Edge Security Acceleration (ESA) provides Entrance, Pro, Premium, and Enterprise plans to serve various business requirements. You can select a plan that fits you best based on the feature details in each plan.
Suggestions on plans
Reference item | Entrance | Pro | Premium | Enterprise |
Intended customers | Personal websites or cost-sensitive small enterprises | Small and medium-sized enterprises | Large and medium-sized enterprises | Large enterprises or customers who require customized solutions |
Price | USD 0/month | USD 15/month | USD 249/month | Customizable |
SLA guaranteed | × |
|
|
|
Free acceleration traffic quota in the plan (pay-as-you-go billing for excess usage) | None | 500 GB | 1,500 GB | Customizable |
Service location | Outside the Chinese mainland | Outside the Chinese mainland | Global | Global |
Offerings |
| Everything in Entrance plans, plus:
| Everything in Pro plans, plus:
| Everything in Premium plans, plus:
|
Feature comparison between plans
Website management
Comparison of website management features
Feature | Entrance (USD 0/month) | Pro (USD 15/month) | Premium (USD 249/month) | Enterprise (Customizable) |
|
|
|
| |
|
|
|
| |
× | × | × |
| |
Wildcard domain names supported | 1 | 2 | 3 | Customizable |
Websites allowed | 1 | 1 | 1 | Customizable |
× | × | × |
| |
|
|
|
| |
3 acceleration scenarios |
|
|
|
|
Comparison of DNS configuration features
Feature | Entrance (USD 0/month) | Pro (USD 15/month) | Premium (USD 249/month) | Enterprise (Customizable) |
DNS records per website | 100 | 125 | 200 | 200 |
7 types of DNS records |
|
|
|
|
Custom nameservers | × | × | × |
|
Comparison of SSL features
Feature | Entrance (USD 0/month) | Pro (USD 15/month) | Premium (USD 249/month) | Enterprise (Customizable) |
Certificate availability testing |
|
|
|
|
Force redirect to HTTPS |
|
|
|
|
TLS cipher suites and encryption protocols |
|
|
|
|
OCSP STAPLING |
|
|
|
|
HSTS |
|
|
|
|
Authenticated origin pulls |
|
|
|
|
Free certificates | 10 | 30 | 50 | 100 |
Custom certificates | 5 | 10 | 20 | 50 |
Free wildcard-domain certificates | × | × | × |
|
Caching and rules
Comparison of caching features
Category | Feature | Entrance (USD 0/month) | Pro (USD 15/month) | Premium (USD 249/month) | Enterprise (Customizable) |
Acceleration of static content delivery | Global distribution of static content |
|
|
|
|
Cache settings | Edge cache TTL |
|
|
|
|
Browser cache TTL |
|
|
|
| |
Minimum edge/browser cache TTL | 2 hours | 1 second | 1 second | 1 second | |
Query strings |
|
|
|
| |
Query string sorting |
|
|
|
| |
Tiered cache | Edge Tiered Cache |
|
|
|
|
Edge Tiered Cache + Regional Tiered Cache |
|
|
|
| |
Edge Tiered Cache + Smart Tiered Cache |
|
|
|
| |
All Cache Tiers | × | × | × | Purchasable | |
Cache reserve | Cache reserve | × | × | × | Purchasable |
Purge cache | Purge by URL | 1,000 | 50,000 | 100,000 | 500,000 |
Purge all cache | 5 | 80 | 125 | 200 | |
Purge by directory | × | 20 | 50 | 2,000 | |
Purge by URL with parameters ignored | × | × | 50 | 2,000 | |
Purge by cache tag | × | × | × | 2,000 | |
Purge by hostname | × | × | × | 2,000 | |
Prefetch cache | Instant prefetch |
|
|
|
|
Scheduled prefetch | × |
|
|
| |
Prefetch cache | 1,000 | 50,000 | 100,000 | 500,000 |
Comparison of rules-related features
Category | Feature | Entrance (USD 0/month) | Pro (USD 15/month) | Premium (USD 249/month) | Enterprise (Customizable) |
Rules engine | Conditions in a rule | 3 | 5 | 10 | 20 |
Operators - Regular expressions | × | × |
|
| |
