This topic explains how to query the usage details for Anti-DDoS Origin 2.0 instances.
Usage notes
In scenarios involving multi-account management, when the Anti-DDoS Origin instance of the management account protects public IP assets belonging to member accounts, the usage details can only be queried through the management account. Member accounts do not have the ability to query usage details. For more information, see Use the multi-account management feature.
Pay-as-you-go instances
Query usage details
Bandwidth limits on EIPs with Anti-DDoS (Enhanced) enabled:
The bandwidth limits vary based on the region of the EIP with Anti-DDoS (Enhanced) enabled, as described in the following list. To adjust the bandwidth limits, you can click Details on the right side of the Billing Management page to submit an application. The bandwidth limits do not take effect on regular Alibaba Cloud services.
Peak inbound bandwidth for local-region access: If a client and an EIP with Anti-DDoS (Enhanced) enabled reside in the same region outside the Chinese mainland, the peak inbound bandwidth is 2 Gbit/s. If a client and an EIP with Anti-DDoS (Enhanced) enabled reside in the same region in the Chinese mainland, the peak inbound bandwidth is 20 Gbit/s.
Peak inbound bandwidth for cross-region access: If an EIP with Anti-DDoS (Enhanced) enabled resides in a region outside the Chinese mainland and a client resides in a different region outside the Chinese mainland, the peak inbound bandwidth is 100 Mbit/s. If an EIP with Anti-DDoS (Enhanced) enabled resides in a region in the Chinese mainland and a client resides in a different region in the Chinese mainland, the peak inbound bandwidth is unlimited.
Log on to the Traffic Security console.
In the left-side navigation pane, choose .
On the Pay-as-you-go Instances tab, query the usage overview and details of the current month.
Category
Description
Feature Enabling
After you purchase an instance, you are charged for the instance based on the number of days for which you use the instance. The fee varies based on the region in which your asset resides.
Protected IP Address
The IP addresses that are protected, including EIPs with Anti-DDoS (Enhanced) enabled and the IP addresses of regular Alibaba Cloud services.
You are charged based on the number of IP addresses that are protected. The actual fee is calculated based on the tiered prices.
The number of IP addresses on Day T is collected on Day T+1. The number of IP addresses at approximately 23:00 (UTC+8) on Day T is used for billing.
If the multi-account management feature is enabled, the numbers of protected IP addresses in the current Alibaba Cloud account and members are separately displayed.
Clean Bandwidth
Only the service traffic of cloud services is billed. The service traffic of a cloud service is calculated based on the larger value between the inbound and outbound service traffic.
The unit prices for service traffic protection of regular Alibaba Cloud services and EIPs with Anti-DDoS (Enhanced) enabled are different. Service traffic protection for regular Alibaba Cloud services and EIPs with Anti-DDoS (Enhanced) is separately billed.
Service traffic from regions in and outside the Chinese mainland is separately billed based on the tiered prices.
The service traffic protection usage on Day T is calculated on Day T+1.
If the multi-account management feature is enabled, the service traffic protection usage in the current Alibaba Cloud account and the members is separately displayed.
Subscription instances
Query alerts on exceeded upper limits
You can only query alerts generated within the last 30 days.
Anti-DDoS Origin permits temporary traffic peaks above the purchased clean bandwidth. However, if the overage exceeds 36 hours in a month, the Anti-DDoS Origin mitigation becomes invalid and only basic mitigation capabilities are provided.
To restore full Anti-DDoS Origin mitigation capabilities, you can:
Wait for automatic restoration in next month.
Upgrade the bandwidth of your instance. Once upgraded, protection will automatically restore, and the overuse time will reset.
For Anti-DDoS Origin 2.0 (Subscription) Enterprise instances, enable burstable clean bandwidth feature.
Go to the Billing Management page of the Traffic Security console.
On the Subscription Instances tab, select Alerts on Exceeded Upper Limits. You can also click Details in the Actions column to view the trends for inbound bandwidth, outbound bandwidth, and clean bandwidth.
Query usage of burstable clean bandwidth
The burstable clean bandwidth feature is available only for Enterprise Edition instances and offers two billing methods: Daily 95th Percentile and Monthly 95th Percentile. For more information, see Anti-ddos origin 2.0 (subscription).
Go to the Billing Management page of the Traffic Security console.
On the Subscription Instances tab, select Daily 95th Percentile or Monthly 95th Percentile. You can also click View in the Actions column to view detailed information such as the total peak traffic.
Billing method
Data description
Daily 95th Percentile Bandwidth
The Total Peak Traffic is determined by recording the peak service traffic every minute within a calendar day, resulting in 1,440 values per day. Values recorded during DDoS attacks are excluded, and the top 5 values are discarded. The highest of the remaining values is used as the Total Peak Traffic.
The Exceeding Clean Bandwidth is the total peak traffic minus the clean bandwidth.
The 95th Percentile Bandwidth is the lower of the total peak traffic or total service bandwidth minus the clean bandwidth, where the total service bandwidth is five times the clean bandwidth.
Monthly 95th Percentile Bandwidth
The Total Peak Traffic is calculated as follows:
Daily bandwidth peaks are obtained by recording the peak service traffic every minute within a calendar day, resulting in 1,440 values per day. Values recorded during DDoS attacks are excluded, and the highest value among the remaining values is taken.
The daily bandwidth peaks within a calendar month are sorted in descending order. The average of the top 5 values is calculated as the total peak traffic.
The Exceeding Clean Bandwidth is calculated as the total peak traffic minus the clean bandwidth, where the clean bandwidth is the minimum service bandwidth on the last day of the month when the burstable clean bandwidth feature is enabled.
The 95th Percentile Bandwidth is the lesser of the total peak traffic or total service bandwidth minus the clean bandwidth.
The total service bandwidth is calculated as five times the highest value among the clean bandwidths corresponding to the top 5 daily bandwidth peaks.
The clean bandwidth is defined as the minimum service bandwidth recorded on the last day of the month when the burstable clean bandwidth feature is enabled.
Reference
For more information on the fees for Anti-DDoS Origin 2.0 instances, see Anti-ddos origin 2.0 (subscription) and Anti-DDoS Origin 2.0 (Pay-as-you-go).