[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],[],[[["\u003cp\u003eVPC firewall rules are provided free of charge to all users.\u003c/p\u003e\n"],["\u003cp\u003eCloud NGFW Standard data processing incurs a charge of $0.018/GB, applicable to internet-bound traffic evaluated by these rules in both directions, and this charge is billed to the project where the firewall evaluation occurs.\u003c/p\u003e\n"],["\u003cp\u003eCloud NGFW Enterprise has both an endpoint deployment charge of $1.75 per hour and a data processing charge of $0.018/GB for all flows sent for IPS inspection, and if a flow incurs both Standard and Enterprise data processing charges, the Standard charge is waived.\u003c/p\u003e\n"],["\u003cp\u003eHierarchical firewall policies are priced based on the number of attributes in all the rules they contain and the number of VMs they cover, with a standard policy costing $1.00 per VM per month and a large policy costing $1.50 per VM per month, with no charge if no VM is associated with the policy.\u003c/p\u003e\n"],["\u003cp\u003eFirewall Insights and Firewall Rule Logging pricing are detailed in their respective Network Intelligence Center and Network Telemetry pricing pages.\u003c/p\u003e\n"]]],[],null,["# Pricing\n\nCloud Next Generation Firewall pricing\n======================================\n\nVPC firewall rules\n------------------\n\n[Virtual Private Cloud (VPC) firewall rules](/vpc/docs/firewalls) are\nfree of charge.\n\nCloud NGFW Essentials and Cloud NGFW Standard features\n------------------------------------------------------\n\nCloud Next Generation Firewall Essentials and Cloud Next Generation Firewall Standard data processing is\nbilled in the following way:\n\n- When customers use only Cloud NGFW Essentials rules in their firewall\n policies, they do not incur any data processing charges to or from VM instances.\n\n- When customers use Cloud NGFW Standard rules in their firewall\n policies, traffic flows that are evaluated by those rules incur data processing charges:\n\n - Applies to any traffic evaluated from the internet to target VMs.\n - Applies to any traffic evaluated from target VMs to the internet.\n - Applies to both ingress and egress traffic flows.\n - Does not apply to traffic intercepted by proxy-based load balancers.\n- Firewall policies for traffic flows within Google Cloud only do not incur\n data processing charges.\n\n- $0.018/GB is metered in GiB in the backend (equivalent to $0.0193/GiB).\n\n- Data processing charges will be billed to the project where firewall evaluation\n occurs. In case of a shared VPC, the data process charge will be billed to the\n host project instead of the service project.\n\nCloud NGFW Enterprise\n---------------------\n\n- If a flow incurs both NGFW Standard and NGFW Enterprise data processing charges, the NGFW Standard data processing charge will be waived.\n- Cloud NGFW Enterprise billing includes two parts:\n - Firewall Endpoint deployment charge, billed to the billing project specified by the customer when an endpoint is created\n - Data Processing charge, billed to the parent project where firewall evaluation occurs. In case of a shared VPC, the data process charge will be billed to the host project instead of the service project. Data Processing charge will incur for all flows sent for IPS inspection, including packets in both directions.\n\n#### Example:\n\nThe user created a firewall endpoint in each of the zones in us-east1 (us-east1-b, us-east1-c, us-east1-d) with the same billing project: FW-Billing-Project, and associated the endpoint with VPC-1 under App-Project.\n\nThe user then configured firewall rules for VPC-1 to apply IPS inspection for its Internet ingress traffic and ran it for the whole month - 30 days, with 2TB inspected in total.\n\nIn this case, the total cost incurred in this month is:\n\n- Endpoint Deployment Charge: $1.75 \\* 24 \\* 30 \\* 3 = $3780, billed to FW-Billing-Project\n- Data Processing Charge: $0.018 \\* 2000 = $36, billed to App-Project\n\nHierarchical firewall policies and rules\n----------------------------------------\n\nEach [hierarchical firewall policy](/vpc/docs/firewall-policies)\nis priced based on the total number of attributes in all the firewall rules\nthat it contains and on the number of VMs that it covers.\n\nA rule *attribute* is an IP address range, port, protocol, or service account.\nFor more information about attributes, see\n*Hierarchical firewall rule attributes in a hierarchical firewall policy*\non the [Quotas](/vpc/docs/quota#per_organization) page.\n\n**Examples:**\n\nA policy with 200 attributes that covers 200 VMs costs $200/month: 1 \\* 200 =\n200.\n\nA policy with 600 attributes that covers 200 VMs costs $300/month: 1.50 \\*\n200 = 300.\n\nA policy that has no VMs is free.\n\nFirewall Insights\n-----------------\n\nFirewall Insights pricing is described in\n[Network Intelligence Center pricing](/network-intelligence-center/pricing#firewall-insights-pricing-details).\n\nFirewall Rules Logging\n----------------------\n\nFirewall Rules Logging pricing is described in\n[Network Telemetry pricing](/vpc/network-pricing#network-telemetry).\n\nWhat's next\n-----------\n\n- Read the [Cloud NGFW documentation](/vpc/docs/firewall-policies-rule-details).\n\n#### Request a custom quote\n\nWith Google Cloud's pay-as-you-go pricing, you only pay for the services you use. Connect with our sales team to get a custom quote for your organization.\n[Contact sales](/contact?direct=true)"]]
