Elastic Compute Service (ECS) has limits on its features, performance, and quotas. You can request an increase for some of these quotas. Before you use ECS, review the limits to ensure the service meets your business needs. Plan ahead to request quota increases or to work around limits that cannot be changed. This topic describes the limits of ECS and explains how to request an increase.
Explanation of table columns
Review the tables in each section to understand the specific limits. The table columns are explained as follows:
Limit item: The product feature, performance metric, or quota that is subject to a limit.
NoteA quota is the maximum amount of a cloud resource or the maximum number of operations that a single Alibaba Cloud account can use.
Restriction: This section describes the restrictions for this item.
If the limit item is an ECS quota, it has a quota ID. You can use the quota ID to query the maximum value of the limit.
How to increase the quota: Indicates whether you can request an increase for the limit.
If a limit cannot be increased, you must plan your resources to stay within the specified limit. If a limit can be increased, you can follow the specified method to request an increase.
Instances
Limit item | Limit | How to increase the quota |
vCPU quota items | The maximum number of vCPUs of an instance family that a single Alibaba Cloud account can have in a specific region for a specific billing method (subscription, pay-as-you-go, or spot). For more information, see vCPU quota items. | |
GPU card and vGPU quota items | The maximum number of GPU cards of an instance family or the maximum number of vGPU instances that a single Alibaba Cloud account can have in a specific region for a specific billing method (subscription, pay-as-you-go, or spot). For more information, see GPU card and vGPU quota items. | |
Maximum number of subscription instances that a single Alibaba Cloud account can purchase at a time in a specific region | To view the quota, use the quota ID | None |
Convert pay-as-you-go to subscription |
| None |
Convert subscription to pay-as-you-go | When you convert a subscription instance to a pay-as-you-go instance, a refund is issued. Refunds consume your refund quota. If your monthly refund quota is exceeded, you cannot process more refunds. This means you cannot convert subscription instances to pay-as-you-go instances. For more information, see Convert a subscription instance to a pay-as-you-go instance. Note The refund quota is subject to the amount displayed on the conversion page. The quota is reset to zero on the first day of the next month. | None |
Instance families that support secondary virtualization | Only ECS Bare Metal Instances and Super Computing Clusters support secondary virtualization. Other instance families do not support the installation of virtualization software or secondary virtualization. | None |
Sound card applications | Sound card applications are not supported. | None |
Loading external hardware devices | You cannot directly load external hardware devices, such as hardware dongles, USB flash drives, external hard disks, or bank USB keys. You can try using software dongles or dynamic password for secondary authentication. | None |
Multicast protocol | The multicast protocol is not supported. To achieve one-to-many communication similar to multicast, use unicast point-to-point communication as an alternative. | None |
Website ICP filing | To apply for an ICP filing for a website or app, you must purchase a subscription ECS instance for a period of 3 months or longer. Each ECS instance can be used for ICP filings for a maximum of five websites or apps. For more information, see ICP filing server check. | None |
License | The licenses of some software or applications must be bound to the hardware information of the ECS instance. Migrating an ECS instance may change its hardware information, which can cause the license to become invalid. | None |
vCPU quota items
GPU card and vGPU quota items
Images
Limit item | Limit | How to increase the quota |
Maximum number of custom images that a single Alibaba Cloud account can retain in a specific region | To view the quota, use the quota ID | |
Maximum number of users with whom a single custom image can be shared | To view the quota, use the quota ID | |
Limits on images and instance types | Instance types with 4 GiB or more memory cannot use 32-bit images. | None |
For more information about images, see Overview of images.
