tencent cloud

Tencent Cloud Firewall

Release Notes and Announcements
Release Notes
Engine Release Notes
Product Announcement
Getting Started
Product Introduction
Overview
Advantages
Scenarios
Key Concepts
Supported Region
CFW High Availability Specification
Purchase Guide
Billing Overview
Purchase Instructions
Billing Modes
Renewal Instructions
Resource deletion upon expiration
Refund Instructions
Operation Guide
Firewall Toggle
Asset Center
Alert Management
Traffic Monitoring
Access Control
Intrusion Defense
Network Detection and Response
Honeypot
Log Audit
Log Analysis
Log Shipping
Log Fields
Notifications and Settings
Common Tools
Practical Tutorial
Use Cloud Firewall with Other Products
DNS Firewall Practical Tutorial
Practical Tutorial for Protecting Against Mining Attacks
Inter-VPC Firewall Practice Tutorial
Troubleshooting
Solution for False Alarms and False Positives
API Documentation
History
Introduction
API Category
Making API Requests
Intrusion Defense APIs
Access Control APIs
Other APIs
Enterprise Security Group APIs
Firewall Status APIs
Data Types
Error Codes
FAQs
Basic Introduction
Bandwidth
Firewall
Feature
Log
Account
Billing
Others
Service Level Agreement
CFW Policy
Privacy Policy
Data Processing And Security Agreement

Billing Modes

PDF
Focus Mode
Font Size
Last updated: 2026-03-12 16:56:39

Prepaid

The billing method for the CFW main package and feature extension is: prepaid.
Type
Description
Overview
Tencent Cloud Firewall provides users with three paid editions: Premium Edition, Enterprise Edition, and Ultimate Edition.
These three editions adopt the prepaid (yearly/monthly subscription) mode: Users make a one-time payment for one month, multiple months, or multiple years based on their usage requirements. After successful payment, the relevant resources of Tencent Cloud Firewall will be allocated by the system for user use. Upon expiration, if the user does not renew, the resources will be reclaimed.
Advantages
During long-term protection, the unit price is lower than that of pay-as-you-go.
Long-term reservation of cloud resources to avoid situations where no cloud resources are available.
Applicable Scenario
When users exhibit the following characteristics, it is recommended to adopt the prepaid mode.
Has a relatively stable business scenario.
Requires long-term utilization of cloud resources.

Postpaid

The following features of CFW support scaling up specifications in a postpaid manner:
Function
Description
Price
Log analysis
Postpaid based on actual storage specifications is suitable for users who cannot estimate log volume and require unaffected log storage. Before enabling this service, you need to purchase the Log Analysis feature at USD 99/month.
0.006 USD/GB/day for the range of 1000GB to 6120GB
0.004 USD/GB/day for usage beyond 6120GB
NAT Firewall
When traffic exceeds the instance specifications, elastic protection is initiated and postpaid charging is applied, providing protection capability to handle temporary traffic peaks.
2.41 USD/Mbps/day
VPC Firewall
When traffic exceeds the instance specifications, elastic protection is initiated with postpaid charging, providing protection capability against temporary traffic peaks.
0.09 USD/Mbps/day

Billing Examples

Suppose you enable NAT Firewall elastic protection at 12:00 on a certain day. On that day, the traffic of this NAT Firewall Instance is 550M, the instance bandwidth specification is 500M, and the elasticity cost for that day is (550-500) × 2.41 × (24 - 12)/24 = 60.25 USD.
Suppose you enable pay-as-you-go storage for Log analysis at 00:00 on a certain day. Your Log storage specification is 1500GB. On that day, you generate 36GB of new logs, then the cost for that day is 1536 × 0.006 = 9.216 USD.
Suppose you enable VPC Firewall elastic protection at 06:00 on a certain day. On that day, the traffic of this VPC Firewall instance is 1000M, the instance bandwidth specification is 800M, and the elasticity cost for that day is (1000-800) × 0.09 × (24 - 6)/24 = 13.5 USD.

Billing Process


1. Top up your account first to ensure the balance exceeds the pre-frozen amount. After the top-up is completed, pay-as-you-go services can be activated normally.
2. After a pay-as-you-go product is activated and purchased, the system initiates pay-as-you-go billing. Common billing cycles include: hour, day, and month.
3. After activation, the system estimates the frozen amount based on the product's settlement cycle and historical usage, and freezes the balance.
4. Unfreeze: On the settlement date (or time), the system will unfreeze the frozen amount for the device, release it to the available balance, and then proceed with settlement.
5. When the billing reaches the settlement cycle, the system performs rate calculation and deduction based on usage and unit price, then generates the bill.
6. When your account is overdue, the elastic features of NAT and VPC Firewall will be disabled. If your CFW main package is still valid, NAT and VPC Firewall will continue to provide protection based on instance specifications.

If you have any questions about your postpaid bill, feel free to submit a ticket to contact us.



Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback