The pay-as-you-go billing method allows you to pay for resources after you use the resources. You are charged based on your resource usage. Fees are deducted from the balance of your Alibaba Cloud account after bills are generated at the end of each billing cycle. For pay-as-you-go instances, Web Application Firewall (WAF) 3.0 charges you based on security capacity units (SeCUs). You can purchase SeCU resource plans to offset fees and reduce costs. This topic describes the billing rules of pay-as-you-go WAF instances.
The pay-as-you-go billing method is suitable for scenarios that have the following characteristics:
The resource usage fluctuates.
Your business has short-term requirements for resource usage.
For pay-as-you-go instances, WAF 3.0 charges you based on SeCUs. The following section describes SeCUs.
The unit price of a SeCU is USD 0.01.
SeCU usage is measured on an hourly basis. For example, SeCU usage is measured from 10:00:00 to 10:59:59.
SeCU usage is rounded up to the nearest integer. For example, if only 0.5 SeCUs are used from 10:00:00 to 10:59:59, you are charged 1 SeCU for the time period.
Total fee = Request processing fee + Feature fee
Before you can use the major event protection feature, you must pay for the feature. No additional fees are charged during the validity period.
If you enable WAF protection for an Application Load Balancer (ALB) instance, you are charged fees for the WAF-enabled ALB instance. The fees are included in the bills of the ALB instance. For information about the billing rules of ALB instances, see ALB billing rules.
Fees are calculated on a daily basis (UTC+8). After the fees are calculated, a new billing cycle is started.
The bills for pay-as-you-go WAF instances are generated each day before 06:00. If you want to change the specifications of a pay-as-you-go WAF instance, we recommend that you perform the change after 06:00.
If the total amount of your account balance and the vouchers in your Alibaba Cloud account is less than the total amount of the bill, the service sends a notification by text message or email.
Five domain names are added in CNAME record mode, two IP address blacklist rules are created, and no requests are processed in one billable hour.
The request processing fee for the hour is 0 SeCU. The feature fee is 12 SeCUs, which includes 8 SeCUs for the domain names that are added in CNAME record mode and 4 SeCUs for the two IP address blacklist rules. The total fee is USD 0.12, which is calculated by using the following: 0.01 × 12.
Twelve domain names are added in CNAME record mode, exclusive IP addresses and intelligent load balancing are enabled for two domain names, one scan protection template is created, and 50,001 requests are processed in one billable hour.
The request processing fee for the hour is 11 SeCUs. The feature fee is 70 SeCUs, which includes 22 SeCUs for the domain names that are added in CNAME record mode, 30 SeCUs for the exclusive IP addresses, 15 SeCUs for the intelligent load balancing feature, and 3 SeCUs for the scan protection template. The total fee is USD 0.81, which is calculated by using the following formula: 0.01 × (11 + 70).
An ALB instance is added to WAF in cloud native mode, the domain names on the ALB instance are added as protected objects of WAF, and only basic protection rules are configured for the ALB instance.
The request processing fee is included in the bill of the WAF instance, and the fee for the WAF-enabled ALB instance is included in the bills of the ALB instance.
Multiple ALB instances are added to WAF in cloud native mode, two custom response templates are created for different protected objects, and 50,001 requests are processed in one billable hour.
The request processing fee for the hour is 11 SeCUs. The feature fee is 20 SeCUs, which includes 10 SeCUs for each custom response rule. The fee for the WAF-enabled ALB instance is USD 0.035. The total fee is USD 0.345, which is calculated by using the following formula: 0.035 + 0.01 × (11 + 20).
BillingSeCU resource plansManage billsUnsubscription policyOverdue payments
Other referencesBot managementAPI securityMajor event protectionExclusive IP addressesLog management overview