Alibaba Cloud DNS includes several products. This topic provides detailed billing information for each product.
Public zone
Billing methods
Public Zone offers two billing methods:
Subscription: A prepaid method for Public Zone instances.
Pay-as-you-go: A post-paid method for advanced features like Traffic Analysis.
Billable items
1. Public Zone (subscription)
For purchase instructions, see Purchase and bind domain names.
Package 1: Personal Edition + DNS Security (optional)
You can add DNS Security to the Personal Edition. The total fee is calculated as follows: Total fee = (Unit price of Personal Edition + Unit price of the DNS Security tier) × Number of domains
Billable item | Price | Description |
| USD 7/domain/year | Personal Edition: USD 7/domain/year DNS Basic Security: USD 86/domain/year DNS Full Security: USD 429/domain/year Note For individual developers only. Enterprise-verified users cannot purchase new Personal Edition instances. Existing Personal Edition instances can still be used and renewed. |
| USD 93/domain/year | |
| USD 436/domain/year |
Package 2: Enterprise Ultimate Edition + DNS Security (required)
The Enterprise Ultimate Edition requires a DNS Security tier. The total fee is calculated as follows: Total fee = (Unit price of Enterprise Ultimate Edition + Unit price of the DNS Security tier) × Number of domains
Billable item | Price | Description |
| USD 167/domain/year | Enterprise Ultimate Edition: USD 81/domain/year DNS Basic Security: USD 86/domain/year DNS Full Security: USD 429/domain/year |
| USD 510/domain/year |
Package 3: Premium Edition
The Premium Edition includes DNS Full Security by default. The total fee is calculated as follows: Total fee = Unit price of Premium Edition × Number of domains
Billable item | Price |
| USD 4,287/domain/year |
Expiration
For details on instance expiration and renewal, see Instance expiration and renewal.
2. Traffic Analysis (pay-as-you-go)
Log processing mode | Price | Billing cycle | Billing trigger | Description |
Store and analyze by Alibaba Cloud DNS | USD 0.03/10,000 entries | Daily | Enabled Traffic Analysis and selected Store and analyze by Alibaba Cloud DNS |
|
Delivers to SLS only | USD 0.0015/10,000 entries | Daily | You have enabled Traffic Analysis and set it to Delivers to SLS only |
Additional costs: Simple Log Service charges for subsequent log storage. For pricing details, see the Simple Log Service documentation. |
Alibaba Cloud DNS stores, analyzes, and delivers to SLS | USD 0.0315/10,000 entries | Daily | Enabled Traffic Analysis, and selected Alibaba Cloud DNS stores, analyzes, and delivers to SLS |
Additional costs: Simple Log Service charges for subsequent log storage. For pricing details, see the Simple Log Service documentation. |
Billing example
Assume an account processes 1 million authoritative DNS log entries in a single day.
The fee is calculated as follows: USD 3 = 1 million entries × USD 0.03 per 10,000 entries.
3. Traffic Analysis (Resource plan)
If your domains receive a high volume of DNS queries, we recommend purchasing a Public Zone Traffic Analysis (resource plan) to cover your pay-as-you-go costs. This resource plan takes effect immediately upon purchase and is valid for one year. During its validity period, the system automatically uses the plan's quota to offset your pay-as-you-go bills. Any unused quota expires at the end of the validity period. The following table details the pricing for the resource plan.
Resource plan size (10,000 entries) | Validity period (months) | Resource plan price | Unit price per 10,000 entries |
1,000 | 12 | USD 21 | USD 0.021 |
10,000 | 12 | USD 182 | USD 0.0182 |
100,000 | 12 | USD 1,680 | USD 0.0168 |
1,000,000 | 12 | USD 14,000 | USD 0.014 |
This resource plan can be used to offset the fees from Public Zone and Global Traffic Manager 3.0 for the Traffic Analysis feature, specifically for the Store and analyze by Alibaba Cloud DNS option, but cannot be used to offset the fees for Delivers to SLS only.
