The fees of an Anti-DDoS Proxy (Chinese Mainland) instance consist of the subscription fee of the instance and the pay-as-you-go fee of the features that you enable for the instance. This topic describes the billable items, expiration, and overdue payments of Anti-DDoS Proxy (Chinese Mainland) instances.
Instance types
Anti-DDoS Proxy (Chinese Mainland) provides two types of instances: Anti-DDoS Proxy (Chinese Mainland) instances of the Profession mitigation plan and Anti-DDoS Proxy (Chinese Mainland) instances of the Advanced mitigation plan. You can purchase an Anti-DDoS Proxy (Chinese Mainland) instance of the Profession mitigation plan on the buy page. To purchase an Anti-DDoS Proxy (Chinese Mainland) instance of the Advanced mitigation plan, contact your account manager.
Profession mitigation plan: The mitigation capabilities are based on the basic protection bandwidth and burstable protection bandwidth that you specify when you purchase an instance.
Advanced mitigation plan: The basic protection bandwidth is 5 Gbit/s, and 2 advanced mitigation sessions are provided each calendar month.
NoteAdvanced mitigation leverages the anti-DDoS scrubbing centers of Alibaba Cloud in the current region to protect your services against DDoS attacks.
If the advanced mitigation sessions that are provided per calendar month are exhausted, you can purchase global advanced mitigation sessions. For more information, see Billing of advanced mitigation sessions.
Billing overview
The actual prices on the Anti-DDoS Proxy (Chinese Mainland) buy page shall prevail.
Unit prices of the two types of instances that use the minimum specifications
Instance of the Profession mitigation plan: USD 3,120 per month
Instance of the Advanced mitigation plan: USD 2,880 per month
The following table lists the minimum specifications for the two types of instances. The minimum specifications indicate that the smallest values are used for all subscription billable items and no pay-as-you-go features are enabled.
Specification | Instance of the Profession mitigation plan | Instance of the Advanced mitigation plan | Billing method | Description |
Basic protection bandwidth | 30 Gbit/s | 5 Gbit/s | Subscription | The basic protection capability of the instance. You can increase the specification only for instances of the Profession mitigation plan. |
Burstable protection bandwidth | 30 Gbit/s | Not supported | Pay-as-you-go | The burstable protection bandwidth of the instance. If the actual protection bandwidth is greater than the basic protection bandwidth but less than the burstable protection bandwidth, pay-as-you-go bills are generated. |
Clean bandwidth | 100 Mbit/s | 100 Mbit/s | Subscription | The maximum bandwidth that the instance uses to manage service traffic if no attacks occur. You can increase the specification. |
95th percentile burstable clean bandwidth | Disabled | Disabled | Pay-as-you-go | The burstable clean bandwidth of the instance. If the actual bandwidth is greater than the clean bandwidth but less than the 95th percentile burstable clean bandwidth, pay-as-you-go bills are generated. |
Clean queries per second (QPS) | 3,000 | 3,000 | Subscription | The maximum number of HTTP and HTTPS requests that the instance can concurrently process per second if no attacks occur. You can increase the specification. Note We recommend that you specify the clean QPS based on your business requirements. If the actual QPS of your service exceeds the clean QPS that you specify, packet loss may occur and some logs may fail to be recorded. |
95th percentile burstable QPS | Disabled | Disabled | Pay-as-you-go | The burstable QPS of the instance. If the actual QPS is greater than the clean QPS but less than the 95th percentile burstable QPS, pay-as-you-go bills are generated. |
Function plan | Standard | Standard | Subscription | Anti-DDoS Proxy (Chinese Mainland) supports Standard and Enhanced function plans. The Enhanced function plan supports advanced service access capabilities and DDoS mitigation capabilities. For more information, see Differences between the Standard and Enhanced function plans. |
Number of domain names that can be protected | 50 | 50 | Subscription | The number of HTTP and HTTPS domain names that the instance can protect. You can increase the specification. For every 10 additional domain names, the total number of second-level domain names that are supported is increased by 1. For example, if the number of domain names that can be protected by an instance is 50, the domain names can belong to up to 5 second-level domain names. |
Number of ports | 50 | 50 | Subscription | The number of TCP and UDP ports that can be protected by the instance. You can increase the specification. |
Unit prices of the specifications that can be increased
Basic protection bandwidth
The actual unit prices on the buy page shall prevail.
