This topic describes the billing methods of Anti-DDoS Pro.
Overview
- Basic protection: subscription (billed monthly)
Before you use Anti-DDoS Pro, you must purchase an Anti-DDoS Pro instance. When you purchase an Anti-DDoS Pro instance, you must specify the specifications and the subscription period and complete the payment. The Anti-DDoS Pro instance provides basic protection within the specified subscription period.
For example, if you purchase a basic protection bandwidth of 30 Gbit/s for an Anti-DDoS Pro instance and the peak bandwidth of DDoS attacks is no greater than 30 Gbit/s, basic protection is triggered, and no additional fees are generated.
- Burstable protection: pay-as-you-go (billed daily)
You can enable burstable protection based on your business requirements. To enable burstable protection, you must specify a burstable protection bandwidth that is greater than the basic protection bandwidth. If the bandwidth of DDoS attacks on the day is greater than the basic protection bandwidth but is less than the burstable protection bandwidth, burstable protection is triggered to mitigate the DDoS attacks. You are charged for the usage of burstable protection. If the bandwidth of DDoS attacks on the day is no greater than the basic protection bandwidth or is greater than the burstable protection bandwidth, burstable protection is not triggered. You are not charged for the usage of burstable protection.
For example, the basic protection bandwidth of your Anti-DDoS Pro instance is 30 Gbit/s and the burstable protection bandwidth is 100 Gbit/s. Four DDoS attacks are launched against the instance on the same day. The peak attack bandwidths are 20 Gbit/s, 80 Gbit/s, 40 Gbit/s, and 120 Gbit/s.
The first and fourth DDoS attacks do not trigger burstable protection, and no fees are generated for burstable protection. The second and third DDoS attacks trigger burstable protection, and fees are generated. The system calculates the fees based on the difference between the peak bandwidth of DDoS attacks (80 Gbit/s) on the day and the basic protection bandwidth (30 Gbit/s). In this example, the difference is 50 Gbit/s. Therefore, the fees that are generated for burstable protection on the day is USD 960.
For more information, visit the Anti-DDoS pricing page.
Basic protection: subscription (billed monthly)
The following table lists the prices of an Anti-DDoS Pro instance based on different basic protection bandwidths when the default specifications are used. Anti-DDoS Pro provides the Standard and Enhanced function plans. The prices vary based on the function plan. For more information about the Standard and Enhanced function plans, see Function plan.
| Basic protection bandwidth | Line | Unit price for the Standard function plan | Unit price for the Enhanced function plan |
|---|---|---|---|
| 30 Gbit/s | Eight BGP lines | USD 3,120/month | USD 4,320/month |
| 60 Gbit/s | USD 7,020/month | USD 8,220/month | |
| 100 Gbit/s | USD 49,230/year (including yearly subscription discount) | USD 63,630/year (including yearly subscription discount) | |
| 300 Gbit/s | USD 79,260/year (including yearly subscription discount) | USD 93,660/year (including yearly subscription discount) | |
| 400 Gbit/s | USD 145,300/year (including yearly subscription discount) | USD 159,700/year (including yearly subscription discount) | |
| 500 Gbit/s | USD 563,430/year (including yearly subscription discount) | USD 577,830/year (including yearly subscription discount) | |
| 600 Gbit/s | USD 670,610/year (including yearly subscription discount) | USD 685,010/year (including yearly subscription discount) |
The following table lists the default specifications of an Anti-DDoS Pro instance and the prices for upgrades. If the default specifications cannot meet your business requirements, you can select higher specifications when you purchase the instance. You can also upgrade the instance after you purchase it.
| Item | Description | Default value | Price for upgrades |
|---|---|---|---|
| Number of protected ports | The number of TCP and UDP ports that the instance can protect | 50 | Price for every five ports: USD 37.5 per month |
| Number of protected domain names | The number of HTTP and HTTPS domain names that the instance can protect | 50
Note The domain names that you add to an instance can belong to a maximum of five second-level
domain names.
|
Note For every 10 additional domain names, the total number of second-level domain names
that are supported is increased by one.
|
| Clean bandwidth | The maximum bandwidth that the instance uses to manage service traffic if no attacks occur | 100 Mbit/s | Price for every Mbit/s: USD 15 /month Note If your clean bandwidth exceeds 600 Mbit/s, you are charged for the bandwidth over
600 Mbit/s. The additional fees are added to your regular monthly fee. The unit price
per additional Mbit/s is USD 11 per month.
|
| Queries per second (QPS) | The maximum number of HTTP and HTTPS requests that the instance can concurrently process per second if no attacks occur | 3,000 QPS | Price for every 100 QPS: USD 150/month |
Burstable protection: pay-as-you-go (billed daily)
Anti-DDoS Pro provides burstable protection to protect your services when the peak bandwidth of DDoS attacks exceeds the basic protection bandwidth but is less than the burstable protection bandwidth. The usage of burstable protection is charged based on the difference between the peak bandwidth of DDoS attacks on the day and the basic protection bandwidth. The bill for burstable protection each day is generated between 08:00 to 09:00 the following day.
