All Products
Search
Document Center

Anti-DDoS:Billing of Anti-DDoS Proxy (Chinese Mainland)

Last Updated:Sep 05, 2024

The fees of an Anti-DDoS Proxy (Chinese Mainland) instance consist of the subscription fee of the instance and the pay-as-you-go fee of the features that you enable for the instance. This topic describes the billable items, expiration, and overdue payments of Anti-DDoS Proxy (Chinese Mainland) instances.

Instance types

Anti-DDoS Proxy (Chinese Mainland) provides two types of instances: Anti-DDoS Proxy (Chinese Mainland) instances of the Profession mitigation plan and Anti-DDoS Proxy (Chinese Mainland) instances of the Advanced mitigation plan. You can purchase an Anti-DDoS Proxy (Chinese Mainland) instance of the Profession mitigation plan on the buy page. To purchase an Anti-DDoS Proxy (Chinese Mainland) instance of the Advanced mitigation plan, contact your account manager.

  • Profession mitigation plan: The mitigation capabilities are based on the basic protection bandwidth and burstable protection bandwidth that you specify when you purchase an instance.

  • Advanced mitigation plan: The basic protection bandwidth is 5 Gbit/s, and 2 advanced mitigation sessions are provided each calendar month.

    Note
    • Advanced mitigation leverages the anti-DDoS scrubbing centers of Alibaba Cloud in the current region to protect your services against DDoS attacks.

    • If the advanced mitigation sessions that are provided per calendar month are exhausted, you can purchase global advanced mitigation sessions. For more information, see Billing of advanced mitigation sessions.

Billing overview

Note

The actual prices on the Anti-DDoS Proxy (Chinese Mainland) buy page shall prevail.

Unit prices of the two types of instances that use the minimum specifications

  • Instance of the Profession mitigation plan: USD 3,120 per month

  • Instance of the Advanced mitigation plan: USD 2,880 per month

The following table lists the minimum specifications for the two types of instances. The minimum specifications indicate that the smallest values are used for all subscription billable items and no pay-as-you-go features are enabled.

Specification

Instance of the Profession mitigation plan

Instance of the Advanced mitigation plan

Billing method

Description

Basic protection bandwidth

30 Gbit/s

5 Gbit/s

Subscription

The basic protection capability of the instance. You can increase the specification only for instances of the Profession mitigation plan.

Burstable protection bandwidth

30 Gbit/s

Not supported

Pay-as-you-go

The burstable protection bandwidth of the instance. If the actual protection bandwidth is greater than the basic protection bandwidth but less than the burstable protection bandwidth, pay-as-you-go bills are generated.

Clean bandwidth

100 Mbit/s

100 Mbit/s

Subscription

The maximum bandwidth that the instance uses to manage service traffic if no attacks occur. You can increase the specification.

95th percentile burstable clean bandwidth

Disabled

Disabled

Pay-as-you-go

The burstable clean bandwidth of the instance. If the actual bandwidth is greater than the clean bandwidth but less than the 95th percentile burstable clean bandwidth, pay-as-you-go bills are generated.

Clean queries per second (QPS)

3,000

3,000

Subscription

The maximum number of HTTP and HTTPS requests that the instance can concurrently process per second if no attacks occur. You can increase the specification.

Note

We recommend that you specify the clean QPS based on your business requirements. If the actual QPS of your service exceeds the clean QPS that you specify, packet loss may occur and some logs may fail to be recorded.

95th percentile burstable QPS

Disabled

Disabled

Pay-as-you-go

The burstable QPS of the instance. If the actual QPS is greater than the clean QPS but less than the 95th percentile burstable QPS, pay-as-you-go bills are generated.

Function plan

Standard

Standard

Subscription

Anti-DDoS Proxy (Chinese Mainland) supports Standard and Enhanced function plans. The Enhanced function plan supports advanced service access capabilities and DDoS mitigation capabilities.

For more information, see Differences between the Standard and Enhanced function plans.

Number of domain names that can be protected

50

50

Subscription

The number of HTTP and HTTPS domain names that the instance can protect. You can increase the specification.

For every 10 additional domain names, the total number of second-level domain names that are supported is increased by 1. For example, if the number of domain names that can be protected by an instance is 50, the domain names can belong to up to 5 second-level domain names.

Number of ports

50

50

Subscription

The number of TCP and UDP ports that can be protected by the instance. You can increase the specification.

Unit prices of the specifications that can be increased

  • Basic protection bandwidth

    The actual unit prices on the buy page shall prevail.

  • Clean bandwidth

    Clean bandwidth (Mbit/s)

    Unit price (USD per Mbit/s-month)

    0 < Clean bandwidth ≤ 100

    0

    100 < Clean bandwidth ≤ 600

    15

    600 < Clean bandwidth ≤ 200,000

    11

    For example, you specify 500 Mbit/s for the clean bandwidth when you purchase an instance. The fee for the specified clean bandwidth per month is calculated based on the following formula:

    (100 - 0) × 0 + (500 - 100) × 15 = USD 6,000

  • Clean QPS

    Clean QPS

    Unit price (USD per QPS-month)

