All Products
Search
Document Center

VPN Gateway:Billing overview

Last Updated:May 23, 2025

You can associate an IPsec-VPN connection with a VPN gateway or a route router. The involved billable items for IPsec-VPN connections depend on the types of resources that are associated with IPsec-VPN connections. This topic describes the billing rules for IPsec-VPN connections that are associated with different types of resources.

IPsec-VPN connections associated with VPN gateways

Billing rules

Feature enabled for a VPN gateway

Billable item

Billing method

Billing cycle

IPsec-VPN

  • IPsec-VPN connection fee

  • Data transfer fee

Pay-as-you-go.

This billing method allows you to use resources and pay for them afterwards. You are charged based on the resources that are consumed.

1 hour.

If the usage duration is less than 1 hour, it is rounded up to 1 hour.

SSL-VPN and IPsec-VPN

  • IPsec-VPN connection fee

  • SSL-VPN instance fee

  • Data transfer fee

  • SSL specification fee

Billable items

Important
  • The prices listed in the following table are for reference only. The prices displayed on the buy page prevail.

  • The maximum bandwidth supported by VPN gateways in the China (Nanjing - Local Region) region is 500 Mbit/s.

    Click to view the regions in the Chinese mainland in the following table.

    China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Hangzhou), China (Shanghai), China (Nanjing - Local Region), China (Shenzhen), China (Heyuan), China (Guangzhou), China (Chengdu)

  • In the following table, "Not supported" indicates that the bandwidth specification is not supported by VPN gateways in the corresponding region.

IPsec-VPN and SSL-VPN connection fees

VPN gateways provide different bandwidth specifications. When the same bandwidth specification is used in the same region, the instance unit prices for IPsec-VPN and SSL-VPN are the same. The following table lists the unit prices. Unit: USD per hour.

Region

10 Mbps

100 Mbps

200 Mbps

500 Mbps

1000 Mbps

The Chinese mainland

0.059

0.209

0.209

0.767

0.767

Hong Kong (China)

0.087

0.262

0.262

1.025

1.025

Singapore

0.087

0.262

0.262

1.025

1.025

Japan (Tokyo)

0.091

0.275

0.275

0.767

0.767

South Korea (Seoul)

0.091

0.275

0.275

0.767

0.767

Thailand (Bangkok)

0.087

0.262

0.262

1.025

1.025

Philippines (Manila)

0.087

0.262

0.262

1.025

1.025

Malaysia (Kuala Lumpur)

0.080

0.240

0.240

0.878

0.878

Indonesia (Jakarta)

0.086

0.262

0.262

0.734

0.734

US (Virginia)

0.066

0.295

0.295

0.826

0.826

US (Silicon Valley)

0.082

0.392

0.392

1.095

1.095

Germany (Frankfurt)

0.077

0.359

0.359

1.003

1.003

UK (London)

0.077

0.359

0.359

1.003

1.003

Mexico

0.066

0.295

0.295

0.826

0.826

UAE (Dubai)

0.090

0.420

0.420

1.231

Not supported

SAU (Riyadh - Partner Region)

Important

The SAU (Riyadh - Partner Region) region is operated by a partner.

0.104

0.314

0.314

1.230

Not supported

Data transfer fee

You are charged for data transfer from Alibaba Cloud to a data center over an IPsec-VPN connection. You are not charged for data transfer from a data center to Alibaba Cloud over an IPsec-VPN connection. Unit: USD per GB.

Region

Price

The Chinese mainland

0.125

Hong Kong (China)

0.153

Singapore

0.117

Japan (Tokyo)

0.120

South Korea (Seoul)

0.125

Thailand (Bangkok)

0.117

Philippines (Manila)

0.110

Malaysia (Kuala Lumpur)

0.125

Indonesia (Jakarta)

0.110

US (Virginia)

0.078

US (Silicon Valley)

0.078

Germany (Frankfurt)

0.070

UK (London)

0.070

Mexico

0.078

UAE (Dubai)

0.447

SAU (Riyadh - Partner Region)

Important

The SAU (Riyadh - Partner Region) region is operated by a partner.

0.140

SSL specification fee

After the SSL-VPN feature is enabled, you must select an SSL specification based on the number of clients that you want to connect at a time. The following table describes the unit prices for different SSL specifications in different regions. Unit: USD per hour.

