Billing Overview
Last updated: 2025-08-19 14:38:27
Anti-DDoS Basic
Anti-DDoS Basic is free of charge.
Note:
Anti-DDoS Pro
New billing rules for Tencent Cloud Anti-DDoS Pro have been applied since March 24, 2022.
Billing mode
Anti-DDoS Pro guarantees an all-out protection capability. Integrating the local cleansing center capability, all-out protection aims to spare no effort to successfully defend against each DDoS attack. In addition, all-out protection will be enhanced along with the advance of Tencent Cloud network capabilities, and for which no extra upgrade costs are required.
Note:
Note:
Tencent Cloud reserves the right to restrict the traffic if the DDoS attacks on your business affect the infrastructure in the Tencent Cloud Anti-DDoS cleansing center. If the traffic to your Anti-DDoS Pro instance is restricted, your business may suffer problems such as limited or blocked business access traffic.
Anti-DDoS Pro provides different business bandwidths and numbers of protected IPs. The instance unit prices vary by specification, which you can choose as needed. This service is currently supported in the Beijing, Shanghai, and Guangzhou regions.
Billing parameter | Billing mode | Payment method | Description |
Number of protected IPs | Monthly subscription | Prepaid | Select the number of business IPs to be protected by an Anti-DDoS Pro instance. Available specifications: 10 (default), 50, and 100. If you need protection for more IPs, extra fees will be charged. The number can only be increased but not decreased. |
Business bandwidth | Monthly subscription | Prepaid | Business bandwidth refers to the normal bandwidth of the protected business. It is billed based on the monthly 95th percentile of either the inbound or outbound traffic (whichever is higher). For the unit prices, see Pricing of business bandwidth. Anti-DDoS Pro allows you to occasionally exceed your bandwidth plan's limit for a short time. However, if the limit is exceeded for a total of 36 hours in a month, the all-out protection capability will become not available and only the basic protection capability remains. |
| | Postpaid | When elastic business bandwidth is enabled, the amount of bandwidth beyond the specified specification will be billed. Please select a specification after reasonably assessing your business bandwidth. |
Note:
To use an Anti-DDoS Pro instance, please select the same instance region as your other Tencent Cloud resources such as CVM or CLB instances, and bind it to your business IP first.
95th percentile bandwidth: In each calendar month, the bandwidth is sampled every five minutes. At the end of the month, all the sampled values are sorted from highest to lowest and the top 5% are removed. The highest value left is the 95th percentile, which will be the billable bandwidth of the month.
Calculation formula for elastic business bandwidth
Billing Formula
Elastic Business Scale Cost = (Maximum Business Scale After 95th Percentile Peak Shaving This Month - Specified Prepaid Business Scale) × Unit Price of Business Scale.
Actual Protection Business Scale Monthly 95th Percentile Peak: During the period when cloud assets are protected by an anti-DDoS package (the anti-DDoS package is bound to at least one cloud asset), the total outbound bandwidth and total inbound bandwidth of the protected cloud assets are statistically measured every 5 minutes, with the larger value taken as the actual protection business scale. At month-end settlement, all such actual protection business scales obtained through the above statistical method are sorted in descending order, and the next value after excluding the top 5% of values is taken as the monthly 95th percentile peak of the actual protection business scale.
For example: You used the Anti-DDoS package to protect CVM assets in June, binding CVMs continuously for a total of 14 days. Since the Anti-DDoS package generates one statistical point every 5 minutes during the binding period, there are 288 statistical points per day, totaling 4032 statistical points over 14 days. Arrange the actual protection service scale values of these 4032 statistical points from high to low, exclude the top 5% of statistical points (4032 x 0.05 = 201.6, rounded to 201), and take the value of the 202nd statistical point as the monthly 95th peak value of the actual protection service scale for that month.
Pricing
An Anti-DDoS Pro instance protects business IPs in the same region by default, and the number of protected IPs can be increased. If you need protection for multiple IPs in different regions, you need to purchase multiple instances. If you find the specifications are not ideal, please submit a ticket to us.
Note:
Discounts for yearly subscription cannot be combined with other discounts. The maximum discount is applied automatically at the time of purchase.
Pricing of business bandwidth
Business bandwidth | Unit price (postpaid) |
| Monthly list price |
0-1 Gbps (inclusive) | 14 USD/Mbps/month |
1-3 Gbps (inclusive) | 10 USD/Mbps/month |
3-10 Gbps (inclusive) | 7 USD/Mbps/month |
Over 10 Gbps | 4 USD/Mbps/month |
Pricing of protected IPs
Number of protected IPs | Unit price for monthly subscription (USD) |
| List price |
10 IPs | 8,890 |
50 IPs | 17,780 |
100 IPs | 33,333.33 |
Note:
For a 10-IP plan, 50 Mbps of business bandwidth is offered for free by default.
For a 50-IP plan, 300 Mbps of business bandwidth is offered for free by default.
For a 100-IP plan, 1,000 Mbps of business bandwidth is offered for free by default.
Anti-DDoS Pro 2.0
Billing Mode
The Anti-DDoS Pro 2.0 guarantees full protection capability. Full protection aims to successfully defend against every DDoS attack, integrating the current capabilities of local cleansing centers to fully resist attacks. Meanwhile, as Tencent Cloud network capabilities continuously improve, full protection will also be enhanced without requiring you to incur additional upgrade costs.
Note
If your business is subject to DDoS attacks that impact the infrastructure of Tencent Cloud Anti-DDoS cleansing center, Tencent Cloud reserves the right to restrict traffic. When an Anti-DDoS Pro 2.0 instance is subject to traffic restriction, it may cause certain impact on your business, for example, business access traffic may be rate limited or even blocked.
