DDoS Defender Fee (Pre-paid & Post-paid)
Last updated:2026-01-14 16:30:22
Note:
1. The billing model below applies to customers onboarded after 12 January 2026.
2. DDoS Defender can be attached only to EdgeOne Standard or Enterprise Plan zones (domains and L4 proxy instances); other EdgeOne plan versions are not supported.
3. The following sections describe the DDoS Defender billing model and pricing; for purchase instructions, refer to the DDoS Defender Purchase Guide.
DDoS Defender is a powerful, always-on DDoS-mitigation service jointly launched by EdgeOne and the Tencent Cloud DDoS Protection team, providing exclusive scrubbing-center capacity. After subscribing to DDoS Defender, users can set the protection level of their domains or L4 proxy instances to "Advanced protection level" or "Ultimate protection level".
Base Plan Fee (Required)
DDoS Defender offers two base plans; choose the one that fits your traffic's attack exposure:
Essential Plan – 2 best-effort mitigation sessions per month. Best for low-risk workloads. After the two sessions are exhausted, you can upgrade to Premium plan to continue protection.
Premium Plan – Unlimited best-effort mitigation sessions every month. Designed for workloads that demand the highest availability.
Comparison Item | Essential Plan | Premium Plan |
Price | 5,000 USD/month/account | |
Mitigation Sessions | ||
Clean data transfer included (no extra fee) | 10 TB/month | 10 TB/month |
25 | 100 | |
Protection capability | L3/4 DDoS & HTTP DDoS protection | |
Value-added services | - | Optional add-on: |
Note:
Note 1
: Subscription is tied to the Tencent Cloud root account. One root account may protect only the business assets of a single corporate entity; channel resale is not supported. If you are a distributor, please contact us for a custom quotation.
Note 2
: "Best-effort mitigation" means that mitigation is provided to the full extent of the current Tencent Cloud scrubbing-center capacity. The exact capacity varies by protection region and resource type; see DDoS Protection Capacity Description for details. Each mitigation session lasts up to 24 hours; any attack exceeding 24 hours will be counted as a new session.
Note 3
: After subscribing to the Premium Plan, no additional fees are charged based on the number of mitigation sessions. However, if assets under the account suffer sustained attacks, Tencent Cloud reserves the right to redirect traffic to null-routing (black-holing).
Note 4
: The quota for “Protected resources” here can only offset the usage generated by EO domains and EO global (excluding mainland China) L4 proxy instances. For mainland-China or global L4 proxy instances, each DDoS Defender base plan includes one protected resource at no additional cost.Protection Add-on Fee (Optional)
For scenarios that need stronger protection, DDoS Defender offers the following protection add-ons:
Add-on Type | Description | Price |
Mainland China protection-capacity add-on | Extends scrubbing capacity to Tbps level within mainland China. | 700 USD/month/account |
Clean Data Transfer Fee (Required)
Note:
Clean data transfer is billed on traffic.
DDoS Defender clean traffic is billed on top of the security-acceleration traffic of your EdgeOne plan.
Pre-paid Monthly
After you subscribe to a DDoS Defender base plan, a default quota of clean traffic is included. If you need more, the following rates apply:
Clean Traffic | Unit Price (USD/GB/month) |
0 – 10 TB (inclusive) | 0 |
Over 10 TB | 0.06 |
Note:
There are two ways to purchase additional pre-paid monthly quota:
1. Add it when you first subscribe: see DDoS Defender Purchase Guide.
2. Upgrade later in the console: see DDoS Defender Upgrade/Downgrade Guide.
Post-paid Overage
Once clean traffic exceeds the monthly pre-paid quota, overage is billed in arrears. The settlement cycle is hourly.
Hourly settlement – progressive tiering within the billing month (actual month).
Pricing reference:
Traffic tier (USD/GB) | Mainland China | Global (excl. Mainland China) |
0 – 100 TB (excl.) | 0.1 | 0.025 |
100 – 500 TB (excl.) | 0.08 | 0.02 |
500 – 1,000 TB (excl.) | 0.05 | 0.015 |
1,000 – 5,000 TB (excl.) | 0.035 | 0.012 |
≥ 5,000 TB | 0.03 | 0.01 |
Protected Resources Fee (Required)
Pre-paid monthly
After you subscribe to a DDoS Defender base plan, a default quota of protected resources is included. If you need more, the following rates apply:
Protected Resources | Unit Price (USD/unit/month) |
Essential Plan: 0–25 (inclusive) Premium Plan: 0–100 (inclusive) | 0 |
Essential Plan: number exceeding 25 Premium Plan: number exceeding 100 | 7 |
Note:
1. The monthly pre-paid quota can only offset resources generated by EO domains and EO global (excluding mainland China) L4 proxy instances.
2. There are two ways to purchase additional pre-paid monthly quota:
2.1 Add it when you first subscribe: see DDoS Defender Purchase Guide.
2.2 Upgrade later in the console: see DDoS Defender Upgrade/Downgrade Guide.
Post-paid Overage
Once the number of protected resources exceeds the monthly pre-paid quota, overage is billed in arrears.
The settlement cycle is hourly.
Hourly settlement – progressive tiering within the billing month (actual month).
Pricing reference:
Protection Resources Tier (USD/unit/hour) | Protected Resource Type | ||
| EO Domain | EO global (excluding Chinese mainland) L4 proxy instance | EO Chinese mainland or global L4 proxy instance |
0 - 100 (exclusive) | 0.05 | 0.05 | 1st resource: 0 USD Each additional resource: 1.5 USD/unit/hour |
100 - 500 (exclusive) | 0.04 | 0.04 | |
500 - 1000 (exclusive) | 0.03 | 0.03 | |
1000 - 5000 (exclusive) | 0.02 | 0.02 | |
≥ 5000 | 0.01 | 0.01 | |
Custom Protection Policy Fee (Optional)
If you need SOC (Security Operations Center) services, escort protection service, or wish Tencent Cloud security experts to tailor protection policies for your business, please contact us for a customized solution and quotation.
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No
Feedback