Clean bandwidth
Clean bandwidth (Mbit/s)
Unit price (USD per Mbit/s-month)
0 < Clean bandwidth ≤ 100
0
100 < Clean bandwidth ≤ 600
15
600 < Clean bandwidth ≤ 200,000
11
For example, you specify 500 Mbit/s for the clean bandwidth when you purchase an instance. The fee for the specified clean bandwidth per month is calculated based on the following formula:
(100 - 0) × 0 + (500 - 100) × 15 = USD 6,000
Clean QPS
Clean QPS
Unit price (USD per QPS-month)
0 < QPS ≤ 3,000
0
3,000 < QPS ≤ 5,000
1.5
5,000 < QPS ≤ 8,000
1.425
8,000 < QPS ≤ 10,000
1.35
10,000 < QPS ≤ 50,000
1.275
50,000 < QPS ≤ 100,000
1.05
100,000 < QPS ≤ 300,000
0.9
For example, you specify 6,000 for the clean QPS when you purchase an instance. The fee for the specified clean QPS per month is calculated based on the following formula:
(3,000 - 0) × 0 + (5,000 - 3,000) × 1.5 + (6,000 - 5,000) × 1.425 = USD 4,425
Function plan
Enhanced function plan: USD 1,200 per month
Number of domain names that can be protected
Number of domain names
Unit price for the Standard function plan (USD per domain name-month)
Unit price for the Enhanced function plan (USD per domain name-month)
0 < Number of domain names ≤ 50
0
0
50 < Number of domain names ≤ 200
4.5
7.5
200 < Number of domain names ≤ 600
4.2
7
600 < Number of domain names ≤ 2,000
3.9
6.5
2,000 < Number of domain names ≤ 20,000
2.7
4.5
For example, you purchase an instance that uses the Standard function plan and set the number of domain names that can be protected to 600. The fee for the number of domain names that can be protected per month is calculated based on the following formula:
(50 - 0) × 0 + (200 - 50) × 4.5 + (600 - 200) × 4.2 = USD 2,355
Number of ports
Number of ports
Unit price (USD per port-month)
0 < Number of ports ≤ 50
0
50 < Number of ports ≤ 150
7.5
150 < Number of ports ≤ 400
6.75
400 < Number of ports ≤ 1,000
6
1,000 < Number of ports ≤ 1,500
4.5
For example, you purchase an instance and set the number of ports to 200. The fee for the number of ports per month is calculated based on the following formula:
(50 - 0) × 0 + (150 - 50) × 7.50 + (200 - 150) × 6.75 = USD 1,087.5
Billing rules for pay-as-you-go features
After you enable a pay-as-you-go feature, bills are generated only after the usage of the feature meets the bill generation conditions.
Feature | Billing rule | Description |
Burstable protection bandwidth | The feature is billed on a daily basis. | The feature is available only for an instance of the Profession mitigation plan. The burstable protection bandwidth determines the maximum capability of the instance to defend against DDoS attacks. If the bandwidth of DDoS attacks is greater than the basic protection bandwidth, burstable protection is triggered to mitigate the DDoS attacks. You are charged for the usage of burstable protection. For more information, see Billing of the burstable protection bandwidth feature. |
95th percentile burstable clean bandwidth | Both the daily 95th percentile metering method and the monthly 95th percentile metering method are supported. | The burstable clean bandwidth feature provides additional clean bandwidth for your instance. If spikes occur in your service traffic and the traffic exceeds the clean bandwidth of the instance during peak hours, the burstable clean bandwidth feature can be used to prevent access to your service from being limited. For more information, see Billing of the burstable clean bandwidth feature. |
95th percentile burstable QPS | Both the daily 95th percentile metering method and the monthly 95th percentile metering method are supported. | The burstable QPS feature provides additional QPS for your instance. If spikes occur in your service QPS and the QPS exceeds the clean QPS of the instance during peak hours, the burstable QPS feature can be used to prevent access to your service from being limited. For more information, see Billing of the burstable QPS feature. |
Instance expiration
Time period | Service traffic forwarding | Instance configuration |
Within 6 calendar days after the expiration date | The blackhole filtering threshold is 5 Gbit/s for the instance. If forwarded service traffic and attack traffic exceed 5 Gbit/s, blackhole filtering is triggered. | Instance configurations are retained. |
From Day 7 after the expiration date to Day 29 after the expiration date | The instance no longer forwards service traffic until the instance is renewed. Warning If you no longer require Anti-DDoS Proxy (Chinese Mainland) to protect your service, you must switch service traffic from the Anti-DDoS Proxy (Chinese Mainland) instance to the origin server before Day 7 after the expiration date. Otherwise, access to your service may be adversely affected. If you want to switch service traffic, make sure that the domain name of your website does not point to the CNAME assigned by Anti-DDoS Proxy. You must also make sure that your non-website service does not use an exclusive IP address of the instance. | Instance configurations are retained. |
From Day 30 after the expiration date | The instance no longer forwards service traffic. | The instance is released. Warning One month after all Anti-DDoS Proxy instances associated with your Alibaba Cloud account are released, the port forwarding rules and domain names added to Anti-DDoS Proxy are automatically deleted. If you have multiple Anti-DDoS Proxy instances, the one-month countdown starts when the last instance is released. |
Overdue payments
If the balance of your Alibaba Cloud account, including cash, vouchers, and coupons, is insufficient to settle an outstanding payment, your account has an overdue payment.
If your Alibaba Cloud account has an overdue payment, you must top up your account at the earliest opportunity to ensure that the balance of your account is sufficient. Otherwise, your pay-as-you-go service may become unavailable.
Renewal
You can manually renew an instance. You can also enable auto-renewal for the instance. For more information, see Renew an instance.
Refunds
After you purchase an instance, you cannot request a refund for the instance.
Bill query
You can query bills in the Expenses and Costs console. For more information, see Overview of Monthly Bill.