All Products
Search
Document Center

Cloud Firewall:Pay-as-you-go

Last Updated:Jan 02, 2024

Cloud Firewall that uses the pay-as-you-go billing method allows you to use resources before you pay for them, which is suitable for scenarios in which your workload frequently fluctuates or you have short-term requirements on resources. You can purchase Cloud Firewall that uses the pay-as-you-go billing method based on your business requirements without the need to purchase a large number of resources in advance. This topic describes the billing rules for Cloud Firewall that uses the pay-as-you-go billing method.

Billing cycle

  • The following list describes the default specifications of Cloud Firewall that uses the pay-as-you-go billing method. The specifications cannot be increased.

    • Protected public IP addresses: Up to 1,000 public IP addresses can be protected.

    • Peak processed traffic bandwidth: Up to 1 Gbit/s of traffic bandwidth can be processed.

      Note

      Cloud Firewall can process up to 1 Gbit/s of traffic bandwidth. Protection for excess traffic cannot be ensured.

    • Number of access control policies: You can create up to 2,000 access control policies for the Internet firewall and 2,000 access control policies for NAT firewalls.

  • Bills of Cloud Firewall that uses the pay-as-you-go billing method are settled based on the number of protected assets and the amount of processed traffic. Bills for the previous day are generated at 18:00 every day and fees are deducted from your account balance.

    Important

    If your account balance is insufficient and your account has an overdue payment for more than 15 days, your Cloud Firewall that uses the pay-as-you-go billing method is automatically released.

  • Cloud Firewall that uses the pay-as-you-go billing method automatically synchronizes asset information and checks whether assets are added in real time. If the system detects that no asset is added to your Cloud Firewall that uses the pay-as-you-go billing method for 30 consecutive days, the system sends notifications.

    If no asset is added to your Cloud Firewall for 30 consecutive days, Cloud Firewall automatically disables the Internet Firewall or NAT Firewall feature, and other related modules are restored to the initial status. You can re-enable the modules based on your business requirements. For more information, see Internet firewall and NAT firewall.

Billing formulas

The daily fee of Cloud Firewall that uses the pay-as-you-go billing method is calculated by using the following formula:

Daily fee = Daily configuration fee of public IP addresses + Daily processing fee of Internet traffic + Daily fee of NAT firewalls + Daily processing fee of private network traffic.

Billable item

Unit price

Description

Configuration fee of public IP addresses

USD 0.2 per public IP address-day

You are charged based on the number of public IP addresses that are protected on the current day.

Daily configuration fee of public IP addresses = Number of public IP addresses that are protected on the current day × Unit price per public IP address

Processing fee of Internet traffic

USD 0.06 per GB

You are charged based on the bandwidth of traffic that is processed by the Internet firewall.

Daily processing fee of Internet traffic = (Outbound traffic + Inbound traffic) × Unit price per GB

Fee of NAT firewalls

USD 1.58 per NAT firewall-day

You are charged based on the number of NAT firewalls that are enabled on the current day.

Daily fee of NAT firewalls = Number of NAT firewalls enabled on the current day × Unit price per NAT firewall

Processing fee of private network traffic

USD 0.06 per GB

You are charged based on the bandwidth of traffic that is processed by NAT firewalls.

Daily processing fee of private network traffic = Outbound traffic × Unit price per GB

Billing examples

Scenario

Daily fee

Cloud Firewall that uses the pay-as-you-go billing method is purchased, but no cloud asset is protected.

USD 0

Cloud Firewall that uses the pay-as-you-go billing method is purchased, 2 public IP addresses of cloud assets are protected, and approximately 1 GB of inbound and outbound traffic is processed every day. No NAT firewall is enabled.

2 × USD 0.2 + 1 GB × 0.06 GB/USD = USD 0.46

Cloud Firewall that uses the pay-as-you-go billing method is purchased, 2 public IP addresses of cloud assets are protected, 1 GB of inbound and outbound traffic is processed every day, 1 NAT firewall is enabled, and 0.5 GB of private network traffic is processed every day.

2 × USD 0.2 + 1 GB × 0.06 GB/USD + 1 × USD 1.58 + 0.5 GB × 0.06 GB/USD = USD 2.07

Purchase Cloud Firewall that uses the pay-as-you-go billing method

  1. Go to the Cloud Firewall buy page. Set Product Type to Pay-as-you-go.

  2. On the Cloud Firewall (Pay-as-you-go) page, configure the parameters.

    • Billing Cycle: The default value is By Day.

