This topic describes the billing of Anti-DDoS Proxy (Outside Chinese Mainland) instances of the Secure Chinese Mainland Acceleration (Sec-CMA) mitigation plan.
Mitigation plan description
Anti-DDoS Proxy (Outside Chinese Mainland) provides two types of instances: Anti-DDoS Proxy (Outside Chinese Mainland) instances of the Sec-CMA mitigation plan and Anti-DDoS Proxy (Outside Chinese Mainland) instances of the Sec-CMA (Basic) mitigation plan.
An Anti-DDoS Proxy (Outside Chinese Mainland) instance of the Sec-CMA mitigation plan provides access acceleration and two advanced mitigation sessions each calendar month for all services that are added to the instance.
An Anti-DDoS Proxy (Outside Chinese Mainland) instance of the Sec-CMA (Basic) mitigation plan provides access acceleration and one advanced mitigation session each calendar month for all services that are added to the instance.
Advanced mitigation uses the anti-DDoS scrubbing centers of Alibaba Cloud in the current region to protect your services against DDoS attacks.
To purchase an Anti-DDoS Proxy (Outside Chinese Mainland) instance of the Sec-CMA (Basic) mitigation plan, submit a ticket to contact the account manager.
The minimum specifications for the two types of instances are the same except for the number of advanced mitigation sessions that are provided free of charge.
If the advanced mitigation sessions that are provided each calendar month cannot meet your business requirements, we recommend that you purchase global advanced mitigation sessions to improve mitigation capabilities. For more information, see Billing of advanced mitigation sessions.
Billing
The prices of billable items that are provided in this topic are for reference only. The actual prices on the Anti-DDoS Proxy (Outside Chinese Mainland) buy page shall prevail.
Unit prices of the two types of instances that use the minimum specifications
An instance of the Sec-CMA mitigation plan: USD 15,480 per month
An instance of the Sec-CMA (Basic) mitigation plan: USD 9,288 per month
The following table describes the two types of instances that use the minimum subscription specifications and do not enable the pay-as-you-go features. The minimum specifications for the two types of instances are the same except for the number of advanced mitigation sessions that are provided free of charge.
Specification name | Specification of the Sec-CMA mitigation plan | Specification of the Sec-CMA (Basic) mitigation plan | Billing method | Description |
Clean bandwidth | 10 Mbit/s | 10 Mbps | Subscription | The maximum service traffic that can be processed by the instance when no attacks occur. You can increase the specification. |
95th percentile burstable clean bandwidth | Disabled | Disabled | Pay-as-you-go | The burstable clean bandwidth of the instance. If the actual bandwidth is greater than the clean bandwidth but less than the 95th percentile burstable clean bandwidth, pay-as-you-go bills are generated. |
Clean queries per second (QPS) | 500 | 500 | Subscription | The maximum number of HTTP and HTTPS requests that the instance can concurrently process per second if no attacks occur. You can increase the specification. Note We recommend that you specify the clean QPS based on your business requirements. If the actual QPS of your service exceeds the clean QPS that you specify, packet loss may occur and some logs may fail to be recorded. |
95th percentile burstable QPS | Disabled | Disabled | Pay-as-you-go | The burstable QPS of the instance. If the actual QPS is greater than the clean QPS but less than the 95th percentile burstable QPS, pay-as-you-go bills are generated. |
Function plan | Standard | Standard | Subscription | Anti-DDoS Proxy (Outside Chinese Mainland) supports Standard and Enhanced function plans. The Enhanced function plan supports advanced service access capabilities and DDoS mitigation capabilities. For more information, see Differences between the Standard and Enhanced function plans. |
Number of domain names that can be protected | 10 | 10 | Subscription | The number of HTTP and HTTPS domain names that the instance can protect. You can increase the specification. For every 10 additional domain names, the total number of second-level domain names that are supported is increased by 1. If the number of domain names that can be protected by an instance is 50, the domain names can belong to a maximum of five second-level domain names. |
Number of ports | 5 | 5 | Subscription | The number of TCP and UDP ports that can be protected by the instance. You can increase the specification. |
Unit prices of the specifications that can be increased
Clean bandwidth
Price for every 10 Mbit/s of clean bandwidth increment: USD 1,548 per month
Clean QPS
Clean QPS
Unit price (USD per QPS-month)
0 < QPS ≤ 500
0
500 < QPS ≤ 5,000
1.5
5,000 < QPS ≤ 8,000
1.425
8,000 < QPS ≤ 10,000
1.35
10,000 < QPS ≤ 50,000
1.275
50,000 < QPS ≤ 100,000
1.05