The following table lists prices of burstable protection based on different pricing tiers.
| Pricing tier | Price for burstable protection (Unit: USD/day) |
|---|---|
| 0 Gbit/s < Bandwidth difference ≤ 5 Gbit/s | 120 |
| 5 Gbit/s < Bandwidth difference ≤ 10 Gbit/s | 180 |
| 10 Gbit/s < Bandwidth difference ≤ 20 Gbit/s | 330 |
| 20 Gbit/s < Bandwidth difference ≤ 30 Gbit/s | 540 |
| 30 Gbit/s < Bandwidth difference ≤ 40 Gbit/s | 730 |
| 40 Gbit/s < Bandwidth difference ≤ 50 Gbit/s | 960 |
| 50 Gbit/s < Bandwidth difference ≤ 60 Gbit/s | 1,170 |
| 60 Gbit/s < Bandwidth difference ≤ 70 Gbit/s | 1,380 |
| 70 Gbit/s < Bandwidth difference ≤ 80 Gbit/s | 1,590 |
| 80 Gbit/s < Bandwidth difference ≤ 100 Gbit/s | 1,770 |
| 100 Gbit/s < Bandwidth difference ≤ 150 Gbit/s | 2,190 |
| 150 Gbit/s < Bandwidth difference ≤ 200 Gbit/s | 3,240 |
| 200 Gbit/s < Bandwidth difference ≤ 300 Gbit/s | 4,200 |
| 300 Gbit/s < Bandwidth difference ≤ 400 Gbit/s | 6,000 |
| 400 Gbit/s < Bandwidth difference ≤ 500 Gbit/s | 7,510 |
| 500 Gbit/s < Bandwidth difference ≤ 600 Gbit/s | 9,010 |
| 600 Gbit/s < Bandwidth difference ≤ 700 Gbit/s | 10,510 |
| 700 Gbit/s < Bandwidth difference ≤ 800 Gbit/s | 12,010 |
| 800 Gbit/s < Bandwidth difference ≤ 900 Gbit/s | 13,510 |
| 900 Gbit/s < Bandwidth difference ≤ 1,000 Gbit/s | 15,010 |
| 1000 Gbit/s < Bandwidth difference ≤ 1,100 Gbit/s | 16,510 |
| 1100 Gbit/s < Bandwidth difference ≤ 1,200 Gbit/s | 18,010 |
| 1200 Gbit/s < Bandwidth difference ≤ 1,300 Gbit/s | 19,510 |
| 1300 Gbit/s < Bandwidth difference ≤ 1,400 Gbit/s | 21,010 |
| 1400 Gbit/s < Bandwidth difference ≤ 1,500 Gbit/s | 22,520 |
Instance expiration
| Time period | Protection capability | Traffic forwarding | Instance configuration |
|---|---|---|---|
| From the expiration date to 7 calendar days (excluded) after the expiration date | The instance provides only the basic protection against attacks of 5 Gbit/s.
If you renew your instance within this time period, the instance continues to provide the protection capabilities based on the plan that you purchased. |
The instance still forwards service traffic. | Instance configurations are retained. |
| 7 calendar days (included) after the expiration date to 15 calendar days (excluded) after the expiration date | The instance provides only the basic protection against attacks of 5 Gbit/s. | The instance no longer forwards service traffic.
Warning If you no longer need Anti-DDoS Pro, you must switch service traffic from the Anti-DDoS
Pro instance to the origin server seven calendar days before the expiration date.
Otherwise, access to your services may be adversely affected. If you want to switch
service traffic, make sure that the domain name of your website does not map to the
CNAME assigned by Anti-DDoS Pro. You must also make sure that your non-website service
does not use an exclusive IP address provided by the instance.
|
Instance configurations are retained. |
| 15 (included) calendar days after the expiration date to later points in time | The instance provides only the basic protection against attacks of 5 Gbit/s. | The instance no longer forwards service traffic. | The Anti-DDoS Pro instance is released.
Warning After all Anti-DDoS Pro instances that are created by using your Alibaba Cloud account
are released, the configurations that are added to Anti-DDoS Pro, such as website
access configurations, port access configurations, mitigation settings, and reports,
are deleted and cannot be restored. If you want to use Anti-DDoS Pro again, you must
purchase and configure another Anti-DDoS Pro instance.
|
Refunds
The subscription of a subscription Anti-DDoS Pro instance cannot be canceled before the expiration date. After an Anti-DDoS Pro instance is purchased, the fees you paid cannot be refunded.