All Products
Search

This Product

    VPN Gateway:Billing rules

    Document Center

    VPN Gateway:Billing rules

    Last Updated:Nov 06, 2023

    VPN Gateway allows you to create SSL-VPN and IPsec-VPN connections. Each type of connection can be associated with different resources and involves different billable items. This topic describes the billing rules for SSL-VPN and IPsec-VPN.

    Billing rules

    Billing rules for SSL-VPN

    Resource associated with an SSL server

    Feature enabled for a VPN gateway

    Billable item

    Billing method

    Billing cycle

    VPN gateway

    SSL-VPN

    • SSL-VPN instance

    • Data transfer

    • SSL specification

    Pay-as-you-go

    This billing method allows you to use resources and pay for them afterwards. You are billed based on the resources that are consumed.

    1 hour.

    If the usage duration is less than an hour, it is rounded up to 1 hour.

    SSL-VPN and IPsec-VPN

    • IPsec-VPN instance

    • SSL-VPN instance

    • Data transfer

    • SSL specification

    Billing rules for IPsec-VPN

    Resource associated with an IPsec-VPN connection

    Feature enabled for a VPN gateway

    Network type of IPsec-VPN connection

    Billable item

    Billing method

    Billing cycle

    VPN gateway

    IPsec-VPN

    N/A

    • IPsec-VPN instance

    • Data transfer

    Pay-as-you-go.

    This billing method allows you to use resources and pay for them afterwards. You are billed based on the resources that are consumed.

    1 hour.

    If the usage duration is less than an hour, it is rounded up to 1 hour.

    SSL-VPN and IPsec-VPN

    • IPsec-VPN instance

    • SSL-VPN instance

    • Data transfer

    • SSL specification

    Transit router

    N/A

    Public

    • IPsec-VPN connection

    • Data transfer

    • Transit router connection

    • Transit router data transfer

    Private

    • IPsec-VPN connection

    • Transit router connection

    • Transit router data transfer

    • Outbound Express Connect data transfer

    Note

    In the following scenario in which an IPsec-VPN connection is associated with a transit router, only the IPsec-VPN connection fee and the data transfer fee are described. For more information about the transit router connection fee, transit router data transfer fee, and outbound data transfer fee of Express Connect, see Billing rules and Outbound data transfer fees.

    Billable items

    Important

    • The price information listed in this topic is for reference only. The prices on the buy page shall prevail.

    • The maximum bandwidth supported by VPN gateways in the China (Nanjing - Local Region) region is 200 Mbit/s.

    • In the following table, N/A indicates that the bandwidth value is not supported by VPN gateways in the corresponding region.

    IPsec-VPN and SSL-VPN instance fees

    VPN gateways provide different bandwidth specifications. When the same bandwidth specification is used in the same region, the instance unit prices for IPsec-VPN and SSL-VPN are the same. The following table lists the unit prices. Unit: USD/hour.

    Region

    10 Mbps

    100 Mbps

    200 Mbps

    500 Mbps

    1000 Mbps

    Chinese mainland

    0.059

    0.209

    0.209

    0.767

    0.767

    China (Hong Kong)

    0.087

    0.262

    0.262

    1.025

    1.025

    Singapore

    0.087

    0.262

    0.262

    1.025

    1.025

    Japan (Tokyo)

    0.091

    0.275

    0.275

    0.767

    0.767

    South Korea (Seoul)

    0.091

    0.275

    0.275

    Not supported

    Not supported

    Thailand (Bangkok)

    0.087

    0.262

    0.262

    Not supported

    Not supported

    Philippines (Manila)

    0.087

    0.262

    0.262

    Not supported

    Not supported

    Malaysia (Kuala Lumpur)

    0.080

    0.240

    0.240

    0.878

    0.878

    India (Mumbai)

    0.082

    0.249

    0.249

    Not supported

    Not supported

    Indonesia (Jakarta)

    0.087

    0.262

    0.262

    0.734

    0.734

    Australia (Sydney)

    0.087

    0.389

    0.389

    Not supported

    Not supported

    US (Virginia)

    0.066

    0.295

    0.295

    0.826

    0.826

    US (Silicon Valley)

    0.082

    0.392

    0.392

    Not supported

    Not supported

    Germany (Frankfurt)

    0.077

    0.359

    0.359

    1.003

    1.003

    UK (London)

    0.077

    0.359

    0.359

    1.003

    1.003

    UAE (Dubai)

    0.090

    0.420

    0.420

    Not supported

    Not supported

    IPsec-VPN connection

    The unit price of IPsec-VPN connections is USD 0.05/hour per connection.

    Data transfer

    You are charged for data transfer from Alibaba Cloud to a data center over an IPsec-VPN connection. You are not charged for data transfer from a data center to Alibaba Cloud over an IPsec-VPN connection. Unit: USD/GB.

