Billing Overview
Download
Focus Mode
Font Size
Note:
1. Customers onboarded after September 10, 2026 are subject to the following instructions.
2. After September 10, 2026, historical editions of Anti-DDoS Pro or Anti-DDoS Advanced will no longer be available for subscription through the purchase page. For the relevant announcement, see Announcement on Billing Mode Upgrade. If you are an existing Anti-DDoS Pro or Anti-DDoS Advanced customer and want to view the billing instructions for historical subscription editions, see Historical Documentation.
3. The following section mainly describes the billing model and pricing of the DDoS Defender. For detailed purchase instructions, see Purchase Guide.
DDoS Defender is a powerful and persistent automatic DDoS attack mitigation service launched by Tencent Cloud, providing mitigation center protection capabilities.
Base Plan Fees (Required)
DDoS Defender provides two base package editions. Users can choose to subscribe to one of them based on their business needs and attack risks:
Essential Plan: provides 2 best-effort mitigation sessions per month and is suitable for users with a lower risk of attacks. After the protection sessions are used up, you can upgrade to Premium Edition to continue using the service.
Premium Plan: provides unlimited best-effort mitigation sessions per month and is suitable for users with high service availability requirements.
Comparison Item | Essential Plan | Premium Plan |
Price | USD 5,000/month/account | |
Mitigation Sessions | ||
Clean data transfer included (no extra fee) | 10 TB/month | 10 TB/month |
25 | 100 | |
Protection capability | L3/4 DDoS & HTTP DDoS protection | |
Value-added services | - | Available as an additional purchase: |
Note:
Note 1
: Subscription is based on a Tencent Cloud root account. A single Tencent Cloud root account can protect the business of only one corporate entity and does not support channel distribution. If you are a channel partner, contact us to obtain a customized quote.
Note 2
: Best-effort mitigation means providing maximum protection within the DDoS protection capabilities of Tencent Cloud mitigation centers. Specific protection capacities vary depending on the region and type of the protected resource. For details, see DDoS Protection Capacity Description.Note 3
: After Premium Edition is subscribed to, no additional fees are charged based on the number of protection sessions. However, if the protected resources under the account are subjected to persistent attacks, Tencent Cloud reserves the right to rate-limit or block relevant traffic by redirecting it to blackhole routing. Such actions will reduce the public network availability of the protected resources.
Note 4
: The protection resource quota mentioned here is used only to offset the protection resource usage generated by cloud resources (CVM, CLB, EIP, WAF, LH), EO domain resources, and L4 proxy instances in EO global area (excluding the Chinese mainland). For L4 proxy instances in EO Chinese mainland area or global area, each DDoS Defender base plan includes one quota that can be protected at no additional cost.Protection Capacity Add-on Fees (Optional)
For specific scenarios with higher protection requirements, DDoS Defender provides the following protection extension packages:
Add-on Type | Description | Price |
Mainland China Protection Capacity Add-on | Applicable to EdgeOne domains and L4 proxy instances in Mainland China area or global area, and Anti-DDoS EIPs within Mainland China. Provides Tbps-level protection capabilities within the Mainland China area. | USD 700/month/account |
Global (Excluding Mainland China) Protection Capacity Add-on | Applicable to Anti-DDoS EIPs and EdgeOne BGP transit CIDRs in global area (excluding Mainland China), enabling L3/4 DDoS traffic mitigation capabilities. | USD 1,400/month/account |
Cross-regional Protection Capacity Add-on | Applicable to EdgeOne domains and L4 proxy instances in global area (excluding Mainland China). For routes with Cross-MLC-border acceleration enabled, it extends protection capabilities for cross-regional protection to Tbps-level. | USD 13,000/month/account |
Clean Data Transfer Fee (Required)
Note:
Business scale is measured by traffic volume.
For CVM, CLB, EIP, WAF, and LH resources, business traffic is measured by outbound traffic.
For EO resources, the business traffic metering method is the same as the EdgeOne traffic measurement method.
Business traffic of DDoS Defender is billed cumulatively with the public network traffic or bandwidth of its associated cloud resources.
Prepaid Monthly Subscription
After subscribing to the DDoS Defender base plan, you have a certain amount of DDoS Defender business traffic quota by default. If you want to expand the quota, refer to the following pricing:
Business Traffic | Unit Price (USD/GB/Month) |
0 - 10 TB (inclusive) | 0 |
The portion exceeding 10 TB | 0.06 |
Note:
Two ways to purchase additional prepaid monthly quotas:
1. You can purchase additional quotas along with the package when subscribing to the DDoS Defender service. For details, see DDoS Defender Purchase Guide.
