of IP addresses ≤ 100 | 1 |
100 < Number of IP addresses ≤ 300 | 0.8 |
300 < Number of IP addresses ≤ 500 | 0.6 |
500 < Number of IP addresses ≤ 700 | 0.5 |
700 < Number of IP addresses ≤ 1,000 | 0.4 |
1,000 < Number of IP addresses ≤ 10,000,000 | 0.3 |
For example, you protect 400 IP addresses on Day T. The IP quantity fee for Day T is: 100 × 1 + 200 × 0.8 + 100 × 0.6 = USD 320
Part 3: Clean traffic fee
The clean traffic fee is based on the normal service traffic on your Alibaba Cloud services. Attack traffic is not included in the calculation. Regular Alibaba Cloud services and EIPs with Anti-DDoS (Enhanced) enabled have different unit prices and are billed separately. A tiered pricing model applies to traffic within the Chinese mainland and traffic outside the Chinese mainland. The clean traffic usage for a given day (Day T) is calculated the next day (Day T+1).
Rules for calculating clean traffic
To simplify and standardize the billing model, traffic is measured based on data from your Alibaba Cloud services. Billing is based on the higher of the inbound or outbound traffic volumes.
If you protect multiple Alibaba Cloud services, the total billable traffic is the sum of traffic from services both in the Chinese mainland and outside the Chinese mainland, which includes Hong Kong (China), Macao (China), Taiwan (China), and other regions.
A minimum traffic mechanism is used for traffic statistics. If the daily traffic does not exceed the daily minimum traffic, you are charged based on the daily minimum traffic.
Asset Type
Asset IP region
Number of asset IP addresses
Daily minimum traffic per IP address
Regular Alibaba Cloud service
The Chinese mainland
No minimum traffic mechanism is used. You are charged based on the actual service traffic.
Outside the Chinese mainland
Elastic IP address (EIP) with Anti-DDoS (Enhanced) enabled
The Chinese mainland
Number of IP addresses ≤ 30
0 GB
31 ≤ Number of IP addresses ≤ 99
20 GB
Number of IP addresses ≥ 100
40 GB
Outside the Chinese mainland
No minimum traffic mechanism is used. You are charged based on the actual service traffic.
Example 1: You protect 32 EIPs with Anti-DDoS (Enhanced) enabled. Among them, 12 EIPs each have a daily traffic of 10 GB, and 20 EIPs each have a daily traffic of 15 GB.
The billable daily traffic is 32 × 20 = 640 GB.
Example 2: You protect 32 EIPs with Anti-DDoS (Enhanced) enabled. Among them, 12 EIPs each have a daily traffic of 30 GB, and 20 EIPs each have a daily traffic of 15 GB.
The billable daily traffic is 30 × 12 + 20 × 20 = 760 GB.
Bandwidth limits
The bandwidth of enhanced cloud products is limited based on the region. This limitation does not apply to standard cloud products:
Peak inbound bandwidth for local access: 2 Gbps for regions outside the Chinese mainland and 20 Gbps for the Chinese mainland.
Peak inbound bandwidth for cross-region access: 100 Mbps for regions outside the Chinese mainland and unlimited for the Chinese mainland.
If the bandwidth does not meet your business requirements, log on to the Traffic Security console. Navigate to the page and click Detailed Description to request an adjustment to the peak access bandwidth.
Local region access: The service client and the EIP with Anti-DDoS (Enhanced) enabled are in the same region.
Cross-region access: The service client and the EIP with Anti-DDoS (Enhanced) enabled are in different regions.
For example, if you purchase an EIP with Anti-DDoS (Enhanced) enabled in the China (Hong Kong) region and your service clients are mainly in the China (Hong Kong) region, this is a local access scenario. If your service clients are mainly in the US (Virginia) region, this is a cross-region access scenario.