Traffic Analysis is billed daily. If you have an active resource plan during a billing cycle, the system automatically uses its quota to offset your bill.
A resource plan cannot be used to offset charges from a previous billing cycle. It can only be applied to bills generated after the plan was purchased.
After you deplete the quota in your resource plan, you are charged for any additional entries on a pay-as-you-go basis.
Overdue payments
Alibaba Cloud DNS provides a grace period that allows you to continue using services for a specific time or within a certain credit limit after a payment on your account becomes overdue. Your existing pay-as-you-go services, purchased resource plans, and subscription resources continue to function normally during this period. We suspend services only if you exceed the grace period. For more information, see Service suspension for overdue payments.
Private zone
Billing methods
Private Zone uses pay-as-you-go billing. You are charged for Authoritative Zone, Cache, Forward Zone, Inbound Endpoint, and Traffic Analysis. Bills are generated daily. You can view the previous day's charges the next day.
Billable items
1. Authoritative Zone
|
Billable item |
Pricing |
Billing cycle |
Billing trigger |
Description |
|
Number of User Defined Zones (converted for billing) |
USD 0.015 per zone/day |
Daily |
A User Defined Zones is added to Authoritative Zone. |
Pay for the total number of Authoritative Zone in your account. The number of billable zones depends on how many DNS records each zone has:
|
|
DNS queries for User Defined Zones |
USD 0.004 per 10,000 queries |
Daily |
A DNS query is received for a domain in Authoritative Zone. |
|
2. Cache
|
Billable item |
Pricing |
Billing cycle |
Billing trigger |
Description |
|
Number of Domain Name |
USD 0.015 per domain/day |
Daily |
A Domain Name is added. |
Pay for the total number of Domain Name in your account. Cache persistence works on an exact domain match basis. |
|
Number of Clear Cache operations |
USD 15 per operation |
Daily |
You manually trigger Clear Cache for an added Domain Name. |
Pay for the total number of Clear Cache operations in your account. |
3. Forward Zone
|
Billable item |
Pricing |
Billing cycle |
Billing trigger |
Description |
|
Number of Source IP Addresses of Outbound Traffic |
USD 0.15 per IP/hour |
Hourly |
An Outbound Endpoint is added. |
Pay for the total number of Source IP Addresses of Outbound Traffic in your account. |
|
Number of DNS queries forwarded by Outbound Endpoint |
USD 0.004 per 10,000 queries |
Daily |
DNS queries are forwarded to external DNS systems through an Outbound Endpoint. |
Pay for the total number of DNS queries forwarded by all Outbound Endpoint in your account. |
4. Inbound Endpoint
|
Billable item |
Pricing |
Billing cycle |
Billing trigger |
Description |
|
Number of Inbound service IP addresses |
USD 0.15 per IP/hour |
Hourly |
An Inbound Endpoint is added. |
Pay for the total number of Inbound service IP addresses in your account. |
|
Number of DNS queries received by Inbound Endpoint |
USD 0.004 per 10,000 queries |
Daily |
DNS queries are received by an Inbound Endpoint. |
Pay for the total number of DNS queries received by all Inbound Endpoint in your account. |
5. Traffic Analysis
|
Billable item |
Pricing |
Billing cycle |
Billing trigger |
Description |
|
Private Zone stores and analyzes logs |
USD 0.015 per 10,000 entries |
Daily |
Private Zone Traffic Analysis Enabled and set to Private Zone stores and analyzes logs. |
When enabled, the system collects and analyzes DNS request and response logs from internal resolution. Total number of DNS log entries = |
|
Deliver to Log Service only |
USD 0.0015 per 10,000 entries |
Daily |
Private Zone Traffic Analysis Enabled and set to Deliver to Log Service only. |
Other charges: SLS charges separately for storage per SLS pricing. |
|
Private Zone stores, analyzes, and delivers to Log Service |
USD 0.0165 per 10,000 entries |
Daily |
Private Zone Traffic Analysis Enabled and set to Private Zone stores, analyzes, and delivers to Log Service. |
Other charges: SLS charges separately for storage per SLS pricing. |
Global traffic queries: All DNS queries from clients (such as ECS instances and containers) in your internal network. Each query generates a request and response log, doubling the count.
