Anti-DDoS:Burstable protection billing FAQ for Anti-DDoS Pro (the Chinese mainland)

Is burstable protection charged when no attacks occur?

No. Burstable protection fees apply only when an attack is detected and the inbound traffic exceeds the basic protection bandwidth. When there are no attacks, only the subscription fees for basic protection are charged.

What is the maximum mitigation capacity of an instance?

The maximum mitigation capacity equals the burstable protection bandwidth. For example, if your instance has a basic protection bandwidth of 20 Gbit/s and a burstable protection bandwidth of 50 Gbit/s, the maximum mitigation capacity is 50 Gbit/s.

If you set the burstable protection bandwidth equal to the basic protection bandwidth (for example, both at 20 Gbit/s), the instance does not provide burstable protection, and the maximum mitigation capacity is 20 Gbit/s.

What happens when attack traffic exceeds the burstable protection bandwidth?

Traffic destined for the protected IP addresses is forwarded using null routes.

How is burstable protection charged when attack traffic exceeds the basic protection bandwidth?

Burstable protection is billed daily based on the difference between the peak inbound bandwidth and the basic protection bandwidth.

Example: If your basic protection bandwidth is 30 Gbit/s, your burstable protection bandwidth is 50 Gbit/s, and the peak attack traffic reaches 45 Gbit/s:

For the full pricing table, see USD 330/dayBilling of the burstable protection bandwidth feature.

Can I change the burstable protection bandwidth?

Yes. Go to the Instance Management page in the Anti-DDoS Proxy (Chinese Mainland) console to change the burstable protection bandwidth.

If burstable protection has already been charged on the day you make the change, the new bandwidth takes effect the next day.

Can I increase the basic or burstable protection bandwidth at any time?

Yes. Both can be upgraded independently.

Increase the basic protection bandwidth

Go to the Instances page in the Anti-DDoS Proxy (Chinese Mainland) console and complete the upgrade payment. For steps, see Upgrade an instance.

Increase the burstable protection bandwidth

Go to the Instance Management page in the Anti-DDoS Proxy (Chinese Mainland) console. Burstable protection is billed on a pay-as-you-go basis, charged based on the difference between peak attack traffic and the basic protection bandwidth. For pricing details, see Billing of the burstable protection bandwidth feature.

If an IP address is attacked multiple times in a day, how is the fee calculated?

Burstable protection is charged once per day (00:00–24:00) based on the highest peak traffic recorded that day.

Example: If three attacks hit the same IP address with peak traffic of 50 Gbit/s, 100 Gbit/s, and 200 Gbit/s, the daily charge is based on 200 Gbit/s — the highest peak across all three attacks.

How do I prevent burstable protection from being triggered?

Set the burstable protection bandwidth equal to the basic protection bandwidth. With this configuration, no burstable protection is activated when the basic protection bandwidth is exhausted, and no burstable protection fees are charged.

Go to the Instance Management page in the Anti-DDoS Proxy (Chinese Mainland) console to adjust the setting.

Why is there no bill after a DDoS attack?

If you do not see a bill after a DDoS attack, it may be because your inbound traffic peak was lower than the basic protection bandwidth or exceeded the burstable protection bandwidth.

In either case, burstable protection is not triggered, and no fees are incurred.