Cache rules | Edge cache TTL | 10 | 25 | 50 | 125 |
Browser cache TTL | |||||
HTTP status code TTL | |||||
Development mode (bypass cache) | |||||
Custom cache keys | |||||
Minimum edge/browser cache TTL | 2 hours | 1 second | 1 second | 1 second | |
Caching on custom ports | × | × | × |
| |
Transform rules | Managed transforms - Adding the "ali-real-client-ip" header | × | × | × |
|
Managed transforms - Adding the visitor location header | 10 | 25 | 50 | 125 | |
Rewrite URLs | |||||
HTTP request headers | |||||
HTTP response headers | |||||
Redirect rules | URL redirect rules | 10 | 25 | 50 | 125 |
Compression rules | Gzip compression | 1 | 2 | 5 | 10 |
Brotli compression | |||||
Origin rules | Rules | 10 | 25 | 50 | 125 |
Origin port |
|
|
|
| |
Origin host |
|
|
|
| |
Origin protocol |
|
|
|
| |
Origin SNI |
|
|
|
| |
DNS records | × | × | × |
| |
SSL/TLS rules | SSL/TLS rules | 10 | 25 | 50 | 125 |
Security
Comparison of DDoS features
Feature | Entrance (USD 0/month) | Pro (USD 15/month) | Premium (USD 249/month) | Enterprise (Customizable) |
Basic DDoS protection |
|
|
|
|
Anti-DDoS instances | × | × | × | Purchasable |
HTTP DDoS attack protection | × | × | × |
|
Deep learning and protection | × | × | × |
|
Global protection policies | × | × | × |
|
Comparison of WAF features
Feature | Entrance (USD 0/month) | Pro (USD 15/month) | Premium (USD 249/month) | Enterprise (Customizable) |
Custom rules | 3 | 10 | 50 | 100 |
Rate limiting rules | × | 2 | 5 | 10 |
Rate limiting - Statistical duration | × | 10 seconds 1 minute 15 minutes | 10 seconds 1 minute 2 minutes 5 minutes 10 minutes 15 minutes | 5 seconds 10 seconds 1 minute 2 minutes 5 minutes 10 minutes 15 minutes 1 hour |
Rate limiting - Action duration | × | 10 seconds 1 minute 1 hour | 10 seconds 1 minute 2 minutes 5 minutes 1 hour | 10 seconds 1 minute 2 minutes 5 minutes 1 hour 1 day |
Rate limiting - Characteristics | × | Hostname Client IP Header URI Query String Cookie Value Of | Hostname Client IP Header URI Query String Cookie Value Of URI URI Path ASN | Hostname Client IP Header URI Query String Cookie Value Of URI URI Path ASN URI Query String Parameter HTTP Version User Agent X-Forwarded-For MIME Type |
Rate limiting - Applying to cache | × |
|
|
|
Whitelist rules | 2 | 3 | 5 | 10 |
Managed rules | × |
|
|
|
Scan protection rules | × | 5 | 10 | 20 |
Match fields (custom rules, rate limiting, scan protection, and bot management rules) | Client IP Hostname ASN Country/Region Referer User Agent URI | Client IP Hostname URI URI Path URI Query String URI Query String Parameter ASN Country/Region Referer User Agent | Cookie Cookie Value Of Country/Region Continent Client IP Hostname Referer Request method SSL/HTTPS URI URI Path URI Query String URI Query String Parameter HTTP Version User Agent X-Forwarded-For MIME Type Header ASN | ASN Cookie Cookie Value Of Country/Region Continent Client IP Hostname Referer Request method SSL/HTTPS URI URI Path
URI Query String URI Query String Parameter HTTP Version User Agent X-Forwarded-For MIME Type Body Body Arguments Header |
JavaScript challenge |
|
|
|
|
Slider CAPTCHA | × |
|
|
|
Strict slider CAPTCHA | × | × |
|
|
Scenario-specific policies | Account-level quota. By default, the maximum number of rules is 10. | |||
Custom error pages | ||||
Custom rule groups | ||||
Lists (such as a group of IP addresses and CIDR blocks) | ||||
DDoS alerts | × | × | × |
|
TCP/UDP proxy (with DDoS mitigation) | × | × | × |
|
Comparison of bot-related features
