You can associate an IPsec-VPN connection with a VPN gateway or a transit router. The billable items for IPsec-VPN connections depend on the type of resource you associate them with. This topic describes the billing rules for IPsec-VPN connections associated with different resource types.
Associate with enhanced VPN gateways
Billing rules
For enhanced VPN gateways, you are billed per IPsec-VPN connection. You incur an IPsec-VPN connection fee and an Internet traffic fee.
Billable items
Billable item | Unit price | Billing method | Billing cycle |
IPsec-VPN connection fee | USD 0.10 per item per hour | Pay-as-you-go You use resources first and pay later based on actual usage. | 1 hour If your usage duration is less than 1 hour, it is rounded up to 1 hour. |
Internet traffic fee (charged by CDT) | Pay-as-you-go. Charges apply only to egress traffic. | 1 hour If your usage duration is less than 1 hour, it is rounded up to 1 hour. |
Billing example
As shown in the preceding figure, an enterprise in Singapore has two on-premises data centers. Each connects to an enhanced VPN gateway in the Singapore region over a public IPsec-VPN connection to communicate with a VPC. From 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023, IPsec-VPN connection 1 sends 250 GB of traffic to on-premises data center 1 and IPsec-VPN connection 2 sends 100 GB of traffic to on-premises data center 2. The total fees for these IPsec-VPN connections are:
IPsec-VPN connection fee = USD 0.1 per connection per hour × 24 hours × 2 connections = USD 4.8
CDT traffic fee = USD 0.1 per GB × (250 + 100 − 200) GB = USD 15 (For regions outside the Chinese mainland, CDT offers 200 GB of free monthly traffic)
Total fee = IPsec-VPN connection fee + CDT traffic fee = USD 19.8
Associate with VPN gateways
Billing rules
Feature enabled for the VPN gateway | Billable item | Billing method | Billing cycle |
IPsec-VPN only |
| Pay-as-you-go You use resources first and pay later based on actual usage. | 1 hour If your usage duration is less than 1 hour, it is rounded up to 1 hour. |
SSL-VPN and IPsec-VPN features enabled simultaneously |
|
Billable items
The prices listed in the following table are for reference only. The prices displayed on the buy page prevail.
In the China (Nanjing - Local Region) region, the maximum bandwidth supported by VPN gateways is 500 Mbit/s.
In the following table, "Not supported" means the corresponding bandwidth specification is not available for VPN gateways in that region.
IPsec-VPN and SSL-VPN instance fees
VPN gateways offer multiple bandwidth specifications. For the same bandwidth specification in the same region, the unit prices for IPsec-VPN and SSL-VPN instances are identical. Unit: USD per hour.
Region | 10 Mbps | 100 Mbps | 200 Mbps | 500 Mbps | 1000 Mbps |
The Chinese mainland | 0.059 | 0.209 | 0.209 | 0.767 | 0.767 |
China (Hong Kong) | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Singapore | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Japan (Tokyo) | 0.091 | 0.275 | 0.275 | 0.767 | 0.767 |
South Korea (Seoul) | 0.091 | 0.275 | 0.275 | 0.767 | 0.767 |
Thailand (Bangkok) | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Philippines (Manila) | 0.087 | 0.262 | 0.262 | 1.025 | 1.025 |
Malaysia (Kuala Lumpur) | 0.080 | 0.240 | 0.240 | 0.878 | 0.878 |
Indonesia (Jakarta) | 0.086 | 0.262 | 0.262 | 0.734 | 0.734 |
US (Virginia) | 0.066 | 0.295 | 0.295 | 0.826 | 0.826 |
US (Silicon Valley) | 0.082 | 0.392 | 0.392 | 1.095 | 1.095 |
Germany (Frankfurt) | 0.077 | 0.359 | 0.359 | 1.003 | 1.003 |
UK (London) | 0.077 | 0.359 | 0.359 | 1.003 | 1.003 |
Mexico | 0.066 | 0.295 | 0.295 | 0.826 | 0.826 |
UAE (Dubai) | 0.090 | 0.420 | 0.420 | 1.231 | Not supported |
SAU (Riyadh - Partner Region) | 0.104 | 0.314 | 0.314 | 1.230 | Not supported |
Traffic fee
You are charged for traffic sent from an IPsec-VPN connection to an on-premises data center. Traffic sent from an on-premises data center to an IPsec-VPN connection is not charged. Unit: USD per GB.
