This topic describes the billing of burstable protection bandwidth for Anti-DDoS Proxy instances.
What is burstable protection bandwidth
The burstable protection bandwidth defines the maximum capacity of an Anti-DDoS Proxy instance to defend against DDoS attacks. You must set a burstable protection bandwidth that is greater than your basic protection bandwidth. If the burstable protection bandwidth equals the basic protection bandwidth, the feature is disabled for the instance, and no pay-as-you-go bills are generated.
Supported instance types
Anti-DDoS Proxy (Chinese Mainland): Professional edition
Billing conditions
Burstable protection fees are incurred only when the peak inbound traffic to a protected public IP is greater than the basic protection bandwidth but less than or equal to the burstable protection bandwidth.
-
If the peak inbound traffic is less than or equal to the basic protection bandwidth or greater than the burstable protection bandwidth, the burstable protection feature is not triggered, and no costs are incurred.
-
If the peak inbound traffic exceeds the burstable protection bandwidth, the instance cannot mitigate the attack. As a result, the public IP of the attacked asset is routed to a blackhole. For more information, see Alibaba Cloud blackhole policy.
How costs are calculated
To determine the daily cost, first calculate the difference between the peak inbound traffic and the basic protection bandwidth. Then, find the corresponding pricing tier in the table below.
If burstable protection is triggered multiple times on a single day, the daily cost is based on the highest peak inbound traffic recorded for that day, regardless of the number of attacks.
|
Pricing tier |
Burstable fee (Unit: USD/day) |
|
(0 Gbps, 5 Gbps] |
120 |
|
(5 Gbps, 10 Gbps] |
180 |
|
(10 Gbps, 20 Gbps] |
330 |
|
(20 Gbps, 30 Gbps] |
540 |
|
(30 Gbps, 40 Gbps] |
730 |
|
(40 Gbps, 50 Gbps] |
960 |
|
(50 Gbps, 60 Gbps] |
1,170 |
|
(60 Gbps, 70 Gbps] |
1,380 |
|
(70 Gbps, 80 Gbps] |
1,590 |
|
(80 Gbps, 100 Gbps] |
1,770 |
|
(100 Gbps, 150 Gbps] |
2,190 |
|
(150 Gbps, 200 Gbps] |
3,240 |
|
(200 Gbps, 300 Gbps] |
4,200 |
|
(300 Gbps, 400 Gbps] |
6,000 |
|
(400 Gbps, 500 Gbps] |
7,510 |
|
(500 Gbps, 600 Gbps] |
9,010 |
|
(600 Gbps, 700 Gbps] |
10,510 |
|
(700 Gbps, 800 Gbps] |
12,010 |
|
(800 Gbps, 900 Gbps] |
13,510 |
|
(900 Gbps, 1000 Gbps] |
15,010 |
|
(1000 Gbps, 1100 Gbps] |
16,510 |
|
(1100 Gbps, 1200 Gbps] |
18,010 |
|
(1200 Gbps, 1300 Gbps] |
19,510 |
|
(1300 Gbps, 1400 Gbps] |
21,010 |
|
(1400 Gbps, 2000 Gbps] |
22,520 |
Billing cycle
This pay-as-you-go service is billed daily. The bill for each day is generated the following day between 08:00 and 09:00 (UTC+8).
Billing example
Assume you have an Anti-DDoS Proxy instance with a basic protection bandwidth of 30 Gbps and a burstable protection bandwidth of 100 Gbps. On a given day, four DDoS attacks target the instance with the following peak inbound traffic: 20 Gbps, 80 Gbps, 40 Gbps, and 120 Gbps.
Cost analysis:
-
Peak inbound traffic is 20 Gbps: This is less than or equal to the 30 Gbps basic protection bandwidth. Burstable protection is not triggered, so no cost is incurred.
-
Peak inbound traffic is 80 Gbps: This is greater than the 30 Gbps basic protection bandwidth and less than or equal to the 100 Gbps burstable protection bandwidth. Burstable protection is triggered, and costs are incurred.
-
Peak inbound traffic is 40 Gbps: This is greater than the 30 Gbps basic protection bandwidth and less than or equal to the 100 Gbps burstable protection bandwidth. Burstable protection is triggered, and costs are incurred.
-
Peak inbound traffic is 120 Gbps: This exceeds the 100 Gbps burstable protection bandwidth. The instance cannot mitigate the attack, and the public IP is routed to a blackhole. Burstable protection is not triggered, so no cost is incurred.
Calculation: The daily cost is based on the highest peak inbound traffic that triggered burstable protection, which is 80 Gbps. The billable bandwidth is the peak traffic minus the basic protection bandwidth (80 Gbps - 30 Gbps = 50 Gbps). This falls into the (40 Gbps, 50 Gbps] pricing tier. Therefore, the total cost for the day is USD 960.
Enable burstable protection bandwidth
During purchase
Go to the Anti-DDoS Proxy (Chinese Mainland) buy page. When you purchase an instance, configure the burstable protection bandwidth. Make sure that the burstable protection bandwidth is greater than the basic protection bandwidth.
The basic protection bandwidth is billed on a subscription basis. The burstable protection bandwidth is the maximum protection capacity. If the burstable protection bandwidth is the same as the basic protection bandwidth, no pay-as-you-go fees are generated. If it is greater, any usage beyond the basic protection bandwidth is billed on a pay-as-you-go basis.
After purchase
Log on to the Instances page in the Anti-DDoS Proxy console.
-
On the Instances page, in the Protection Bandwidth: section, modify the burstable protection bandwidth. Make sure that the burstable protection bandwidth is greater than the basic protection bandwidth.