This topic describes the billing of Anti-DDoS Pro.

Billing items

Note The prices that are provided in this topic are for reference only. The actual prices on the Anti-DDoS Pro buy page shall prevail.

Subscription billable items

Billing item Description
Instance Unit price: USD 3,120 per month.
Instance specifications:
  • Basic protection bandwidth: 30 Gbit/s.
  • Burstable protection bandwidth: 30 Gbit/s.
  • Clean bandwidth: 100 Mbit/s.
  • 95th percentile burstable clean bandwidth: disabled.
  • Function plan: Standard function plan.
  • Number of domain names that can be protected by the instance: 50. The domain names that you add to an instance can belong to a maximum of five second-level domain names.
  • Clean queries per second (QPS): 3,000.
  • Number of ports that can be protected by the instance: 50.
Basic protection bandwidth Specify a basic protection bandwidth based on your business requirements. The actual prices on the buy page shall prevail.

Price for every 10 Gbit/s of bandwidth increment: USD 1,300 per month.

Clean bandwidth The maximum service traffic that can be processed by the instance when no attacks occur.

Price for every 50 Mbit/s of clean bandwidth increment: USD 750 per month.

Function Plan Enhanced function plan: The price of an instance that uses the Enhanced function plan is USD 1,200 per month higher than the price of an instance that uses the Standard function plan at the same specifications. For more information about the Standard and Enhanced function plans, see Function plan.
Number of domain names The number of HTTP and HTTPS domain names that can be protected by the instance.
  • Price for every 10 additional domain names in the Standard function plan: USD 45 per month.
  • Price for every 10 additional domain names in the Enhanced function plan: USD 75 per month.
Note For every 10 additional domain names, the total number of second-level domain names that are supported is increased by one.
Clean QPS The maximum number of HTTP and HTTPS requests per second that can be concurrently processed by the instance when no attacks occur.

Price for every 100 QPS of clean QPS increment: USD 150 per month.

Important We recommend that you specify this parameter based on your business requirements. If the actual QPS of your service exceeds the value of this parameter, packet loss may occur and some logs may fail to be recorded.
Number of ports The number of TCP and UDP ports that can be protected by the instance.

Price for every five additional ports: USD 37.5 per month.

Pay-as-you-go billable items

Billing item Description
Burstable protection bandwidth The burstable protection feature is billed on a daily basis. To enable burstable protection, you must specify a burstable protection bandwidth that is greater than the basic protection bandwidth. For more information, see Billing of the burstable protection feature.
  • If the bandwidth of DDoS attacks is greater than the basic protection bandwidth but is less than the burstable protection bandwidth, burstable protection is triggered to mitigate the DDoS attacks. You are charged for the usage of burstable protection.
  • If the bandwidth of DDoS attacks is no greater than the basic protection bandwidth or is greater than the burstable protection bandwidth, burstable protection is not triggered. You are not charged for the usage of burstable protection.
95th percentile burstable clean bandwidth You can use the metering method of daily 95th percentile bandwidth or monthly 95th percentile bandwidth for the burstable clean bandwidth feature. After you enable the feature, you are charged for the burstable clean bandwidth that is used when the peak traffic exceeds the clean bandwidth of your instance. For more information, see Billing of the burstable clean bandwidth feature.

Billing of the burstable protection feature

The fees for burstable protection is calculated by using the following method: Calculate the difference between the peak bandwidth of DDoS attacks on a day and the basic protection bandwidth, and view the price that corresponds to the pricing tier described in the following table.

The bill for burstable protection each day is generated from 08:00 to 09:00 on the following day.

Note If you specify the same value for the burstable protection bandwidth and the basic protection bandwidth, your Anti-DDoS Pro instance does not provide burstable protection, and no additional fees are generated.

The following table describes the prices of burstable protection based on different pricing tiers.

