Releasing an instance

Updated at:
Copy as MD

If you no longer need Cloud Firewall, you can release your instance to prevent further charges. This topic describes how to release a Cloud Firewall instance and the effects on your services.

Important

After you release an instance, Cloud Firewall no longer protects your network assets, and all configured policies become inactive. This exposes your assets to network attacks. Release your Cloud Firewall instance during off-peak hours and only after confirming that your services are operating normally.

Before you release

Item

Subscription

Pay-as-you-go

Refunds

No refunds are provided for instances that are released before their expiration date.

Billing for an instance stops immediately after it is released. On the following day (T+1), a final bill is generated for the usage incurred before the release. No further bills are generated after this point.

To stop billing for a pay-as-you-go instance, you must manually perform the Self-service Release operation. Other fees may still apply if you only disable Asset Protection.

Configuration data retention

After you release an instance, your configuration data, including access control policies, protection policies, and traffic analysis policies, is retained for 7 days. You can renew your subscription or purchase a new instance during this time. However, log analysis data is not retained.

Warning

After 7 days, all data is permanently deleted and cannot be recovered.

After you release an instance, your configuration data, including access control policies, protection policies, and traffic analysis policies, is retained for 7 days. This allows you to reactivate the instance within this period.

If you use the Pay-as-you-go v2.0 billing method, log analysis data is not retained.

Warning

After 7 days, all data is permanently deleted and cannot be recovered.

Subscription

Release methods

You can release a subscription Cloud Firewall instance either automatically upon expiration or manually.

  • Automatic release

    If your Cloud Firewall subscription expires, the instance enters a suspended state and is automatically released 15 days after the expiration date. If you renew the subscription before this automatic release, the process is canceled. For more information about how to renew an instance, see Renewal.

    image
  • Manual release

    You can manually release an instance from 15 days before its expiration date until 7 days after.

Manually release an instance

Important

No refunds are provided for instances that are released before their expiration date.

Prerequisites

Before you manually release a subscription Enterprise Edition or Ultimate Edition instance, you must disable the VPC firewall, . For more information, see Configure a VPC firewall for an Enterprise Transit Router.

Procedure

Log on to the Cloud Firewall console. In the upper-right corner of the Overview page, choose More > Release Before Expiration.

Pay-as-you-go

To release a pay-as-you-go Cloud Firewall instance, log on to the Cloud Firewall console. In the upper-right corner of the Overview page, choose More > Self-service Release.

Automatic release rules

  • Pay-as-you-go v2.0: If Cloud Firewall is not used for 30 consecutive days (that is, no billable features are enabled), the Cloud Firewall instance is automatically released.

  • Pay-as-you-go v1.0: If any of the following border firewalls has no protected assets for 30 consecutive days, that border firewall is automatically disabled:

    • Internet border firewall

    • NAT border firewall

    • VPC border firewall

FAQ

If I release a pay-as-you-go instance, will my pay-as-you-go savings plan become invalid?

No. After you release a pay-as-you-go Cloud Firewall instance, your pay-as-you-go savings plan remains valid.

Does releasing a Cloud Firewall instance affect resources such as ECS servers?

No. Cloud Firewall and ECS are separate services. Releasing a Cloud Firewall instance only deactivates its mitigation policies. It does not affect the normal operation of your ECS instances, such as system startup or application execution.

How can I confirm that my Cloud Firewall instance has been successfully released?

Log on to the Cloud Firewall console.If the page displays the Activate Pay-as-you-go and Activate Subscription buttons, the instance has been successfully released and you will not incur any further charges.

References