Billing

Billing items

Pricing for an enhanced VPN gateway is based on IPsec-VPN connections. You are charged an IPsec-VPN connection fee and a data transfer fee:

Examples

Billing items

Pricing for a standard VPN gateway is based on the VPN gateway instance. If you enable only the IPsec feature, you incur an IPsec-VPN instance fee and a bandwidth fee:

If you also enable the SSL-VPN feature, you will incur an additional SSL-VPN instance fee and an SSL specification fee. For details, see SSL-VPN billing.

Instance and bandwidth pricing

The IPsec-VPN instance fee and bandwidth fee or for a standard VPN gateway depend on the bandwidth specification and region selected upon purchase:

Examples

Billable items

You are charged for each ipsec-vpn connection bound to a Transit Router.

Notes:

• Public network traffic fees do not apply to private ipsec-vpn connections.

• After you bind an ipsec-vpn connection to a Transit Router, you cannot change the bound resource type or the billing method.

• A single ipsec-vpn connection supports a maximum tunnel bandwidth of 1 Gbps or 3 Gbps. This bandwidth specification cannot be changed. To increase the bandwidth between your on-premises data center and the cloud, you can establish multiple ipsec-vpn connections.

  The 3 Gbps tunnel bandwidth (Large) feature is in public beta. To use this feature, contact your account manager to apply.

• TR connection fee and TR traffic processing fee are two different dimensions of billing items: TR connection fee is an instance retention fee (that is, the instance retention duration fee), charged based on the retention duration after the IPsec connection is created, and is unrelated to the actual traffic; TR traffic processing fee is calculated separately based on the actual traffic used. For details, see CEN billing.

Unit prices for public network traffic

For ipsec-vpn connections bound to a Transit Router, billing for public network traffic is gradually transitioning to CDT:

• After the switch to CDT billing, public network traffic fees are calculated based on CDT Pricing.

• Before the switch to CDT billing, the following rates apply (Unit: CNY/GB):

  Region of the IPsec-VPN connection	Unit price for traffic
  The Chinese mainland	0.80
  China (Hong Kong)	1.00
  Singapore	0.75
  Malaysia (Kuala Lumpur)	0.80
  Indonesia (Jakarta)	0.75
  Philippines (Manila)	0.75
  Japan (Tokyo)	0.60
  South Korea (Seoul)	0.80
  Thailand (Bangkok)	0.75
  Germany (Frankfurt)	0.50
  UK (London)	0.50
  US (Silicon Valley)	0.50
  US (Virginia)	0.50
  Mexico	0.50
  UAE (Dubai)	0.84

  Important

  The prices in the preceding tables are for reference only. The prices on the purchase page prevail.

Examples

Mainland China regions

China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Hangzhou), China (Shanghai), China (Nanjing) (Local Region) (decommissioning), China (Fuzhou) (Local Region) (decommissioning), China (Wuhan) (Local Region), China (Shenzhen), China (Heyuan), China (Guangzhou), and China (Chengdu).

Does IPsec-VPN support free trials or free connectivity plans?

Alibaba Cloud IPsec-VPN does not support free trials, nor does it offer free dedicated line or IPsec interconnection services; all solutions must be purchased separately. For low-cost testing and verification, we recommend choosing a lower-configured pay-as-you-go instance (such as Enhanced IPsec-VPN) for testing, and releasing the resources after testing. Alternatively, you can choose a short-term subscriptionStandard VPN Gatewayinstance, and release resources through the unsubscribe process after testing.

Does transferring data such as OSS through ECS via the VPN gateway to an on-premises data center incur additional traffic fees?

The ECS side itself does not incur additional VPN traffic fees. The VPN gateway side is billed normally based on the attachment mode:

• Standard VPN Gateway: Billed on a subscription basis, charging IPsec-VPN instance fee and bandwidth fee.

• Enhanced IPsec-VPN: Pay-as-you-go, charging IPsec connection fee and the outbound direction public network traffic fee.

• attach to Transit Router: Pay-as-you-go, charging IPsec connection instance fee, TR connection fee, TR traffic processing fee, and the outbound direction public network traffic fee.

Note that only traffic in the outbound direction (the direction from Alibaba Cloud to the on-premises data center) incurs a public network traffic fee; traffic in the inbound direction (the direction from the on-premises data center to Alibaba Cloud) is free.

If I selected the wrong VPC when creating the VPN gateway, how do I change the attached VPC?

VPN gateways do not support directly changing or modifying an already attached VPC. To use a different VPC, unsubscribe from the current VPN gateway instance and purchase a new one, selecting the correct VPC. For details about the unsubscribe operation, see overdue payments and refunds.

Will the public IP address change after I unsubscribe and create a new VPN gateway?

Yes, it will change. The newly created VPN gateway will be assigned a new public IP address, and the original public IP address cannot be retained. Therefore, if you need to rebuild the VPN gateway because you selected the wrong VPC, or you need to purchase a new VPN gateway to change the VPC, please be aware of this change and promptly update the peer public IP address configured on the local device (such as a firewall or router) to avoid IPsec connection interruptions.