Billing of Sec-CMA for Anti-DDoS Proxy (Outside Chinese Mainland)
Sec-CMA for Anti-DDoS Proxy (Outside Chinese Mainland) is billed based on subscription instance fees and pay-as-you-go fees for optional features you enable. This topic describes the available instance types and billing details.
Instance types
Sec-CMA for Anti-DDoS Proxy (Outside Chinese Mainland) provides secure acceleration andadvanced mitigationfor all protected services.
Sec-CMA 2.0 does not support the purchase of global advanced mitigation sessions. To obtain more advanced mitigation sessions, upgrade your instance version (for example, from "0 sessions" to "2 sessions" or "unlimited sessions"). For more information, seeInstance management.
Sec-CMA 2.0 (Recommended)
Sec-CMA 2.0 is the current recommended version. It supports China Telecom, China Unicom, and China Mobile lines in the Chinese mainland, with built-in DDoS mitigation capacity exceeding 2 Tbps.
Instance type | New purchase | Protected carrier lines | Advanced mitigation sessions | How to extend sessions |
Sec-CMA 2.0 | Supported | China Telecom, China Unicom, and China Mobile in the Chinese mainland | Configurable: None, 1, 2, or Unlimited | Upgrade instance version. Purchase of mitigation session packs is not supported. |
Legacy versions
The following legacy versions are no longer recommended for new purchases. If you are using a legacy version, we recommend that you upgrade to Sec-CMA 2.0.
Instance type | New purchase | Protected carrier lines | Advanced mitigation sessions | Purchase of mitigation sessions |
Sec-CMA 1.0 | New purchases are no longer available. Contact your account manager. | China Telecom and China Unicom in the Chinese mainland | 2 per calendar month | Yes. Purchase aglobal advanced mitigation session. |
Sec-CMA 1.0 (Basic Edition) | No longer available. | China Telecom and China Unicom in the Chinese mainland | 1 per calendar month | Yes. Purchase aglobal advanced mitigation session. |
Sec-CMA 2.0 (Insurance) | Supported. Migrated to Sec-CMA 2.0, not recommended. | China Telecom, China Unicom, and China Mobile | 2 per calendar month | Not supported. Upgrade to Sec-CMA 2.0. |
Sec-CMA 2.0 (Unlimited) | Supported. | China Telecom, China Unicom, and China Mobile | Unlimited | Not applicable. |
Billing
Prices are for reference only. Actual prices are shown on theAnti-DDoS Proxy (Outside Chinese Mainland) buy page.
Total fees = Subscription instance fees + Pay-as-you-go fees.
Subscription instance fees
Subscription instance fees = Base instance fees + Expandable configuration fees.
Base instance fees
Price description
Sec-CMA 2.0 (Recommended)
Instance type | Unit price (USD/month) |
Sec-CMA 2.0 (Recommended) | Based on advanced mitigation sessions: None: 1,548; 1 session: 7,740; 2 sessions: 15,480; Unlimited: 36,843 |
Legacy versions (not recommended)
Instance type | Unit price (USD/month) |
Sec-CMA 1.0 | 15,480 |
Sec-CMA 1.0 (Basic Edition) | 9,288 |
Sec-CMA 2.0 (Insurance) | 15,480 |
Sec-CMA 2.0 (Unlimited) | 36,843 |
Specification description
The base instance fees correspond to the default minimum specifications listed in the following table. Default specifications are the same across all instance types. You can expand specifications based on your business requirements.