Block storage
Limit item | Limit | How to increase the quota |
Number of system disks per instance | 1 | None |
Number of data disks per instance | The maximum number of disks that can be attached to an instance varies by instance type. For more information, see Instance families. Note When you create an instance, you can attach a maximum of 1 system disk and 16 data disks. If the instance requires more data disks, you need to attach them after the instance is created. You can call the DescribeInstanceTypes API to query the maximum number of disks that can be attached to different instance types. | None |
Disk capacity quota for a single Alibaba Cloud account in a specific region and zone | The capacity quota varies by disk category. You can view the quota for each disk category. For more information, see View or increase block storage quotas. | |
Capacity of a single basic disk | 5 GiB to 2,000 GiB | None |
Capacity of a single standard SSD | 20 GiB to 32,768 GiB | None |
Capacity of a single ultra disk | 20 GiB to 32,768 GiB | None |
Capacity of a single ESSD |
| None |
Capacity of a single ESSD AutoPL disk | 1 GiB to 65,536 GiB | None |
Single ESSD Entry disk | 10 GiB to 32,768 GiB | None |
Capacity of a single regional ESSD | 1 GiB to 65,536 GiB | None |
Capacity of a single local SSD | 5 GiB to 800 GiB | None |
Total capacity of local SSDs per instance | 1,024 GiB | None |
Capacity of a single elastic ephemeral disk | 64 GiB to 8,192 GiB | None |
Capacity limit of a single system disk |
Note The maximum capacity of a basic disk (a retired disk category) used as a system disk is 500 GiB. | None |
Can you attach new local disks to an instance with local disks? | No. | None |
Can you change the configuration of an instance with local disks? | You can change only the bandwidth. | None |
Mount point range for Linux system disks |
| None |
Mount point range for Linux data disks | The naming of mount points varies based on the number of attached data disks:
| None |
Block storage is calculated in binary units. For example, 1 GiB = 1,024 MiB.
For more information about block storage, see Overview of block storage.
Snapshots
Limit item | Limit | How to increase the quota |
Number of manual snapshots that can be retained for a single disk |
| None |
Number of automatic snapshots that can be retained for a single disk |
| None |
Number of archived snapshots that can be retained for a single disk | 10,000 | None |
Number of automatic snapshot policies that a single Alibaba Cloud account can retain in a single region | 100 | None |
Number of automatic snapshot policies that can be set for a single disk | 1 | None |
Number of concurrent snapshots that can be created for a single disk |
| None |
Number of concurrent snapshots that can be archived for a single disk | 10 | None |
Block storage class |
| None |
Download or export a snapshot | You cannot download or export created snapshots. You can create custom images from snapshots and export the custom images to your on-premises device. | None |
Constraints on creating manual and automatic snapshots |
| None |
For more information about snapshots, see Overview of snapshots.
SSH key pairs
Limit item | Limit | How to increase the quota |
SSH key pair quota for a single Alibaba Cloud account in a single region | 500 | None |
Image types that support SSH key pairs | Only Linux is supported. | None |
For more information about SSH key pairs, see Manage SSH key pairs.
Public bandwidth
The total public bandwidth limit for all pay-as-you-go and spot instances that use the pay-by-bandwidth billing method under a single Alibaba Cloud account in a region is as follows:
NoteTo request a higher bandwidth limit, use the quota ID
q_internet-bandwidth-pay-by-bandwidth-of-postpaid-instanceto view and increase the quota. For more information, see View or increase ECS quotas.Region Name
Limit
China (Beijing), China (Shanghai), China (Hangzhou), China (Shenzhen)
50 Gbps
China (Hong Kong), Singapore
20 Gbps
Other
10 Gbps
Since November 27, 2020, the peak bandwidth for creating and modifying ECS instances is affected by the account throttling policy:
NoteIf you need a higher peak bandwidth, you can submit a ticket.
The total peak bandwidth of all pay-by-traffic ECS instances under a single Alibaba Cloud account in a region cannot exceed 5 Gbps.
The total peak bandwidth of all pay-by-bandwidth ECS instances under a single Alibaba Cloud account in a region cannot exceed 50 Gbps.
Limits on peak bandwidth per instance and public IP address replacement:
ImportantFor the pay-by-traffic billing method, the inbound and outbound peak bandwidth values are upper limits and are not guaranteed. During resource contention, the peak bandwidth may be limited. If your services require guaranteed bandwidth, use the pay-by-bandwidth billing method.
