All Products
Search

This Product

    VPN Gateway:Billing

    Document Center

    VPN Gateway:Billing

    Last Updated:Mar 27, 2026

    Billable items for IPsec-VPN depend on the binding mode.

    Binding modes and billing

    IPsec-VPN binding mode

    Billable item

    Billing method

    Associated product

    enhanced VPN gateway

    IPsec connection fee, public network traffic fee

    pay-as-you-go

    VPN Gateway, Cloud Data Transfer

    traditional VPN gateway

    IPsec-VPN instance fee, traffic fee

    pay-as-you-go

    VPN Gateway

    Transit Router

    IPsec-VPN instance fee, public network traffic fee, Transit Router connection fee, Transit Router traffic processing fee

    pay-as-you-go

    VPN Gateway, Cloud Data Transfer, Cloud Enterprise Network

    For more information about the differences between binding modes, see Select a binding mode.

    Enhanced VPN gateway

    Billing

    Billing for an Enhanced VPN gateway consists of an ipsec-vpn connection fee and a data transfer fee:

    Billing item

    Unit price

    Billing method

    Description

    Ipsec-vpn connection fee

    USD 0.1/connection-hour

    pay-as-you-go

    Charged per hour for each ipsec-vpn connection. Partial hours are billed as full hours.

    Data transfer fee

    See Cloud Data Transfer pricing

    pay-as-you-go

    Only outbound traffic is charged. This fee applies to the BGP (Multi-ISP) line type and is billed by Cloud Data Transfer. Cloud Data Transfer provides a monthly free tier of 220 GB (20 GB for regions in the Chinese mainland and 200 GB for other regions).

    The Enhanced VPN gateway is currently in an invitation-only beta phase. During this phase, the ipsec-vpn connection fee is waived.

    Examples

    Assume that you create two ipsec-vpn connections for an Enhanced VPN gateway in the Singapore region. Over a 24-hour period, you transfer 500 GB of data to Alibaba Cloud and 250 GB of data from Alibaba Cloud through these connections. The fees are calculated as follows:

    • Ipsec-vpn connection fee = USD 0.1/connection-hour × 24 hours × 2 ipsec-vpn connections = USD 4.80

    • Data transfer fee (outbound traffic only) = USD 0.1/GB × (250 - 200) GB = USD 5.00 (Cloud Data Transfer provides a monthly free tier of 200 GB for outbound traffic for regions outside the Chinese mainland.)

    • Total cost = ipsec-vpn connection fee + data transfer fee = USD 9.80

    Classic VPN gateway

    Billing items

    You are charged for your Classic VPN Gateway instance. If you only enable the IPsec-VPN feature, the charges include an IPsec-VPN instance fee and a bandwidth fee:

    Billing item

    Unit price

    Billing method

    Description

    IPsec-VPN instance fee

    See Instance Fee and Data Transfer Fee Pricing.

    subscription

    This fee is based on the selected bandwidth specification.

    data transfer fee

    If you also enable the SSL-VPN feature, you incur an additional SSL-VPN instance fee and an SSL specification fee. For more information, see SSL-VPN billing.

    Instance and data transfer rates

    The IPsec-VPN instance fee and or traffic fee for a Traditional VPN Gateway depend on the bandwidth specification and region you select when creating the gateway:

    IPsec-VPN instance fee

    Unit: USD/hour

    Region

    10 Mbps

    100 Mbps

    200 Mbps

    500 Mbps

    1000 Mbps

    The Chinese mainland

    0.059

    0.209

    0.209

    0.767

    0.767

    China (Hong Kong)

    0.087

    0.262

    0.262

    1.025

    1.025

    Singapore

    0.087

    0.262

    0.262

    1.025

    1.025

    Japan (Tokyo)

    0.091

    0.275

    0.275

    0.767

    0.767

    South Korea (Seoul)

    0.091

    0.275

    0.275

    0.767

    0.767

    Thailand (Bangkok)

    0.087

    0.262

    0.262

    1.025

    1.025

    Philippines (Manila)

    0.087

    0.262

    0.262

    1.025

    1.025

    Malaysia (Kuala Lumpur)

    0.080

    0.240

    0.240

    0.878

    0.878

    Indonesia (Jakarta)

    0.086

    0.262

    0.262

    0.734

    0.734

    US (Virginia)

    0.066

    0.295

    0.295

    0.826

    0.826

    US (Silicon Valley)

    0.082

    0.392

    0.392

    1.095

    1.095

    Germany (Frankfurt)

    0.077

    0.359

    0.359

    1.003

    1.003

    UK (London)

    0.077

    0.359

    0.359

    1.003

    1.003

    Mexico

    0.066

    0.295

    0.295

    0.826

    0.826

    UAE (Dubai)

    0.090

    0.420

    0.420

    1.231

    Not supported

    SAU (Riyadh - Partner Region)

    0.104

    0.314

    0.314

    1.230

    Not supported

    Data transfer fee

    Unit: USD/GB

    Region

    Unit price

    The Chinese mainland

    0.125

    China (Hong Kong)

    0.153

    Singapore

    0.117

    Japan (Tokyo)

    0.120

    South Korea (Seoul)

    0.125

    Thailand (Bangkok)

    0.117

    Philippines (Manila)

    0.110

    Malaysia (Kuala Lumpur)

    0.125

    Indonesia (Jakarta)

    0.110

    US (Virginia)

    0.078

    US (Silicon Valley)

    0.078

    Germany (Frankfurt)

    0.070

    UK (London)

    0.070

    Mexico

    0.078

    UAE (Dubai)

    0.447

    SAU (Riyadh - Partner Region)

    0.140

    Important

    • The listed prices apply only to public cloud regions. In case of any discrepancy, the prices on the purchase page prevail.

