An Elastic IP Address (EIP) is a public IPv4 address that you can independently purchase and associate with VPC resources—including Elastic Compute Service (ECS) instances, Internet NAT Gateways, Server Load Balancer (SLB) instances, elastic network interfaces (ENIs), and High-availability Virtual IP (HaVip) addresses—for flexible internet access management.
Use cases
Provide internet access for ECS instances Associate an EIP with an ECS instance or ENI to provide internet access. | Create a unified internet gateway Associate an EIP with an Internet NAT Gateway or SLB instance to create a unified gateway for internet traffic. |
Build a high-availability, public-facing service Associate an EIP with a High-availability Virtual IP (HaVip) to expose a highly available service to the internet. | Optimize international access for users in the Chinese mainland A BGP (Multi-ISP) Pro EIP uses dedicated carrier lines to reduce latency for users in the Chinese mainland. |
Benefits
Flexible management: Associate or disassociate an EIP at any time to handle service changes and failover.
On-demand scaling: Adjust bandwidth caps on demand. Changes take effect immediately.
Cost optimization: EIPs support pay-by-bandwidth and pay-by-data-transfer billing. Add a pay-as-you-go EIP to an Internet Shared Bandwidth instance to reuse bandwidth and reduce costs.
Security and reliability: EIPs include basic DDoS protection by default. For stronger protection, use an Anti-DDoS (Enhanced) EIP.
EIP vs. static public IP
VPC resources use public IPv4 addresses for internet access. These addresses are categorized as static public IPs and EIPs.
A static public IP is assigned only at resource creation (such as ECS or Classic Load Balancer (CLB) instances) and cannot be disassociated or reassigned—it is released when the resource is deleted. An EIP is an independent resource you can dynamically associate or disassociate, providing greater management flexibility. We recommend EIPs.
Public-facing Application Load Balancer (ALB), Network Load Balancer (NLB), and Internet NAT Gateways use EIPs for internet access.
You can convert static public IPs of ECS and CLB instances to EIPs.
EIP selection
Billing method
Billing method | |||
Pay-as-you-go (pay-by-data-transfer) | Pay-as-you-go (pay-by-bandwidth) | Subscription (pay-by-bandwidth) | |
Billable item |
|
| Bandwidth fee |
Billing cycle and bill generation time |
|
|
|
Scenarios |
Choose the pay-by-data-transfer method if you cannot estimate your data transfer usage. |
|
|
Cost optimization |
| - | |
Line type
The line type can only be selected when you create an EIP and cannot be changed afterward. Select a line type with caution.
Line type | BGP (Multi-ISP) | BGP (Multi-ISP) Pro | Local ISP |
Description | Connects to multiple ISP lines and automatically selects the optimal route to provide a fast and stable connection. This line type is supported in all Alibaba Cloud regions. | Provides an optimized public network route for traffic from outside the Chinese mainland to end users within it (excluding data centers). It uses dedicated ISP lines to reduce latency and improve the quality of international services. | A public IP address directly allocated by a local Internet service provider (ISP) outside the Chinese mainland. Both the autonomous system number (ASN) and the geolocation of the IP address are associated with the local ISP, giving the IP address local network attributes. |
Use cases | A general-purpose choice suitable for most internet-facing services, ensuring network stability and coverage. | Optimized for traffic from outside the Chinese mainland to within it, significantly reducing cross-border network latency. | Suitable for workloads that are deployed in regions outside the Chinese mainland and need to access external services over a local network. |
Limitations |
|
|
|
Security protection
You can select Anti-DDoS (Enhanced) only when you create an EIP. You cannot switch between the Default and Anti-DDoS (Enhanced) types after the EIP is created. Select a security protection type with caution.
Security protection type | Default | Anti-DDoS (Enhanced) |
Use cases | No special security requirements. By default, a single EIP provides up to 5 Gbps of basic DDoS protection, which meets basic security needs. | The default security capabilities may be insufficient for services that require terabit-level protection. |
Configuration | This basic protection is enabled by default for all EIPs. | You must select this option when you create an EIP. |
Limitations | Supported for EIPs in all regions. |
|
Billing changes | The default security protection is free of charge. | Security protection fees are incurred. The fees are charged by the Anti-DDoS service. For more information about the billing rules, see Anti-DDoS Origin 2.0 (pay-as-you-go). |
Quick start
Go to the Elastic IP Addresses console and click Create EIP to create a new EIP.
On the Elastic IP Addresses page, find the EIP, and in the Actions column, click Associate with Resource to associate the EIP with a cloud resource.