Limit item
Limit
How to increase the quota
Peak inbound bandwidth per instance
If the purchased peak outbound bandwidth is 10 Mbit/s or less, Alibaba Cloud allocates 10 Mbit/s of inbound bandwidth.
If the purchased peak outbound bandwidth is greater than 10 Mbit/s, Alibaba Cloud allocates inbound bandwidth equal to the purchased peak outbound bandwidth.
None
Peak outbound bandwidth per instance
Pay-by-traffic:
Subscription instances: 200 Mbit/s
Pay-as-you-go instances: 100 Mbit/s
Pay-by-bandwidth: 200 Mbit/s
NoteThe public bandwidth limit for a single ECS instance also depends on the instance type. You can view the Baseline Network Bandwidth metric in the Instance families list. The total public bandwidth of a single instance cannot exceed this limit.
Some instance types, such as ecs.t6-c4m1.large, ecs.t6-c2m1.large, ecs.t6-c1m1.large, and ecs.t6-c1m4.large, are limited by the baseline network bandwidth to a peak of 80 Mbit/s.
None
Limit on replacing the assigned public IP address for a single instance
You can replace the public IP address of a new instance within six hours of its creation. You can replace the public IP address of an instance a maximum of three times.
None
For more information about public bandwidth, see Public bandwidth.
Elastic network interfaces
Limit item | Limit | How to increase the quota |
Maximum number of ENIs (secondary ENIs) that a single Alibaba Cloud account can create in a specific region | To view the quota, use the quota ID | |
VPC and zone limits for attaching ENIs to instances | The instance and the ENI to be attached must be in the same VPC and the same zone.
| None |
Maximum number of ENIs that can be attached to a single instance | The number of ENIs that can be attached to an instance is determined by the instance type. For more information, see the Elastic Network Interface column in Instance families. | None |
For more information about ENIs, see Overview of ENIs.
Prefix lists
Limit item | Limit | How to increase the quota |
Maximum number of prefix lists for a single Alibaba Cloud account in a single region | 100 | None |
Maximum number of entries in a single prefix list | 200 | None |
Maximum number of associated resources for a single prefix list | 1,000 | None |
For more information about prefix lists, see Overview of prefix lists.
Security groups
Limit item | Basic security group limits | Enterprise security group limits |
Maximum total number of security groups for a single Alibaba Cloud account in a specific region | To view or increase the quota, use the quota ID | Same as for basic security groups |
Number of security groups that can be associated with a single ENI | 10 | Same as for basic security groups |
Maximum total number of rules (including inbound and outbound rules) for all security groups associated with a single ENI | 1,000 | Same as for basic security groups |
Number of rules in a single security group where the authorization object is a security group | 20 | 0. In an enterprise security group, you cannot add rules where the authorization object is a security group. You also cannot use an enterprise security group as the authorization object in other security group rules. |
Number of VPC-type ECS instances that a single VPC-type security group can contain | Not fixed. The number is affected by the number of private IP addresses that the security group can contain. | Unlimited |
Number of private IP addresses that a single VPC-type security group can contain for a single Alibaba Cloud account in a specific region | 6,000 Note
| 65,536 Note The number of used IP addresses represents the total number of ENIs associated with a security group, including both primary and secondary network interfaces of an instance. |
Public access port | For security reasons, port 25 on ECS instances is restricted by default. We recommend that you use an SSL-encrypted port (typically port 465) to send outbound emails. | Same as for basic security groups |
For more information about security groups, see Overview of security groups.
Reserved instances
Limit item | Limit | How to increase the quota |
Total number of regional reserved instances for a single Alibaba Cloud account across all regions | 20 | |
Number of zonal reserved instances for a single Alibaba Cloud account in a single zone | 20 | |
Reserved instance specifications | The gn6i and t5 instance families do not support regional reserved instances, splitting, or merging. Note The instance types available for purchase as reserved instances are subject to what is displayed on the buy page. | None |
Resource types that can be offset |
| None |
For more information about reserved instances, see What are reserved instances?.