Region | Unit price |
The Chinese mainland | 0.125 |
China (Hong Kong) | 0.153 |
Singapore | 0.117 |
Japan (Tokyo) | 0.120 |
South Korea (Seoul) | 0.125 |
Thailand (Bangkok) | 0.117 |
Philippines (Manila) | 0.110 |
Malaysia (Kuala Lumpur) | 0.125 |
Indonesia (Jakarta) | 0.110 |
US (Virginia) | 0.078 |
US (Silicon Valley) | 0.078 |
Germany (Frankfurt) | 0.070 |
UK (London) | 0.070 |
Mexico | 0.078 |
UAE (Dubai) | 0.447 |
SAU (Riyadh - Partner Region) | 0.140 |
SSL specification fee
After enabling SSL-VPN, select an SSL specification based on the maximum number of clients that connect simultaneously. Unit: USD per hour.
Region | 5 | 10 | 20 | 50 | 100 | 500 | 1000 |
The Chinese mainland | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
China (Hong Kong) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Singapore | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Japan (Tokyo) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
South Korea (Seoul) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Thailand (Bangkok) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Philippines (Manila) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Malaysia (Kuala Lumpur) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Indonesia (Jakarta) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
US (Virginia) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
US (Silicon Valley) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Germany (Frankfurt) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
UK (London) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
Mexico | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
UAE (Dubai) | 0.048 | 0.074 | 0.117 | 0.226 | 0.328 | 1.090 | 1.547 |
SAU (Riyadh - Partner Region) | 0.058 | 0.089 | 0.14 | 0.271 | 0.394 | 1.308 | 1.856 |
Billing example
As shown in the preceding figure, an on-premises data center of an enterprise in the Chinese mainland connects to a VPC over an IPsec-VPN connection. If the VPN gateway has only the IPsec-VPN feature enabled, its bandwidth specification is 10 Mbit/s, and it sends 10 GB of traffic to the on-premises data center from 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023, the total fees are:
IPsec-VPN instance fee = USD 0.059 per hour × 24 hours = USD 1.416
Traffic fee = USD 0.125 per GB × 10 GB = USD 1.25
Total fee = IPsec-VPN instance fee + Traffic fee = USD 2.666
Associate with transit routers
Billing rules
Network type of the IPsec-VPN connection | Billable item | Billing method | Billing cycle |
Internet access |
| Pay-as-you-go You use resources first and pay later based on actual usage. | 1 hour If your usage duration is less than 1 hour, it is rounded up to 1 hour. |
Private network |
|
Billable items
The prices listed in the following table are for reference only. The prices displayed on the buy page prevail.
For IPsec-VPN connections associated with transit routers, this topic covers only the IPsec-VPN connection fee and traffic fee. For details about the transit router connection fee and transit router traffic processing fee, see Cloud Enterprise Network billing overview.
IPsec-VPN connection fee
The IPsec-VPN connection instance fee is USD 0.06 per instance per hour in the UAE (Dubai) and SAU (Riyadh - Partner Region) regions. The fee is USD 0.05 per instance per hour in all other regions.
Internet traffic fee
Starting on 00:00 on March 1, 2026 (UTC+8), Internet traffic fees for Alibaba Cloud VPN connection instances bound to TR will gradually support CDT settlement and billing. For more information, see the Billing Announcement.
Until the switch to CDT billing, the following rule applies:
You are charged for traffic sent from an IPsec-VPN connection to an on-premises data center. Traffic sent from an on-premises data center to an IPsec-VPN connection is not charged. Unit: USD per GB.
Region | Price (USD/GB) |
The Chinese mainland | 0.125 |
China (Hong Kong) | 0.153 |
Singapore | 0.117 |
Japan (Tokyo) | 0.120 |
South Korea (Seoul) | 0.125 |
Thailand (Bangkok) | 0.117 |
Philippines (Manila) | 0.110 |
Malaysia (Kuala Lumpur) | 0.125 |
Indonesia (Jakarta) | 0.110 |
US (Virginia) | 0.078 |
US (Silicon Valley) | 0.078 |
Germany (Frankfurt) | 0.070 |
UK (London) | 0.070 |
Mexico | 0.078 |
UAE (Dubai) | 0.12 |
SAU (Riyadh - Partner Region) | 0.140 |
Billing example
As shown in the preceding figure, an on-premises data center in the Chinese mainland connects to a transit router over a public IPsec-VPN connection to communicate with a VPC. If, from 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023, the IPsec-VPN connection sends 5 GB of traffic to the transit router and 10 GB of traffic to the on-premises data center, the total fees are:
IPsec-VPN connection fee = USD 0.05 per connection per hour × 24 hours × 1 connection = USD 1.2
Traffic fee = USD 0.125 per GB × 10 GB = USD 1.25
Transit router connection fee = USD 0.05 per connection per hour × 24 hours × 1 connection = USD 1.2
Transit router traffic processing fee = USD 0.02 per GB × 5 GB = USD 0.1
Total fee = IPsec-VPN connection fee + Traffic fee + Transit router connection fee + Transit router traffic processing fee = USD 3.75
View bills
Log on to the Alibaba Cloud Expenses and Costs console. In the navigation pane on the left, choose . Then, refer to Bill Management to view billing details.