    • China (Nanjing) (Decommissioning) support up to 500 Mbps.

    Examples

    An enterprise uses a Classic VPN gateway in the China (Hangzhou) region to connect to an IDC. The VPN gateway uses only the IPsec-VPN feature. Over 24 hours, the enterprise transfers 20 GB from the IDC to Alibaba Cloud and 10 GB from Alibaba Cloud to the IDC. The fees are calculated as follows:

    • IPsec-VPN instance fee: USD 0.059/hour × 24 hours = USD 1.416

    • Data transfer fee: USD 0.125/GB × 10 GB = USD 1.25

    • Total cost = (IPsec-VPN instance fee) + Data transfer fee = USD 2.666

    Connections bound to a transit router

    Billable items

    For an IPsec-VPN connection bound to a Transit Router, you are charged for the ipsec connection.

    Billable item

    Unit price

    Description

    ipsec connection instance fee

    The IPsec-VPN connection instance fee is USD 0.06 per instance per hour in the UAE (Dubai) and SAU (Riyadh - Partner Region) regions. The fee is USD 0.05 per instance per hour in all other regions.

    This fee is charged hourly per ipsec connection. Partial hours count as full hours.

    public network traffic fee

    Charges apply only to outbound traffic. Starting from March 2026, we will gradually transition to CDT billing.

    TR connection fee

    • Chinese mainland: USD 0.05/connection/hour.

    • Outside Chinese mainland: USD 0.06/connection/hour.

    This fee is charged by CEN. For more information, see CEN billing.

    TR traffic processing fee

    USD 0.02/GB.

    Note:

    • Private ipsec connections do not incur a public network traffic fee.

    • After you bind an ipsec connection to a Transit Router, you cannot change the bound resource type or the billing method.

    • A single ipsec connection has a fixed maximum bandwidth of 1,000 Mbps. To increase the bandwidth between your cloud and on-premises networks, you can establish multiple IPsec-VPN connections.

    Public network traffic fee unit price

    The billing for public network traffic from ipsec connections bound to a Transit Router is gradually transitioning to CDT:

    • After switching to CDT billing, the public network traffic fee is based on CDT Pricing.

    • Before switching to CDT billing, the following rates apply (Unit: USD/GB):

      Region

      Price (USD/GB)

      The Chinese mainland

      0.125

      China (Hong Kong)

      0.153

      Singapore

      0.117

      Japan (Tokyo)

      0.120

      South Korea (Seoul)

      0.125

      Thailand (Bangkok)

      0.117

      Philippines (Manila)

      0.110

      Malaysia (Kuala Lumpur)

      0.125

      Indonesia (Jakarta)

      0.110

      US (Virginia)

      0.078

      US (Silicon Valley)

      0.078

      Germany (Frankfurt)

      0.070

      UK (London)

      0.070

      Mexico

      0.078

      UAE (Dubai)

      0.12

      SAU (Riyadh - Partner Region)

      0.140

      Important

      The prices in these tables are for reference only. If there is a discrepancy between the prices on this page and those on the purchase page, the prices on the purchase page prevail.

    Examples

    An on-premises data center connects to a Transit Router in the Singapore region through one public ipsec connection to communicate with a VPC. Over a 24-hour period, the inbound traffic is 50 GB and the outbound traffic is 200 GB. The fees for the ipsec connection during this period are calculated as follows:

    After switching to CDT

    • ipsec connection instance fee = USD 0.05/hour/connection × 24 hours × 1 connection = USD 1.20

    • public network traffic fee (outbound only) = USD 0.125/GB × (200 - 200) GB = USD 0.00 (CDT provides a monthly free traffic allowance of 200 GB for regions outside the Chinese mainland.)

    • TR connection fee = USD 0.05/hour/connection × 24 hours × 1 connection = USD 1.20

    • TR traffic processing fee (inbound to TR only) = USD 0.02/GB × 50 GB = USD 1.00

    • Total fee = USD 3.40

    Before switching to CDT

    • ipsec connection instance fee = USD 0.05/hour/connection × 24 hours × 1 connection = USD 1.20

    • public network traffic fee (outbound only) = USD 0.125/GB × 200 GB = USD 25.00

    • TR connection fee = USD 0.05/hour/connection × 24 hours × 1 connection = USD 1.20

    • TR traffic processing fee (inbound to TR only) = USD 0.02/GB × 50 GB = USD 1.00

    • Total fee = USD 28.40

    Billing details

    • Go to the Billing & Cost Management console to view your billing details.

    • Internet traffic fees are billed under Cloud Data Transfer (CDT).

    • If you bind a transit router, the TR connection fee and TR data processing fee are billed under Cloud Enterprise Network (CEN).

    Related documentation

    FAQ

    Mainland China regions

    China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Hangzhou), China (Shanghai), China (Nanjing) (Local Region, being decommissioned), China (Shenzhen), China (Heyuan), China (Guangzhou), and China (Chengdu).