Anti-DDoS Pro 2.0 offers various product specifications and supports activation via annual/monthly subscription. When making a purchase, the unit price per instance is determined by the instance specification you choose to match your business scale. Currently supported protection regions: Chinese mainland.
Billing Parameter | Billing Mode | Payment Instruction |
Basic Package | Monthly Subscription | Select instances that require using Anti-DDoS Pro 2.0. Protection times available: 2-time all-out protection, unlimited protection. The basic package by default includes 1 IP and 10 Mbps for business scale. If upgrading the basic package, an additional charge will be applied on the basis of the original plan. Only upgrades are allowed, no downgrades. For unit price, please refer to 2-time all-out protection price details and unlimited protection price details. |
| | |
Protected IP number | Monthly Subscription | Select the number of all business IPs that require using 2-time all-out protection instance protection of Anti-DDoS Pro 2.0. If upgrading the number of protected IPs, an additional charge will be applied on the basis of the original plan. Only upgrades are allowed, no downgrades. Select the number of all business IPs that require using unlimited protection instance protection of Anti-DDoS Pro 2.0. If upgrading the number of protected IPs, an additional charge will be applied on the basis of the original plan. Only upgrades are allowed, no downgrades. |
Business Scale | Monthly Subscription | The business scale refers to the normal scale of the protected business, measured by bandwidth. Inbound or outbound traffic is calculated based on the monthly maximum value with 95% peak shaving. For pricing, please refer to 2-time full protection Pricing of business bandwidth and unlimited protection Pricing of business bandwidth. Short-term peaks exceeding the purchased business scale are allowed, but if the limit is exceeded for 36 hours cumulatively in a month, full protection becomes invalid, leaving only the basic protection capability of native protection. The normal business scale remains unrestricted. Basic package provides effective protection for up to 10 Mbps of business traffic, with upgrade options available. |
| | |
Note:
Traffic monthly maximum 95 peak shaving: Sample at 5-minute intervals, with a statistical period of one calendar month. At the end of the month, rank all sampling points by peak value in descending order, remove the top 5% highest peak sampling points, and use the 95th percentile peak as the 95 billing point bandwidth.
2-Time Full Protection: Protection Times Definition
When the attacked traffic exceeds 10,000 Mbps, a full protection will be launched, lasting for 30 minutes.
If the attack lasts for more than 30 minutes, a second full protection will be automatically enabled.
If an attack event causes IP blocking, no protection times will be consumed.
Note:
Supported Asset Geographies for Binding
Only supports binding cloud assets in the Beijing, Shanghai, and Guangzhou regions.
2 full protection specifications: Support protecting cloud assets in a single region.
Unlimited protection specifications: Support simultaneous protection of cloud assets in multiple regions.
Product Price
Note:
Discount for yearly subscription cannot be combined with other discounts. The purchase page will automatically select the lower discount.
2-Time All-Out Protection Pricing Details
Protection Specifications | List Price (Unit: USD/Month) |
2-Time All-Out Protection | 2,000 |
Note:
Anti-DDoS Pro 2.0 with 2-Time All-Out Protection is available for subscription via annual/monthly subscription. Within the validity period, it provides one Anti-DDoS Pro 2.0 protection instance. After binding cloud resources, it offers automated attack cleaning and filtering services for the business traffic of the cloud resources.
Provide unlimited protection against attacks below 10,000 Mbps per month, with 2-time all-out protection.
Effective protection for up to 10 Mbps of business traffic, with upgrade options available.
Anti-DDoS Pro 2.0 with 2-Time All-Out Protection is suitable for low-risk SME users, providing 2-time all-out protection per month. It only supports protection for a single-region IP and requires region-specific purchase.
Supported regions: Beijing, Shanghai, Guangzhou.
Accounts subscribed to Anti-DDoS Pro 2.0 are supported with 3 self-service unblocking capabilities per month.
The number of self-service unblocks provided by other specifications of Anti-DDoS Pro does not stack.
IP Quantity Pricing Details
Anti-DDoS Pro 2.0 with 2-Time All-Out Protection specs supports IP number expansion, up to a maximum of 10 IPs.
Specification Type | Purchase Quantity Per Instance | List Price (USD/Month/Unit) |
protected IP number (with two rounds of all-out protection) | Min. 1, Max. 10. | 30 |
Pricing of business bandwidth
Anti-DDoS Pro 2.0 with 2-Time All-Out Protection specs supports a maximum business scale of 10,000 Mbps.
Business Scale | Monthly Subscription Price |
No more than 10,000 Mbps | 6 USD/Mbps/Month |
Unlimited Protection Pricing Details
Protection Specifications | List Price (Unit: USD/Month) |
Unlimited Protection | 4,600 |
Note:
Anti-DDoS Pro 2.0 with Unlimited Protection is available for subscription in an annual/monthly subscription method, providing one Anti-DDoS Pro 2.0 protection instance within the validity period. After binding to cloud resources, it offers automated attack cleaning and filtering services for the business traffic of the cloud resources.
Provided monthly with unlimited times all-out protection;
Purchase Anti-DDoS Pro 2.0 with Unlimited Protection, which by default includes a business scale of 10 Mbps and can be upgraded as needed (maximum expansion to 150,000 Mbps).
Anti-DDoS Pro 2.0 with unlimited protection specs supports 1 instance to protect cloud assets in multiple regions within the Chinese mainland.
Accounts subscribed to Anti-DDoS Pro 2.0 are supported with 3 self-service unblocking capabilities daily.
The number of self-service unblocks provided by other specifications of Anti-DDoS Pro does not stack.