    • Automatic Protection for Assets: Specify whether to automatically enable protection for assets.

      If you set Automatic Protection for Assets to Yes, your network assets are automatically added to Cloud Firewall for protection after you purchase Cloud Firewall that uses the pay-as-you-go billing method. Firewalls and attack prevention are also enabled for the assets. This helps reduce risks of network assets.

      Note

      If you no longer require automatic protection, you can turn off Automatic Protection for New Assets in the Cloud Firewall console. For more information, see Internet firewall.

  3. Read and select Terms of Service, click Buy Now, and then complete the payment.

    After you purchase Cloud Firewall that uses the pay-as-you-go billing method, the bill for the previous day is settled at 18:00 every day based on your actual usage.

View the usage details

The billing cycle of Cloud Firewall that uses the pay-as-you-go billing method is one day. Bills are generated and fees are deducted from your account balance at 18:00 the next day. You can query the details of the pay-as-you-go bills.

  1. Log on to the Cloud Firewall console.

  2. In the left-side navigation pane, choose Settings > Bill Management.

  3. On the Bill Management page, view the usage details of Cloud Firewall that uses the pay-as-you-go billing method. The details include statistical data of protected assets, enabled features, and traffic data of protected assets.

    Click View Bill Details to view bill details in the Billing Management console. For more information, see Bill details.

Purchase pay-as-you-go savings plans together with Cloud Firewall that uses the pay-as-you-go billing method

When you purchase Cloud Firewall that uses the pay-as-you-go billing method, you can also purchase pay-as-you-go savings plans to protect assets in a more cost-effective manner. For more information, see Pay-as-you-go savings plans.

Note

A savings plan is a discount plan that provides savings over pay-as-you-go rates in exchange for a commitment to consume a consistent amount of resources for a specific period of time. You can obtain a greater discount and reduce more costs when you purchase a pay-as-you-go savings plan with a larger committed consumption amount.

Change the billing method of Cloud Firewall from pay-as-you-go to subscription

You can change the billing method of Cloud Firewall from pay-as-you-go to subscription based on your business requirements.

Precautions

Before you change the billing method of Cloud Firewall from pay-as-you-go to subscription, take note of the following items:

  • During the change, a transient connection that lasts several milliseconds may occur. We recommend that you change the billing method during off-peak hours.

  • When you change the billing method, make sure that the new specifications are the same as or higher than the existing specifications.

  • After the subscription billing method takes effect, some historical data changes.

    • The existing access control policies are not affected.

    • The historical data of intrusion events is deleted and cannot be restored.

    • The log audit data is recollected. You cannot view the historical data of log audit.

  • After the subscription billing method takes effect, you cannot change the billing method to pay-as-you-go.

Procedure

  1. Log on to the Cloud Firewall console.

  2. In the upper-right corner of the Overview page, click Switch Billing Method from Pay-as-you-go to Subscription.

  3. On the Switch Billing Method of Cloud Firewall from Pay-as-you-go to Subscription page, read Note and select I have read and understand the preceding note., and then click Confirm.

  4. On the Cloud Firewall buy page, select an edition of Cloud Firewall based on your business requirements.

    The subscription billing method takes effect after you complete the payment. All configurations of Cloud Firewall that uses the pay-as-you-go billing method remain unchanged before you complete the payment. After you complete the payment, you are charged for Cloud Firewall based on the subscription billing method.

Release Cloud Firewall that uses the pay-as-you-go billing method

If you no longer require Cloud Firewall that uses the pay-as-you-go billing method, you can perform the following operations to release it: Log on to the Cloud Firewall console. In the upper-right corner of the Overview page, click Self-service Release.

image.png

References

  • For more information about the billing details and billing cycle of Premium Edition, Enterprise Edition, and Ultimate Edition of Cloud Firewall that uses the subscription billing method, and how to purchase Cloud Firewall by using the subscription billing method, see Subscription.

  • For more information about Cloud Firewall, see Pre-sales FAQ.

  • For more information about how to upgrade or downgrade the edition of Cloud Firewall, upgrade or downgrade the specifications of Cloud Firewall, temporarily upgrade the protection bandwidth, and change the billing method of Cloud Firewall, see Upgrade and downgrade.

  • For more information about how to release Cloud Firewall, see Release Cloud Firewall.