All Products
Search
Document Center

Anti-DDoS:Billing of Anti-DDoS Proxy (Outside Chinese Mainland) of the Sec-CMA mitigation plan

Last Updated:Sep 05, 2024

This topic describes the billing of Anti-DDoS Proxy (Outside Chinese Mainland) instances of the Secure Chinese Mainland Acceleration (Sec-CMA) mitigation plan.

Mitigation plan description

Anti-DDoS Proxy (Outside Chinese Mainland) provides two types of instances: Anti-DDoS Proxy (Outside Chinese Mainland) instances of the Sec-CMA mitigation plan and Anti-DDoS Proxy (Outside Chinese Mainland) instances of the Sec-CMA (Basic) mitigation plan.

  • An Anti-DDoS Proxy (Outside Chinese Mainland) instance of the Sec-CMA mitigation plan provides access acceleration and two advanced mitigation sessions each calendar month for all services that are added to the instance.

  • An Anti-DDoS Proxy (Outside Chinese Mainland) instance of the Sec-CMA (Basic) mitigation plan provides access acceleration and one advanced mitigation session each calendar month for all services that are added to the instance.

Note
  • Advanced mitigation uses the anti-DDoS scrubbing centers of Alibaba Cloud in the current region to protect your services against DDoS attacks.

  • To purchase an Anti-DDoS Proxy (Outside Chinese Mainland) instance of the Sec-CMA (Basic) mitigation plan, submit a ticket to contact the account manager.

  • The minimum specifications for the two types of instances are the same except for the number of advanced mitigation sessions that are provided free of charge.

If the advanced mitigation sessions that are provided each calendar month cannot meet your business requirements, we recommend that you purchase global advanced mitigation sessions to improve mitigation capabilities. For more information, see Billing of advanced mitigation sessions.

Billing

Note

The prices of billable items that are provided in this topic are for reference only. The actual prices on the Anti-DDoS Proxy (Outside Chinese Mainland) buy page shall prevail.

Unit prices of the two types of instances that use the minimum specifications

  • An instance of the Sec-CMA mitigation plan: USD 15,480 per month

  • An instance of the Sec-CMA (Basic) mitigation plan: USD 9,288 per month

The following table describes the two types of instances that use the minimum subscription specifications and do not enable the pay-as-you-go features. The minimum specifications for the two types of instances are the same except for the number of advanced mitigation sessions that are provided free of charge.

Specification name

Specification of the Sec-CMA mitigation plan

Specification of the Sec-CMA (Basic) mitigation plan

Billing method

Description

Clean bandwidth

10 Mbit/s

10 Mbps

Subscription

The maximum service traffic that can be processed by the instance when no attacks occur. You can increase the specification.

95th percentile burstable clean bandwidth

Disabled

Disabled

Pay-as-you-go

The burstable clean bandwidth of the instance. If the actual bandwidth is greater than the clean bandwidth but less than the 95th percentile burstable clean bandwidth, pay-as-you-go bills are generated.

Clean queries per second (QPS)

500

500

Subscription

The maximum number of HTTP and HTTPS requests that the instance can concurrently process per second if no attacks occur. You can increase the specification.

Note

We recommend that you specify the clean QPS based on your business requirements. If the actual QPS of your service exceeds the clean QPS that you specify, packet loss may occur and some logs may fail to be recorded.

95th percentile burstable QPS

Disabled

Disabled

Pay-as-you-go

The burstable QPS of the instance. If the actual QPS is greater than the clean QPS but less than the 95th percentile burstable QPS, pay-as-you-go bills are generated.

Function plan

Standard

Standard

Subscription

Anti-DDoS Proxy (Outside Chinese Mainland) supports Standard and Enhanced function plans. The Enhanced function plan supports advanced service access capabilities and DDoS mitigation capabilities.

For more information, see Differences between the Standard and Enhanced function plans.

Number of domain names that can be protected

10

10

Subscription

The number of HTTP and HTTPS domain names that the instance can protect. You can increase the specification.

For every 10 additional domain names, the total number of second-level domain names that are supported is increased by 1. If the number of domain names that can be protected by an instance is 50, the domain names can belong to a maximum of five second-level domain names.

Number of ports

5

5

Subscription

The number of TCP and UDP ports that can be protected by the instance. You can increase the specification.

