All Products
Search

This Product

    VPN Gateway:Billing overview

    Document Center

    VPN Gateway:Billing overview

    Last Updated:Mar 03, 2026

    You can associate an IPsec-VPN connection with a VPN gateway or a transit router. The billable items for IPsec-VPN connections depend on the type of resource you associate them with. This topic describes the billing rules for IPsec-VPN connections associated with different resource types.

    Associate with enhanced VPN gateways

    Billing rules

    For enhanced VPN gateways, you are billed per IPsec-VPN connection. You incur an IPsec-VPN connection fee and an Internet traffic fee.

    Billable items

    Billable item

    Unit price

    Billing method

    Billing cycle

    IPsec-VPN connection fee

    USD 0.10 per item per hour

    Pay-as-you-go

    You use resources first and pay later based on actual usage.

    1 hour

    If your usage duration is less than 1 hour, it is rounded up to 1 hour.

    Internet traffic fee (charged by CDT)

    See Internet traffic pricing for CDT

    Pay-as-you-go. Charges apply only to egress traffic.

    1 hour

    If your usage duration is less than 1 hour, it is rounded up to 1 hour.

    Billing example

    image

    As shown in the preceding figure, an enterprise in Singapore has two on-premises data centers. Each connects to an enhanced VPN gateway in the Singapore region over a public IPsec-VPN connection to communicate with a VPC. From 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023, IPsec-VPN connection 1 sends 250 GB of traffic to on-premises data center 1 and IPsec-VPN connection 2 sends 100 GB of traffic to on-premises data center 2. The total fees for these IPsec-VPN connections are:

    • IPsec-VPN connection fee = USD 0.1 per connection per hour × 24 hours × 2 connections = USD 4.8

    • CDT traffic fee = USD 0.1 per GB × (250 + 100 − 200) GB = USD 15 (For regions outside the Chinese mainland, CDT offers 200 GB of free monthly traffic)

    • Total fee = IPsec-VPN connection fee + CDT traffic fee = USD 19.8

    Associate with VPN gateways

    Billing rules

    Feature enabled for the VPN gateway

    Billable item

    Billing method

    Billing cycle

    IPsec-VPN only

    • IPsec-VPN instance fee

    • Traffic fee

    Pay-as-you-go

    You use resources first and pay later based on actual usage.

    1 hour

    If your usage duration is less than 1 hour, it is rounded up to 1 hour.

    SSL-VPN and IPsec-VPN features enabled simultaneously

    • IPsec-VPN instance fee

    • SSL-VPN instance fee

    • Traffic fee

    • SSL specification fee

    Billable items

    Important

    • The prices listed in the following table are for reference only. The prices displayed on the buy page prevail.

    • In the China (Nanjing - Local Region) region, the maximum bandwidth supported by VPN gateways is 500 Mbit/s.

      Click to view the regions in the Chinese mainland.

      China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Hangzhou), China (Shanghai), China (Nanjing - Local Region), China (Shenzhen), China (Heyuan), China (Guangzhou), and China (Chengdu)

    • In the following table, "Not supported" means the corresponding bandwidth specification is not available for VPN gateways in that region.

    IPsec-VPN and SSL-VPN instance fees

    VPN gateways offer multiple bandwidth specifications. For the same bandwidth specification in the same region, the unit prices for IPsec-VPN and SSL-VPN instances are identical. Unit: USD per hour.

    Region

    10 Mbps

    100 Mbps

    200 Mbps

    500 Mbps

    1000 Mbps

    The Chinese mainland

    0.059

    0.209

    0.209

    0.767

    0.767

    China (Hong Kong)

    0.087

    0.262

    0.262

    1.025

    1.025

    Singapore

    0.087

    0.262

    0.262

    1.025

    1.025

    Japan (Tokyo)

    0.091

    0.275

    0.275

    0.767

    0.767

    South Korea (Seoul)

    0.091

    0.275

    0.275

    0.767

    0.767

    Thailand (Bangkok)

    0.087

    0.262

    0.262

    1.025

    1.025

    Philippines (Manila)

    0.087

    0.262

    0.262

    1.025

    1.025

    Malaysia (Kuala Lumpur)

    0.080

    0.240

    0.240

    0.878

    0.878

    Indonesia (Jakarta)

    0.086

    0.262

    0.262

    0.734

    0.734

    US (Virginia)

    0.066

    0.295

    0.295

    0.826

    0.826

    US (Silicon Valley)

    0.082

    0.392

    0.392

    1.095

    1.095

    Germany (Frankfurt)

    0.077

    0.359

    0.359

    1.003

    1.003

    UK (London)

    0.077

    0.359

    0.359

    1.003

    1.003

    Mexico

    0.066

    0.295

    0.295

    0.826

    0.826

    UAE (Dubai)

    0.090

    0.420

    0.420

    1.231

    Not supported

    SAU (Riyadh - Partner Region)

    0.104

    0.314

    0.314

    1.230

    Not supported

    Traffic fee

    You are charged for traffic sent from an IPsec-VPN connection to an on-premises data center. Traffic sent from an on-premises data center to an IPsec-VPN connection is not charged. Unit: USD per GB.

