Pricing
  • 14-Day Trial Plan Benefits Description
  • Free Plan Guide
  • Billing Overview
  • Billing Items
    • Basic Service Fees
      • Plan Fees
      • Fees for Out-of-plan Resource Usage (Pay-as-You-Go)
    • Value-added Service Fees
      • DDoS Defender Fee (Pre-paid & Post-paid)
      • VAU Fee (Pay-as-You-Go)
      • Dedicated DDoS Mitigation Fee (Pay-as-You-Go)
      • Cross-MLC-border acceleration traffic fee（Pay-as-You-Go）
      • Media Just-In-Time Processing Duration Fee (Pay-as-You-Go)
      • Edge Function Execution Fee (Pay-As-You-Go)
      • Log Analysis Fee (Postpaid)
      • Edge inference fee (postpaid)
    • Extra Package Description (Prepaid)
    • Related Tencent Cloud Services
  • Purchase Guide
    • Purchase Guide
    • Package Redemption Code Usage Guide
    • Extra Package Purchase Guide
    • EdgeOne Plan Upgrade Guide
    • DDoS Defender Purchase Guide
    • DDoS Defender Upgrade/Downgrade Guide
  • Renewal Guide
    • Renewal Guide
    • Extra Package Auto-renewed Guide
    • DDoS Defender Renewed Guide
  • Expenses and Refund Instructions
    • Overdue and Expiration Policies
    • Refund Policy
  • Comparison of EdgeOne Plans
  • About "clean traffic" billing instructions
  • DDoS Protection Capacity Description
Docs Overview/
Pricing/
Billing Items/
Value-added Service Fees/
DDoS Defender Fee (Pre-paid & Post-paid)/

DDoS Defender Fee (Pre-paid & Post-paid)

Note:
1. The billing model below applies to customers onboarded after 12 January 2026.
2. DDoS Defender can be attached only to EdgeOne Standard or Enterprise Plan zones (domains and L4 proxy instances); other EdgeOne plan versions are not supported.
3. The following sections describe the DDoS Defender billing model and pricing; for purchase instructions, refer to the DDoS Defender Purchase Guide.
DDoS Defender is a powerful, always-on DDoS-mitigation service launched by EdgeOne DDoS Protection team, providing exclusive scrubbing-center capacity.




Base Plan Fee (Required)

DDoS Defender offers two base plans; choose the one that fits your traffic's attack exposure:
Essential Plan – 2 best-effort mitigation sessions per month. Best for low-risk workloads. After the two sessions are exhausted, you can upgrade to Premium plan to continue protection.
Premium Plan – Unlimited best-effort mitigation sessions every month. Designed for workloads that demand the highest availability.
Comparison Item
Essential Plan
Premium Plan
Price
1,300 USD/month/account1
5,000 USD/month/account
Mitigation Sessions
2 best-effort mitigations2/month/account
Unlimited3 best-effort mitigations
Clean data transfer included (no extra fee)
10 TB/month
10 TB/month
Protected resources included (no extra fee)4
25
100
Protection capability
L3/4 DDoS & HTTP DDoS protection
Value-added services
-
Optional add-on:
Custom protection policy
Note:

Note 1
: Subscription is tied to the Tencent Cloud root account. One root account may protect only the business assets of a single corporate entity; channel resale is not supported. If you are a distributor, please contact us for a custom quotation.

Note 2
: "Best-effort mitigation" means that mitigation is provided to the full extent of the current Tencent Cloud scrubbing-center capacity. The exact capacity varies by protection region and resource type; see DDoS Protection Capacity Description for details. Each mitigation session lasts up to 24 hours; any attack exceeding 24 hours will be counted as a new session.

Note 3
: After subscribing to the Premium Plan, no additional fees are charged based on the number of mitigation sessions. However, if assets under the account suffer sustained attacks, Tencent Cloud reserves the right to redirect traffic to null-routing (black-holing).

Note 4
: The quota for “Protected resources” here can only offset the usage generated by EO domains and EO global (excluding mainland China) L4 proxy instances. For mainland-China or global L4 proxy instances, each DDoS Defender base plan includes one protected resource at no additional cost.

Protection Add-on Fee (Optional)

For scenarios that need stronger protection, DDoS Defender offers the following protection add-ons:
Add-on Type
Description
Price
Mainland China protection-capacity add-on
Extends scrubbing capacity to Tbps level within mainland China.
700 USD/month/account

Clean Data Transfer Fee (Required)

Note:
Clean data transfer is billed on traffic.
DDoS Defender clean traffic is billed on top of the security-acceleration traffic of your EdgeOne plan.

Pre-paid monthly

After you subscribe to a DDoS Defender base plan, a default quota of clean traffic is included. If you need more, the following rates apply:
Clean Traffic
Unit Price (USD/GB/month)
0 – 10 TB (inclusive)
0
Over 10 TB
0.06
Note:
There are two ways to purchase additional pre-paid monthly quota:
1. Add it when you first subscribe: see DDoS Defender Purchase Guide.
2. Upgrade later in the console: see DDoS Defender Upgrade/Downgrade Guide.

Post-paid Overage

Once clean traffic exceeds the monthly pre-paid quota, overage is billed in arrears. The settlement cycle is hourly.
Hourly settlement – progressive tiering within the billing month (actual month).
Pricing reference:
Traffic tier (USD/GB)
Mainland China
Global (excl. Mainland China)
0 – 100 TB (excl.)
0.1
0.025
100 – 500 TB (excl.)
0.08
0.02
500 – 1,000 TB (excl.)
0.05
0.015
1,000 – 5,000 TB (excl.)
0.035
0.012
≥ 5,000 TB
0.03
0.01

Protected Resources Fee (Required)

Pre-paid monthly

After you subscribe to a DDoS Defender base plan, a default quota of protected resources is included. If you need more, the following rates apply:
Protected Resources
Unit Price (USD/unit/month)
Essential Plan: 0–25 (inclusive)
Premium Plan: 0–100 (inclusive)
0
Essential Plan: number exceeding 25
Premium Plan: number exceeding 100
7
Note:
1. The monthly pre-paid quota can only offset resources generated by EO domains and EO global (excluding mainland China) L4 proxy instances.
2. There are two ways to purchase additional pre-paid monthly quota:
2.1 Add it when you first subscribe: see DDoS Defender Purchase Guide.
2.2 Upgrade later in the console: see DDoS Defender Upgrade/Downgrade Guide.

Post-paid Overage

Once the number of protected resources exceeds the monthly pre-paid quota, overage is billed in arrears.
Hourly settlement – progressive tiering within the billing month (actual month).
Protection Resources Tier (USD/unit/hour)
Protected Resource Type
EO Domain
EO global (excluding Chinese mainland) L4 proxy instance
EO Chinese mainland or global L4 proxy instance
0 - 100 (exclusive)
0.05
0.05
1st resource: 0 USD
Each additional resource: 1.5 USD/unit/hour
100 - 500 (exclusive)
0.04
0.04
500 - 1000 (exclusive)
0.03
0.03
1000 - 5000 (exclusive)
0.02
0.02
≥ 5000
0.01
0.01

Custom Protection Policy Fee (Optional)

If you need SOC (Security Operations Center) services, escort protection service, or wish Tencent Cloud security experts to tailor protection policies for your business, please contact us for a customized solution and quotation.