IP Quantity Pricing Details
Anti-DDoS Pro 2.0 with unlimited protection specs supports IP number expansion, up to a maximum of 2,000 IPs.
Specification Type | Purchase Quantity Per Instance | List Price (USD/Month/Unit) |
Protected IP number (unlimited protection) | Min. 1, Max. 2,000. | 30 |
Pricing of business bandwidth
Anti-DDoS Pro 2.0 with unlimited protection can be upgraded as needed.
Business Scale | Monthly Subscription Price |
No more than 1,000 Mbps | 14 USD/Mbps/Month |
Exceeding 1,000 Mbps, no more than 3,000 Mbps | 10 USD/Mbps/Month |
Exceeding 3,000 Mbps, no more than 10,000 Mbps | 7 USD/Mbps/Month |
Exceeding 10,000 Mbps | 4 USD/Mbps/Month |
Calculation formula for elastic business bandwidth
Billing Formula
Elastic Business Scale Cost = (Maximum Business Scale After 95th Percentile Peak Shaving This Month - Specified Prepaid Business Scale) × Unit Price of Business Scale.
Actual Protection Business Scale Monthly 95th Percentile Peak: During the period when cloud assets are protected by an anti-DDoS package (the anti-DDoS package is bound to at least one cloud asset), the total outbound bandwidth and total inbound bandwidth of the protected cloud assets are statistically measured every 5 minutes, with the larger value taken as the actual protection business scale. At month-end settlement, all such actual protection business scales obtained through the above statistical method are sorted in descending order, and the next value after excluding the top 5% of values is taken as the monthly 95th percentile peak of the actual protection business scale.
For example: You used the Anti-DDoS package to protect CVM assets in June, binding CVMs continuously for a total of 14 days. Since the Anti-DDoS package generates one statistical point every 5 minutes during the binding period, there are 288 statistical points per day, totaling 4032 statistical points over 14 days. Arrange the actual protection service scale values of these 4032 statistical points from high to low, exclude the top 5% of statistical points (4032 x 0.05 = 201.6, rounded to 201), and take the value of the 202nd statistical point as the monthly 95th peak value of the actual protection service scale for that month.
Anti-DDoS Pro (Enterprise)
Chinese Mainland
Billing Mode
Anti-DDoS Pro (Enterprise Edition) Billing Breakdown in Chinese Mainland: Guaranteed Protection + Elastic Protection + Business Scale.
Notes:
This product adopts a monthly postpaid billing mode. The minimum purchase duration for this specification is 12 months. During this period, instance destruction is not supported. After exceeding this deadline, it will be automatically renewed. If you wish to suspend service or destroy resources, please contact manual service.
Supported regions include: Beijing, Shanghai, Guangzhou.
Anti-DDoS Pro (Enterprise Edition) only takes effect against high-defense EIPs under Tencent Cloud Elastic IP. To use Anti-DDoS Pro (Enterprise Edition), you need to replace your common cloud IP with a high-defense EIP. The purchase of Anti-DDoS Pro (Enterprise Edition) must be in the same region as the final bound cloud resource, and it will only take effect after binding to a high-defense EIP. Fees related to high-defense EIPs are collected by the Elastic IP product. For details, see Elastic IP - Billing Overview.
Applicable Regions | Billing Parameter | Billing Mode | Payment Method | Payment Instruction |
Chinese Mainland | Baseline protection bandwidth | Monthly Subscription | Postpaid | Provide base protection bandwidth. The prepaid price is determined based on the baseline protection bandwidth and purchase duration. If the baseline protection is upgraded, an additional fee will be charged on the basis of the original price, and the protection level can only be upgraded, not downgraded. |
| Elastic protection bandwidth | Pay-as-you-go | Postpaid | Trigger Elastic Protection. After deducting the guaranteed protection based on the highest peak attack value of the day, the corresponding Elastic Protection tiered pricing is applied, and the bill is generated on the next day. If Elastic Protection is not triggered, no fees are charged. Supports increasing or decreasing configuration. |
| Business Scale | Monthly Subscription | Postpaid | The business scale refers to the normal bandwidth of the protected business, measured by the maximum value of inbound or outbound traffic after 95th percentile elimination over one month. The business scale is allowed to exceed the purchased specification for a limited time. However, if it exceeds the specification for a cumulative 36 hours in a month, full protection becomes unavailable, leaving only the basic protection capability of native protection, while normal business bandwidth remains unrestricted. Specifications can be upgraded or downgraded and take effect the following month after purchase. |
| | Pay-as-you-go | Postpaid | After enabling elastic service bandwidth, the excessive portion exceeding the specified specification will be charged based on the unit price. Please refer to business scale for details. It is advisable to reasonably assess the business bandwidth scale before selecting specifications. |
Notes:
Maximum value after 95th percentile peak shaving per month: Sampling is performed at a 5-minute granularity, with a statistical period of one natural month. At the end of the month, all sampling points are ranked in descending order of peak values, and the top 5% highest peak sampling points are removed. The 95th percentile highest peak is used as the 95th billing point bandwidth.
Anti-DDoS Pro (Enterprise Edition) provides 3 self-service unblocking capabilities daily.
Purchase DDoS Anti-DDoS Pro (Enterprise Edition) with different IP quantity specifications will by default include the corresponding business scale. The specific rules are as follows:
Purchase the 1IP Anti-DDoS package by default includes a 10Mbps business scale.
Purchase the 10IP Anti-DDoS package by default includes a 50Mbps business scale.
Purchase the 50IP Anti-DDoS package by default includes a 300Mbps business scale.
Purchase the 100IP Anti-DDoS package by default includes a 1000Mbps business scale.