    Region

    Unit price

    The Chinese mainland

    0.125

    China (Hong Kong)

    0.153

    Singapore

    0.117

    Japan (Tokyo)

    0.120

    South Korea (Seoul)

    0.125

    Thailand (Bangkok)

    0.117

    Philippines (Manila)

    0.110

    Malaysia (Kuala Lumpur)

    0.125

    Indonesia (Jakarta)

    0.110

    US (Virginia)

    0.078

    US (Silicon Valley)

    0.078

    Germany (Frankfurt)

    0.070

    UK (London)

    0.070

    Mexico

    0.078

    UAE (Dubai)

    0.447

    SAU (Riyadh - Partner Region)

    0.140

    SSL specification fee

    After enabling SSL-VPN, select an SSL specification based on the maximum number of clients that connect simultaneously. Unit: USD per hour.

    Region

    5

    10

    20

    50

    100

    500

    1000

    The Chinese mainland

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    China (Hong Kong)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Singapore

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Japan (Tokyo)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    South Korea (Seoul)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Thailand (Bangkok)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Philippines (Manila)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Malaysia (Kuala Lumpur)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Indonesia (Jakarta)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    US (Virginia)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    US (Silicon Valley)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Germany (Frankfurt)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    UK (London)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Mexico

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    UAE (Dubai)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    SAU (Riyadh - Partner Region)

    0.058

    0.089

    0.14

    0.271

    0.394

    1.308

    1.856

    Billing example

    image

    As shown in the preceding figure, an on-premises data center of an enterprise in the Chinese mainland connects to a VPC over an IPsec-VPN connection. If the VPN gateway has only the IPsec-VPN feature enabled, its bandwidth specification is 10 Mbit/s, and it sends 10 GB of traffic to the on-premises data center from 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023, the total fees are:

    • IPsec-VPN instance fee = USD 0.059 per hour × 24 hours = USD 1.416

    • Traffic fee = USD 0.125 per GB × 10 GB = USD 1.25

    • Total fee = IPsec-VPN instance fee + Traffic fee = USD 2.666

    Associate with transit routers

    Billing rules

    Network type of the IPsec-VPN connection

    Billable item

    Billing method

    Billing cycle

    Internet access

    • IPsec-VPN connection fee

    • Traffic fee

    • Transit router connection fee

    • Transit router traffic processing fee

    Pay-as-you-go

    You use resources first and pay later based on actual usage.

    1 hour

    If your usage duration is less than 1 hour, it is rounded up to 1 hour.

    Private network

    • IPsec-VPN connection fee

    • Transit router connection fee

    • Transit router traffic processing fee

    Billable items

    Note

    • The prices listed in the following table are for reference only. The prices displayed on the buy page prevail.

      Click to view the regions in the Chinese mainland.

      China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Hangzhou), China (Shanghai), China (Nanjing - Local Region), China (Shenzhen), China (Heyuan), China (Guangzhou), and China (Chengdu)

    • For IPsec-VPN connections associated with transit routers, this topic covers only the IPsec-VPN connection fee and traffic fee. For details about the transit router connection fee and transit router traffic processing fee, see Cloud Enterprise Network billing overview.

    IPsec-VPN connection fee

    The IPsec-VPN connection instance fee is USD 0.06 per instance per hour in the UAE (Dubai) and SAU (Riyadh - Partner Region) regions. The fee is USD 0.05 per instance per hour in all other regions.

    Internet traffic fee

    • Starting on 00:00 on March 1, 2026 (UTC+8), Internet traffic fees for Alibaba Cloud VPN connection instances bound to TR will gradually support CDT settlement and billing. For more information, see the Billing Announcement.

    • Until the switch to CDT billing, the following rule applies:

    You are charged for traffic sent from an IPsec-VPN connection to an on-premises data center. Traffic sent from an on-premises data center to an IPsec-VPN connection is not charged. Unit: USD per GB.

    Region

    Price (USD/GB)

    The Chinese mainland

    0.125

    China (Hong Kong)

    0.153

    Singapore

    0.117

    Japan (Tokyo)

    0.120

    South Korea (Seoul)

    0.125

    Thailand (Bangkok)

    0.117

    Philippines (Manila)

    0.110

    Malaysia (Kuala Lumpur)

    0.125

    Indonesia (Jakarta)

    0.110

    US (Virginia)

    0.078

    US (Silicon Valley)

    0.078

    Germany (Frankfurt)

    0.070

    UK (London)

    0.070

    Mexico

    0.078

    UAE (Dubai)

    0.12

    SAU (Riyadh - Partner Region)

    0.140

    Billing example

    image

    As shown in the preceding figure, an on-premises data center in the Chinese mainland connects to a transit router over a public IPsec-VPN connection to communicate with a VPC. If, from 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023, the IPsec-VPN connection sends 5 GB of traffic to the transit router and 10 GB of traffic to the on-premises data center, the total fees are:

    • IPsec-VPN connection fee = USD 0.05 per connection per hour × 24 hours × 1 connection = USD 1.2

    • Traffic fee = USD 0.125 per GB × 10 GB = USD 1.25

    • Transit router connection fee = USD 0.05 per connection per hour × 24 hours × 1 connection = USD 1.2

    • Transit router traffic processing fee = USD 0.02 per GB × 5 GB = USD 0.1

    • Total fee = IPsec-VPN connection fee + Traffic fee + Transit router connection fee + Transit router traffic processing fee = USD 3.75

    View bills

    Log on to the Alibaba Cloud Expenses and Costs console. In the navigation pane on the left, choose Bills > Bill Details. Then, refer to Bill Management to view billing details.

    References