Pricing details
Billing Period | Regular Alibaba Cloud service | Elastic IP address (EIP) with Anti-DDoS (Enhanced) enabled | ||
Unit price in the Chinese mainland (USD/GB) | Unit price outside the Chinese mainland (USD/GB) | Unit price in the Chinese mainland (USD/GB) | Unit price outside the Chinese mainland (USD/GB) | |
0 TB < Traffic ≤ 100 TB | 0.1045 | 0.0500 | 0.1125 | 0.0500 |
100 TB < Traffic ≤ 500 TB | 0.0804 | 0.0400 | 0.0900 | 0.0400 |
500 TB < Traffic ≤ 1,000 TB | 0.0579 | 0.0300 | 0.0675 | 0.0300 |
1,000 TB < Traffic ≤ 1,500 TB | 0.0386 | 0.0200 | 0.0450 | 0.0200 |
Traffic > 1,500 TB | Contact your business manager for a custom plan. For more information, see Contact us. | |||
Billing example
For example, an EIP with Anti-DDoS (Enhanced) enabled generates 200 TB of traffic from November 1 to 5 (50 TB in the Chinese mainland and 150 TB outside). On November 6, it generates another 700 GB of traffic (300 GB in the Chinese mainland and 400 GB outside). The clean traffic fee for November 6 is calculated as follows:
Because the cumulative monthly traffic from the Chinese mainland (50 TB + 300 GB) falls into the 0 TB < Traffic ≤ 100 TB tier, the unit price for this 300 GB of traffic is USD 0.1125/GB.
Unit price for the 400 GB of traffic from outside the Chinese mainland: The cumulative monthly traffic from outside the Chinese mainland (150 TB + 400 GB) falls into the 100 TB < Traffic ≤ 500 TB tier. The corresponding unit price for this 400 GB of traffic is USD 0.0400/GB.
The clean traffic fee for November 6 is 300 GB × USD 0.1125/GB + 400 GB × USD 0.0400/GB = USD 49.75
Stop the service
If you have enabled an Anti-DDoS Origin 2.0 (Pay-as-you-go) instance but have not added any protected assets, no fees are incurred and you can stop the service at any time.
If you have enabled an Anti-DDoS Origin 2.0 (Pay-as-you-go) instance and added protected assets, you must use the service for at least 30 days before you can stop it.
Before you stop the service, you must first remove protection from all EIPs with Anti-DDoS (Enhanced) enabled and ensure that service traffic is migrated away from them. You do not need to stop your regular Alibaba Cloud services. After the Anti-DDoS Origin 2.0 (Pay-as-you-go) instance is stopped, protection is automatically disabled.
Instance configuration deletion
Fifteen days after the service is stopped, the instance configuration is permanently deleted and cannot be recovered.
Procedure
Log on to the Traffic Security console. On the page, click Stop Protection in the upper-right corner.
Overdue payments
If the available balance of your account, including cash, vouchers, and coupons, is insufficient to pay an outstanding bill, your account has an overdue payment.
If a payment is overdue, the service is suspended immediately. The instance is released 15 days after the suspension begins. After release, the instance configuration is permanently deleted and cannot be recovered.
If your account has an overdue payment, top up your account promptly to ensure you have a sufficient balance. Otherwise, your pay-as-you-go services may become unavailable.
Query bills and usage
To query bills, go to Expenses and Costs.
By default, bills for usage on Day T are pushed on Day T+1. However, to ensure billing accuracy, Alibaba Cloud may review large bills and delay the push for one to three days. If a delay occurs, bills for multiple days may be merged. You can log on to the Traffic Security console and query daily usage on the page.
A fee protection mechanism is available for traffic fees. In rare cases, attack traffic might be incorrectly counted as clean traffic. For example, an HTTP GET flood attack can cause an abnormal increase in outbound traffic. If this occurs, you can contact technical support to request a waiver for the abnormal charges on your traffic bill. To help us quickly identify the issue, please provide supporting materials such as server logs or traffic monitoring data. Examples of helpful materials include logs showing normal and abnormal queries per second (QPS) during an HTTP GET flood attack.
You can log on to the Traffic Security console and view your usage on the page.
References
For information about the mitigation capabilities and features of Anti-DDoS Origin 2.0 (Pay-as-you-go), see What is Anti-DDoS Origin?.
For information about how to purchase Anti-DDoS Origin 2.0 (Pay-as-you-go), see Purchase an Anti-DDoS Origin instance.