This topic describes the billing methods of Anti-DDoS Pro.

Overview

Anti-DDoS Pro provides basic protection and burstable protection to protect your services that are deployed in regions in mainland China against DDoS attacks. You are charged for these protection services based on the following billing methods:
  • Basic protection: subscription (billed monthly)

    Before you use Anti-DDoS Pro, you must purchase an Anti-DDoS Pro instance. When you purchase an Anti-DDoS Pro instance, you must specify the specifications and the subscription period and complete the payment. The Anti-DDoS Pro instance provides basic protection within the specified subscription period.

    For example, if you purchase a basic protection bandwidth of 30 Gbit/s for an Anti-DDoS Pro instance and the peak bandwidth of DDoS attacks is no greater than 30 Gbit/s, basic protection is triggered, and no additional fees are generated.

  • Burstable protection: pay-as-you-go (billed daily)

    You can enable burstable protection based on your business needs. To enable burstable protection, specify a burstable protection bandwidth that is greater than the basic protection bandwidth. If the bandwidth of DDoS attacks is greater than the basic protection bandwidth but is less than the burstable protection bandwidth, burstable protection is triggered to mitigate the DDoS attacks. You are charged for the usage of burstable protection.

    For example, the basic protection bandwidth of your Anti-DDoS Pro instance is 30 Gbit/s and the burstable protection bandwidth is 100 Gbit/s. If the peak bandwidth of DDoS attacks is no greater than 30 Gbit/s or exceeds 100 Gbit/s, burstable protection is not triggered, and no fees are generated for burstable protection. If the peak bandwidth of DDoS attacks is between 30 Gbit/s and 100 Gbit/s, burstable protection is triggered, and fees are generated for burstable protection.

For more information, visit the Anti-DDoS pricing page.

Basic protection: subscription (billed monthly)

The following table lists the prices of an Anti-DDoS Pro instance based on different basic protection bandwidths when the default specifications are used. Anti-DDoS Pro provides the Standard and Enhanced function plans. The prices vary based on the function plan. For more information about the Standard and Enhanced function plans, see Function plan.

Note If the protection bandwidths listed in the following table cannot meet your business needs, submit a ticket.
Basic protection bandwidth Line Unit price for the Standard function plan Unit price for the Enhanced function plan
30 Gbit/s Eight BGP lines USD 3,120/month USD 4,320/month
60 Gbit/s USD 7,020/month USD 8,220/month
100 Gbit/s USD 49,230/year (including yearly subscription discount) USD 63,630/year (including yearly subscription discount)
300 Gbit/s USD 79,260/year (including yearly subscription discount) USD 93,660/year (including yearly subscription discount)
400 Gbit/s USD 145,300/year (including yearly subscription discount) USD 159,700/year (including yearly subscription discount)
500 Gbit/s USD 563,430/year (including yearly subscription discount) USD 577,830/year (including yearly subscription discount)
600 Gbit/s USD 670,610/year (including yearly subscription discount) USD 685,010/year (including yearly subscription discount)

The following table lists the default specifications of an Anti-DDoS Pro instance and the prices for upgrades. If the default specifications cannot meet your business needs, you can choose higher specifications when you purchase the instance. You can also upgrade the instance after you purchase it.

Item Description Default value Price for upgrades
Number of protected ports The number of TCP and UDP ports that the instance can protect 50 Price for every five ports: USD 37.5/month
Number of protected domain names The number of HTTP and HTTPS domain names that the instance can protect 50
Note The domain names that you add to an instance can belong to a maximum of five second-level domain names.
  • Price for every 10 domain names in the Standard function plan: USD 45/month
  • Price for every 10 domain names in the Enhanced function plan: USD 75 /month
Note For every 10 additional domain names, the total number of second-level domain names that are supported is increased by one.
Clean bandwidth The maximum bandwidth that the instance uses to manage service traffic if no attacks occur 100 Mbit/s Price for every Mbit/s:USD 15 /month
Note If your clean bandwidth exceeds 600 Mbit/s, you are charged for the bandwidth over 600 Mbit/s. The additional fees are added to your regular monthly fee. The unit price per additional Mbit/s is USD 11 per month.
Queries per second (QPS) The maximum number of HTTP and HTTPS requests that the instance can concurrently process per second if no attacks occur 3,000 QPS Price for every 100 QPS: USD 150/month

Burstable protection: pay-as-you-go (billed daily)

Anti-DDoS Pro provides burstable protection to protect your services when the peak bandwidth of DDoS attacks exceeds the basic protection bandwidth but is less than the burstable protection bandwidth. The usage of burstable protection is charged based on the difference between the peak bandwidth of DDoS attacks on the day and the basic protection bandwidth.

Note If you specify the same value for the burstable protection bandwidth and the basic protection bandwidth, your Anti-DDoS Pro instance does not provide burstable protection, and no additional fees are generated.
Billing:
  • If the peak bandwidth of DDoS attacks on the day is no greater than the basic protection bandwidth, burstable protection is not triggered, and no fees are generated for burstable protection.
  • If the peak bandwidth of DDoS attacks on the day is greater than the burstable protection bandwidth, burstable protection is not triggered, and no fees are generated for burstable protection. In this case, if DDoS attacks on the day trigger blackhole filtering for the IP address that is protected by an Anti-DDoS Pro instance, no fees are generated for burstable protection.
  • The bill for burstable protection each day is generated between 08:00 to 09:00 the following day.

