Note:
Customers onboarded after September 10, 2026 are subject to the following instructions. If you are an existing Anti-DDoS Pro or Anti-DDoS Advanced customer, see historical documentation. Does the DDoS Defender Plan Take Effect Immediately After Purchase?
The service takes effect immediately after you purchase a plan and bind the resources to be protected, and activation is typically completed within a few minutes.
Is Attack Traffic Mitigated by DDoS Defender Billed?
No fees are incurred. Attack traffic mitigated by DDoS Defender does not generate charges. Billing applies only to normal business traffic after mitigation. For details, see Billing Overview. Is Billing Supported Only During an Attack and Not When No Attack Occurs?
Not supported. Anti-DDoS uses subscription-based billing, where the base plan fee, business scale fee, and protected resource fee are all mandatory. Billing is based on the subscribed plan, actual business scale, and number of onboarded resources, regardless of whether attacks occur. For details, see Billing Overview. Do I Still Need to Pay Fees If There Is No DDoS Attack in the Current Month?
Yes. The base plan fee, business scale fee, and protected resource fee are all billed based on the subscription, regardless of whether attacks occur. Only the "full protection sessions" benefit is attack-related. The Practical Edition plan provides 2 full protection sessions per month, after which the service is automatically downgraded to Standard Protection. The Premium Edition plan provides unlimited full protection sessions per month.
Do I Need to Pay Per Attack After the Full Protection Quota of the Practical Plan Is Used Up?
No. After all full protection sessions are used, the system automatically downgrades to Standard Protection for your resources, and no additional per-session fees are incurred. To continue receiving full protection, upgrade to the Premium Edition plan. For details, see Plan Upgrade and Downgrade. How Are Full Protection Counts Triggered and Calculated During an Attack?
The triggering and calculation of full protection sessions vary by protected resource type.
Cloud resources (CVM, CLB, EIP, and so on, excluding EO resources): When attack traffic exceeds 10,000 Mbps, a full protection session is triggered and lasts for 30 minutes. If the attack continues beyond 30 minutes, the next full protection session is automatically enabled. If the attack event causes resources to be blocked, that triggering does not consume a full protection session.
EO resources: Full protection sessions are counted by the number of attack events, and each attack event consumes 1 session. Because a single attack event can last up to 24 hours, if the actual attack duration exceeds 24 hours, it is counted as 2 attack events and consumes 2 full protection sessions. If an attack event causes resources to be blocked, that triggering does not consume a full protection session.
Is the Anti-DDoS Service Plan Billed by Account?
Yes. The Anti-DDoS basic plan is subscribed to and billed at the account level, and multiple protection instances under the same account share the same plan benefits.
Are Refunds Supported for the Anti-DDoS Service Plan?
Refunds are supported in some scenarios. For specific rules, see Refund Policy.