For example, you specify 6,000 for the clean QPS when you purchase an instance. The fee for the specified clean QPS per month is calculated based on the following formula:
(500 - 0) × 0 + (5,000 - 500) × 1.5 + (6,000 - 5,000) × 1.425 = USD 8,175
Function plan
Enhanced function plan: USD 1,200 per month
Number of domain names that can be protected
Number of domain names
Unit price for the Standard function plan (USD per domain name-month)
Unit price for the Enhanced function plan (USD per domain name-month)
0 < Number of domain names ≤ 10
0
0
10 < Number of domain names ≤ 500
4.5
7.5
500 < Number of domain names ≤ 1,000
4.1
7
1,000 < Number of domain names ≤ 5,000
3.7
6.5
5,000 < Number of domain names ≤ 10,000
3.2
5.8
10,000 < Number of domain names ≤ 20,000
2.7
4.5
For example, you purchase an instance that uses the Standard function plan and set the number of domain names that can be protected to 600. The fee for the number of domain names that can be protected per month is calculated based on the following formula:
(10 - 0) × 0 + (500 - 10) × 4.5 + (600 - 500) × 4.1 = USD 2,615
Number of ports
Number of ports
Unit price (USD per port-month)
0 < Number of ports ≤ 5
0
5 < Number of ports ≤ 50
30
50 < Number of ports ≤ 100
26
100 < Number of ports ≤ 500
22
500 < Number of ports ≤ 1,500
18
For example, you set the number of ports to 80 when you purchase an instance. The fee for the number of ports per month is calculated based on the following formula:
(5 - 0) × 0 + (50 - 5) × 30 + (80 - 50) × 26 = USD 2,130
Billing rules for pay-as-you-go features
After you enable a pay-as-you-go feature, bills are generated only after the usage of the feature meets the bill generation conditions.
Feature | Billing rule | Description |
95th percentile burstable clean bandwidth | Both the daily 95th percentile metering method and the monthly 95th percentile metering method are supported. | The burstable clean bandwidth feature provides additional clean bandwidth for your instance. If spikes occur in your service traffic and the traffic exceeds the clean bandwidth of the instance during peak hours, the burstable clean bandwidth feature can be used to prevent access to your service from being limited. For more information, see Billing of the burstable clean bandwidth feature. |
95th percentile burstable QPS | Both the daily 95th percentile metering method and the monthly 95th percentile metering method are supported. | The burstable QPS feature provides additional QPS for your instance. If spikes occur in your service QPS and the QPS exceeds the clean QPS of the instance during peak hours, the burstable QPS feature can be used to prevent access to your service from being limited. For more information, see Billing of the burstable QPS feature. |
Instance expiration
Time period | Service traffic forwarding | Instance configuration |
Within 6 calendar days after the expiration date |
| Instance configurations are retained. |
From Day 7 after the expiration date to Day 14 after the expiration date | The instance no longer forwards service traffic. Warning If you no longer require Anti-DDoS Proxy (Outside Chinese Mainland) of the Sec-CMA mitigation plan to protect your service, you must switch service traffic from the Anti-DDoS Proxy (Outside Chinese Mainland) instance of the Sec-CMA mitigation plan to the origin server before Day 7 after the expiration date. Otherwise, access to your service may be adversely affected. If you want to switch service traffic, make sure that the domain name of your website does not point to the CNAME assigned by Anti-DDoS Proxy. You must also make sure that your non-website service does not use an exclusive IP address of the instance. | Instance configurations are retained. |
From Day 15 after the expiration date | The instance no longer forwards service traffic. | The instance is released. Warning One month after all Anti-DDoS Proxy instances associated with your Alibaba Cloud account are released, the port forwarding rules and domain names added to Anti-DDoS Proxy are automatically deleted. If you have multiple Anti-DDoS Proxy instances, the one-month countdown starts when the last instance is released. |
Overdue payments
If the balance of your Alibaba Cloud account, including cash, vouchers, and coupons, is insufficient to settle an outstanding payment, your account has an overdue payment.
If your Alibaba Cloud account has an overdue payment, you must top up your account at the earliest opportunity to ensure that the balance of your account is sufficient. Otherwise, your pay-as-you-go service may become unavailable.
Renewal
You can manually renew an instance. You can also enable auto-renewal for the instance. For more information, see Renew an instance.
Refunds
After you purchase an instance, you cannot request a refund for the instance.
Bill query
You can query bills in the Expenses and Costs console. For more information, see Overview of Monthly Bill.