All Products
Search
Document Center

Cloud Firewall:Release an instance

Last Updated:Nov 11, 2025

If your business no longer requires Cloud Firewall protection, you can release your Cloud Firewall instance to avoid additional costs. This topic describes how to release a Cloud Firewall instance and the impacts on your business after release.

Important

After you release an instance, Cloud Firewall can no longer protect your network assets, and the configured policies become invalid. Your network assets will be at risk of network attacks. We recommend that you release your Cloud Firewall instance during off-peak hours after confirming that your business is running normally.

Before you release an instance

Item

Subscription (Premium Edition, Enterprise Edition, and Ultimate Edition)

Pay-as-you-go

Refund

Early release of an instance does not provide a refund.

After you release an instance, billing stops immediately. However, for pay-as-you-go instances, bills are generated on day T+1 after the instance is released. Therefore, you will receive a bill on day T+1 after releasing the instance.

Configuration data retention

After you release an instance, configuration data is retained for 7 days, such as access control policies, protection policies, and traffic analysis policies, allowing you to renew or purchase a new instance within 7 days. However, log analysis statistics are not retained.

Warning

All data will be permanently deleted and cannot be recovered if more than 7 days have passed since the instance was released.

After you release an instance, configuration data is retained for 7 days, such as access control policies, protection policies, and traffic analysis policies, allowing you to reactivate the instance within 7 days.

Warning

All data will be permanently deleted and cannot be recovered if more than 7 days have passed since the instance was released.

Subscription

Release methods

Cloud Firewall that uses the subscription billing method supports automatic release and manual release.

  • Automatic release

    If your subscription to Cloud Firewall expires, the instance will enter a stopped state and will be automatically released 15 days after expiration. If you complete the renewal before the instance is automatically released, the instance will not be released. For more information about how to renew an instance, see Renewal policy.

    image
  • Manual release

    You can manually release an instance during the period from 15 days before expiration to 7 days after expiration.

Manually release a subscription instance

Important

Early manual release of an instance does not provide a refund.

Prerequisites

Before you manually release Cloud Firewall that uses the subscription billing method Enterprise Edition or Ultimate Edition, you need to disable the VPC firewall switches. For more information, see Configure a VPC firewall for an Enterprise Edition transit router.

Procedure

Log on to the Cloud Firewall console. In the upper-right corner of the Overview page, select More > Release Before Expiration.

image

Pay-as-you-go

If you no longer need to use Cloud Firewall pay-as-you-go version, you can log on to the Cloud Firewall console. In the upper-right corner of the Overview page, select More > Self-service Release.

image

References