    Region

    Unit price

    Chinese mainland

    0.125

    China (Hong Kong)

    0.153

    Singapore

    0.117

    Japan (Tokyo)

    0.120

    South Korea (Seoul)

    0.125

    Thailand (Bangkok)

    0.117

    Philippines (Manila)

    0.010

    Malaysia (Kuala Lumpur)

    0.125

    India (Mumbai)

    0.117

    Indonesia (Jakarta)

    0.090

    Australia (Sydney)

    0.096

    US (Virginia)

    0.078

    US (Silicon Valley)

    0.078

    Germany (Frankfurt)

    0.070

    UK (London)

    0.070

    UAE (Dubai)

    0.447

    SSL specification

    After the SSL-VPN feature is enabled, you must select an SSL specification based on the number of clients that you want to connect at a time. The following table lists the unit prices for different SSL specifications. Unit: USD/hour.

    SSL connections

    Unit price

    5

    0.048

    10

    0.074

    20

    0.117

    50

    0.226

    100

    0.328

    500

    1.090

    1000

    1.547

    Billing example

    You can associate IPsec-VPN and SSL-VPN connections with different resources, and the billable items vary based on the associated resource. In one of the following scenarios, an IPsec-VPN connection and an SSL-VPN connection are associated with the same VPN gateway. In the other scenario, an IPsec-VPN connection is associated with a transit router.

    Connections associated with a VPN gateway

    计费示例

    As shown in the preceding figure, a data center in the Chinese mainland has Office 1 and Office 2. Office 1 communicates with a virtual private cloud (VPC) through IPsec-VPN, and the clients of Office 2 communicate with the VPC through SSL-VPN. In this example, the IPsec-VPN connection and the SSL server are associated with the same VPN gateway. The bandwidth specification of the VPN gateway is 10 Mbit/s. The data transfer from the VPN gateway to Office 1 and Office 2 is 10 GB. The VPN gateway supports a maximum of five SSL-VPN connections. During the 24 hours from 00:00:00 (UTC+8) on June 1, 2022 to 00:00:00 (UTC+8) on June 2, 2022, the total fee can be calculated by using the following formula:

    • IPsec-VPN instance fee = USD 0.059/hour × 24 hours = USD 1.416

    • SSL-VPN instance fee = USD 0.059/hour × 24 hours = USD 1.416

    • SSL specification fee = USD 0.048/hour × 24 hours = USD 1.152

    • Data transfer fee = USD 0.125/GB × 10 GB = USD 1.25

    • Total fee= IPsec-VPN instance fee + SSL-VPN instance fee + SSL specification fee + Data transfer fee = USD 5.234

    Connections associated with a transit router

    计费示例-转发路由器实例

    As shown in the preceding figure, a data center in the Chinese mainland is connected to a transit router through a public IPsec-VPN connection. Then, the data center can communicate with a VPC. In this example, the data transfer from the data center to the transit router is 5 GB. The data transfer from the transit router to the data center is 10 GB. During the 24 hours from 00:00:00 (UTC+8) on June 1, 2022 to 00:00:00 (UTC+8) on June 2, 2022, the total fee can be calculated by using the following formula:

    • IPsec-VPN connection fee = USD 0.05/connection/hour × 24 hours × 1 connection = USD 1.2

    • Data transfer fee = USD 0.125/GB × 10 GB = USD 1.25

    • Transit router connection fee = USD 0.05/connection/hour × 24 hours × 1 connection = USD 1.2

    • Transit router traffic processing fee = USD 0.02/GB × 5 GB = USD 0.1

    • Total fee = IPsec-VPN connection fee + Data transfer fee + Transit router connection fee + Transit router traffic processing fee = USD 3.75

    Overdue payments

    Overdue payments of VPN gateways

    If a VPN gateway with which IPsec-VPN connections and SSL servers are associated has an overdue payment, the following rules apply:

    • The VPN gateway can continue to provide services within 15 days after the payment becomes overdue. To ensure that your services run as expected, top up your account at the earliest opportunity.

    • If you do not complete the payment within 15 days after the payment becomes overdue, the VPN gateway is suspended.

      If you top up your account after the VPN gateway is suspended, the system automatically pays the outstanding amount. Then, the VPN gateway immediately starts to provide services.

    • If you do not complete the payment within 15 days after the VPN gateway is suspended, the system automatically releases the VPN gateway.

      You are notified by text message and email one day before the system releases the VPN gateway. After the VPN gateway is released, the configurations and related data are deleted and cannot be restored.

    Overdue payments of IPsec-VPN connections

    If an IPsec-VPN connection that is associated with a transit router has an overdue payment, the following rules apply:

    • The IPsec-VPN connection can continue to provide services within 15 days after the payment becomes overdue. To ensure that your services run as expected, top up your account at the earliest opportunity.

    • If you do not complete the payment within 15 days after the payment becomes overdue, the IPsec-VPN connection is suspended.

      If you top up your account after the IPsec-VPN connection is suspended, the system automatically pays the outstanding amount. Then, the IPsec-VPN connection immediately starts to provide services.

    • If you do not complete the payment within 15 days after the IPsec-VPN connection is suspended, the system automatically releases the IPsec-VPN connection.

      You are notified by text message and email one day before the system releases the IPsec-VPN connection. After the IPsec-VPN connection is released, the configurations and related data are deleted and cannot be restored.