Docs

Cloud Firewall

Billing

Specification Change Instructions

The cloud firewall supports flexible configuration specification adjustments, including instance version upgrades/downgrades, configuration specification upgrades/downgrades, switching from annual/monthly billing to pay-as-you-go, and from pay-as-you-go to annual/monthly billing, etc.

Concept Explanation

The projects that the cloud firewall supports for configuration changes are shown in the table below:

Change configuration method	Change configuration items
Specification Upgrade	Support upgrading the version of the cloud firewall instance, including upgrading from the advanced version to the enterprise or flagship version, and upgrading the enterprise version to the flagship version. Support upgrading the configuration specifications of the current version, including internet boundary traffic handling capacity, number of VPC firewalls, VPC boundary traffic handling capacity, number of NAT firewalls, NAT boundary traffic handling capacity, number of access control policies, number of domain block policies, and log capacity.
Specification downgrade	Support for downgrading cloud firewall instance versions, including the flagship version down to the enterprise or advanced version, and the enterprise version down to the advanced version Support for downgrading the configuration specifications of the current version, including internet boundary traffic processing capacity, the number of VPC firewalls, VPC boundary traffic processing capacity, the number of NAT firewalls, NAT boundary traffic processing capacity, the number of access control policies, the number of domain blocking policies, and log capacity.
Change billing method	Switch from annual or monthly to pay-as-you-go Switch from pay-as-you-go to annual or monthly

Tip

Self-service upgrades and downgrades of the cloud firewall, as well as changes in billing models, will not affect your business.

Notes on Specification Changes

Upgrade

Instance version upgrades, taking into account business protection needs, cost factors, etc., you can upgrade to a suitable version of the cloud firewall.

Expansion pack upgrades cannot exceed the maximum specification limits of the current version, including internet boundary traffic processing capacity, number of VPC firewalls, VPC boundary traffic processing capacity, number of NAT firewalls, NAT boundary traffic processing capacity, number of access control policies, number of domain blocking policies, and log capacity. For example, for the enterprise version of the cloud firewall, the maximum traffic processing capacity for VPC firewalls is 5Gbps. If you need to expand to 10Gbps, please upgrade to the flagship version.

Downgrade

Configuration specifications after downgrading, cannot be lower than the default specifications of the current cloud firewall instance version. For example, the enterprise edition cloud firewall has a default internet boundary traffic processing capability of 50Mbps, which cannot be reduced to below 50Mbps.

Configuration specifications after downgrading, cannot be lower than the currently occupied authorized specifications. Including the number of VPC firewalls, NAT firewalls, access control policies, domain blocking policies, and log capacity.

For example, if the enterprise edition cloud firewall uses 4 VPC firewalls, the VPC firewall expansion package cannot be reduced to below 4, and VPC firewall instances must be released before downgrading.

If the enterprise edition cloud firewall uses 2 VPC firewalls, it cannot be downgraded to the advanced edition, as the advanced edition does not support VPC firewalls. VPC firewall instances must be released before downgrading.

The business specifications after downgrading cannot exceed the current specifications of the firewall version. Including internet boundary traffic processing capability, VPC boundary traffic processing capability, and NAT boundary traffic processing capability. When the business traffic exceeds the protective bandwidth specifications of the internet boundary firewall, VPC boundary firewall, and NAT boundary firewall, the cloud firewall does not guarantee security effectiveness, which may cause network speed throttling and packet loss.

Change billing model

Annual and monthly subscription to pay-as-you-go, The specifications for annual and monthly subscription cannot exceed the pay-as-you-go specifications. Including internet boundary traffic processing capacity, number of VPC firewalls, VPC boundary traffic processing capacity, number of NAT firewalls, NAT boundary traffic processing capacity, number of access control policies, number of domain blocking policies.

If the flagship version user uses 6 VPC firewalls, it cannot be changed to the pay-as-you-go version, as the pay-as-you-go version only supports 5 VPC firewalls.

If the enterprise version user configures 5 domain blocking policies, it cannot be switched to the pay-as-you-go version, as the pay-as-you-go version does not support domain blocking.

Switching from pay-as-you-go to annual and monthly subscription, cannot be lower than the default specifications of the current cloud firewall instance version. If using 2 VPC firewalls on a pay-as-you-go basis, switching to an annual and monthly subscription cannot select the advanced version, and must at least select the enterprise version or above.

Operational instructions for specification changes

If an upgrade or downgrade is needed, click Upgrade and purchase the appropriate cloud firewall annual or monthly version based on your business needs.

If you need to change the billing model, click Switch to pay-as-you-go or Switch to annual or monthly, and check the agreement to buy immediately.

Last updated: 2025.06.11 20:34:09