Help Center/ Anti-DDoS Service/ Drawer/ Purchasing AAD/ Elastic Protection Bandwidth

Updated on 2025-07-21 GMT+08:00

Elastic Protection Bandwidth

Description

Elastic protection bandwidth is the maximum available defense bandwidth. The elastic protection bandwidth is not a part that is added on top of the basic protection bandwidth. If the elastic protection bandwidth is the same as the basic protection bandwidth, the elastic bandwidth will not work.

The elastic protection bandwidth is billed by day, postpaid. It is billed based on the DDoS attack peaks on the current day. The billing rules are as follows:

Peak DDoS attack traffic on the current day ≤ Basic protection bandwidth: No elastic protection bandwidth fee is generated.
Basic protection bandwidth < Peak DDoS attack traffic on the current day < Elastic protection bandwidth: Elastic protection bandwidth fees will be incurred.
Peak DDoS attack traffic on the current day ≥ Elastic protection bandwidth: Elastic protection bandwidth fees will be incurred.

The elastic protection bandwidth usage in different scenarios is calculated as follows:

Basic protection bandwidth < Peak attack traffic < Elastic protection bandwidth: Elastic protection bandwidth usage (billed) = Peak attack traffic on the current day – Basic protection bandwidth
Peak attack traffic ≥ Elastic protection bandwidth: Elastic protection bandwidth usage (billed) = Elastic protection bandwidth – Basic protection bandwidth

For example, for three AAD instances, the basic protection bandwidth is 20 Gbit/s, and the elastic protection bandwidth is 100 Gbit/s. If the three instances are under multiple DDoS attacks on the same day, the billing rules of the elastic protection bandwidth are as follows:

**Table 1** Elastic bandwidth billing rules
Instance	Attack Traffic Peak	Fees Generated	Description
Instance A	20Gbps	No	If the peak attack traffic does not exceed the basic protection bandwidth, no elastic bandwidth fee is generated.
Instance B	80Gbps	Yes	Billed elastic bandwidth: 80 Gbit/s - 20 Gbit/s = 60 Gbit/s.
Instance C	120Gbps	Yes	120 Gbit/s is greater than the elastic protection bandwidth 100 Gbit/s. Billed protection bandwidth: 100 Gbit/s - 20 Gbit/s = 80 Gbit/s.

FAQs

What is the maximum protection capability I will get if I buy a basic protection bandwidth of 10 Gbit/s and an elastic protection bandwidth of 20 Gbit/s?

20G. Your maximum protection capability is 20 Gbit/s. Your maximum protection capability is equivalent to the elastic protection bandwidth you select. Do not mistake the elastic protection bandwidth as providing higher protection than the basic protection bandwidth. If the elastic protection bandwidth is the same as the basic protection bandwidth, the elastic protection bandwidth will not work.

For example, if you select 50 Gbit/s basic protection bandwidth and 50 Gbit/s elastic protection bandwidth, your maximum protection capability is still 50 Gbit/s.

How am I billed if I have bought an elastic bandwidth but there are no attacks exceeding the basic protection bandwidth?

In that case, you would only need to pay the monthly fee of the basic protection bandwidth.

If my elastic protection bandwidth, for example, 100 Gbit/s, become insufficient, can I increase it to 200 Gbit/s?

Yes. You can increase or decrease the elastic protection bandwidth on the Advanced Anti-DDoS console. The new elastic protection bandwidth takes effect immediately, but the billing is still based on the peak attack traffic on the current day.

How is the elastic bandwidth billed if an IP address is attacked many times a day?

The elastic bandwidth fee is generated based on the peak attack traffic on the day (00:00 - 24:00), and is billed only once. For example, if an IP address is attacked by 50 Gbit/s, 100 Gbit/s, and 200 Gbit/s attacks three times in a day, the elastic protection fee of the day is billed based on the peak traffic of 200 Gbit/s.

If China Telecom, China Unicom, and China Mobile IP addresses are used, is the elastic bandwidth fee still be billed based on the peak attack traffic?

The elastic bandwidth fee is billed based on a single IP address instead of an AAD instance. Therefore, the elastic bandwidth fee is generated for each of the three IP addresses.