Help Center/ Anti-DDoS Service/ Drawer/ Purchasing AAD/ Elastic Protection Bandwidth
Updated on 2026-04-07 GMT+08:00
Share

Elastic Protection Bandwidth

Description

Basic protection bandwidth can be used to defend against attacks (prepaid).

Elastic protection bandwidth is the maximum available defense bandwidth (postpaid). When the attack peak exceeds the basic protection bandwidth, the system uses the elastic protection bandwidth to ensure service continuity.

Protection Capacity

The protection capacity equals the basic or elastic protection bandwidth, whichever is higher.

If the elastic protection bandwidth equals the basic protection bandwidth, elastic protection does not take effect.

Example 1: If the basic protection bandwidth is 10 Gbit/s and the elastic protection bandwidth is 10 Gbit/s, elastic protection does not take effect, and the protection capacity is 10 Gbit/s.

Example 2: If the basic protection bandwidth is 10 Gbit/s and the elastic protection bandwidth is 20 Gbit/s, elastic protection takes effect when the attack traffic exceeds 10 Gbit/s, and the protection capacity is 20 Gbit/s.

Example 3: If the basic protection bandwidth is 10 Gbit/s and the elastic protection bandwidth is 20 Gbit/s, elastic protection takes effect when the attack traffic exceeds 20 Gbit/s, and the protection capacity is 20 Gbit/s.

Billing Principles

Basic protection bandwidth

If the peak attack traffic is less than or equal to the basic protection bandwidth, no extra fees will be charged.

Elastic protection bandwidth

It is billed by day, postpaid. It is billed based on the DDoS attack peaks on the current day. The billing rules are as follows:

  • Peak DDoS attack traffic on the current day ≤ Basic protection bandwidth: No elastic protection bandwidth fee is generated.
  • Basic protection bandwidth < Peak DDoS attack traffic on the current day < Elastic protection bandwidth: Elastic protection bandwidth fees will be incurred.
  • Peak DDoS attack traffic on the current day ≥ Elastic protection bandwidth: Elastic protection bandwidth fees will be incurred.

The elastic protection bandwidth usage in different scenarios is calculated as follows:

  • Basic protection bandwidth < Peak attack traffic < Elastic protection bandwidth: Elastic protection bandwidth usage (billed) = Peak attack traffic on the current day – Basic protection bandwidth
  • Peak attack traffic ≥ Elastic protection bandwidth: Elastic protection bandwidth usage (billed) = Elastic protection bandwidth – Basic protection bandwidth

Billing Example

For example, for three AAD instances, the basic protection bandwidth is 20 Gbit/s, and the elastic protection bandwidth is 100 Gbit/s. If the three instances are under multiple DDoS attacks on the same day, the billing rules of the elastic protection bandwidth are as follows:

Table 1 Elastic bandwidth billing rules

Instance

Attack Traffic Peak

Fees Generated

Description

Instance A

20 Gbit/s

No

If the peak attack traffic does not exceed the basic protection bandwidth, no elastic bandwidth fee is generated.

Instance B

80 Gbit/s

Yes

Billed elastic bandwidth: 80 Gbit/s - 20 Gbit/s = 60 Gbit/s.

Instance C

120 Gbit/s

Yes

120 Gbit/s is greater than the elastic protection bandwidth 100 Gbit/s.

Billed protection bandwidth: 100 Gbit/s - 20 Gbit/s = 80 Gbit/s.

FAQs

What Is the Maximum Protection Capacity If I Buy an AAD Instance with 10 Gbit/s Basic Bandwidth and 20 Gbit/s Elastic Bandwidth?

20 Gbit/s. Your maximum protection capacity is equivalent to the elastic protection bandwidth you select. The elastic protection bandwidth does not necessarily provide higher protection than the basic protection bandwidth. If the elastic protection bandwidth is the same as the basic protection bandwidth, the elastic protection bandwidth will not work.

For example, if you select 50 Gbit/s basic protection bandwidth and 50 Gbit/s elastic protection bandwidth, your maximum protection capacity is still 50 Gbit/s.

How Will I Be Billed If I Buy Elastic Bandwidth But There Are No Attacks Exceeding the Basic Protection Bandwidth?

In this case, you only need to pay for the yearly basic protection bandwidth.

Can I Increase My Elastic Protection Bandwidth from 100 Gbit/s to 200 Gbit/s?

Yes. You can increase or decrease the elastic protection bandwidth on the AAD console. The new elastic protection bandwidth takes effect immediately. The billing is still based on the peak attack traffic on the current day.

How Is the Fee Calculated If an IP Address Is Attacked Multiple Times in a Day?

The elastic bandwidth fee is generated based on the peak attack traffic on the day (00:00 - 24:00), and is billed only once. For example, if an IP address is attacked by 50 Gbit/s, 100 Gbit/s, and 200 Gbit/s attacks three times in a day, the elastic protection fee of the day is billed based on the peak traffic 200 Gbit/s.

If My China Telecom, China Unicom, and China Mobile IP Addresses Are All Attacked, Will I Be Billed Based on the Peak Attack Traffic?

The elastic bandwidth fee is billed per IP address, not per AAD instance. Therefore, the elastic bandwidth fee will be generated for each of the three IP addresses.

How Do I Avoid Fees Incurred by Elastic Bandwidth?

You can set the elastic protection bandwidth to be the same as the basic protection bandwidth to avoid generating elastic bandwidth fees.

Parent Topic: Purchasing AAD