Region

5

10

20

50

100

500

1000

The Chinese mainland

0.048

0.074

0.117

0.226

0.328

1.090

1.547

Hong Kong (China)

0.048

0.074

0.117

0.226

0.328

1.090

1.547

Singapore

0.048

0.074

0.117

0.226

0.328

1.090

1.547

Japan (Tokyo)

0.048

0.074

0.117

0.226

0.328

1.090

1.547

South Korea (Seoul)

0.048

0.074

0.117

0.226

0.328

1.090

1.547

Thailand (Bangkok)

0.048

0.074

0.117

0.226

0.328

1.090

1.547

Philippines (Manila)

0.048

0.074

0.117

0.226

0.328

1.090

1.547

Malaysia (Kuala Lumpur)

0.048

0.074

0.117

0.226

0.328

1.090

1.547

Indonesia (Jakarta)

0.048

0.074

0.117

0.226

0.328

1.090

1.547

US (Virginia)

0.048

0.074

0.117

0.226

0.328

1.090

1.547

US (Silicon Valley)

0.048

0.074

0.117

0.226

0.328

1.090

1.547

Germany (Frankfurt)

0.048

0.074

0.117

0.226

0.328

1.090

1.547

UK (London)

0.048

0.074

0.117

0.226

0.328

1.090

1.547

Mexico

0.048

0.074

0.117

0.226

0.328

1.090

1.547

UAE (Dubai)

0.048

0.074

0.117

0.226

0.328

1.090

1.547

SAU (Riyadh - Partner Region)

Important

The SAU (Riyadh - Partner Region) region is operated by a partner.

0.058

0.089

0.14

0.271

0.394

1.308

1.856

Billing example

image

As shown in the preceding figure, an on-premises data center of an enterprise in the Chinese mainland is connected to a VPN gateway over an IPsec-VPN connection. This way, the data center can communicate with a virtual private cloud (VPC). If the VPN gateway has only the IPsec-VPN feature enabled, the bandwidth specification of the VPN gateway is 10 Mbit/s, and 10 GB of traffic is sent from the VPN gateway to the on-premises data center from 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023, the following fees are generated:

  • IPsec-VPN connection fee = USD 0.059 per hour × 24 hours = USD 1.416

  • Data transfer fee = USD 0.125 per GB × 10 GB = USD 1.25

  • Total fee = IPsec-VPN connection fee + Data transfer fee = USD 2.666

IPsec-VPN connections associated with transit routers

Billing rules

Network type of IPsec-VPN connection

Billable item

Billing method

Billing cycle

Internet access

  • IPsec-VPN connection fee

  • Data Transfer Fee

  • Transit router connection fee

  • Transit router traffic processing fee

Pay-as-you-go.

This billing method allows you to use resources and pay for them afterwards. You are charged based on the resources that are consumed.

1 hour.

If the usage duration is less than 1 hour, it is rounded up to 1 hour.

Internal network

  • IPsec-VPN connection fee

  • Transit router connection fee

  • Transit router traffic processing fee

Billable items

Note
  • The prices listed in the following table are for reference only. The prices displayed on the buy page prevail.

    Click to view the regions included in the Chinese mainland in the following table.

    China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Hangzhou), China (Shanghai), China (Nanjing - Local Region), China (Shenzhen), China (Heyuan), China (Guangzhou), China (Chengdu)

  • For the billing of IPsec-VPN connections that are associated with transit routers, this topic describes only the IPsec-VPN connection fee and data transfer fee. For more information about the transit router connection fee and transit router data transfer fee, see Billing rules.

IPsec-VPN connection fee

The IPsec-VPN connection instance fee in the SAU (Riyadh - Partner Region) region is USD 0.06 per connection per hour. The IPsec-VPN connection instance fee in other regions is USD 0.05 per connection per hour.

Data transfer fee

You are charged for data transfer from Alibaba Cloud to a data center over an IPsec-VPN connection. You are not charged for data transfer from a data center to Alibaba Cloud over an IPsec-VPN connection. Unit: USD per GB.

Region

Price

The Chinese mainland

0.125

Hong Kong (China)

0.153

Singapore

0.117

Japan (Tokyo)

0.120

South Korea (Seoul)

0.125

Thailand (Bangkok)

0.117

Philippines (Manila)

0.110

Malaysia (Kuala Lumpur)

0.125

Indonesia (Jakarta)

0.110

US (Virginia)

0.078

US (Silicon Valley)

0.078

Germany (Frankfurt)

0.070

UK (London)

0.070

Mexico

0.078

SAU (Riyadh - Partner Region)

Important

The SAU (Riyadh - Partner Region) region is operated by a partner.

0.140

Billing example

image

As shown in the preceding figure, an on-premises data center in the Chinese mainland is connected to a transit router over a public IPsec-VPN connection. This way, the data center can communicate with a VPC. If 5 GB of traffic is sent to the transit router and 10 GB of traffic is sent to the data center over an IPsec-VPN connection from 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023, the following fees are generated:

  • IPsec-VPN connection fee = USD 0.05 per connection per hour × 24 hours × 1 connection = USD 1.2

  • Data transfer fee = USD 0.125 per GB × 10 GB = USD 1.25

  • Transit router connection fee = USD 0.05 per connection per hour × 24 hours × 1 connection = USD 1.2

  • Transit router traffic processing fee = USD 0.02 per GB × 5 GB = USD 0.1

  • Total fee = IPsec-VPN connection fee + Data transfer fee + Transit router connection fee + Transit router traffic processing fee = USD 3.75

View bills

Log on to the Expenses and Costs console. In the left-side navigation pane, choose Bills > Bill Details. Then, refer to Bill Management to view billing details.

References