Private Zone traffic queries: Queries processed by the Private Zone module (including acceleration and regular regions).
Cache traffic queries: Queries answered directly from the cache.
Forward zone traffic queries: Queries processed by the forwarding module. The count doubles because both the forwarding module and external DNS generate response logs.
Recursive traffic queries: Queries processed by the recursive module.
Billing examples
Scenario 1: Authoritative Zone
Account A has two User Defined Zones: example.com (acceleration region, 5,050 DNS records) and example.aliyundoc.com (regular region, 105,000 DNS records).
In one day, example.aliyundoc.com receives 100,000 origin queries, and example.com receives 200,000 client queries.
-
example.com (acceleration region): 5,050 records / 1,000 = 6 billable zones. example.aliyundoc.com (regular region): 105,000 records / 100,000 = 2 billable zones. Total: 8 billable zones.
-
Daily cost = zone fee + regular region query fee + acceleration region query fee:
USD 0.24 = USD 0.12 (8 × USD 0.015/zone) + USD 0.04 (10 × USD 0.004/10,000 queries) + USD 0.08 (20 × USD 0.004/10,000 queries).
-
Acceleration region (default):
Pay for every DNS query from clients (such as ECS instances and containers). TTL values do not affect the query count. Enable NSCD on ECS instances to reduce queries when no local cache is available.
-
Regular region:
You pay based on origin queries to User Defined Zones.
For example, if the TTL for www.example.com is 30 seconds, queries within each 30-second window hit the cache. After the TTL expires, one origin query is made. In 10 minutes, the origin query count for this domain is 10 x 60 / 30 = 20. You can view origin query counts on the request analysis page in the console.
-
A longer TTL means fewer origin queries and lower costs, but DNS changes take longer to take effect.
-
A shorter TTL means more origin queries and higher costs, but DNS changes take effect faster.
-
Private Zone distributes queries across a server cluster. A 100% cache hit rate requires every server to have a cached response, so the console may show a higher origin query count than the theoretical value, especially at low query volumes.
Scenario 2: Cache
Account B has three Domain Name: www.example.com, test.example.com, and api.example.com. After an urgent DNS update, you perform a Clear Cache operation on www.example.com and test.example.com to apply the changes immediately.
-
Clearing the cache for www.example.com and test.example.com counts as two Clear Cache operations.
-
Daily cost = domain fee + cache clear fee: USD 30.045 = USD 0.045 (3 × USD 0.015/domain) + USD 30 (2 × USD 15/operation).
Scenario 3: Forward Zone
Account C adds a forwarding rule for the domain example.top, configures 2 Source IP Addresses of Outbound Traffic, and forwards 1 million DNS queries through the Outbound Endpoint in one day.
-
Daily cost = IP address fee + forwarded query fee: USD 7.6 = USD 7.2 (2 × 24 hours × USD 0.15/IP/hour) + USD 0.4 (100 × USD 0.004/10,000 queries).
Scenario 4: Inbound Endpoint
Account D adds 2 Inbound service IP addresses. In one day, the Inbound Endpoint receives 1 million DNS queries.
-
Daily cost = IP address fee + inbound query fee: USD 7.6 = USD 7.2 (2 × 24 hours × USD 0.15/IP/hour) + USD 0.4 (100 × USD 0.004/10,000 queries).
Scenario 5: Traffic Analysis
Account E enables Traffic Analysis and generates 1 million DNS log entries in one day.
Daily cost = log entry fee: USD 1.5 = 100 × USD 0.015/10,000 entries.
Overdue payments
Alibaba Cloud DNS provides a grace period that allows you to continue using services for a specific time or within a certain credit limit after a payment on your account becomes overdue. Your existing pay-as-you-go services, purchased resource plans, and subscription resources continue to function normally during this period. We suspend services only if you exceed the grace period. For more information, see Service suspension for overdue payments.
