Does ESA provide free DDoS protection?
All ESA plans include basic DDoS protection (platform-level protection) by default, which can defend against DDoS attacks of up to 10 Gbps without guaranteeing a specific threshold. During an attack, ESA provides best-effort defense at its edge nodes. If the attack intensifies, acceleration performance may be affected. Basic DDoS protection does not guarantee a specific time-to-mitigation.
If your site faces a high risk of DDoS attacks or you need more reliable protection, contact us to upgrade to Enterprise.
Will I be charged for traffic from a DDoS attack?
The following traffic is not billed and does not consume your plan quota:
-
L3/L4 attack traffic blocked by basic DDoS protection
-
HTTP requests blocked by the deep learning-based protection system
If you purchase Best-effort DDoS protection, elastic protection bandwidth is billed on a pay-as-you-go basis.
Can I use DDoS protection for non-Alibaba Cloud servers?
Yes. You can use ESA DDoS protection with any non-Alibaba Cloud server that has a public IP address, as long as it is publicly routable from the Alibaba Cloud network.
Are the Anti-DDoS node IPs for Enterprise fixed?
No. ESA Enterprise Anti-DDoS node IPs are not fixed. The system dynamically adjusts node scheduling based on attack conditions. During an attack, traffic may be rerouted to an isolated scrubbing domain, causing the Anti-DDoS node IP to change. If your services rely on fixed IP addresses, for example in firewall allowlists, plan for these potential IP changes.