2. To upgrade the specification in the console after subscription, see DDoS Defender Plan Upgrade and Downgrade Guide.
Postpaid Overage
After business traffic exceeds the prepaid monthly quota, excess traffic is billed in postpaid mode. The settlement cycle supports hourly settlement.
Hourly settlement: A monthly cumulative tiered pricing model is used, where tiered usage is calculated based on the package cycle (actual month).
Pricing reference is as follows:
Traffic Tier (USD/GB) | Chinese Mainland | Global (Excluding Chinese Mainland) | |
| CVM, CLB, EIP, WAF, LH, EO domain, and EO L4 proxy instances | CVM, CLB, EIP, WAF, LH | EO domain and EO L4 proxy instances |
0 - 100 TB (exclusive) | 0.1 | 0.05 | 0.025 |
100 - 500 TB (exclusive) | 0.08 | 0.04 | 0.02 |
500 - 1000 TB (exclusive) | 0.05 | 0.03 | 0.015 |
1000 - 5000 TB (exclusive) | 0.035 | 0.02 | 0.012 |
≥ 5000 TB | 0.03 | 0.015 | 0.01 |
Note:
If you have enabled the Chinese mainland network optimization (global acceleration) route for EO domains or L4 proxy instances, DDoS business traffic (cross-region) fees will also be incurred for the business traffic. For billing details, see Cross-MLC-border acceleration traffic fee (Postpaid).
Protected Resource Count Fees (Required)
Note:
The protected resource usage generated by CVM, CLB, EIP, WAF, and LH is calculated based on the number of resources of the corresponding products associated with the DDoS Defender protection instance, for example, the number of CVM instances and the number of CLB instances.
The protected resource usage generated by EO domains or L4 proxy instances is calculated based on the number of EO subdomains and L4 proxy instances associated with the DDoS Defender protection instance.
Prepaid Monthly Subscription
After subscribing to the DDoS Defender base plan, you have a certain amount of protected resource quota by default. If you want to expand the quota, refer to the following pricing:
Protected Resource Count | Unit Price (USD/Unit/Month) |
Essential Plan: 0 - 25 (inclusive) Premium Plan: 0 - 100 (inclusive) | 0 |
Essential Plan: portion exceeding 25 Premium Plan: portion exceeding 100 | 7 |
Note:
1. The prepaid monthly quota for protected resources can only be used to offset the protected resource usage generated by CVM, CLB, EIP, WAF, LH, EO domains, and L4 proxy instances in global regions (excluding the Chinese mainland). It cannot be used to offset the protected resource usage generated by L4 proxy instances in the Chinese mainland or global regions.
2. Two ways to purchase additional prepaid monthly quotas:
2.1 You can purchase additional quotas along with the package when subscribing to the DDoS Defender. For details, see DDoS Defender Purchase Guide.
2.2 To upgrade the specification in the console after subscription, see DDoS Defender Plan Upgrade and Downgrade Guide.
Postpaid Overage
After the protected resource usage exceeds the prepaid monthly quota, excess usage is billed in postpaid mode. The settlement cycle supports hourly settlement. The pricing reference is as follows:
Hourly settlement pricing: A monthly cumulative tiered pricing model is used, where tiered usage is calculated based on the package cycle (actual month).
Protected Resource Tier (USD/Unit/Hour) | Protected Resource Type | ||
| CVM, CLB, EIP, WAF, LH | EO domain and EO global (excluding Chinese mainland) L4 proxy instances | EO L4 proxy instances in the Chinese mainland or globally |
0 - 100 (exclusive) | 0.05 | | 1st resource: 0 USD Each additional resource: 1.5 USD/unit/hour |
100 - 500 (exclusive) | 0.04 | | |
500 - 1,000 (exclusive) | 0.03 | | |
1,000 - 5,000 (exclusive) | 0.02 | | |
≥ 5,000 | 0.01 | | |
Custom Protection Policy Fees (Optional)
If you require security operations center (SOC) or major event protection escort services, or if you want Tencent Cloud security experts to help customize protection policies based on your business needs, you can contact us to obtain a customized solution and quote.
Help and Support
Was this page helpful?
You can also Contact sales or Submit a Ticket for help.
Help us improve! Rate your documentation experience in 5 mins.
Feedback