VPN Gateway:Billing

Billing items

Pricing for an enhanced VPN gateway is based on IPsec-VPN connections. You are charged an IPsec-VPN connection fee and a data transfer fee:

The enhanced VPN gateway is currently in an invitation-only beta phase. During this phase, the IPsec-VPN connection fee is waived.

Examples

Billing items

Pricing for a standard VPN gateway is based on the VPN gateway instance. If you enable only the IPsec feature, you incur an IPsec-VPN instance fee and a bandwidth fee:

If you also enable the SSL-VPN feature, you will incur an additional SSL-VPN instance fee and an SSL specification fee. For details, see SSL-VPN billing.

Instance and data transfer pricing

The IPsec-VPN instance fee and or traffic fee for a standard VPN gateway depend on the bandwidth specification and region selected upon purchase:

Examples

Billable items

You are charged for each ipsec-vpn connection bound to a Transit Router.

Notes:

• Public network traffic fees do not apply to private ipsec-vpn connections.

• After you bind an ipsec-vpn connection to a Transit Router, you cannot change the bound resource type or the billing method.

• A single ipsec-vpn connection supports a maximum tunnel bandwidth of 1 Gbps or 3 Gbps. This bandwidth specification cannot be changed. To increase the bandwidth between your on-premises data center and the cloud, you can establish multiple ipsec-vpn connections.

  The 3 Gbps tunnel bandwidth (Large) feature is in public beta. To use this feature, contact your account manager to apply.

Unit prices for public network traffic

For ipsec-vpn connections bound to a Transit Router, billing for public network traffic is gradually transitioning to CDT:

• After the switch to CDT billing, public network traffic fees are calculated based on CDT Pricing.

• Before the switch to CDT billing, the following rates apply (Unit: USD/GB):

  Region	Price (USD/GB)
  The Chinese mainland	0.125
  China (Hong Kong)	0.153
  Singapore	0.117
  Japan (Tokyo)	0.120
  South Korea (Seoul)	0.125
  Thailand (Bangkok)	0.117
  Philippines (Manila)	0.110
  Malaysia (Kuala Lumpur)	0.125
  Indonesia (Jakarta)	0.110
  US (Virginia)	0.078
  US (Silicon Valley)	0.078
  Germany (Frankfurt)	0.070
  UK (London)	0.070
  Mexico	0.078
  UAE (Dubai)	0.12
  SAU (Riyadh - Partner Region)	0.140

  Important

  The prices in the preceding tables are for reference only. The prices on the purchase page prevail.

Examples

Mainland China regions

China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Hangzhou), China (Shanghai), China (Nanjing) (Local Region) (decommissioning), China (Shenzhen), China (Heyuan), China (Guangzhou), and China (Chengdu).

Does IPsec-VPN support free trials or free connectivity plans?

Alibaba Cloud IPsec-VPN does not support free trials or complimentary connectivity. All IPsec-VPN solutions, including dedicated connections and IPsec connectivity, require separate purchase.

If you need to test or validate connectivity at low cost, consider the following options:

• Enhanced VPN gateway: Purchase a lower-spec pay-as-you-go instance for testing. Release the instance after testing to stop further charges.

• Standard VPN gateway: Purchase a short-term subscription instance and submit an unsubscription request to release the resource after testing.

When transferring OSS data through an ECS instance via a VPN gateway to an on-premises data center, are there additional traffic fees?

ECS does not incur additional fees for this data transfer scenario. VPN gateway fees are determined by the binding mode:

• Standard VPN gateway: IPsec-VPN instance fee + data transfer fee (pay-as-you-go)

• Enhanced VPN gateway: IPsec connection fee + outbound public network traffic fee (pay-as-you-go)

• Binding to a Transit Router: IPsec connection instance fee + TR connection fee + TR traffic processing fee + outbound public network traffic fee (pay-as-you-go)

If I selected the wrong VPC when creating a VPN gateway, how do I change the bound VPC?

VPN gateways do not support directly changing the bound VPC after creation. To use a different VPC, you must release the current VPN gateway instance and purchase a new one with the correct VPC selected.

For the release procedure, see Overdue payments and refunds.