All Products
Search
Document Center

Anti-DDoS:Anti-DDoS Plan

Last Updated:Jun 21, 2026

Anti-DDoS Proxy (Chinese Mainland) offers a free Anti-DDoS Plan to eligible users to offset pay-as-you-go burstable protection fees. This topic describes how to obtain and use an Anti-DDoS Plan.

Obtain an Anti-DDoS Plan

You automatically receive an Anti-DDoS Plan if you meet one of the following conditions:

  • You activate Anti-DDoS Proxy (Chinese Mainland) for the first time.

  • You purchase or renew a subscription Anti-DDoS Proxy (Chinese Mainland) instance.

Note

Anti-DDoS Proxy (International) does not support the Anti-DDoS Plan. For more information, contact your account manager.

Conditions for offsetting fees

An Anti-DDoS Plan can offset only pay-as-you-go burstable protection fees.

  • inbound traffic ≤ basic protection bandwidth: No burstable protection fees are incurred, and the Anti-DDoS Plan is not used.

  • inbound traffic ≤ basic protection bandwidth + Anti-DDoS Plan specification: The Anti-DDoS Plan can offset the burstable protection fees incurred on that day.

  • inbound traffic > basic protection bandwidth + Anti-DDoS Plan specification: The offset fails.

Important
  • If the Anti-DDoS Plan fails to offset pay-as-you-go burstable protection fees, your Anti-DDoS Proxy instance is billed for them.

  • If your instance experiences multiple DDoS attacks in a single day and the peak inbound traffic meets the conditions for offsetting fees, only one use of the Anti-DDoS Plan is consumed to offset the burstable protection fees for that day.

Usage notes

  • An Anti-DDoS Plan does not increase your protection capacity. It is used only to offset the daily burstable protection fees for your Anti-DDoS Proxy instance when the offsetting conditions are met. Your actual protection capacity still depends on your basic protection bandwidth and burstable protection bandwidth.

  • When the number of available uses for your Anti-DDoS Plan reaches zero, adjust your burstable protection bandwidth to match your basic protection bandwidth to avoid incurring pay-as-you-go burstable protection fees.

    Note

    If inbound traffic exceeds the basic protection bandwidth, blackhole filtering may be triggered, disrupting your services.

  • An Anti-DDoS Plan can offset only the burstable protection fees incurred on or after the day you obtain the plan. It cannot be used to offset fees on bills that have already been generated.

Adjusting burstable protection bandwidth

We recommend manually adjusting your burstable protection bandwidth to fully utilize your Anti-DDoS Plan. You can set the burstable protection bandwidth to a maximum value of "basic protection bandwidth + Anti-DDoS Plan specification", up to the maximum configurable burstable bandwidth. For detailed instructions, see Modify the burstable protection bandwidth.

For example, if your basic protection bandwidth is 30 Gbps:

  • If the Anti-DDoS Plan specification is 20 Gbps, you can set the burstable protection bandwidth to 50 Gbps (30 Gbps basic protection bandwidth + 20 Gbps Anti-DDoS Plan specification).

  • If the Anti-DDoS Plan specification is 300 Gbps, the sum of the basic protection bandwidth and the Anti-DDoS Plan specification (30 Gbps + 300 Gbps = 330 Gbps) exceeds the maximum configurable burstable protection bandwidth of 300 Gbps. In this case, you can set the burstable protection bandwidth to 300 Gbps.

View Anti-DDoS Plan details

An Anti-DDoS Plan is automatically applied when the offsetting conditions are met. You can view the details and usage records of your Anti-DDoS Plan in the Anti-DDoS Proxy console. An Anti-DDoS Plan can be used as long as it has not expired and has available uses.

  1. Log on to the Anti-DDoS Proxy console.

  2. In the top navigation bar, select the Chinese Mainland region.

  3. In the left-side navigation pane, choose Assets > Anti-DDoS Plans.

  4. On the Anti-DDoS Plans page, view the details of your Anti-DDoS Plan.

    Item

    Description

    Specification

    The specification of the Anti-DDoS Plan.

    Assume the specification is 100 Gbps and your basic protection bandwidth is 30 Gbps:

    • If inbound traffic ≤ 130 Gbps (30 Gbps basic protection bandwidth + 100 Gbps Anti-DDoS Plan specification), the plan can offset the pay-as-you-go burstable protection fees incurred on that day.

    • If inbound traffic on that day > 130 Gbps, the offset fails. If the conditions for incurring pay-as-you-go burstable protection fees are met, the instance is billed as usual.

    Expiration Time

    The time when the Anti-DDoS Plan expires.

    Status

    The status of the Anti-DDoS Plan.

    • Valid: The plan can be used.

    • Exhausted: The number of available uses is depleted.

    • Expired: The plan has expired and cannot be used.

    Available Protection

    The remaining number of uses for the Anti-DDoS Plan.

  5. (Optional) In the Actions column, click View Logs to go to the Operation Logs page and view the operation logs for the Anti-DDoS Plan. For detailed instructions, see Operation Logs.

References

For more information about burstable protection bandwidth, see Billing of burstable protection bandwidth.