Guaranteed Protection
Notes:
Note: The actual purchase price is subject to the purchase page.
Base Protection Capability | Monthly Subscription - List Price (Unit: USD) | |||
| 1IP | 10IP | 50IP | 100 IP |
300Gbps | 3200 | 13333.33 | 26666.66 | 44444.44 |
400Gbps | 5422.22 | 22222.22 | 44444.44 | 84444.44 |
500Gbps | 16533.33 | 66666.66 | 88888.88 | 111111.11 |
600Gbps | 19866.66 | 80000 | 111111.11 | 133333.33 |
800Gbps | 22088.88 | 88888.88 | 133333.33 | 177777.77 |
1000Gbps | 27644.44 | 111111.11 | 177777.77 | 222222.22 |
Elastic Protection
Daily pay-as-you-go. You can enable elastic protection as needed.
When Elastic Protection is not enabled, the highest protection capability is the baseline protection bandwidth and no postpaid charges will be generated.
When Elastic Protection is enabled, the elastic protection bandwidth becomes the highest protection capability of the instance.
Elastic Protection is not triggered, and no fees are incurred.
When Elastic Protection is triggered (attack peak exceeds the baseline protection bandwidth and falls within the elastic protection range), the corresponding Elastic Protection tiered pricing is applied after deducting the guaranteed protection based on the highest peak attack value of the day, and the bill is generated on the next day.
Notes:
The protection threshold is the total protection threshold for multiple operators. When attack traffic from a single operator exceeds the operator's protection threshold, the attack traffic may be blocked even if it has not reached the total protection threshold.
For specific pricing of Elastic Protection, see the following table:
Elastic Protection (Gbps) | Up to 5 IPs (USD) | 5-10 IPs (USD) | 11-20 IPs (USD) | 21-50 IPs (USD) | IPs over 50 (USD) |
0 < Elastic Billing Volume ≤ 5 | 130 | 260 | 390 | 520 | 650 |
5 < Elastic Billing Volume ≤ 10 | 166.66 | 333.33 | 500 | 666.66 | 833.33 |
10 < Elastic Billing Volume ≤ 20 | 333.33 | 666.66 | 1000 | 1333.33 | 1666.66 |
20 < Elastic Billing Volume ≤ 30 | 583.33 | 1166.66 | 1750 | 2333.33 | 2916.66 |
30 < Elastic Billing Volume ≤ 40 | 800 | 1600 | 2400 | 3200 | 4000 |
40 < Elastic Billing Volume ≤ 50 | 950 | 1900 | 2850 | 3800 | 4750 |
50 < Elastic Billing Volume ≤ 60 | 1100 | 2200 | 3300 | 4400 | 5500 |
60 < Elastic Billing Volume ≤ 70 | 1250 | 2500 | 3750 | 5000 | 6250 |
70 < Elastic Billing Volume ≤ 80 | 1391.66 | 2783.33 | 4175 | 5566.66 | 6958.33 |
80 < Elastic Billing Volume ≤ 90 | 1533.33 | 3066.66 | 4600 | 6133.33 | 7666.66 |
90 < Elastic Billing Volume ≤ 100 | 1675 | 3350 | 5025 | 6700 | 8375 |
100 < Elastic Billing Volume ≤ 120 | 1958.33 | 3916.66 | 5875 | 7833.33 | 9791.66 |
120 < Elastic Billing Volume ≤ 150 | 2383.33 | 4766.66 | 7150 | 9533.33 | 11916.66 |
150 < Elastic Billing Volume ≤ 200 | 3091.66 | 6183.33 | 9275 | 12366.66 | 15458.33 |
200 < Elastic Billing Volume ≤ 250 | 3800 | 7600 | 11400 | 15200 | 19000 |
250 < Elastic Billing Volume ≤ 300 | 4466.66 | 8933.33 | 13400 | 17866.66 | 22333.33 |
300 < Elastic Billing Volume ≤ 400 | 6333.33 | 12666.66 | 19000 | 25333.33 | 31666.66 |
400 < Elastic Billing Volume ≤ 600 | 8800 | 17600 | 26400 | 35200 | 44000 |
600 < Elastic Billing Volume ≤ 900 | 14666.66 | 29333.33 | 44000 | 58666.66 | 73333.33 |
900 < Elastic Billing Volume ≤ 1200 | 20000 | 40000 | 60000 | 80000 | 100000 |
Billing formula: Elastic Protection Fee = (Maximum Protection Bandwidth of the Day - Specified Prepaid Protection Bandwidth) × Unit Price of Protection Bandwidth.
In multi-ip aggregation scenarios, traffic for each IP address is calculated independently to underwrite basic protection capability. Assuming each IP has a basic protection capability of 500Gbps, the following is the specific calculation method:
IP Type | Basic Protection Capability (Gbps) | Actual Usage (Gbps) | Excess Usage (Gbps) |
IP Address A | 500 | 600 | 100 |
IP Address B | 500 | 550 | 50 |
IP Address C | 500 | 100 | No exceed |
Therefore, only IP addresses A and B incur elastic protection fees. The elastic protection fee is calculated as the sum of the excess part, which is 150Gbps. The elastic protection fee for 2 IPs is 2,383.33 USD.
Business Scale
Business scale refers to the normal business scale of protected business, estimated by bandwidth, which is the maximum value after 95th percentile peak shaving of monthly inbound or outbound traffic.
