Anti-DDoS Origin 2.0 (Pay-as-you-go) charges a daily fee based on three components: a basic fee, an IP quantity fee, and a clean traffic fee. Billing is calculated daily, and bills are typically generated at 12:00 (UTC+8) the following day.
Billing formula: Anti-DDoS fee = Basic fee + IP quantity fee + Clean traffic fee
Usage notes
Anti-DDoS Origin 2.0 protects Regular Alibaba Cloud services and EIPs with Anti-DDoS (Enhanced) enabled.
Anti-DDoS Origin 2.0 (Pay-as-you-go) charges are billed separately and do not affect your other Alibaba Cloud service bills.
Each Alibaba Cloud account can protect a maximum of 50 elastic IP addresses (EIPs) with Anti-DDoS (Enhanced) enabled. To increase this quota, contact your business manager.
Each Anti-DDoS Origin 2.0 (Pay-as-you-go) instance can protect a maximum of 2,000 objects.
To view your Anti-DDoS Origin 2.0 (Pay-as-you-go) instance, log in to the Traffic Security console and set the region to Traffic Security consoleGlobal.
Billable items
Basic fee
The basic fee is charged per account per day based on the region of your protected IP addresses.USD 231231USD 331USD 231
Billing starts as soon as you add the first protected asset. If the service is enabled but no protected assets are added on a given day, the basic fee for that day still applies at the rate for regions outside the Chinese mainland.
| Region of protected IP addresses | Fee (USD/day/account) |
|---|---|
| The Chinese mainland | 231 |
| Outside the Chinese mainland (Hong Kong (China), Macao (China), Taiwan (China), and other regions) | 100 |
| Global (both in and outside the Chinese mainland) | 331 |
The basic fee reflects the highest-coverage region on any given day. For example, if your protected IPs are in both the Chinese mainland and outside on Day T, the basic fee is USD 331. If you remove all IPs outside the Chinese mainland on Day T+1, the basic fee drops to USD 231.
IP quantity fee
The IP quantity fee is based on the total number of protected IP addresses across all asset types—both regular Alibaba Cloud services and EIPs with Anti-DDoS (Enhanced) enabled. Tiered pricing applies.
IP usage for Day T is measured at approximately 23:00 (UTC+8) on Day T and calculated the following day (Day T+1).
| Number of protected IP addresses | Unit price (USD/day/IP) |
|---|---|
| 1–100 | 1.00 |
| 101–300 | 0.80 |
| 301–500 | 0.60 |
| 501–700 | 0.50 |
| 701–1,000 | 0.40 |
| 1,001–10,000,000 | 0.30 |
Example 1: IP quantity fee for 400 protected IPs
Scenario: 400 IP addresses protected on Day T.
IP quantity fee = 100 × $1.00 + 200 × $0.80 + 100 × $0.60 = USD 320
For example, you protect 400 IP addresses on Day T. The IP quantity fee for Day T is: 100 × 1 + 200 × 0.8 + 100 × 0.6 = USD 320
Clean traffic fee
The clean traffic fee is based on normal service traffic. Attack traffic is excluded. Clean traffic usage for Day T is calculated on Day T+1.
Billing rules:
Billing is based on the higher of inbound or outbound traffic volumes.
If you protect multiple services, the total billable traffic is the sum of traffic from the Chinese mainland and from outside the Chinese mainland.
Regular Alibaba Cloud services and EIPs with Anti-DDoS (Enhanced) enabled are billed at different unit prices.
Minimum traffic mechanism
A minimum traffic threshold applies to EIPs with Anti-DDoS (Enhanced) enabled in the Chinese mainland. If daily traffic falls below the threshold, you are charged based on the minimum traffic instead of actual traffic.
| Number of EIP addresses (Chinese mainland) | Daily minimum traffic per IP |
|---|---|
| ≤ 30 | 0 GB (no minimum applies) |
| 31–99 | 20 GB |
| ≥ 100 | 40 GB |
No minimum traffic mechanism applies to regular Alibaba Cloud services or to EIPs with Anti-DDoS (Enhanced) enabled outside the Chinese mainland.
Example 2: Minimum traffic for 32 EIPs where actual traffic is below the threshold
Scenario: 32 EIPs with Anti-DDoS (Enhanced) enabled in the Chinese mainland. 12 EIPs each generate 10 GB/day; 20 EIPs each generate 15 GB/day. Because 32 falls in the 31–99 range, the minimum is 20 GB per IP.
Actual traffic per IP is below 20 GB for all EIPs, so the minimum applies to all 32.
Billable daily traffic = 32 × 20 GB = 640 GB
Example 3: Minimum traffic for 32 EIPs where some actual traffic exceeds the threshold
Scenario: Same 32 EIPs. 12 EIPs each generate 30 GB/day; 20 EIPs each generate 15 GB/day.
