All Products
Search
Document Center

Anti-DDoS:Billing of global advanced mitigation sessions

Last Updated:Dec 02, 2025

This topic describes the billing of global advanced mitigation sessions.

What is a global advanced mitigation session

Anti-DDoS Pro and Anti-DDoS Premium provide advanced mitigation capabilities to defend against DDoS attacks. These capabilities use the resources of scrubbing centers in the current region to protect your services. The following table lists the instances that support advanced mitigation.

Product type

Instance type

Default advanced mitigation sessions per calendar month

Anti-DDoS Pro (Chinese Mainland)

Premium Edition

2

Anti-DDoS Premium (Outside Chinese Mainland)

Insurance mitigation plan

2 times

Sec-MCA 1.0

2

Sec-MCA 1.0 (Basic Edition)

1

Sec-CMA 2.0

Supports setting the number of sessions to 0, 1, 2, or unlimited.

If the default number of advanced mitigation sessions does not meet your service requirements, you can purchase a global advanced mitigation session. After the default advanced mitigation sessions for an instance are used up in a calendar month, Anti-DDoS Pro and Anti-DDoS Premium automatically use your purchased global advanced mitigation sessions if your service is targeted by another volumetric attack. A volumetric attack is an attack in which the traffic exceeds the basic protection bandwidth. For more information about global advanced mitigation sessions, see the following table.

Note

Sec-CMA 2.0, Sec-CMA 2.0 (Insurance), and Sec-CMA 2.0 (Unlimited) do not support the purchase of global advanced mitigation sessions.

Item

Anti-DDoS Pro (Chinese Mainland)

Anti-DDoS Premium (Outside Chinese Mainland)

Premium Edition global advanced mitigation session

Insurance global advanced mitigation session

Sec-MCA global advanced mitigation session

Protected object

Services protected by all unexpired Premium Edition instances under your Alibaba Cloud account. You do not need to attach the session to a specific instance.

Services protected by all unexpired Insurance mitigation plan instances under your Alibaba Cloud account. You do not need to attach the session to a specific instance.

Services protected by all unexpired Sec-MCA 1.0 and Sec-MCA 1.0 (Basic Edition) instances under your Alibaba Cloud account. You do not need to attach the session to a specific instance.

Validity period

  • 1-year subscription duration: Valid for one year from the date of purchase

  • 1-month subscription duration: Valid for one month from the date of purchase

Valid for one year from the date of purchase

Valid for one year from the date of purchase

Limits

None

Each Alibaba Cloud account can use a maximum of 20 advanced mitigation sessions per month. If you exceed this limit, the advanced mitigation feature is frozen.

The 20 advanced mitigation sessions include the following:

  • The default advanced mitigation sessions that are included with Insurance mitigation plan, Sec-MCA 1.0, and Sec-MCA 1.0 (Basic Edition) instances.

  • The global advanced mitigation sessions provided by the Insurance and Sec-MCA global advanced mitigation session packages.

After the advanced mitigation feature is frozen, you cannot use it for the rest of the current calendar month. The feature is automatically resumed in the next calendar month.

Note

If your services are frequently targeted by volumetric DDoS attacks, purchase an Anti-DDoS Premium (Outside Chinese Mainland) Unlimited instance. This instance provides unlimited advanced mitigation sessions.

Fees

  • For a 1-year subscription duration: USD 4,045/purchase

  • If you select a subscription duration of 1 month: USD 2,050/purchase

USD 1,580/time

USD 7,790/operation

For more information about how to purchase a global advanced mitigation session, see Purchase a global advanced mitigation session.

Rules for using advanced mitigation sessions

An advanced mitigation session is used for an instance when the traffic of a DDoS attack on a single IP address of the Anti-DDoS Proxy instance exceeds 5 Gbps. The mitigation is effective for 24 hours. This means that all DDoS attacks on that IP address within the 24-hour period use only one advanced mitigation session.

Overdue payments

Global advanced mitigation sessions are subscription-based and require an upfront payment. Therefore, you will not incur overdue payments.

Refund policy

Global advanced mitigation sessions are non-refundable after purchase.

Bill query

You can query bills in the Expenses and Costs console. For more information, see Overview of monthly bills.