IPsec-VPN connections can be associated with VPN Gateway instances or transit router instances. The billable items vary based on the associated resource type. This topic describes the billing rules for IPsec-VPN.
Associate with enhanced VPN Gateway
Billing rules
An enhanced VPN Gateway instance incurs an IPsec-VPN connection fee and an Internet traffic fee.
Billable items
Billable item | Unit price | Billing method | Billing cycle |
IPsec-VPN connection fee | 0.1 USD/connection/hour | Pay-as-you-go. Pay for resources after use, based on actual consumption. | 1 hour. If usage is less than 1 hour, it is rounded up to 1 hour. |
Internet traffic fee (charged by CDT) | You are charged only for outbound traffic on a pay-as-you-go basis. | 1 hour. If usage is less than 1 hour, it is rounded up to 1 hour. |
Billing example
As shown in the preceding figure, an enterprise has two data centers in Singapore. Each data center connects to an enhanced VPN Gateway in the Singapore region using an IPsec-VPN connection over the public network to communicate with a Virtual Private Cloud (VPC). Assume that from 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023 (24 hours), IPsec-VPN connection 1 sent 250 GB of traffic to data center 1, and IPsec-VPN connection 2 sent 100 GB of traffic to data center 2. The fees for the IPsec-VPN connections during this period are calculated as follows:
IPsec-VPN connection fee = USD 0.1/connection/hour × 24 hours × 2 IPsec-VPN connections = USD 4.8
Cloud Data Transfer (CDT) traffic fee = USD 0.1/GB × (250 + 100 - 200) GB = USD 15 (For regions outside the Chinese mainland, CDT provides 200 GB of free traffic per month.)
Total fee = IPsec-VPN connection fee + CDT traffic fee = USD 19.8
Associate with traditional VPN Gateway
Billing rules
Feature enabled for a VPN Gateway instance | Billable item | Billing method | Billing cycle |
Only IPsec-VPN enabled |
| Pay-as-you-go. Pay for resources after use, based on actual consumption. | 1 hour. If usage is less than 1 hour, it is rounded up to 1 hour. |
SSL-VPN and IPsec-VPN enabled simultaneously |
|
Billable items
The pricing information in the following table is for reference only. If the pricing on the purchase page is different from the pricing in the table, the pricing on the purchase page prevails.
The maximum bandwidth supported by VPN Gateway instances in the China (Nanjing - Local Region) region is 500 Mbps.
In the following table, "Not supported" indicates that the bandwidth specification is not supported by VPN Gateway instances in the corresponding region.
IPsec-VPN and SSL-VPN instance fees
VPN Gateway provides different bandwidth specifications. The IPsec-VPN instance fee and the SSL-VPN instance fee are the same for all bandwidth specifications. For more information about the pricing, see the following table. Unit: USD/hour.
Region | 10 Mbps | 100 Mbps | 200 Mbps | 500 Mbps | 1000 Mbps |
The Chinese mainland | 0.059 | 0.209 | 0.209 | 0.767 | 0.767 |
China (Hong Kong) | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Singapore | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Japan (Tokyo) | 0.091 | 0.275 | 0.275 | 0.767 | 0.767 |
South Korea (Seoul) | 0.091 | 0.275 | 0.275 | 0.767 | 0.767 |
Thailand (Bangkok) | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Philippines (Manila) | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Malaysia (Kuala Lumpur) | 0.080 | 0.240 | 0.240 | 0.878 | 0.878 |
Indonesia (Jakarta) | 0.086 | 0.262 | 0.262 | 0.734 | 0.734 |
US (Virginia) | 0.066 | 0.295 | 0.295 | 0.826 | 0.826 |
US (Silicon Valley) | 0.082 | 0.392 | 0.392 | 1.095 | 1.095 |
Germany (Frankfurt) | 0.077 | 0.359 | 0.359 | 1.003 | 1.003 |
UK (London) | 0.077 | 0.359 | 0.359 | 1.003 | 1.003 |
Mexico | 0.066 | 0.295 | 0.295 | 0.826 | 0.826 |
UAE (Dubai) | 0.090 | 0.420 | 0.420 | 1.231 | Not supported |
SAU (Riyadh - Partner Region) | 0.104 | 0.314 | 0.314 | 1.230 | Not supported |
Data transfer fee
You are charged for data that is transferred from Alibaba Cloud to a data center over an IPsec-VPN connection. You are not charged for data that is transferred from a data center to Alibaba Cloud over an IPsec-VPN connection. Unit: USD/GB.
Region | Unit price |
The Chinese mainland | 0.125 |
China (Hong Kong) | 0.153 |
Singapore | 0.117 |
Japan (Tokyo) | 0.120 |
South Korea (Seoul) | 0.125 |
Thailand (Bangkok) | 0.117 |
Philippines (Manila) | 0.110 |
Malaysia (Kuala Lumpur) | 0.125 |
Indonesia (Jakarta) | 0.110 |
US (Virginia) | 0.078 |
US (Silicon Valley) | 0.078 |
Germany (Frankfurt) | 0.070 |
UK (London) | 0.070 |
Mexico | 0.078 |
UAE (Dubai) | 0.447 |
SAU (Riyadh - Partner Region) | 0.140 |
SSL-VPN specification fee
After you enable the SSL-VPN feature, you must select an SSL-VPN specification based on the number of clients that you want to connect at the same time. The following table describes the unit prices for different SSL-VPN specifications in different regions. Unit: USD/hour.