For the 12 EIPs with 30 GB actual traffic (above the 20 GB minimum): billed at actual traffic = 12 × 30 GB = 360 GB
For the 20 EIPs with 15 GB actual traffic (below the 20 GB minimum): billed at minimum = 20 × 20 GB = 400 GB
Billable daily traffic = 360 + 400 = 760 GB
Bandwidth limits for EIPs with Anti-DDoS (Enhanced) enabled
The following peak inbound bandwidth limits apply to EIPs with Anti-DDoS (Enhanced) enabled. No limits apply to regular Alibaba Cloud services.
| Access type | Outside the Chinese mainland (USD/GB) (USD/GB) (USD/GB) (USD/GB) | The Chinese mainland |
|---|---|---|
| Local access (client and EIP in the same region) | 2 Gbps | 20 Gbps |
| Cross-region access (client and EIP in different regions) | 100 Mbps | Unlimited |
To request a bandwidth increase, log in to the Traffic Security console, go to Network Security > DDoS Origin > Billing Center, and click Detailed Description.Traffic Security console
Unit prices
Traffic tiers are cumulative within a calendar month. Regular Alibaba Cloud services and EIPs with Anti-DDoS (Enhanced) enabled have separate unit prices.
| Monthly traffic tier | Regular Alibaba Cloud services – Chinese mainland (USD/GB) | Regular Alibaba Cloud services – outside the Chinese mainland (USD/GB) | EIP with Anti-DDoS (Enhanced) – Chinese mainland (USD/GB) | EIP with Anti-DDoS (Enhanced) – outside the Chinese mainland (USD/GB) |
|---|---|---|---|---|
| 0–100 TB | 0.1045 | 0.0500 | 0.1125 | 0.0500 |
| 100–500 TB | 0.0804 | 0.0400 | 0.0900 | 0.0400 |
| 500–1,000 TB | 0.0579 | 0.0300 | 0.0675 | 0.0300 |
| 1,000–1,500 TB | 0.0386 | 0.0200 | 0.0450 | 0.0200 |
| Over 1,500 TB | Contact your business manager for a custom plan. For more information, see Contact us. |
Example 4: Clean traffic fee for an EIP with Anti-DDoS (Enhanced) enabled
Scenario: An EIP with Anti-DDoS (Enhanced) enabled generates 200 TB of traffic from November 1–5 (50 TB from the Chinese mainland, 150 TB from outside the Chinese mainland). On November 6, it generates 700 GB more (300 GB from the Chinese mainland, 400 GB from outside).
Chinese mainland traffic on November 6: Cumulative monthly traffic from the Chinese mainland = 50 TB + 300 GB ≈ 50.3 TB, which falls in the 0–100 TB tier. Unit price = USD 0.1125/GB. Charge = 300 GB × $0.1125 = USD 33.75.
Traffic outside the Chinese mainland on November 6: Cumulative monthly traffic from outside = 150 TB + 400 GB ≈ 150.4 TB, which falls in the 100–500 TB tier. Unit price = USD 0.0400/GB. Charge = 400 GB × $0.0400 = USD 16.00.
Clean traffic fee for November 6 = USD 33.75 + USD 16.00 = USD 49.75USD 0.1125/GBUSD 0.0400/GBUSD 49.75
Fee protection for attack traffic
In rare cases, attack traffic may be incorrectly counted as clean traffic—for example, during an HTTP GET flood attack that causes an abnormal spike in outbound traffic. If this occurs, contact technical support to request a waiver for the affected charges.
To help resolve the issue quickly, include supporting materials such as:
Server logs showing normal and abnormal queries per second (QPS) during the attack
Traffic monitoring data that shows the traffic anomaly
Stop the service
Stopping the service is a three-stage process:
Stage 1: Check eligibility
Before stopping, confirm that both conditions are met:
Minimum usage period: If you have added protected assets, the service must have been running for at least 30 days. If no protected assets were added, you can stop at any time and no charges are incurred.
Remove EIP protection: Remove protection from all EIPs with Anti-DDoS (Enhanced) enabled and make sure service traffic is migrated away from them. You do not need to manually stop regular Alibaba Cloud services—protection is automatically disabled when the instance is stopped.
Stage 2: Stop the service
Log in to the Traffic Security console, go to Network Security > Billing Center, and click Stop Protection in the upper-right corner.Traffic Security consoleTraffic Security console
Stage 3: Post-stop effects
The instance configuration is permanently deleted 15 days after the service is stopped and cannot be recovered.
Overdue payments
If your account balance—including cash, vouchers, and coupons—is insufficient to cover an outstanding bill, your account enters an overdue payment state.
Service is suspended immediately when a payment becomes overdue.
If a payment is overdue, the service is suspended immediately. The instance is released 15 days after the suspension begins. After release, the instance configuration is permanently deleted and cannot be recovered.
The instance is released 15 days after the suspension. Once released, the instance configuration is permanently deleted and cannot be recovered.
Top up your account promptly to restore service and avoid data loss.
Query bills and usage
Go to Expenses and Costs to view your bills.
By default, bills for Day T usage are pushed on Day T+1. For large bills, Alibaba Cloud may review and delay the push by one to three days, and bills for multiple days may be merged. To check daily usage without waiting for bill generation, log in to the Traffic Security console and go to Network Security > Billing Center.
What's next
To learn about the mitigation capabilities and features of Anti-DDoS Origin 2.0 (Pay-as-you-go), see What is Anti-DDoS Origin?
To purchase an instance, see Purchase an Anti-DDoS Origin instance