VPN Gateway allows you to create SSL-VPN and IPsec-VPN connections. Each type of connection can be associated with different resources and involves different billable items. This topic describes the billing rules for SSL-VPN and IPsec-VPN.
Billing
Billing rules for SSL-VPN
Resource associated with an SSL server | Feature enabled for a VPN gateway | Billable item | Billing method | Billing cycle |
---|---|---|---|---|
VPN gateway | SSL-VPN |
|
Pay-as-you-go.
This billing method that allows you to use resources and pay for them afterwards. You are billed based on the resources that are consumed. |
1 hour.
If the usage duration is less than an hour, it is rounded up to 1 hour. |
SSL-VPN and IPsec-VPN |
|
Billing rules for IPsec-VPN
Resource associated with an IPsec-VPN connection | Feature enabled for a VPN gateway | Network type of an IPsec-VPN connection | Billable item | Billing method | Billing cycle |
---|---|---|---|---|---|
VPN gateway | IPsec-VPN | N/A |
|
Pay-as-you-go.
This billing method that allows you to use resources and pay for them afterwards. You are billed based on the resources that are consumed. |
1 hour.
If the usage duration is less than an hour, it is rounded up to 1 hour. |
SSL-VPN and IPsec-VPN |
|
||||
Transit router | N/A | Public |
|
||
Private |
|
Billable items
- The price information listed in this topic is for reference only. The prices on the buy page shall prevail.
- The maximum bandwidth supported by VPN gateways in the China (Nanjing - Local Region) region is 200 Mbit/s.
- In the following table, N/A indicates that the bandwidth value is not supported by VPN gateways in the corresponding region.
IPsec-VPN and SSL-VPN instance fees
VPN gateways provide different bandwidth specifications. When the same bandwidth specification is used in the same region, the instance unit prices for IPsec-VPN and SSL-VPN are the same. The following table lists the unit prices. Unit: USD/hour.
Region | 10 Mbps | 100 Mbps | 200 Mbps | 500 Mbps | 1000 Mbps |
---|---|---|---|---|---|
Chinese mainland | 0.059 | 0.209 | 0.209 | 0.767 | 0.767 |
China (Hong Kong) | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Singapore | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Japan (Tokyo) | 0.091 | 0.275 | 0.275 | N/A | N/A |
South Korea (Seoul) | 0.091 | 0.275 | 0.275 | N/A | N/A |
Thailand (Bangkok) | 0.087 | 0.262 | 0.262 | N/A | N/A |
Philippines (Manila) | 0.087 | 0.262 | 0.262 | N/A | N/A |
Malaysia (Kuala Lumpur) | 0.080 | 0.240 | 0.240 | 0.878 | 0.878 |
India (Mumbai) | 0.082 | 0.249 | 0.249 | N/A | N/A |
Indonesia (Jakarta) | 0.087 | 0.262 | 0.262 | 0.734 | 0.734 |
Australia (Sydney) | 0.087 | 0.389 | 0.389 | N/A | N/A |
US (Virginia) | 0.066 | 0.295 | 0.295 | 0.826 | 0.826 |
US (Silicon Valley) | 0.082 | 0.392 | 0.392 | N/A | N/A |
Germany (Frankfurt) | 0.077 | 0.359 | 0.359 | 1.003 | 1.003 |
UK (London) | 0.077 | 0.359 | 0.359 | 1.003 | 1.003 |
UAE (Dubai) | 0.090 | 0.420 | 0.420 | N/A | N/A |
IPsec-VPN connection fees
The unit price of IPsec-VPN connections is USD 0.05/hour per connection.
Data transfer fees
You are charged for data transfer from Alibaba Cloud to a data center over an IPsec-VPN connection. You are not charged for data transfer from a data center to Alibaba Cloud over an IPsec-VPN connection. Unit: USD/GB.