Feature | Entrance (USD 0/month) | Pro (USD 15/month) | Premium (USD 249/month) | Enterprise (Customizable) |
|
|
|
| |
Advanced bot management | × | × | × | Purchasable |
Advanced bot management (SDKs available) | × | × | × | Purchasable |
Comparison of features related to origin protection
Feature | Entrance (USD 0/month) | Pro (USD 15/month) | Premium (USD 249/month) | Enterprise |
Origin protection | × | × |
|
|
Data analytics and logs
Comparison of data analytics features
Category | Feature | Entrance (USD 0/month) | Pro (USD 15/month) | Premium (USD 249/month) | Enterprise (Customizable) |
Data analytics | DNS analytics |
|
|
|
|
Cache analytics | × |
|
|
| |
Filter conditions for traffic analytics | Country/Region, Host, Path, Query String, User Agent, Referer, Client IP, Client ASN, HTTP Version, HTTP Method, Cache Status, Device Type, Edge Status Code, Origin Status Code, Content Type, Browser Type, OS Type, X-Requested-With Header | ||||
Maximum query time range | 31 days | 62 days | 92 days | 185 days | |
Security analytics | Security analytics |
|
|
| × |
Security analytics Pro | × | × | × |
| |
DDoS analytics | × | × | × |
| |
Attack details | × | × | × |
| |
Monitoring for edge computing | Edge Routine monitoring |
|
|
|
|
Edge KV monitoring |
|
|
|
| |
Comparison of log features
Feature | Entrance (USD 0/month) | Pro (USD 15/month) | Premium (USD 249/month) | Enterprise (Customizable) |
Real-time log delivery tasks | × | 2 delivery tasks per log category | 3 delivery tasks per log category | 5 delivery tasks per log category |
Real-time log delivery destinations | × |
| ||
Categories of shippable real-time logs | × |
| ||
Instant logs | × |
|
|
|
Standard logs |
|
|
|
|
Edge computing
Comparison of edge computing features
Feature | Entrance (USD 0/month) | Pro (USD 15/month) | Premium (USD 249/month) | Enterprise (Customizable) |
Edge Routine USD 0/month | 100,000 requests/day | |||
Edge Routine Paid | Pay-as-you-go | Customizable | ||
Edge Routine routes | 10 | 25 | 50 | 125 |
Edge Container | × | × | × |
|
Edge KV | Pay-as-you-go |
| ||
Other features
Comparison of other features
Category | Feature | Entrance (USD 0/month) | Pro (USD 15/month) | Premium (USD 249/month) | Enterprise (Customizable) |
Network | IPV6 |
|
|
|
|
websocket |
|
|
|
| |
gRPC |
|
|
|
| |
Including the client IP address in the request header | × | × | × |
| |
Including the geographical location of the client IP address in the request header |
|
|
|
| |
Protocol optimization | HTTP/2 |
|
|
|
|
HTTP/3 |
|
|
|
| |
Content optimization | Image transformations |
|
|
|
|
Gzip |
|
|
|
| |
Brotli |
|
|
|
| |
Traffic | Smart routing | Pay-as-you-go | Pay-as-you-go | Pay-as-you-go | Customizable |
Waiting rooms | × | × | 1 | 1 | |
Waiting Room Pro | × | × | × | Purchasable | |
China network optimization | × | × | × | Purchasable | |
Origin pools | 5 | 10 | 15 | 20 | |
Maximum number of origin servers in a pool | 5 | 10 | 15 | 20 | |
Load balancing | × | × | × | Purchasable | |
TCP/UDP proxy | TCP/UDP proxy | × | × | × |
|
Records for TCP/UDP proxied websites | × | × | × | 10 | |
TCP/UDP proxy analytics | × | × | × |
| |
Version management | Version management | × | × |
|
|
Maximum number of environments | × | × | 3 | 10 | |
Maximum number of versions | × | × | 10 | 20 | |
Compliance | MLPS level 3 |
|
|
|
|
PCI DSS |
|
|
|
| |
ISO Certification |
|
|
|
| |
Services | Alibaba Cloud after-sales ticket support |
|
|
|
|
ESA expert service | × | × | × |
| |
Others | Account permission management |
|
|
|
|
OpenAPI |
|
|
|
|