Global Traffic Manager
Global Traffic Manager and Global Traffic Manager 3.0 share the same billing methods and billable items.
Billing methods
Global Traffic Manager 3.0 supports both subscription and pay-as-you-go billing.
Subscription
Subscription is ideal for fixed-budget scenarios. The following resources are billable:
Subscription instance: Purchase a Standard or Ultimate Edition of Global Traffic Manager for a specific period, such as a month or a year.
Detection Task Package: The Standard and Ultimate editions include 100 detection tasks per month by default. To add more health check tasks, purchase a Detection Task Package for your instance.
Subscription GTM instances
Edition | Price | Version guide |
Standard | USD 20/month | For edition differences, see Subscription instances. |
Ultimate | USD 140/month |
Detection task package
When you apply a Health Check Template to an address, one detection task is created. Each instance includes 100 detection tasks by default. Additional detection tasks can only be used with an instance and cannot be purchased or used separately.
Edition | Price |
Standard | USD 12/month for a package of 100 detection tasks. |
Ultimate | USD 48/month for a package of 100 detection tasks. |
Detection task calculation example
You apply an ICMP (Ping) Health Check Template and an HTTP Health Check Template to three IP addresses: ip1, ip2, and ip3. Total detection tasks = Number of IP addresses × Number of applied Health Check Template = 3 × 2 = 6.
Expiration
Renewal reminders are sent 7, 3, and 1 day before your instance expires.
If you do not renew before expiration, DNS resolution and health check tasks stop automatically, which may cause service access issues for your domain names.
Seven days after expiration, Global Traffic Manager 3.0 releases the instance and deletes the Access Domain configuration.
NoteThe Health Check Template, Address, and Address Pool of Global Traffic Manager 3.0 are not deleted.
Pay-as-you-go
For flexible and dynamic workloads, GTM also offers pay-as-you-go billing. The following items are billable:
Pay-as-you-go GTM instances
Billable item | Price | Description |
Domain Name Count | USD 0.015/domain name/day | Billed by the number of Access Domain (including enabled and disabled ones). Settled daily. |
DNS Query Count | USD 0.004/10,000 requests | Billed by the number of DNS queries processed by GTM. Settled daily. |
Health Probe Count | USD 1.5/10,000 checks | Billed by the number of health checks performed on your addresses. Settled daily. Important If you disable an Access Domain, health check tasks for its addresses continue to run. To stop billing, delete the health check tasks. |
SMS Alerts | USD 0.225/message | Billed by the number of text message alerts sent. Settled daily. |
DNS traffic analysis
Log processing mode | Price | Billing cycle | Billing trigger | Description |
Store and analyze by Alibaba Cloud DNS | USD 0.03/10,000 entries | Daily | Enabled Traffic Analysis and selected Store and analyze by Alibaba Cloud DNS |
|
Delivers to SLS only | USD 0.0015/10,000 entries | Daily | You have enabled Traffic Analysis and set it to Delivers to SLS only |
Additional costs: Simple Log Service charges for subsequent log storage. For pricing details, see the Simple Log Service documentation. |
Alibaba Cloud DNS stores, analyzes, and delivers to SLS | USD 0.0315/10,000 entries | Daily | Enabled Traffic Analysis, and selected Alibaba Cloud DNS stores, analyzes, and delivers to SLS |
Additional costs: Simple Log Service charges for subsequent log storage. For pricing details, see the Simple Log Service documentation. |
Cost estimation example
Assume one Access Domain, 2 IP addresses, and 3 detection nodes. The nodes perform HTTP detection on 2 ports (such as 80 and 3000) for each IP address once per minute, with an average of 100,000 DNS requests and 1 text message alert per day.
