All Products
Search

This Product

    VPN Gateway:Billing

    Document Center

    VPN Gateway:Billing

    Last Updated:Mar 17, 2026

    When you use SSL-VPN, you are charged for the VPN Gateway instance. The billing rules vary based on the features that you enable for the VPN Gateway instance.

    Billing rules

    Enabled features of the VPN Gateway instance

    Billable items

    Billing method

    Billing cycle

    Only the SSL-VPN feature is enabled

    • SSL-VPN instance fee

    • Traffic fee

    • SSL-VPN specification fee

    Pay-as-you-go

    You are charged based on your actual resource usage. Bills are generated after the resources are used.

    1 hour

    If you use a resource for less than 1 hour, you are charged for 1 hour.

    Both SSL-VPN and IPsec-VPN features are enabled

    • IPsec-VPN instance fee

    • SSL-VPN instance fee

    • Traffic fee

    • SSL-VPN specification fee

    Billable items

    Important

    • The pricing information in the following table is for reference only. If the pricing on the purchase page is different from the pricing in the table, the pricing on the purchase page prevails.

    • The maximum bandwidth supported by VPN Gateway instances in the China (Nanjing - Local Region) region is 500 Mbps.

      Click to view the regions in the Chinese mainland.

      China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Hangzhou), China (Shanghai), China (Nanjing - Local Region), China (Shenzhen), China (Heyuan), China (Guangzhou), and China (Chengdu)

    • In the following table, "Not supported" indicates that the bandwidth specification is not supported by VPN Gateway instances in the corresponding region.

    IPsec-VPN and SSL-VPN instance fees

    VPN Gateway provides different bandwidth specifications. For the same bandwidth specification, the IPsec-VPN instance fee is the same as the SSL-VPN instance fee. The following table lists the prices. Unit: USD/hour.

    Region

    10 Mbps

    100 Mbps

    200 Mbps

    500 Mbps

    1000 Mbps

    The Chinese mainland

    0.059

    0.209

    0.209

    0.767

    0.767

    China (Hong Kong)

    0.087

    0.262

    0.262

    1.025

    1.025

    Singapore

    0.087

    0.262

    0.262

    1.025

    1.025

    Japan (Tokyo)

    0.091

    0.275

    0.275

    0.767

    0.767

    South Korea (Seoul)

    0.091

    0.275

    0.275

    0.767

    0.767

    Thailand (Bangkok)

    0.087

    0.262

    0.262

    1.025

    1.025

    Philippines (Manila)

    0.087

    0.262

    0.262

    1.025

    1.025

    Malaysia (Kuala Lumpur)

    0.080

    0.240

    0.240

    0.878

    0.878

    Indonesia (Jakarta)

    0.086

    0.262

    0.262

    0.734

    0.734

    US (Virginia)

    0.066

    0.295

    0.295

    0.826

    0.826

    US (Silicon Valley)

    0.082

    0.392

    0.392

    1.095

    1.095

    Germany (Frankfurt)

    0.077

    0.359

    0.359

    1.003

    1.003

    UK (London)

    0.077

    0.359

    0.359

    1.003

    1.003

    Mexico

    0.066

    0.295

    0.295

    0.826

    0.826

    UAE (Dubai)

    0.090

    0.420

    0.420

    1.231

    Not supported

    SAU (Riyadh - Partner Region)

    0.104

    0.314

    0.314

    1.230

    Not supported

    Traffic fee

    You are charged for traffic sent from an IPsec-VPN connection to a data center, billed in USD/GB. Traffic sent from a data center to an IPsec-VPN connection is free of charge.

    Region

    Unit price

    The Chinese mainland

    0.125

    China (Hong Kong)

    0.153

    Singapore

    0.117

    Japan (Tokyo)

    0.120

    South Korea (Seoul)

    0.125

    Thailand (Bangkok)

    0.117

    Philippines (Manila)

    0.110

    Malaysia (Kuala Lumpur)

    0.125

    Indonesia (Jakarta)

    0.110

    US (Virginia)

    0.078

    US (Silicon Valley)

    0.078

    Germany (Frankfurt)

    0.070

    UK (London)

    0.070

    Mexico

    0.078

    UAE (Dubai)

    0.447

    SAU (Riyadh - Partner Region)

    0.140

    SSL-VPN specification fee

    After you enable the SSL-VPN feature, you must select the number of SSL-VPN connections based on the maximum number of clients that can be connected simultaneously. The following table lists the prices for different numbers of SSL-VPN connections. Unit: USD/hour.

    Region

    5

    10

    20

    50

    100

    500

    1000

    The Chinese mainland

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    China (Hong Kong)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Singapore

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Japan (Tokyo)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    South Korea (Seoul)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Thailand (Bangkok)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Philippines (Manila)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Malaysia (Kuala Lumpur)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Indonesia (Jakarta)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    US (Virginia)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    US (Silicon Valley)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Germany (Frankfurt)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    UK (London)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    Mexico

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    UAE (Dubai)

    0.048

    0.074

    0.117

    0.226

    0.328

    1.090

    1.547

    SAU (Riyadh - Partner Region)