Business Scale | Unit Price (Pay-As-You-Go) |
| Monthly Subscription Price |
0-1 Gbps (inclusive) | 14 USD/Mbps/Month |
1-3 Gbps (inclusive) | 10 USD/Mbps/Month |
3-10 Gbps (inclusive) | 7 USD/Mbps/Month |
Above 10 Gbps | 4 USD/Mbps/Month |
Elastic Business Scale
Billing Formula: Elastic Business Scale Cost = (Maximum Business Scale After 95th Percentile Peaking This Month - Specified Prepayment Business Scale) × Business Scale Unit Price.
Actual Protected Business Scale Monthly 95th Peak: During the period when cloud assets are protected by an anti-DDoS package (the anti-DDoS package is bound to at least one cloud asset), the total outbound bandwidth and total inbound bandwidth of the cloud assets protected by the anti-DDoS package are statistically calculated every 5 minutes, and the larger value is taken as the actual protected business scale. At month-end settlement, all actual protected business scales obtained through the above statistical method are sorted in descending order, and the next value after excluding the top 5% of values is taken as the monthly 95th peak of the actual protected business scale.
For example: You used the Anti-DDoS package to protect CVM assets in June, binding CVMs continuously for a total of 14 days. Since the Anti-DDoS package generates a statistical point every 5 minutes during the binding period, there are 288 statistical points per day, totaling 4032 statistical points over 14 days. Arrange the actual protection service scale values of these 4032 statistical points from high to low, exclude the top 5% of statistical points (4032 x 0.05 = 201.6, rounded to 201), and take the value of the 202nd statistical point as the monthly 95th peak value of the actual protection service scale for that month.
Outside the Chinese Mainland
Anti-DDoS Pro (Enterprise Edition) Billing Composition in Overseas Region: Protected IP Number + Business Scale.
Notes:
This product adopts a monthly postpaid billing mode. The minimum purchase duration for this specification is 12 months. During this period, instance destruction is not supported. After exceeding this deadline, it will be automatically renewed. If you wish to suspend service or destroy resources, please contact manual service.
Note: Supported regions: Hong Kong (China), Singapore, Tokyo, Jakarta, Silicon Valley, Frankfurt, Virginia, São Paulo.
Anti-DDoS Pro (Enterprise Edition) Overseas Protection Capability Description: Aiming to successfully defend against every DDoS attack, it integrates the current local cleansing center capacity to fully resist attacks, with a maximum Tbps-level protection capability.
Anti-DDoS Pro (Enterprise Edition) only takes effect against high-defense EIPs under Tencent Cloud Elastic IP. To use Anti-DDoS Pro (Enterprise Edition), you need to replace your common cloud IP with a high-defense EIP. The purchase of Anti-DDoS Pro (Enterprise Edition) must be in the same region as the final bound cloud resource, and it will only take effect after binding to a high-defense EIP. Fees related to high-defense EIPs are collected by the Elastic IP product. For details, see Elastic IP - Billing Overview.
Applicable Regions | Billing Parameter | Billing Mode | Payment Method | Payment Instruction |
Outside the Chinese Mainland | protected IP number | Monthly Subscription | Prepaid | Leverage the maximum capacity of Tencent Cloud Anti-DDoS cleansing center for all-out protection. |
| | Pay-as-you-go | Postpaid | |
| Business Scale | Monthly Subscription | Prepaid | The business scale refers to the normal bandwidth of the protected business, measured by the maximum value of inbound or outbound traffic after 95th percentile elimination over one month. The business scale is allowed to exceed the purchased specification for a limited time. However, if it exceeds the specification for a cumulative 36 hours in a month, full protection becomes unavailable, leaving only the basic protection capability of native protection, while normal business bandwidth remains unrestricted. Specifications can be upgraded or downgraded and take effect the following month after purchase. |
| | Pay-as-you-go | Postpaid | After enabling elastic service bandwidth, the excessive portion exceeding the specified specification will be charged based on the unit price. Please refer to business scale for details. It is advisable to reasonably assess the business bandwidth scale before selecting specifications. |
Notes:
Maximum value after 95th percentile peak shaving per month: Sampling is performed at a 5-minute granularity, with a statistical period of one natural month. At the end of the month, all sampling points are ranked in descending order of peak values, and the top 5% highest peak sampling points are removed. The 95th percentile highest peak is used as the 95th billing point bandwidth.
Anti-DDoS Pro (Enterprise Edition) provides 3 self-service unblocking capabilities daily.
Purchase DDoS Anti-DDoS Pro (Enterprise Edition) with different IP quantity specifications will by default include the corresponding business scale. The specific rules are as follows:
Purchase the 1IP Anti-DDoS package by default includes a 10Mbps business scale.
Purchase the 10IP Anti-DDoS package by default includes a 50Mbps business scale.
Purchase the 50IP Anti-DDoS package by default includes a 300Mbps business scale.
Purchase the 100IP Anti-DDoS package by default includes a 1000Mbps business scale.
Protected IP Number
Protected IP Number | Monthly Subscription Price (Unit: USD) |
| Published Price |
Protect 1 IP | 2367 |
Protect 10 IPs | 8890 |
Protect 50 IPs | 17780 |
Protect 100 IPs | 33333.33 |
Business Scale
Business scale refers to the normal business scale of protected business, estimated by bandwidth, which is the maximum value after 95th percentile peak shaving of monthly inbound or outbound traffic.
Business Scale | Unit Price (Pay-As-You-Go) |
| Monthly Subscription Price |
0-1 Gbps (inclusive) | 14 USD/Mbps/Month |
1-3 Gbps (inclusive) | 10 USD/Mbps/Month |
3-10 Gbps (inclusive) | 7 USD/Mbps/Month |
Above 10 Gbps | 4 USD/Mbps/Month |
Elastic Business Scale
Billing Formula: Elastic Business Scale Cost = (Maximum Business Scale After 95th Percentile Peaking This Month - Specified Prepayment Business Scale) × Business Scale Unit Price.