Estimated monthly cost:
Access domain name fee: 1 domain name × USD 0.015/domain name/day × 30 days/month = USD 0.45/month
Health check fee: 2 IP addresses × 2 ports × 3 detection nodes × 1 check/minute × 60 minutes/hour × 24 hours/day × 30 days/month × USD 0.00015/check = USD 77.64/month
GTM DNS resolution request fee: 100,000 requests/day × 30 days/month × USD 0.004/10,000 requests = USD 1.2/month
Text message alert fee: 1 message/day × 30 days/month × USD 0.225/message = USD 6.75/month
Total fee: 0.45 + 77.64 + 1.2 + 6.75 = USD 86.04/month
Overdue payments
If your account has an overdue payment, all services for the Access Domain stop immediately, including DNS resolution, health checks, and text message alerts. No charges accrue for the Access Domain while the payment is overdue. If the payment remains unsettled for 15 days, the Access Domain is automatically released. Address pools, addresses, and Health Check Template are not affected.
Enterprise Recursive Gateway
Billing methods
Recursive Gateway uses a pay-as-you-go billing method. You can purchase data transfer plans to reduce costs.
Bills for Recursive Gateway are generated daily based on your usage.
On the first day of each month, Recursive Gateway provides a free quota of 10 million regular HTTP requests, which is equivalent to 20 million UDP/TCP parsing requests, for all users with the service enabled. You are charged only for usage that exceeds this free quota.
The free quota is provided on a monthly basis. Any unused quota from the current month does not carry over to the next month.
Billing rules
Recursive Gateway is billed based on the number of UDP/TCP parsing requests. For billing, the number of parsing requests is converted to the number of HTTP parsing requests. The conversion ratio is as follows:
UDP/TCP requests are billed at half the rate of HTTP requests. In other words, two UDP/TCP requests are equivalent to one HTTP request.
After you exceed the free quota, you are charged USD 0.0062 per 10,000 HTTP parsing requests.
Traffic deduction order
Overdue payments
Alibaba Cloud DNS provides a grace period that allows you to continue using services for a specific time or within a certain credit limit after a payment on your account becomes overdue. Your existing pay-as-you-go services, purchased resource plans, and subscription resources continue to function normally during this period. We suspend services only if you exceed the grace period. For more information, see Service suspension for overdue payments.
HTTPDNS
Billing methods
HTTPDNS uses pay-as-you-go billing. No charges apply when the service is idle.
-
HTTPDNS is billed daily.
-
On the first day of each month, HTTPDNS provides a free quota of 10 million HTTP queries (equivalent to 20 million UDP/TCP queries) per active account. Usage beyond the free quota is charged.
-
The free quota resets monthly and does not roll over.
Billable items
HTTPDNS bills by HTTP query count. HTTPS queries (including DoH and DoT) are converted to HTTP-equivalent queries at the following ratios:
-
Each HTTPS query (DoH or DoT) counts as five HTTP queries.
-
Usage exceeding the free quota is charged at USD 0.0062 per 10,000 HTTP queries.
Usage deduction order
On-premises DNS
Billing method
On-premises DNS uses a pay-as-you-go billing method. You are charged daily based on the number of deployed resolution nodes.
Billing rules
Billable item | Unit price | Cycle | Description |
Resolution service node (50,000 QPS) | 7.5 USD/day/node | Daily |
|
Resolution service node (100,000 QPS) | 15 USD/day/node | Daily |
|
HTTPDNS service | 3.3 USD/day/node | Daily |
|
Expert managed services | For pricing, join our DingTalk group (104160006996) | Annually |
|
Free trial: Enterprise users automatically qualify for a 30-day free trial with unlimited features and nodes.
Authoritative zone domain names and cache retention domain names added to private zone incur fees, as covered in the private zone billing documentation.
DNS requests and cache purges for domain names associated only with On-premises DNS resolution clusters are free of charge.
Overdue payments
If you have an overdue payment for your On-premises DNS service, resolution nodes continue to operate for 30 days. During this period, the console is locked and you cannot change configurations. Existing resolution data is not affected.
If a payment remains overdue for 30 days, all service nodes and resolution data are permanently deleted and cannot be recovered.
DNS Firewall
Billing methods
DNS Firewall includes multiple components and supports both pay-as-you-go and subscription billing methods.
