Compare features in different plans - Edge Security Acceleration

Edge Security Acceleration (ESA) offers Basic, Standard, Advanced, and Enterprise plans. This topic describes the features supported by different plans.

Category	Item	Basic	Standard	Advanced	Enterprise
Service scope	POPs in the Chinese mainland	×	×	×	√
Service scope	POPs outside the Chinese mainland	√	√	√	√
DNS setup	NS setup	√	√	√	√
	CNAME setup	√	√	√	√
	Subdomain setup	×	×	×	√
DNS management	7 types of DNS records	√	√	√	√
	Custom nameserver names	×	×	×	√
	DNS records	100	125	200	200+
Caching	Edge caching	√	√	√	√
	Browser caching	√	√	√	√
	POP/Browser cache TTL	2 hours	1 hour	1 second	1 second
	Query strings	√	√	√	√
	Query string sorting	√	√	√	√
Tiered cache	Smart tiered cache	√	√	√	√
Tiered cache	Regional tiered cache	×	×	×	√
Network	IPV6	√	√	√	√
	Websocket	√	√	√	√
	gRPC	√	√	√	√
	Including the client IP address in the request header	×	×	×	√
	Including the geographical location of the client IP address in the request header	√	√	√	√
SSL/TLS	Certificate availability testing	√	√	√	√
	Force redirect to HTTPS	√	√	√	√
	TLS cipher suite and encryption protocols	√	√	√	√
	OCSP STAPLING	√	√	√	√
	HTST	√	√	√	√
	Free certificates	5	10	20	50
	Custom certificates	5	10	20	50
Protocol optimization	HTTP2	√	√	√	√
Protocol optimization	HTTP3	√	√	√	√
Content optimization	Image editing	√	√	√	√
	Gzip	√	√	√	√
	Brotli	√	√	√	√
Cache rules	Edge caching	10	25	50	125
	Browser caching
	HTTP status code caching
	Development mode (bypass cache)
	Custom cache keys
	POP/Browser cache TTL	2 hours	1 hour	1 second	1 second
Configuration rules	Range requests	10	25	50	125
	Page optimization (auto minify)
	SSL/TLS encryption
Transform rules	Managed transforms - Adding the "ali-real-client-ip" header	×	×	×	√
	Managed transforms - Adding the visitor location header	10	25	50	125
	Rewrite URLs
	HTTP request headers
	HTTP response headers
Redirect rules	URL redirect rules	10	25	50	125
Compression rules	Gzip compression	1	2	5	10
Compression rules	Brotli compression	1	2	5	10
Origin rules	Rules	10	25	50	125
	Origin port	√	√	√	√
	Origin host	×	×	×	√
	Origin protocol	×	×	×	√
	Origin SNI	×	×	×	√
	DNS records	×	×	×	√
Purge cache	Purge by URL	5000	10,000	50,000	500,000
	Purge all cache	50	80	125	200
	Purge by hostname	×	×	×	500
	Purge by directory	×	×	×	300
	Purge by URL with parameters ignored	×	×	×	500
	Purge by tag	×	×	×	30,000
Prefetch cache	Prefetch cache	×	×	×	500,000
Traffic	Dynamic content acceleration	Pay-as-you-go	Pay-as-you-go	Pay-as-you-go	Pay-as-you-go
Caching	Cache reserve	Pay-as-you-go	Pay-as-you-go	Pay-as-you-go	Pay-as-you-go
Traffic	Waiting Room	×	×	√	√
Tiered cache	Regional tiered cache	×	×	×	√
Rules engine	Conditions in a rule	3	5	10	20
Rules engine	Operators - Regular expressions	×	×	×	√
DDoS	Basic DDoS mitigation	√	√	√	√
	Global best-effort DDoS mitigation at the Tbit/s level	×	×	×	√
	Smart HTTP flood protection	×	×	×	√
	Global mitigation policies	×	×	×	√
	DDoS alerts	×	×	×	√
	TCP/UDP acceleration (with DDoS mitigation)	×	×	×	√
	DDoS mitigation sessions	×	×	×	3 by default
WAF	Custom rules	5	20	100	200
	Whitelist rules	2	3	5	10
	Managed rules	×	√	√	√
	Scan protection	×	5	10	20
	Bot management rules	×	×	×	10
	Rate limiting rules	×	2	5	10
	Rate limiting - Applying to cache	×	√	√	√