    0.058

    0.089

    0.14

    0.271

    0.394

    1.308

    1.856

    Billing example

    image

    As shown in the preceding figure, a client in the Chinese mainland connects to a VPC on the cloud through an SSL-VPN connection. Assume that only the SSL-VPN feature is enabled for the VPN Gateway, the bandwidth of the VPN Gateway instance is 10 Mbps, the total outbound traffic from the VPN Gateway instance to the client is 10 GB, and the number of SSL-VPN connections is 5. In this case, the SSL-VPN fees for 24 hours from 00:00:00 on June 1, 2023 to 00:00:00 on June 2, 2023 are calculated as follows:

    • SSL-VPN instance fee = 0.059 USD/hour × 24 hours = 1.416 USD

    • SSL-VPN specification fee = 0.048 USD/hour × 24 hours = 1.152 USD

    • Traffic fee = 0.125 USD/GB × 10 GB = 1.25 USD

    • Total fee = SSL-VPN instance fee + SSL-VPN specification fee + Traffic fee = 3.818 USD

    Modify a VPN Gateway instance

    To change the bandwidth or features of a VPN Gateway instance, you can upgrade or downgrade the instance.

    Upgrade

    Item

    Description

    Features

    You can upgrade the bandwidth of a VPN gateway.

    Note

    You can enable IPsec-VPN and SSL-VPN or increase the maximum number of concurrent SSL connections for a VPN gateway based on your business requirements. For more information, see the following topics:

    Limits

    • If the bandwidth of the VPN Gateway instance is 200 Mbps or less, you cannot upgrade it to 500 Mbps or 1000 Mbps. If the bandwidth of the VPN Gateway instance is 500 Mbps, you can only upgrade it to 1000 Mbps.

    • The upgrade process does not affect your services.

    Effective time

    The upgrade takes effect immediately. However, there may be a delay of a few minutes due to network conditions.

    Billing impact

    After you submit an upgrade or downgrade order, the system starts to charge you based on the new configuration.

    Scenarios

    If the specifications of the VPN Gateway instance cannot meet your business requirements, you can upgrade the instance.

    1. Log on to the VPN Gateway console.

    2. In the top navigation bar, select the region where the VPN gateway instance resides.

    3. On the VPN Gateways page, find the VPN gateway that you want to upgrade and click Upgrade in the Bandwidth column.

    4. On the VPN Gateway | Upgrade/Downgrade page, modify the maximum bandwidth of the VPN gateway.

    5. In the Terms of Service section, read and select the terms of service. Then, click Buy Now and complete the payment.

    Downgrade

    Item

    Description

    Downgrade feature

    • You can downgrade the bandwidth of a VPN gateway.

    • You can disable IPsec-VPN and SSL-VPN for a VPN gateway.

    • You can decrease the maximum number of concurrent SSL connections for a VPN gateway.

    Downgrade limitations

    • To disable IPsec-VPN during a downgrade, ensure no IPsec-VPN connections exist under the instance. To delete an IPsec connection, see IPsec connections (attached to a VPN gateway).

    • To disable SSL-VPN during a downgrade, ensure no SSL servers or IPsec servers exist for the instance. To delete SSL and IPsec servers, see Delete an SSL server and Delete an IPsec server.

    • Bandwidth limits:

      • VPN gateway instances in dual-tunnel mode have no bandwidth downgrade restrictions.

      • For VPN gateway instances in single-tunnel mode: if the bandwidth is 1000 Mbps, you can only downgrade to 500 Mbps. If the bandwidth is 500 Mbps, you cannot downgrade it.

    • During a bandwidth downgrade, if traffic exceeds the new bandwidth limit, connections may break. Ensure your backend applications support reconnection.

    • When decreasing the SSL connection limit, if connected clients exceed the new limit, connections may break. Ensure your backend applications support reconnection.

    Effective time

    The downgrade takes effect immediately. However, there may be a delay of a few minutes due to network conditions.

    Billing impact

    After you submit a downgrade order, the system starts to charge you based on the new configuration.

    Scenarios

    If the specifications of the VPN Gateway instance exceed your business requirements, you can downgrade the instance.

    1. Log on to the VPN Gateway console.

    2. In the top navigation bar, select the region where the VPN gateway instance resides.

    3. On the VPN Gateways page, find the target VPN gateway instance and click Downgrade in the Bandwidth column.

    4. On the VPN Gateway | Downgrade page, adjust the configuration of the VPN gateway instance.

      You can decrease the maximum bandwidth, disable IPsec-VPN or SSL-VPN, or decrease the SSL connection limit as needed.

    5. In the Terms of Service section, read and select the terms of service. Then, click Buy Now and complete the payment.

    View bills

    Log on to the Alibaba Cloud Billing Management console. In the navigation pane on the left, choose Billing Management > Billing Details to view your billing details.

    Overdue payments

    If the available credit in your account, including your account balance, vouchers, and coupons, is insufficient to pay your outstanding bills, your account has an overdue payment. The service status of your VPN Gateway instance is affected as follows:

    • For 15 days after the payment becomes overdue, your VPN Gateway instance continues to provide service. You must renew the instance promptly to avoid service interruptions.

    • If you do not pay the bill within 15 days after the payment becomes overdue, the VPN Gateway instance service is suspended.

      If you add funds to your account while the service is suspended, the system automatically settles the outstanding bills. After the payment is successful, the service is immediately restored.

    • If you do not pay the bill within 15 days after the service is suspended, the VPN Gateway instance is automatically released.

      One day before the release, the system sends you a reminder by text message and email. After the VPN Gateway instance is released, its configuration and data are deleted and cannot be recovered.