Pay-as-you-go
This billing method applies to Private Zone DNS Firewall and Public Recursive DNS Firewall. Fees are calculated and settled daily based on your actual usage.
Component | Billable item | Pricing | Description |
Private Zone DNS Firewall | Number of custom rules | USD 0.015/rule/day |
|
Number of protection detections | USD 0.004/10,000 queries | Fees are charged based on the number of domain name queries that hit Custom Rules or Threat Intelligence Rules. | |
Public Recursive DNS Firewall | Number of protection detections | USD 0.004/10,000 queries | Fees are charged based on the number of domain name query requests generated within the scope of the Threat Intelligence Rules. |
Cost estimation example
Feature: Private Zone DNS Firewall
Usage: 20 custom rules. Each custom rule blocks 10,000 domain name queries per day.
Monthly cost estimate:
Protection rule fee: 20 rules × USD 0.015/rule/day × 30 days/month = USD 9/month
Protection detection fee: 20 rules × 10,000 queries/day × USD 0.004/10,000 queries × 30 days/month = USD 2.4/month
Total fee: USD 9/month + USD 2.4/month = USD 11.4/month
Overdue payments
Alibaba Cloud DNS provides a grace period that allows you to continue using services for a specific time or within a certain credit limit after a payment on your account becomes overdue. Your existing pay-as-you-go services, purchased resource plans, and subscription resources continue to function normally during this period. We suspend services only if you exceed the grace period. For more information, see Service suspension for overdue payments.
Subscription
This billing method applies to Public Zone DNS Firewall. You must purchase the service in advance, and the fee covers the subscription period that you select.
Component | Billable item | Pricing | Description |
Anti-DDoS Protection | DNS Anti-DDoS Basic | USD 86/domain name/year | Provides basic DNS attack protection for each domain name attached to the edition. The basic DNS attack defense threshold is 10 million queries per second (QPS). |
DNS Anti-DDoS Advanced | USD 429/domain name/year | Provides comprehensive DNS attack protection for each domain name attached to the edition. This can withstand over 100 million DNS QPS. | |
Authoritative DNS Resolution Agent | Authoritative Zone Name | USD 588/domain name/year | The fee to purchase an authoritative proxy domain name. Note Due to a sales policy adjustment, starting from October 30, 2025, subscription plans with DNS Security set to "No Defense" will no longer be available for purchase. |
Expiration
Anti-DDoS Protection: This feature expires when the Public Authoritative Zone instance expires. To avoid service interruptions, renew the instance. For more information, see Instance expiration and renewal.
Authoritative DNS Resolution Agent: When the service expires, the proxy feature is disabled. To ensure business continuity, renew the service before it expires.
FAQ
How are wildcard domains counted?
Alibaba Cloud DNS billing is based on the number of zones, not the number of DNS records or subdomains. When you purchase a DNS instance, the "number of domains" you enter is the number of zones you need.
Billing rules:
Each zone counts as one domain, regardless of the number of DNS records or subdomains it contains.
A wildcard record, such as
*.example.com, is a DNS record within theexample.comzone and does not count as a separate domain.If you host a subdomain as a separate zone, it counts as one zone. For example, if you host
sub.example.comas an independent zone,sub.example.comthen counts as a separate zone.
Domain renewal vs. DNS renewal
Domain registration/renewal and the Alibaba Cloud DNS service are two separate products. They are billed and renewed independently.
No renewal is needed for the Free Edition: If you use the Free Edition of Alibaba Cloud DNS, your DNS service continues to work after you renew your domain. No separate Alibaba Cloud DNS renewal is required.
Paid Edition requires separate renewal: If you purchase a Paid Edition of Alibaba Cloud DNS, you must renew your DNS instance separately in the Alibaba Cloud DNS console. If you fail to renew the instance within seven days of its expiration, Alibaba Cloud releases it, and its DNS data becomes unavailable.
Invoices: You can request separate invoices for your domain renewal and Alibaba Cloud DNS service fees in the Alibaba Cloud Billing Management console.