	Rate limiting - Statistical duration	10 seconds	10 seconds 1 minute	10 seconds 1 minute 2 minutes 5 minutes 10 minutes	5 seconds 10 seconds 1 minute 2 minutes 5 minutes 10 minutes 1 hour
	Rate limiting - Action duration	10 seconds 1 hour	10 seconds 1 minute 1 hour	10 seconds 1 minute 2 minutes 5 minutes 1 hour	10 seconds 1 minute 2 minutes 5 minutes 1 hour 1 day
	Rate limiting - Characteristics	http.host ip.src	http.host ip.src http.request.headers http.request.uri.query http.request.cookies	http.host ip.src http.request.headers http.request.uri.query http.request.cookies http.request.uri http.request.uri.path ip.geoip.asnum	http.host ip.src http.request.headers http.request.uri.query http.request.cookies http.request.uri http.request.uri.path ip.geoip.asnum http.request.uri.args http.request.version http.user_agent http.x_forwarded_for http.request.body.mime
	Match fields (custom rules, rate limiting, scan protection, and bot management rules)	ip.src http.host	ip.src http.host http.request.uri http.request.uri.path http.request.uri.query http.request.uri.args	http.cookie http.request.cookies ip.geoip.country ip.geoip.continent http.host ip.src http.referer http.request.method http.request.scheme http.request.uri http.request.uri.path http.request.uri.query http.request.uri.args http.request.version http.user_agent http.x_forwarded_for http.request.body.mime http.request.headers	ip.geoip.asnum http.cookie http.request.cookies ip.geoip.country ip.geoip.continent http.host ip.src http.referer http.request.method http.request.scheme http.request.uri http.request.uri.path http.request.uri.query http.request.uri.args http.request.version http.user_agent http.x_forwarded_for http.request.body.mime http.request.body.raw http.request.body.form http.request.headers
	JavaScript validation	√	√	√	√
	Slider CAPTCHA	×	√	√	√
	Scenario-specific policies	10 rules for each Alibaba Cloud account by default
	Custom pages
	Custom rule groups
	Lists (such as a group of IP addresses and CIDR blocks)
Edge computing	Edge Routine	Pay-as-you-go			√
	Edge Container	×	×	×	√
	Edge Routine	5	10	20	50
	Edge KV	Pay-as-you-go			√
TCP/UDP acceleration	Acceleration for TCP/UDP-based businesses	×	×	×	√
TCP/UDP acceleration	Records for TCP/UDP Acceleration websites	×	×	×	20
ActionTrail	ActionTrail	√	√	√	√
Logging	Delivery of real-time logs	×	×	×	5 delivery tasks per log type
	Instant logs	×	×	√	√
	Standard logs	√	√	√	√
Traffic monitoring	Filter conditions for traffic analytics	×	Country/Region, Host, Path, Query String, User Agent, Referer, Client IP, Client ASN, HTTP Version, HTTP Method, Cache Status, Device Type, Edge Status Code, Origin Status Code, Content Type, Browser Type, OS Type, X-Requested-With headers
	Query time range	7	31	62	185
	DNS analytics	√	√	√	√
Security analytics	Monitoring and analytics of WAF protection events	√	√	√	√
	Monitoring and analytics of DDoS mitigation events	×	×	×	√
	Attack details	×	×	×	√
Monitoring for edge computing	Edge Routine monitoring	√	√	√	√
Monitoring for edge computing	Edge KV monitoring	√	√	√	√
Services	Alibaba Cloud after-sales ticket support	√	√	√	√
Services	ESA experts service	×	×	×	√
Tools	IP geolocation	√	√	√	√
Account management	RAM user management	√	√	√	√
API management	OpenAPI	√	√	√	√