Pricing tier Price of burstable protection (USD/day)
0 Gbit/s < Bandwidth difference ≤ 5 Gbit/s 120
5 Gbit/s < Bandwidth difference ≤ 10 Gbit/s 180
10 Gbit/s < Bandwidth difference ≤ 20 Gbit/s 330
20 Gbit/s < Bandwidth difference ≤ 30 Gbit/s 540
30 Gbit/s < Bandwidth difference ≤ 40 Gbit/s 730
40 Gbit/s < Bandwidth difference ≤ 50 Gbit/s 960
50 Gbit/s < Bandwidth difference ≤ 60 Gbit/s 1,170
60 Gbit/s < Bandwidth difference ≤ 70 Gbit/s 1,380
70 Gbit/s < Bandwidth difference ≤ 80 Gbit/s 1,590
80 Gbit/s < Bandwidth difference ≤ 100 Gbit/s 1,770
100 Gbit/s < Bandwidth difference ≤ 150 Gbit/s 2,190
150 Gbit/s < Bandwidth difference ≤ 200 Gbit/s 3,240
200 Gbit/s < Bandwidth difference ≤ 300 Gbit/s 4,200
300 Gbit/s < Bandwidth difference ≤ 400 Gbit/s 6,000
400 Gbit/s < Bandwidth difference ≤ 500 Gbit/s 7,510
500 Gbit/s < Bandwidth difference ≤ 600 Gbit/s 9,010
600 Gbit/s < Bandwidth difference ≤ 700 Gbit/s 10,510
700 Gbit/s < Bandwidth difference ≤ 800 Gbit/s 12,010
800 Gbit/s < Bandwidth difference ≤ 900 Gbit/s 13,510
900 Gbit/s < Bandwidth difference ≤ 1,000 Gbit/s 15,010
1,000 Gbit/s < Bandwidth difference ≤ 1,100 Gbit/s 16,510
1,100 Gbit/s < Bandwidth difference ≤ 1,200 Gbit/s 18,010
1,200 Gbit/s < Bandwidth difference ≤ 1,300 Gbit/s 19,510
1,300 Gbit/s < Bandwidth difference ≤ 1,400 Gbit/s 21,010
1,400 Gbit/s < Bandwidth difference ≤ 1,500 Gbit/s 22,520
Billing examples

For example, the basic protection bandwidth of your Anti-DDoS Pro instance is 30 Gbit/s and the burstable protection bandwidth is 100 Gbit/s. Four DDoS attacks are launched against the instance on the same day. The peak attack bandwidths are 20 Gbit/s, 80 Gbit/s, 40 Gbit/s, and 120 Gbit/s.

The first and fourth DDoS attacks do not trigger burstable protection, and no fees are generated for burstable protection. The second and third DDoS attacks trigger burstable protection, and fees are generated.

  • If the bandwidth of DDoS attacks is greater than the basic protection bandwidth but is less than the burstable protection bandwidth, burstable protection is triggered to mitigate the DDoS attacks. You are charged for the usage of burstable protection.
  • If the bandwidth of DDoS attacks is no greater than the basic protection bandwidth or is greater than the burstable protection bandwidth, burstable protection is not triggered. You are not charged for the usage of burstable protection.

You are charged for the usage of burstable protection based on the higher peak bandwidth (80 Gbit/s). The difference between the higher peak bandwidth and basic protection bandwidth (30 Gbit/s) is 50 Gbit/s. Based on the pricing tiers that are described in the following table, the fee generated for burstable protection on the day is USD 960.

Service expiration

Instance status Description
Before the instance expires Alibaba Cloud sends you text messages and emails seven days, three days, and one day before your instance expires to remind you to renew your subscription.
From the expiration date to seven calendar days (excluded) after the expiration date The instance forwards service traffic, and the configurations of the instance are retained. If you renew your instance within this time period, the instance continues to provide protection capabilities based on the specifications that you purchase.
Seven calendar days (included) after the expiration date to 15 calendar days (excluded) after the expiration date The instance no longer forwards service traffic, but the configurations of the instance are retained. If you renew your instance within this time period, the instance continues to provide protection capabilities based on the specifications that you purchase.
Warning If you no longer require Anti-DDoS Pro to protect your service, you must switch service traffic from the Anti-DDoS Pro instance to the origin server seven calendar days before the expiration date. Otherwise, access to your services may be adversely affected. If you want to switch service traffic, make sure that the domain name of your website does not map to the CNAME assigned by Anti-DDoS Pro. You must also make sure that your non-website service does not use an exclusive IP address provided by the instance.
Fifteen calendar days (included) after the expiration date The instance no longer forwards service traffic and is released.
Warning After all Anti-DDoS Pro instances that are created by using your Alibaba Cloud account are released, the configurations that are added to Anti-DDoS Pro are deleted. If you want to use Anti-DDoS Pro again, you must purchase and configure another Anti-DDoS Pro instance.

Overdue payments

  • If the balance of your Alibaba Cloud account including cash, vouchers, and coupons is insufficient to complete an outstanding payment, your account has an overdue payment.
  • If your Alibaba Cloud account has an overdue payment, you must top up your account at the earliest opportunity to ensure that the balance of your account is sufficient. Otherwise, your pay-as-you-go service may become unavailable.

Renewal

You can manually renew your instance. You can also enable auto-renewal for the instance. For more information about how to create a username and a password of a database account, see Renew an instance.

Refunds

After you purchase a subscription Anti-DDoS Pro instance,. you cannot request a refund for the instance.

Bill query

You can query bills in User Center.