Region | Unit price |
---|---|
Chinese mainland | 0.125 |
China (Hong Kong) | 0.153 |
Singapore | 0.117 |
Japan (Tokyo) | 0.120 |
South Korea (Seoul) | 0.125 |
Thailand (Bangkok) | 0.117 |
Philippines (Manila) | 0.010 |
Malaysia (Kuala Lumpur) | 0.125 |
India (Mumbai) | 0.117 |
Indonesia (Jakarta) | 0.090 |
Australia (Sydney) | 0.096 |
US (Virginia) | 0.078 |
US (Silicon Valley) | 0.078 |
Germany (Frankfurt) | 0.070 |
UK (London) | 0.070 |
UAE (Dubai) | 0.447 |
SSL specification fees
After the SSL-VPN feature is enabled, you must select an SSL specification based on the number of clients that you want to connect at a time. The following table lists the unit prices for different SSL specifications. Unit: USD/hour.
Number of SSL-VPN connections | Unit price |
---|---|
5 | 0.048 |
10 | 0.074 |
20 | 0.117 |
50 | 0.226 |
100 | 0.328 |
500 | 1.090 |
1000 | 1.547 |
Billing examples
You can associate IPsec-VPN and SSL-VPN connections with different resources, and the billable items vary based on the associated resource. In one of the following scenarios, an IPsec-VPN connection and an SSL-VPN connection are associated with the same VPN gateway. In the other scenario, an IPsec-VPN connection is associated with a transit router.
Connections associated with a VPN gateway

IPsec-VPN instance fee = USD 0.059/hour × 24 hours = USD 1.416
SSL-VPN instance fee = USD 0.059/hour × 24 hours = USD 1.416
SSL specification fee = USD 0.048/hour × 24 hours = USD 1.152
Data transfer fee = USD 0.125/GB × 10 GB = USD 1.25
Total fee= IPsec-VPN instance fee + SSL-VPN instance fee + SSL specification fee + Data transfer fee = USD 5.234
Connections associated with a transit router

IPsec-VPN connection fee = USD 0.05/connection/hour × 24 hours × 1 connection = USD 1.2
Data transfer fee = USD 0.125/GB × 10 GB = USD 1.25
Transit router connection fee = USD 0.05/connection/hour × 24 hours × 1 connection = USD 1.2
Transit router traffic processing fee = USD 0.02/GB × 5 GB = USD 0.1
Total fee = IPsec-VPN connection fee + Data transfer fee + Transit router connection fee + Transit router traffic processing fee = USD 3.75
Overdue payments
Overdue payments of VPN gateways
If a VPN gateway with which IPsec-VPN connections and SSL servers are associated has an overdue payment, the following rules apply:
- The VPN gateway can continue to provide services within 15 days after the payment becomes overdue. To ensure that your services run as expected, top up your account at the earliest opportunity.
- If you do not complete the payment within 15 days after the payment becomes overdue,
the VPN gateway is suspended.
If you top up your account after the VPN gateway is suspended, the system automatically pays the outstanding amount. Then, the VPN gateway immediately starts to provide services.
- If you do not complete the payment within 15 days after the VPN gateway is suspended,
the system automatically releases the VPN gateway.
You are notified by text message and email one day before the system releases the VPN gateway. After the VPN gateway is released, the configurations and related data are deleted and cannot be restored.
Overdue payments of IPsec-VPN connections
If an IPsec-VPN connection that is associated with a transit router has an overdue payment, the following rules apply:
- The IPsec-VPN connection can continue to provide services within 15 days after the payment becomes overdue. To ensure that your services run as expected, top up your account at the earliest opportunity.
- If you do not complete the payment within 15 days after the payment becomes overdue,
the IPsec-VPN connection is suspended.
If you top up your account after the IPsec-VPN connection is suspended, the system automatically pays the outstanding amount. Then, the IPsec-VPN connection immediately starts to provide services.
- If you do not complete the payment within 15 days after the IPsec-VPN connection is
suspended, the system automatically releases the IPsec-VPN connection.
You are notified by text message and email one day before the system releases the IPsec-VPN connection. After the IPsec-VPN connection is released, the configurations and related data are deleted and cannot be restored.