Specification | Default | Billing method | Description |
Clean bandwidth | 10 Mbps | Upfront | Maximum service traffic the instance can handle without attacks. Expandable. |
95th Percentile Burstable Clean Bandwidth | Daily 95th percentile metering method | Pay-as-you-go | Fees are incurred when actual bandwidth exceeds clean bandwidth but stays within the burstable clean bandwidth limit. |
Clean QPS | 500 | Upfront | Maximum concurrent HTTP and HTTPS request rate without attacks. Expandable. Set this value based on actual traffic. If actual traffic exceeds the configured clean QPS, packet loss and incomplete full logs may occur. |
95th percentile burstable QPS | Daily 95th percentile metering method | Pay-as-you-go | Fees are incurred when actual QPS exceeds clean QPS but stays within the burstable QPS limit. |
Function plan | Standard function plan | Upfront | Two plans are available: Standard function plan and Enhanced function plan. The Enhanced function plan provides additional service onboarding capabilities and DDoS attack prevention capabilities. For more information, seeFunction plans. |
Number of protected domain names | 10 | Upfront | HTTP and HTTPS domain names the instance supports. Expandable. Each increment of 10 domains allows one additional first-level domain. |
Number of ports | 5 | Upfront | TCP and UDP ports the instance supports. Expandable. |
Expandable configuration fees
Sec-CMA for Anti-DDoS Proxy (Outside Chinese Mainland) supports upgrading the following specifications from the base configuration.
Clean bandwidth: 1,548 USD/month per 10 Mbps
Clean QPS
Clean QPS range
Unit price (USD/month/QPS)
0 < QPS ≤ 500
0
500 < QPS ≤ 5,000
1.5
5,000 < QPS ≤ 8,000
1.425
8,000 < QPS ≤ 10,000
1.35
10,000 < QPS ≤ 50,000
1.275
50,000 < QPS ≤ 100,000
1.05
Function plan: Enhanced function plan: 1,200 USD/month
Number of protected domain names
Number of domains
Standard function plan (USD/month/domain)
Enhanced function plan (USD/month/domain)
0 < domains ≤ 10
0
0
10 < domains ≤ 500
4.5
7.5
500 < domains ≤ 1,000
4.1
7
1,000 < domains ≤ 5,000
3.7
6.5
5,000 < domains ≤ 10,000
3.2
5.8
10,000 < domains ≤ 20,000
2.7
4.5
Number of ports
Number of ports
Unit price (USD/month/port)
0 < ports ≤ 5
0
5 < ports ≤ 50
30
50 < ports ≤ 100
26
100 < ports ≤ 500
22
500 < ports ≤ 1,500
18
Pay-as-you-go fees
You can enable pay-as-you-go features based on your business requirements. Fees are incurred only when usage conditions are met.
Feature | Billing method | Description |
95th Percentile Burstable Clean Bandwidth | Daily or monthly pay-as-you-go | Provides additional clean bandwidth beyond the base allocation to handle traffic spikes during peak periods. For more information, seeBurstable clean bandwidth billing. |
95th percentile bistable QPS | Daily or monthly pay-as-you-go | Provides additional QPS beyond the base allocation to handle request spikes during peak periods. For more information, seeBurstable QPS billing. |
Expiration
Time period | Business traffic forwarding | Instance configuration |
Within 7 (exclusive) calendar days after expiration | The instance retains a 5 Gbps black hole threshold. A black hole is triggered when business forwarding or attack traffic exceeds 5 Gbps. The instance no longer provides access acceleration. | Instance configuration is retained. |
From 7 (inclusive) to 15 (exclusive) calendar days after expiration | Business traffic forwarding is stopped. If you no longer use the secure acceleration line, make sure to switch your business traffic from Anti-DDoS to the origin server within 7 calendar days before expiration. | Instance configuration is retained. |
On the 15th calendar day after expiration | Business traffic forwarding is stopped. | The instance will be released. |
Switch your business traffic back to the origin server promptly after instance expiration to avoid impacts on business access.
Overdue payments
-
Your account is considered overdue if your available balance — including cash, vouchers, and coupons — is insufficient to cover your bill.
-
To avoid service disruption, top up your account balance promptly.
Renewal policy
You can manually or automatically renew an instance. For more information, see Instance management.
Refund policy
Refunds are not available after purchase.
Bill query
You can query bills in Expenses and Costs. For more information, see Overview of monthly bills.