This topic describes the billing rules of the burstable protection bandwidth feature of Anti-DDoS Proxy instances.
What is the burstable protection bandwidth feature?
The burstable protection bandwidth determines the maximum capability of your instance to defend against DDoS attacks. You must specify a burstable protection bandwidth that is greater than the basic protection bandwidth. If you specify the same value for the burstable protection bandwidth and basic protection bandwidth, your instance does not provide burstable protection and no additional pay-as-you-go fees are generated.
Instance type that supports the burstable protection bandwidth feature
Anti-DDoS Proxy (Chinese Mainland) instances of the Profession mitigation plan
How you are charged
Burstable protection is triggered only if the peak inbound traffic of the IP address of an attacked asset is greater than the basic protection bandwidth but less than the burstable protection bandwidth. You are charged for burstable protection.
If the peak inbound traffic is less than the basic protection bandwidth or greater than the burstable protection bandwidth, burstable protection is not triggered. You are not charged for burstable protection.
If the peak inbound traffic is greater than the burstable protection bandwidth of your instance, the instance cannot mitigate the attacks and blackhole filtering is triggered for the IP address of the attacked asset. For more information, see Blackhole filtering policy of Alibaba Cloud.
Prices of burstable protection
When burstable protection is triggered, you can obtain the peak inbound traffic and calculate the difference between the peak inbound traffic and the basic protection bandwidth. Then, view the fee based on the pricing tier.
If burstable protection is triggered multiple times in a calender day, the day's bill is calculated based on the maxmium peak inbound traffic independent of the number of the attacks.
Pricing tier | Price of burstable protection (USD per day) |
(0 Gbps,5 Gbps] | 120 |
(5 Gbps,10 Gbps] | 180 |
(10 Gbps,20 Gbps] | 330 |
(20 Gbps,30 Gbps] | 540 |
(30 Gbps,40 Gbps] | 730 |
(40 Gbps,50 Gbps] | 960 |
(50 Gbps,60 Gbps] | 1,170 |
(60 Gbps,70 Gbps] | 1,380 |
(70 Gbps,80 Gbps] | 1,590 |
(80 Gbps,100 Gbps] | 1,770 |
(100 Gbps,150 Gbps] | 2,190 |
(150 Gbps,200 Gbps] | 3,240 |
(200 Gbps,300 Gbps] | 4,200 |
(300 Gbps,400 Gbps] | 6,000 |
(400 Gbps,500 Gbps] | 7,510 |
(500 Gbps,600 Gbps] | 9,010 |
(600 Gbps,700 Gbps] | 10,510 |
(700 Gbps,800 Gbps] | 12,010 |
(800 Gbps,900 Gbps] | 13,510 |
(900 Gbps,1000 Gbps] | 15,010 |
(1000 Gbps,1100 Gbps] | 16,510 |
(1100 Gbps,1200 Gbps] | 18,010 |
(1200 Gbps,1300 Gbps] | 19,510 |
(1300 Gbps,1400 Gbps] | 21,010 |
(1400 Gbps,1500 Gbps] | 22,520 |
Billing cycle
The bill for burstable protection on a day is generated from 08:00 to 09:00 on the following day.
Billing examples
For example, the basic protection bandwidth of your instance is 30 Gbit/s and the burstable protection bandwidth is 100 Gbit/s. Four DDoS attacks are launched against the instance on the same day. The peak inbound traffic is 20 Gbit/s, 80 Gbit/s, 40 Gbit/s, and 120 Gbit/s.
The peak inbound traffic of the first DDoS attack is 20 Gbit/s, which is less than the basic protection bandwidth. In this case, burstable protection is not triggered and no fees are generated.
The peak inbound traffic of the second DDoS attack is 80 Gbit/s, which is greater than the basic protection bandwidth but less than the burstable protection bandwidth. In this case, burstable protection is triggered and fees are generated.
The peak inbound traffic of the third DDoS attack is 40 Gbit/s, which is greater than the basic protection bandwidth but less than the burstable protection bandwidth. In this case, burstable protection is triggered and fees are generated.
The peak inbound traffic of the fourth DDoS attack is 120 Gbit/s, which is greater than the burstable protection bandwidth. In this case, blackhole filtering is triggered for the IP address of the attacked asset because the instance cannot mitigate the attack. Burstable protection is not triggered, and no fees are generated.
In this example, you are charged for burstable protection based on the peak inbound traffic, which is 80 Gbit/s. The difference between the peak inbound traffic and basic protection bandwidth is 50 Gbit/s, which falls in the "40 Gbit/s < Bandwidth difference ≤ 50 Gbit/s" pricing tier. The fee that is generated for burstable protection on the day is USD 960.