For example, the basic protection bandwidth of your Anti-DDoS Pro instance is 30 Gbit/s and the burstable protection bandwidth is 100 Gbit/s. Two DDoS attacks are launched against the instance on the same day. The peak bandwidths of the two DDoS attacks are 80 Gbit/s and 40 Gbit/s, both of which exceed the basic protection bandwidth. You are charged for the usage of burstable protection based on the higher peak bandwidth (80 Gbit/s). The difference between the peak bandwidth and basic protection bandwidth (30 Gbit/s) is 50 Gbit/s. Based on the pricing tiers listed in the following table, the fee generated for burstable protection on the day is USD 960.

The following table lists prices of burstable protection based on different pricing tiers.

Pricing tier Price for burstable protection (Unit: USD/day)
0 Gbit/s < Bandwidth difference ≤ 5 Gbit/s 120
5 Gbit/s < Bandwidth difference ≤ 10 Gbit/s 180
10 Gbit/s < Bandwidth difference ≤ 20 Gbit/s 330
20 Gbit/s < Bandwidth difference ≤ 30 Gbit/s 540
30 Gbit/s < Bandwidth difference ≤ 40 Gbit/s 730
40 Gbit/s < Bandwidth difference ≤ 50 Gbit/s 960
50 Gbit/s < Bandwidth difference ≤ 60 Gbit/s 1,170
60 Gbit/s < Bandwidth difference ≤ 70 Gbit/s 1,380
70 Gbit/s < Bandwidth difference ≤ 80 Gbit/s 1,590
80 Gbit/s < Bandwidth difference ≤ 100 Gbit/s 1,770
100 Gbit/s < Bandwidth difference ≤ 150 Gbit/s 2,190
150 Gbit/s < Bandwidth difference ≤ 200 Gbit/s 3,240
200 Gbit/s < Bandwidth difference ≤ 300 Gbit/s 4,200
300 Gbit/s < Bandwidth difference ≤ 400 Gbit/s 6,000
400 Gbit/s < Bandwidth difference ≤ 500 Gbit/s 7,510
500 Gbit/s < Bandwidth difference ≤ 600 Gbit/s 9,010
600 Gbit/s < Bandwidth difference ≤ 700 Gbit/s 10,510
700 Gbit/s < Bandwidth difference ≤ 800 Gbit/s 12,010
800 Gbit/s < Bandwidth difference ≤ 900 Gbit/s 13,510
900 Gbit/s < Bandwidth difference ≤ 1,000 Gbit/s 15,010
1,000 Gbit/s < Bandwidth difference ≤ 1,100 Gbit/s 16,510
1,100 Gbit/s < Bandwidth difference ≤ 1,200 Gbit/s 18,010
1,200 Gbit/s < Bandwidth difference ≤ 1,300 Gbit/s 19,510
1,300 Gbit/s < Bandwidth difference ≤ 1,400 Gbit/s 21,010
1,400 Gbit/s < Bandwidth difference ≤ 1,500 Gbit/s 22,520

Instance expiration

If you do not renew your Anti-DDoS Pro instance in time after the instance expires, your services are adversely affected. The following table describes the impacts.
Time period Protection capability Traffic forwarding Instance configuration
From the expiration date to 7 calendar days (excluded) after the expiration date The instance provides only the basic protection against attacks of 5 Gbit/s.

If you renew your instance within this time period, the instance continues to provide the protection capabilities based on the plan that you purchased.

The instance still forwards service traffic. Instance configurations are retained.
7 calendar days (included) after the expiration date to 15 calendar days (excluded) after the expiration date The instance provides only the basic protection against attacks of 5 Gbit/s. The instance no longer forwards service traffic.
Warning If you no longer need Anti-DDoS Pro, you must switch service traffic from the Anti-DDoS Pro instance to the origin server seven calendar days before the expiration date. Otherwise, access to your services may be adversely affected. If you want to switch service traffic, make sure that the domain name of your website does not map to the CNAME assigned by Anti-DDoS Pro. You must also make sure that your non-website service does not use an exclusive IP address provided by the instance.
If you renew your instance within this time period, the instance continues to forward service traffic, and you do not need to configure the instance again.
Instance configurations are retained.
15 calendar days (included) after the expiration date to later points in time The instance provides only the basic protection against attacks of 5 Gbit/s. The instance no longer forwards service traffic. The Anti-DDoS Pro instance is released.
Warning After all Anti-DDoS Pro instances that are created by using your Alibaba Cloud account are released, the configurations that are added to Anti-DDoS Pro, such as website access configurations, port access configurations, mitigation settings, and reports, are deleted and cannot be restored. If you want to use Anti-DDoS Pro again, you must purchase and configure another Anti-DDoS Pro instance.
Notice We recommend that you carefully read the instance expiration prompt that is displayed in the Anti-DDoS Pro console. Then, renew the instance in time or set auto-renewal for the instance to prevent negative impacts on your services.
Notification of instance expiration

Refunds

The subscription of a subscription Anti-DDoS Pro instance cannot be canceled before the expiration date. The 5-day money-back guarantee is not provided for the subscription. After an Anti-DDoS Pro instance is created, the fees you paid cannot be refunded.

References