Anti-DDoS Origin is offered in two editions: Anti-DDoS Origin Basic and Anti-DDoS Origin Enterprise. Anti-DDoS Origin Basic provides a protection capability of up to 5 Gbit/s for the Elastic Compute Service (ECS) instances, Server Load Balancer (SLB) instances, elastic IP addresses (EIPs), and Web Application Firewall (WAF) instances under your Alibaba Cloud account. It is enabled by default and free of charge. Anti-DDoS Origin Enterprise provides unlimited protection against DDoS attacks for all your assets. It is billed on a yearly subscription basis. Protection is provided after you purchase an Anti-DDoS Origin Enterprise instance.

Instance specifications of Anti-DDoS Origin Enterprise

By default, Anti-DDoS Origin Enterprise provides shared and unlimited protection. Unlimited protection provides defense against DDoS attacks. The unlimited protection capability is based on the total number of available resources and strengthens with the increase of the overall network capability of Alibaba Cloud. The increased protection capability is provided free of charge.

Anti-DDoS Origin Enterprise supports the following subscription durations: one year, two years, and three years. The unit price of a yearly subscription Anti-DDoS Origin Enterprise instance varies based on the specific business scale and the number of IP addresses that you choose. Before you use Anti-DDoS Origin Enterprise, you must select instance specifications based on your business scale and complete the payment.
  • Business Scale: specifies the scale of your business that you want to protect. The business scale is measured in bit/s based on the 95th percentile per month. Valid values: 100 Mbit/s, 300 Mbit/s, 500 Mbit/s, 800 Mbit/s, 1 Gbit/s, 1.5 Gbit/s, 2 Gbit/s, 2.5 Gbit/s, and 3 Gbit/s. For more information about how to determine your business scale, see Business scale estimation.
  • IP Addresses: specifies the number of IP addresses that you want to protect. The default value is 100. Valid values range from 100 to 255.

Billing methods of Anti-DDoS Origin Enterprise

If you want to protect 100 IP addresses in a single region, the subscription fee for an Anti-DDoS Origin Enterprise instance in the region is calculated by using the following formula: Monthly unit price for the specific business scale × 12 (months) × Subscription duration (years)

If you want to protect more than 100 IP addresses in a single region, the subscription fee for an Anti-DDoS Origin Enterprise instance in the region is calculated by using the following formula: [Monthly unit price for the specific business scale + (Number of IP addresses that you want to protect - 100) × USD 30 per month] × 12 (months) × Subscription duration (years).

The following table lists the monthly unit prices for different business scales.

Note By default, an Anti-DDoS Origin Enterprise instance provides protection for 100 IP addresses in a single region. If you want to protect more than 100 IP addresses, the unit price will be increased by USD 30 per month for each added IP address. If you want to protect IP addresses across regions, you must create multiple instances or submit a ticket to create an Anti-DDoS Origin Enterprise instance with custom specifications.
Prices that are listed in the following table may be different from those on the Anti-DDoS Origin buy page. The prices on the Anti-DDoS Origin buy page prevail.
Note The monthly price unit for an Anti-DDoS Origin Enterprise instance remains unchanged no matter whether IPv4 or IPv6 is used.
Business scale Unit price (USD per month)
100 Mbit/s 7,016
300 Mbit/s 9,025
500 Mbit/s 11,034
800 Mbit/s 14,047
1 Gbit/s 16,056
1.5 Gbit/s 21,079
2 Gbit/s 26,101
2.5 Gbit/s 31,124
3 Gbit/s 36,146
Note The minimum business scale is 100 Mbit/s, which is also the default value. The maximum business scale is 3 Gbit/s. If the business scale that you specify exceeds 3 Gbit/s, we recommend that you submit a ticket to create an Anti-DDoS Origin Enterprise instance with custom specifications.

Business scale estimation

You can estimate a business scale or clean bandwidth by using the following method:

Sample inbound and outbound bandwidth at five-minute intervals. Calculate the average inbound and outbound bandwidth. Use the greater average value as the bandwidth of the sample point. At the end of each month, sort all sample points in descending order, ignore the top 5% of sample points, and use the first value of the remaining 95% of sample points is as the 95th percentile bandwidth.

Assume that the actual business bandwidth exceeds the clean bandwidth of an Anti-DDoS Origin Enterprise instance that you purchase.

Anti-DDoS Origin Enterprise allows your clean bandwidth to exceed the purchased business scale for a short period of time. If the period exceeds 36 hours, unlimited protection becomes invalid. Anti-DDoS Origin Enterprise imposes no limit on your clean bandwidth but provides only basic protection.

Refunds

Anti-DDoS Origin instances do not support the 5-day money-back guarantee refund.

Contact us

You can submit a ticket or contact your service manager to create an Anti-DDoS Origin Enterprise instance with custom specifications.