    0 < QPS ≤ 3,000

    0

    3,000 < QPS ≤ 5,000

    1.5

    5,000 < QPS ≤ 8,000

    1.425

    8,000 < QPS ≤ 10,000

    1.35

    10,000 < QPS ≤ 50,000

    1.275

    50,000 < QPS ≤ 100,000

    1.05

    100,000 < QPS ≤ 300,000

    0.9

    For example, you specify 6,000 for the clean QPS when you purchase an instance. The fee for the specified clean QPS per month is calculated based on the following formula:

    (3,000 - 0) × 0 + (5,000 - 3,000) × 1.5 + (6,000 - 5,000) × 1.425 = USD 4,425

  • Function plan

    Enhanced function plan: USD 1,200 per month

  • Number of domain names that can be protected

    Number of domain names

    Unit price for the Standard function plan (USD per domain name-month)

    Unit price for the Enhanced function plan (USD per domain name-month)

    0 < Number of domain names ≤ 50

    0

    0

    50 < Number of domain names ≤ 200

    4.5

    7.5

    200 < Number of domain names ≤ 600

    4.2

    7

    600 < Number of domain names ≤ 2,000

    3.9

    6.5

    2,000 < Number of domain names ≤ 20,000

    2.7

    4.5

    For example, you purchase an instance that uses the Standard function plan and set the number of domain names that can be protected to 600. The fee for the number of domain names that can be protected per month is calculated based on the following formula:

    (50 - 0) × 0 + (200 - 50) × 4.5 + (600 - 200) × 4.2 = USD 2,355

  • Number of ports

    Number of ports

    Unit price (USD per port-month)

    0 < Number of ports ≤ 50

    0

    50 < Number of ports ≤ 150

    7.5

    150 < Number of ports ≤ 400

    6.75

    400 < Number of ports ≤ 1,000

    6

    1,000 < Number of ports ≤ 1,500

    4.5

    For example, you purchase an instance and set the number of ports to 200. The fee for the number of ports per month is calculated based on the following formula:

    (50 - 0) × 0 + (150 - 50) × 7.50 + (200 - 150) × 6.75 = USD 1,087.5

Billing rules for pay-as-you-go features

After you enable a pay-as-you-go feature, bills are generated only after the usage of the feature meets the bill generation conditions.

Feature

Billing rule

Description

Burstable protection bandwidth

The feature is billed on a daily basis.

The feature is available only for an instance of the Profession mitigation plan. The burstable protection bandwidth determines the maximum capability of the instance to defend against DDoS attacks. If the bandwidth of DDoS attacks is greater than the basic protection bandwidth, burstable protection is triggered to mitigate the DDoS attacks. You are charged for the usage of burstable protection. For more information, see Billing of the burstable protection bandwidth feature.

95th percentile burstable clean bandwidth

Both the daily 95th percentile metering method and the monthly 95th percentile metering method are supported.

The burstable clean bandwidth feature provides additional clean bandwidth for your instance. If spikes occur in your service traffic and the traffic exceeds the clean bandwidth of the instance during peak hours, the burstable clean bandwidth feature can be used to prevent access to your service from being limited. For more information, see Billing of the burstable clean bandwidth feature.

95th percentile burstable QPS

Both the daily 95th percentile metering method and the monthly 95th percentile metering method are supported.

The burstable QPS feature provides additional QPS for your instance. If spikes occur in your service QPS and the QPS exceeds the clean QPS of the instance during peak hours, the burstable QPS feature can be used to prevent access to your service from being limited. For more information, see Billing of the burstable QPS feature.

Instance expiration

image

Time period

Service traffic forwarding

Instance configuration

Within 6 calendar days after the expiration date

The blackhole filtering threshold is 5 Gbit/s for the instance. If forwarded service traffic and attack traffic exceed 5 Gbit/s, blackhole filtering is triggered.

Instance configurations are retained.

From Day 7 after the expiration date to Day 29 after the expiration date

The instance no longer forwards service traffic until the instance is renewed.

Warning

If you no longer require Anti-DDoS Proxy (Chinese Mainland) to protect your service, you must switch service traffic from the Anti-DDoS Proxy (Chinese Mainland) instance to the origin server before Day 7 after the expiration date. Otherwise, access to your service may be adversely affected. If you want to switch service traffic, make sure that the domain name of your website does not point to the CNAME assigned by Anti-DDoS Proxy. You must also make sure that your non-website service does not use an exclusive IP address of the instance.

Instance configurations are retained.

From Day 30 after the expiration date

The instance no longer forwards service traffic.

The instance is released.

Warning

One month after all Anti-DDoS Proxy instances associated with your Alibaba Cloud account are released, the port forwarding rules and domain names added to Anti-DDoS Proxy are automatically deleted. If you have multiple Anti-DDoS Proxy instances, the one-month countdown starts when the last instance is released.

Overdue payments

  • If the balance of your Alibaba Cloud account, including cash, vouchers, and coupons, is insufficient to settle an outstanding payment, your account has an overdue payment.

  • If your Alibaba Cloud account has an overdue payment, you must top up your account at the earliest opportunity to ensure that the balance of your account is sufficient. Otherwise, your pay-as-you-go service may become unavailable.

Renewal

You can manually renew an instance. You can also enable auto-renewal for the instance. For more information, see Renew an instance.

Refunds

After you purchase an instance, you cannot request a refund for the instance.

Bill query

You can query bills in the Expenses and Costs console. For more information, see Overview of Monthly Bill.