Region | 5 | 10 | 20 | 50 | 100 | 500 | 1000 |
The Chinese mainland | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
China (Hong Kong) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Singapore | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Japan (Tokyo) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
South Korea (Seoul) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Thailand (Bangkok) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Philippines (Manila) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Malaysia (Kuala Lumpur) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Indonesia (Jakarta) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
US (Virginia) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
US (Silicon Valley) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Germany (Frankfurt) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
UK (London) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Mexico | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
UAE (Dubai) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
SAU (Riyadh - Partner Region) | 0.058 | 0.089 | 0.14 | 0.271 | 0.394 | 1.308 | 1.856 |
Billing example
As shown in the preceding figure, an on-premises data center in the Chinese mainland connects to a Virtual Private Cloud (VPC) using an IPsec-VPN connection. If the VPN Gateway has only the IPsec-VPN feature enabled, the bandwidth of the VPN Gateway instance is 10 Mbps, and 10 GB of traffic is sent from the VPN Gateway to the on-premises data center during the 24-hour period from 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023, the following fees are incurred:
IPsec-VPN instance fee = USD 0.059 per hour × 24 hours = USD 1.416
Data transfer fee = USD 0.125 per GB × 10 GB = USD 1.25
Total fee = IPsec-VPN instance fee + Data transfer fee = USD 2.666
Attach a transit router
Billing rules
Network type of the IPsec-VPN connection | Billable item | Billing method | Billing cycle |
Public network |
| Pay-as-you-go Pay for resources after you use them. Bills are based on actual usage. | 1 hour If you use a resource for less than one hour, you are charged for one hour. |
Private network |
|
Billable items
The prices in the following tables are for reference only. If the prices on the purchase page are different from the prices in the tables, the prices on the purchase page prevail.
When an IPsec-VPN connection is attached to a transit router, this topic describes only the instance and traffic fees for the IPsec-VPN connection. For more information about transit router connection fees and traffic processing fees, see Billing of Cloud Enterprise Network.
IPsec-VPN connection instance fee
The IPsec-VPN connection instance fee is USD 0.06 per instance per hour in the UAE (Dubai) and SAU (Riyadh - Partner Region) regions. The fee is USD 0.05 per instance per hour in all other regions.
Internet traffic fee
Starting from 00:00:00 (UTC+8) on March 1, 2026, the Internet traffic fees for Alibaba Cloud VPN connection instances that are attached to a transit router (TR) are charged by Cloud Data Transfer (CDT). For more information, see the billing announcement.
Before the switch to CDT billing, the following billing rules apply:
Traffic fees are charged based on the total volume of data that is sent from the IPsec-VPN connection to the data center. Data that is sent from the data center to the IPsec-VPN connection is not charged. Unit: USD/GB.
Region | Price (USD/GB) |
The Chinese mainland | 0.125 |
China (Hong Kong) | 0.153 |
Singapore | 0.117 |
Japan (Tokyo) | 0.120 |
South Korea (Seoul) | 0.125 |
Thailand (Bangkok) | 0.117 |
Philippines (Manila) | 0.110 |
Malaysia (Kuala Lumpur) | 0.125 |
Indonesia (Jakarta) | 0.110 |
US (Virginia) | 0.078 |
US (Silicon Valley) | 0.078 |
Germany (Frankfurt) | 0.070 |
UK (London) | 0.070 |
Mexico | 0.078 |
UAE (Dubai) | 0.12 |
SAU (Riyadh - Partner Region) | 0.140 |
Billing example
As shown in the preceding figure, an enterprise's data center in the Chinese mainland connects to a transit router instance using an IPsec-VPN connection over the public network. This setup enables communication with a VPC. Assume that the IPsec-VPN connection sends 5 GB of traffic to the transit router instance and 10 GB of traffic to the data center. In the 24-hour period from 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023, the fees for the IPsec-VPN connection are calculated as follows:
IPsec-VPN connection instance fee = USD 0.05/instance/hour × 24 hours × 1 IPsec-VPN connection = USD 1.2
Traffic fee = USD 0.125/GB × 10 GB = USD 1.25
Transit router connection fee = USD 0.05/connection/hour × 24 hours × 1 connection = USD 1.2
Transit router traffic processing fee = USD 0.02/GB × 5 GB = USD 0.1
Total fee = IPsec-VPN connection instance fee + Traffic fee + Transit router connection fee + Transit router traffic processing fee = USD 3.75
View bills
Log on to the Alibaba Cloud Expenses and Costs console. In the navigation pane on the left, choose . For more information, see Bill Management.