Actual Protected Business Scale Monthly 95th Peak: During the period when cloud assets are protected by an anti-DDoS package (the anti-DDoS package is bound to at least one cloud asset), the total outbound bandwidth and total inbound bandwidth of the cloud assets protected by the anti-DDoS package are statistically calculated every 5 minutes, and the larger value is taken as the actual protected business scale. At month-end settlement, all actual protected business scales obtained through the above statistical method are sorted in descending order, and the next value after excluding the top 5% of values is taken as the monthly 95th peak of the actual protected business scale.
For example: You used the Anti-DDoS package to protect CVM assets in June, binding CVMs continuously for a total of 14 days. Since the Anti-DDoS package generates a statistical point every 5 minutes during the binding period, there are 288 statistical points per day, totaling 4032 statistical points over 14 days. Arrange the actual protection service scale values of these 4032 statistical points from high to low, exclude the top 5% of statistical points (4032 x 0.05 = 201.6, rounded to 201), and take the value of the 202nd statistical point as the monthly 95th peak value of the actual protection service scale for that month.
Service termination
Anti-DDoS Pro (Enterprise Edition) adopts a postpaid mode. To end the service, you need to submit a ticket to terminate your instances. Otherwise, charges will still be incurred.
After you apply for a termination in the current month, the monthly-subscribed items will be settled as usual, while the daily billable items are settled based on the actual usage. After your instances are terminated, the service will be stopped immediately and the instances will no longer be billed for the next month.
The entire termination takes 1-3 business days to complete, depending on the actual operation (protection fees may be incurred during the period).
Anti-DDoS Advanced
Tencent Cloud Anti-DDoS Advanced has adopted new billing rules since March 24, 2022.
Billing mode
Anti-DDoS Advanced adopts a combo billing mode of monthly subscription and pay-as-you-go. Specifically, base protection bandwidth, business bandwidth, and forwarding rules are billed based on your postpaid monthly subscription, while elastic protection bandwidth and business bandwidth beyond your plan are billed daily on a pay-as-you-go basis.
Billable item | Billing mode | Payment method | Description |
Base protection bandwidth | Monthly subscription | Postpaid | The fee is calculated based on the base protection bandwidth and how long the service plan you purchased. A deposit is required upon purchase and for each following month, and is frozen until the fee is settled on the 1st of the next month. |
Elastic protection bandwidth | Pay-as-you-go on a daily basis | Postpaid | Charges will be incurred only when elastic protection is triggered. Once it is triggered, you will be billed on the following day at the tiered price of the elastic bandwidth for the current day (peak attack bandwidth minus base protection bandwidth). You can customize the configuration to meet your protection needs. |
Forwarding rules | Monthly subscription Billed by the number of forwarding rules | Postpaid | 60 forwarding rules are provided for free for each Anti-DDoS Advanced instance by default. Every additional 10 rules costs 100 USD per month. Each instance can have up to 500 forwarding rules. |
Business bandwidth | Monthly subscription Billed by bandwidth Pay-as-you-go on a daily basis | Postpaid | The business bandwidth limit applies to both the inbound Anti-DDoS forwarding traffic and the outbound Anti-DDoS traffic. The business bandwidth needs to be higher than the peak bandwidth of the two, whichever is greater. When the business bandwidth is insufficient or a higher QPS is needed, you can upgrade or enable elastic business bandwidth. Otherwise, packet loss or business impact may occur. When elastic business bandwidth is enabled, the amount of bandwidth beyond the specified specification will be charged at 1 USD/Mbps/day. Please select a specification after reasonably assessing your business bandwidth. |
Base protection
Base protection is billed based on your monthly plan. See the following table for detailed prices.
Chinese mainland
DDoS protection capability | Non-BGP | BGP |
30 Gbps | - | 3,300 USD/month |
60 Gbps | 7,200 USD/month | 7,200 USD/month |
100 Gbps | 7,800 USD/month | 7,800 USD/month |
300 Gbps | 8,470 USD/month | 8,470 USD/month |
400 Gbps | - | 15,470 USD/month |
500 Gbps | - | 614,000 USD/year |
800 Gbps | - | 831,000 USD/year |
1,000 Gbps | - | 997,000 USD/year |
Outside the Chinese mainland
DDoS protection capability | CC protection bandwidth | Price | Region |
20 Gbps | 40,000 QPS | 4,800 USD/month | Seoul |
| | 4,161 USD/month | Hong Kong (China), Taiwan (China), Singapore, Tokyo, Silicon Valley, Frankfurt |
50 Gbps | 150,000 QPS | 10,500 USD/month | Hong Kong (China), Seoul, Singapore, Tokyo, Silicon Valley, Frankfurt |
| | 8,631 USD/month | Taiwan (China) |
100 Gbps | 300,000 QPS | 16,500 USD/month | Hong Kong (China), Seoul, Singapore, Tokyo, Silicon Valley, Frankfurt |
| | 14,660 USD/month | Taiwan (China) |
Note:
"Non-BGP" refers to China Mobile/China Union/China Telecom network services. A non-BGP plan includes three Anti-DDoS Advanced instances, one for each of the network services.
"Outside the Chinese mainland" refers to Tencent Cloud regions outside the Chinese mainland,including Hong Kong (China), Taiwan (China), Singapore, Seoul, Tokyo, Virginia, Silicon Valley, and Frankfurt.
Elastic protection
You can enable elastic protection as needed.
Chinese mainland
If elastic protection is not enabled for an instance, its maximum protection capability will be the base protection bandwidth, and no extra fees will be incurred.
