Help Center/ Cloud Firewall/ User Guide/ Purchasing and Changing the Specifications of CFW/ Purchasing a Pay-per-Use CFW
Updated on 2025-07-23 GMT+08:00
View PDF

Purchasing a Pay-per-Use CFW

Pay-per-use billing is a postpaid billing mode. A pay-per-use CFW can be provisioned and deleted at any time. CFW instances are billed by second. The system generates a bill every hour based on the protected traffic and deducts the billed amount from the account balance.

You can purchase multiple firewalls in a region and assign them different resources and policies.

Only the professional edition firewalls support pay-per-use billing.

Prerequisites

To use an IAM user, ensure the IAM user has been granted the BSS Administrator and CFW FullAccess permissions. For details, see Creating a User Group and Granting Permissions.

Constraints

  • CFW can be used only in the region selected during purchase. To use it in another region, switch to the corresponding region and then purchase it. The pay-per-use billing mode firewall is supported only in certain regions. For details, see Function Overview.
  • The maximum protection bandwidth is 1 Gbit/s. (It refers to the total traffic passing through the firewall, that is, the Internet border protection bandwidth plus the VPC border protection bandwidth).
  • Only the CFW professional edition supports pay-per-use billing.

Purchasing a Pay-per-use Professional Edition Firewall

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. In the navigation pane on the left, click and choose Security & Compliance > Cloud Firewall. The Dashboard page will be displayed.
  4. Click Buy CFW. For more information, see Table 1.

    Table 1 Parameters for purchasing pay-per-use CFW

    Parameter

    Description

    Basic Settings

    Billing Mode

    Select Pay-per-use. You will be billed for the protection on your workloads from purchase to unsubscription.

    Region

    Region where the CFW is to be purchased.

    CFW can be used in the selected region only. To use CFW in another region, switch to the corresponding region and then purchase it. For details about the regions where CFW is available, see Can CFW Be Used Across Clouds or Regions?

    Editions

    Currently, only the professional edition is supported.

    Advanced Settings

    Firewall Name

    Firewall name.

    It must meet the following requirements:
    • Only letters (A to Z and a to z), numbers (0 to 9), spaces, and the following characters are allowed: -_
    • The value can contain 1 to 48 characters.

    Enterprise Project

    Enterprise project. Select the enterprise project that you belong to from the drop-down list. The purchased CFW instance will be put under that enterprise project for billing management, and will be able to protect the resources of all enterprise projects.

    This option is only available if you have enabled enterprise projects, or if you are logged in using an enterprise master account. To use this function, enable Enterprise Center. You can use an enterprise project to centrally manage your cloud resources and members by project.

    Value default indicates the default enterprise project. The original resources of your account and the resources that are not allocated to any enterprise projects under your account are displayed in the default enterprise project.

    Tags

    (Optional) It is recommended that you use the TMS predefined tag function to add the same tag to different cloud resources.

  5. Confirm the information and click Buy Now.
  6. Confirm the order details, select I have read and agreed to the Huawei Cloud Firewall Service Statement, and click Next.
  7. Select a payment method and pay for your order.

Effective Conditions

After the payment is successful, you can view the purchased firewall edition on the Dashboard page of the console.

References

Parent Topic: Purchasing and Changing the Specifications of CFW