Unit prices of the specifications that can be increased

  • Clean bandwidth

    Price for every 10 Mbit/s of clean bandwidth increment: USD 1,548 per month

  • Clean QPS

    Clean QPS

    Unit price (USD per QPS-month)

    0 < QPS ≤ 500

    0

    500 < QPS ≤ 5,000

    1.5

    5,000 < QPS ≤ 8,000

    1.425

    8,000 < QPS ≤ 10,000

    1.35

    10,000 < QPS ≤ 50,000

    1.275

    50,000 < QPS ≤ 100,000

    1.05

    For example, you specify 6,000 for the clean QPS when you purchase an instance. The fee for the specified clean QPS per month is calculated based on the following formula:

    (500 - 0) × 0 + (5,000 - 500) × 1.5 + (6,000 - 5,000) × 1.425 = USD 8,175

  • Function plan

    Enhanced function plan: USD 1,200 per month

  • Number of domain names that can be protected

    Number of domain names

    Unit price for the Standard function plan (USD per domain name-month)

    Unit price for the Enhanced function plan (USD per domain name-month)

    0 < Number of domain names ≤ 10

    0

    0

    10 < Number of domain names ≤ 500

    4.5

    7.5

    500 < Number of domain names ≤ 1,000

    4.1

    7

    1,000 < Number of domain names ≤ 5,000

    3.7

    6.5

    5,000 < Number of domain names ≤ 10,000

    3.2

    5.8

    10,000 < Number of domain names ≤ 20,000

    2.7

    4.5

    For example, you purchase an instance that uses the Standard function plan and set the number of domain names that can be protected to 600. The fee for the number of domain names that can be protected per month is calculated based on the following formula:

    (10 - 0) × 0 + (500 - 10) × 4.5 + (600 - 500) × 4.1 = USD 2,615

  • Number of ports

    Number of ports

    Unit price (USD per port-month)

    0 < Number of ports ≤ 5

    0

    5 < Number of ports ≤ 50

    30

    50 < Number of ports ≤ 100

    26

    100 < Number of ports ≤ 500

    22

    500 < Number of ports ≤ 1,500

    18

    For example, you set the number of ports to 80 when you purchase an instance. The fee for the number of ports per month is calculated based on the following formula:

    (5 - 0) × 0 + (50 - 5) × 30 + (80 - 50) × 26 = USD 2,130

Billing rules for pay-as-you-go features

After you enable a pay-as-you-go feature, bills are generated only after the usage of the feature meets the bill generation conditions.

Feature

Billing rule

Description

95th percentile burstable clean bandwidth

Both the daily 95th percentile metering method and the monthly 95th percentile metering method are supported.

The burstable clean bandwidth feature provides additional clean bandwidth for your instance. If spikes occur in your service traffic and the traffic exceeds the clean bandwidth of the instance during peak hours, the burstable clean bandwidth feature can be used to prevent access to your service from being limited. For more information, see Billing of the burstable clean bandwidth feature.

95th percentile burstable QPS

Both the daily 95th percentile metering method and the monthly 95th percentile metering method are supported.

The burstable QPS feature provides additional QPS for your instance. If spikes occur in your service QPS and the QPS exceeds the clean QPS of the instance during peak hours, the burstable QPS feature can be used to prevent access to your service from being limited. For more information, see Billing of the burstable QPS feature.

Instance expiration

image

Time period

Service traffic forwarding

Instance configuration

Within 6 calendar days after the expiration date

  • The blackhole filtering threshold is 5 Gbit/s for the instance. If forwarded service traffic and attack traffic exceed 5 Gbit/s, blackhole filtering is triggered.

  • The access acceleration capabilities are not provided.

Instance configurations are retained.

From Day 7 after the expiration date to Day 29 after the expiration date

The instance no longer forwards service traffic.

Warning

If you no longer require Anti-DDoS Proxy (Outside Chinese Mainland) of the Sec-CMA mitigation plan to protect your service, you must switch service traffic from the Anti-DDoS Proxy (Outside Chinese Mainland) instance of the Sec-CMA mitigation plan to the origin server before Day 30 after the expiration date. Otherwise, access to your service may be adversely affected. If you want to switch service traffic, make sure that the domain name of your website does not point to the CNAME assigned by Anti-DDoS Proxy. You must also make sure that your non-website service does not use an exclusive IP address of the instance.

Instance configurations are retained.

From Day 30 after the expiration date

The instance no longer forwards service traffic.

The instance is released.

Warning

One month after all Anti-DDoS Proxy instances associated with your Alibaba Cloud account are released, the port forwarding rules and domain names added to Anti-DDoS Proxy are automatically deleted. If you have multiple Anti-DDoS Proxy instances, the one-month countdown starts when the last instance is released.

Overdue payments

  • If the balance of your Alibaba Cloud account, including cash, vouchers, and coupons, is insufficient to settle an outstanding payment, your account has an overdue payment.

  • If your Alibaba Cloud account has an overdue payment, you must top up your account at the earliest opportunity to ensure that the balance of your account is sufficient. Otherwise, your pay-as-you-go service may become unavailable.

Renewal

You can manually renew an instance. You can also enable auto-renewal for the instance. For more information, see Renew an instance.

Refunds

After you purchase an instance, you cannot request a refund for the instance.

Bill query

You can query bills in the Expenses and Costs console. For more information, see Overview of Monthly Bill.