If elastic protection is enabled for an instance, its maximum protection capability will be the elastic protection bandwidth.
If elastic protection is not triggered, no charges will be incurred.
Elastic protection will be triggered when the peak attack traffic exceeds the base protection bandwidth. Once it is triggered, you will be billed on the following day at the tiered price of the elastic bandwidth for the current day (peak attack bandwidth minus base protection bandwidth).
Note:
The elastic bandwidth threshold is the overall amount of multiple ISP bandwidth limits. Note that attack traffic exceeding one of the limits may be blocked even if the overall threshold is not reached.
Billable elastic bandwidth = Peak attack bandwidth − Base protection bandwidth
See the following table for detailed prices:
Bandwidth range | Non-BGP/BGP (USD/day) |
0 Gbps ≤ Billable elastic bandwidth < 5 Gbps | 130 |
5 Gbps ≤ Billable elastic bandwidth < 10 Gbps | 170 |
10 Gbps ≤ Billable elastic bandwidth < 20 Gbps | 340 |
20 Gbps ≤ Billable elastic bandwidth < 30 Gbps | 590 |
30 Gbps ≤ Billable elastic bandwidth < 40 Gbps | 800 |
40 Gbps ≤ Billable elastic bandwidth < 50 Gbps | 950 |
50 Gbps ≤ Billable elastic bandwidth < 60 Gbps | 1,100 |
60 Gbps ≤ Billable elastic bandwidth < 70 Gbps | 1,250 |
70 Gbps ≤ Billable elastic bandwidth < 80 Gbps | 1,400 |
80 Gbps ≤ Billable elastic bandwidth < 90 Gbps | 1,540 |
90 Gbps ≤ Billable elastic bandwidth < 100 Gbps | 1,675 |
100 Gbps ≤ Billable elastic bandwidth < 120 Gbps | 1,960 |
120 Gbps ≤ Billable elastic bandwidth < 150 Gbps | 2,390 |
150 Gbps ≤ Billable elastic bandwidth < 200 Gbps | 3,100 |
200 Gbps ≤ Billable elastic bandwidth < 250 Gbps | 3,800 |
250 Gbps ≤ Billable elastic bandwidth < 300 Gbps | 4,470 |
300 Gbps ≤ Billable elastic bandwidth < 400 Gbps | 6,340 |
400 Gbps ≤ Billable elastic bandwidth < 600 Gbps | 8,800 |
600 Gbps ≤ Billable elastic bandwidth < 900 Gbps | 14,670 |
900 Gbps ≤ Billable elastic bandwidth < 1.2 Tbps | 20,000 |
Outside the Chinese mainland
If elastic protection is not enabled for an instance, its maximum protection capability will be the base protection bandwidth, and no extra fees will be incurred.
If elastic protection is enabled for an instance, its maximum protection capability will be the elastic protection bandwidth.
If elastic protection is not triggered, no charges will be incurred.
Elastic protection will be triggered when the peak attack traffic exceeds the base protection bandwidth. Once it is triggered, you will be billed on the following day based on the tiered price of the peak attack bandwidth for the current day.
See the following table for detailed prices:
Bandwidth range | Outside the Chinese mainland (USD/day) |
20 Gbps ≤ Peak attack bandwidth < 30 Gbps | 400 |
30 Gbps ≤ Peak attack bandwidth < 40 Gbps | 700 |
40 Gbps ≤ Peak attack bandwidth < 50 Gbps | 800 |
50 Gbps ≤ Peak attack bandwidth < 60 Gbps | 1,200 |
60 Gbps ≤ Peak attack bandwidth < 70 Gbps | 1,800 |
70 Gbps ≤ Peak attack bandwidth < 80 Gbps | 2,200 |
80 Gbps ≤ Peak attack bandwidth < 90 Gbps | 2,500 |
90 Gbps ≤ Peak attack bandwidth < 100 Gbps | 2,700 |
100 Gbps ≤ Peak attack bandwidth < 120 Gbps | 2,900 |
120 Gbps ≤ Peak attack bandwidth < 150 Gbps | 3,200 |
150 Gbps ≤ Peak attack bandwidth < 200 Gbps | 4,000 |
200 Gbps ≤ Peak attack bandwidth < 250 Gbps | 4,800 |
250 Gbps ≤ Peak attack bandwidth < 300 Gbps | 5,600 |
300 Gbps ≤ Peak attack bandwidth < 400 Gbps | 6,600 |
Note:
The elastic bandwidth threshold is the overall amount of multiple ISP bandwidth limits. Note that attack traffic exceeding one of the limits may be blocked even if the overall threshold is not reached.
Forwarding rules
Number of forwarding rules | Price (USD/month/10 rules) |
Number of ports (or protected domain names) ≤ 60 | Free |
Number of ports (or protected domain names) > 60 | 100 |
Note:
"Number of forwarding rules" refers to the total number of TCP/UDP ports (for non-website businesses) and HTTP/HTTPS domain names (for website businesses) that you configure for an Anti-DDoS Advanced instance.
Business bandwidth
Business bandwidth is the bandwidth used for forwarding the business traffic that has been cleansed by the Tencent Cloud Anti-DDoS data center back to the data center of the real server.
When elastic business bandwidth is enabled:
If elastic business bandwidth is not triggered, only the specified business bandwidth fee will be charged.
If elastic business bandwidth is triggered (the actual business bandwidth exceeds the specified business bandwidth), the excessive bandwidth will be billed on a daily basis with the bill for day T pushed on day T + 1. The billing rule is excessive bandwidth x 1 USD/Mbps, and the excessive bandwidth is the maximum outbound Anti-DDoS traffic on day T minus the specified business bandwidth specification. If no excessive bandwidth is consumed, no bill will be pushed on day T + 1.
