This topic describes how elastic protection bandwidth is billed for Anti-DDoS Pro or Anti-DDoS Premium instances.
What is elastic protection bandwidth
Elastic protection bandwidth is the maximum DDoS attack mitigation capacity of an Anti-DDoS Pro or Anti-DDoS Premium instance. It must be greater than the basic protection bandwidth. If you set the elastic protection bandwidth equal to the basic protection bandwidth, elastic protection is not used and no pay-as-you-go charges apply.
Instance types that support elastic protection bandwidth
Anti-DDoS Pro (Chinese Mainland): Professional Edition
Billing conditions
You are charged for elastic protection only when the peak inbound traffic of assets that are assigned public IP addresses exceeds the basic protection bandwidth but does not exceed the elastic protection bandwidth.
If the peak inbound traffic is less than or equal to the basic protection bandwidth or greater than the elastic protection bandwidth, elastic protection is not triggered and no elastic protection fees are incurred.
If the peak inbound traffic exceeds the elastic protection bandwidth, the IP address of the attacked asset enters blackhole filtering status because the instance cannot mitigate the DDoS attack. For more information, see Alibaba Cloud blackhole filtering policy.
How fees are calculated
To calculate the daily elastic protection fee, subtract the basic protection bandwidth from the highest peak inbound traffic that triggered elastic protection during the day. Then, use the resulting value to identify the applicable billing tier in the following table.
If elastic protection is triggered multiple times in a calendar day, the daily fee is based on the highest peak inbound traffic for that day, regardless of the number of attacks.
Billing tier | Elastic protection fee (Unit: USD/day) |
(0 Gbps, 5 Gbps] | 120 |
(5 Gbps, 10 Gbps] | 180 |
(10 Gbps, 20 Gbps] | 330 |
(20 Gbps, 30 Gbps] | 540 |
(30 Gbps, 40 Gbps] | 730 |
(40 Gbps, 50 Gbps] | 960 |
(50 Gbps, 60 Gbps] | 1,170 |
(60 Gbps, 70 Gbps] | 1,380 |
(70 Gbps, 80 Gbps] | 1,590 |
(80 Gbps, 100 Gbps] | 1,770 |
(100 Gbps, 150 Gbps] | 2,190 |
(150 Gbps, 200 Gbps] | 3,240 |
(200 Gbps, 300 Gbps] | 4,200 |
(300 Gbps, 400 Gbps] | 6,000 |
(400 Gbps, 500 Gbps] | 7,510 |
(500 Gbps, 600 Gbps] | 9,010 |
(600 Gbps, 700 Gbps] | 10,510 |
(700 Gbps, 800 Gbps] | 12,010 |
(800 Gbps, 900 Gbps] | 13,510 |
(900 Gbps, 1000 Gbps] | 15,010 |
(1000 Gbps, 1100 Gbps] | 16,510 |
(1100 Gbps, 1200 Gbps] | 18,010 |
(1200 Gbps, 1300 Gbps] | 19,510 |
(1300 Gbps, 1400 Gbps] | 21,010 |
(1400 Gbps, 2000 Gbps] | 22,520 |
Billing cycle
This is a pay-as-you-go service with daily billing. Bills are generated between 08:00 and 09:00 the following day.
Billing example
An Anti-DDoS Pro or Anti-DDoS Premium instance has a basic protection bandwidth of 30 Gbps and an elastic protection bandwidth of 100 Gbps. On a given day, the instance experiences four DDoS attacks with peak inbound traffic values of 20 Gbps, 80 Gbps, 40 Gbps, and 120 Gbps, respectively.
Cost analysis:
Peak inbound traffic is 20 Gbps: This is less than or equal to the basic protection bandwidth of 30 Gbps. Elastic protection is not triggered, so no elastic protection fee is incurred.
Peak inbound traffic is 80 Gbps: This exceeds the basic protection bandwidth of 30 Gbps but does not exceed the elastic protection bandwidth of 100 Gbps. Elastic protection is triggered, so an elastic protection fee is incurred.
Peak inbound traffic is 40 Gbps: This exceeds the basic protection bandwidth of 30 Gbps but does not exceed the elastic protection bandwidth of 100 Gbps. Elastic protection is triggered, so an elastic protection fee is incurred.
Peak inbound traffic is 120 Gbps: This exceeds the elastic protection bandwidth of 100 Gbps. The IP address of the attacked asset enters blackhole filtering status because the instance cannot mitigate the DDoS attack. Elastic protection is not triggered, so no elastic protection fee is incurred.
Fee calculation: The highest peak inbound traffic that triggered elastic protection for the day is 80 Gbps. Subtract the basic protection bandwidth of 30 Gbps to obtain 50 Gbps. This value falls into the (40 Gbps, 50 Gbps] billing tier. Therefore, the elastic protection fee for the day is USD 960.
Enable elastic protection bandwidth
Enable when you purchase an instance
When you purchase an instance on the or the Anti-DDoS Proxy purchase page, you must also set the elastic protection capability. The elastic protection capability must be greater than the basic protection bandwidth.
Enable after you purchase an instance
Log on to the Instances page in the Anti-DDoS Proxy console.
On the Instances page, modify the elastic protection bandwidth in the Protection Bandwidth: section. The elastic protection bandwidth must be greater than the basic protection bandwidth.