When elastic business bandwidth is not enabled, the maximum business bandwidth is the specified specification. If it is exceeded, packet loss or business impact may occur, and only the fee for the specified business bandwidth will be charged. See the following table for detailed prices:
Bandwidth | Price (USD/month) |
50 Mbps | 750 |
100 Mbps | 1,500 |
150 Mbps | 2,250 |
200 Mbps | 3,000 |
500 Mbps | 7,500 |
600 Mbps | 9,000 |
1 Gbps | 15,000 |
2 Gbps | 30,000 |
The relationship between business bandwidth and the number of layer-7 requests is as follows:
Business bandwidth | HTTP/HTTPS |
50 Mbps | 5,000 QPS |
100 Mbps | 10,000 QPS |
150 Mbps | 15,000 QPS |
200 Mbps | 20,000 QPS |
500 Mbps | 50,000 QPS |
1,000 Mbps | 100,000 QPS |
2,000 Mbps | 200,000 QPS |
Note:
The business bandwidth limit applies to both the inbound Anti-DDoS forwarding traffic and the outbound Anti-DDoS traffic. The business bandwidth needs to be higher than the peak bandwidth of the two, whichever is greater. When the business bandwidth is insufficient or a higher QPS is needed, you can upgrade or enable elastic business bandwidth. Otherwise, packet loss or business impact may occur. When elastic business bandwidth is enabled, the amount of bandwidth beyond the specified specification will be charged at 1 USD/Mbps/day. Please select a specification after reasonably assessing your business bandwidth.
QPS here refers to the general number of queries per second when there is no attack. If the actual QPS of your business is higher than the specification purchased, please adjust the specification of your Anti-DDoS Advanced instance to prevent packet loss. You can refer to the relationship table above to increase the business bandwidth of your Anti-DDoS Advanced instance and the general HTTP/HTTPS QPS.
Other metrics
See the following table for descriptions of other metrics:
Metric | Specification | Description |
Number of forwarding ports | 60-500/Anti-DDoS Advanced instance | The total number of forwarding rules for TCP/UDP and HTTP/HTTPS. For TCP and UDP, if the same forwarding port number is used, two different forwarding rules need to be configured. |
| | Number of supported domain names |
Number of real server IPs | 20/instance | The total number of IP addresses for both layer-4 and layer-7 real servers. |
Number of new connections per second | 50,000/Anti-DDoS Advanced instance | The number of new connections per second for each Anti-DDoS Advanced instance. |
Concurrent connections | 200,000/Anti-DDoS Advanced instance | The number of concurrent connections per second for each Anti-DDoS Advanced instance. |
Note:
The specifications above are only applicable to instances purchased on Tencent Cloud official website. If they cannot meet your needs, please submit a ticket.
Overdue payment reminder
For Anti-DDoS Advanced instances:
If the account balance is sufficient, the system will automatically settle the fees for the previous month and deduct them on the 1st of the following month.
If the account balance is insufficient, the system will remind you to pay the overdue payment via the channel you configured (email, SMS, and Message Center).
Note:
Anti-DDoS Advanced is a postpaid service that is billed monthly. The minimum subscription term is one month. Upon expiry, your subscription will be auto-renewed unless canceled by contacting us. Your instances cannot be terminated during a subscription term.
Make sure that you have one-month credit to be frozen when activating this service.
Payments for this service are not refundable.
Service termination
Anti-DDoS Advanced adopts a postpaid mode. To end the service, you need to submit a ticket to terminate your instances. Otherwise, charges will still be incurred.
After you apply for a termination in the current month, the monthly-subscribed items will be settled as usual, while the daily billable items are settled based on the actual usage. After your instances are terminated, the service will be stopped immediately and the instances will no longer be billed for the next month.
The entire termination takes 1-3 business days to complete, depending on the actual operation (protection fees may be incurred during the period).
Anti-DDoS Advanced (Global Enterprise)
Background
Anti-DDoS Advanced (Global Enterprise) is committed to helping your business outside the Chinese mainland defend against every DDoS attack by providing all-out protection with no limitations on the number of times.
Usually malicious attacks will not end before causing losses to the target business, which is also a cost to attackers. Leveraging Tencent Cloud's Anti-DDoS cleansing capability outside the Chinese mainland, Anti-DDoS Advanced (Global Enterprise) safeguards your business with unlimited all-out protection.
Note:
Tencent Cloud reserves the right to restrict the traffic if the DDoS attacks on your business affect the infrastructure in the Tencent Cloud Anti-DDoS cleansing center outside the Chinese mainland. If the traffic to your Anti-DDoS Advanced (Global Enterprise) instance is restricted, your business may suffer problems such as limited or blocked business access traffic.
Anti-DDoS Advanced (Global Enterprise) is a postpaid service that is billed monthly. The minimum subscription term is 12 months. Upon expiry, your subscription will be auto-renewed unless canceled by contacting us. Your instances cannot be terminated during a subscription term.
Make sure that you have three-month credit to be frozen when activating this service.
Payments for this service are not refundable.
Anti-DDoS Advanced (Global Enterprise) billing
Number of protected IPs | Fee (USD/month) | Payment mode |
1 | 7,500 | Prepaid |
5 | 33,000 | Prepaid |
30 | 180,000 | Prepaid |
100 | 600,000 | Prepaid |
Business bandwidth billing
Business bandwidth is billed in a postpaid approach. Specifically, you will be charged by the monthly 95th percentile of either the outbound or inbound bandwidth (whichever is higher) at a unit price of 18.86 USD/Mbps/month.
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No
Feedback