Savings plans
Limit item | Limit | How to increase the quota |
Number of savings plans that a single Alibaba Cloud account can purchase | 200 | None |
Resource types that can be offset |
| None |
For more information about savings plans, see What is a savings plan?.
Storage capacity units
Limit item | Limit | How to increase the quota |
Maximum capacity of an SCU that can be purchased at a time | 50 TiB | |
Maximum number of SCUs that can be purchased in a single region | 100 | None |
Product types supported by SCUs |
| None |
Offset type | Only pay-as-you-go bills can be offset. Bills for cloud disks of spot instances cannot be offset. | None |
Effective period | You can set the effective period, but it cannot exceed six months from the creation time. | None |
Create and manage SCUs using API operations | Not supported. | None |
For more information about SCUs, see Storage Capacity Unit (SCU).
Launch templates
Limit item | Limit | How to increase the quota |
Maximum number of launch templates that a single Alibaba Cloud account can have in a specific region | To view the quota, use the quota ID | |
Maximum number of versions for a single launch template that a single Alibaba Cloud account can have in a specific region | To view the quota, use the quota ID | |
Launch template parameters | All parameters are optional when you create a launch template. However, if required parameters such as instance type and image are not included in the template, you must provide them when you use the template to create an instance. | None |
Modify a created launch template | You cannot modify a launch template after it is created. You can create a new version of the launch template to change configuration parameters. For more information, see Manage launch template versions. | None |
For more information about launch templates, see Overview of launch templates.
Deployment sets
Limit item | Limit | How to increase the quota |
Maximum number of deployment sets that a single Alibaba Cloud account can have in a specific region | To view the quota, use the quota ID | |
Number of instances that a single deployment set can contain | The number of instances that a deployment set can contain depends on the deployment policy you select. For more information, see Deployment policies. | None |
Create Dedicated Hosts in a deployment set | Deployment sets do not support creating Dedicated Hosts. | None |
Region and zone limits | The instance and the deployment set must be in the same region. Instances in a deployment set with the low-latency network policy must be in the same zone. | None |
Instance types that can be created in a deployment set | Different deployment policies support only specific instance families. You can call DescribeDeploymentSetSupportedInstanceTypeFamily and specify a deployment policy to query the instance families supported by each policy. | None |
Merge deployment sets | Deployment sets cannot be merged. | None |
For more information about deployment sets, see Deployment sets.
Auto provisioning groups
Limit item | Limit | How to increase the quota |
Provision instances across regions | Auto provisioning groups do not support provisioning instances across regions. | None |
Maximum number of configuration sources that can be specified for a single auto provisioning group | A single auto provisioning group can specify only one version of a launch template as the base configuration for instances. However, you can extend the instance types in the template to form multiple resource pools. | None |
Maximum number of resource pools that can be configured for a single auto provisioning group | A single auto provisioning group supports a maximum of 20 resource pools (combinations of zones and instance types). | None |
Maximum number of instances that can be created in a single auto provisioning group | 1000 | None |
For more information about auto provisioning groups, see Overview of auto provisioning.
Cloud Assistant
Limit item | Limit | How to increase the quota |
Total number of Cloud Assistant commands for a single Alibaba Cloud account in a specific region | To view the quota, use the quota ID | |
Output size limit for Cloud Assistant tasks for a single Alibaba Cloud account in a specific region | To view the quota, use the quota ID | None |
Retention period for Cloud Assistant task output for a single Alibaba Cloud account in a specific region | To view the quota, use the quota ID | None |
Maximum number of activation codes for managed instances for a single Alibaba Cloud account in a specific region | To view the quota, use the quota ID | None |
Maximum number of instances supported for command execution for a single Alibaba Cloud account in a specific region | To view the quota, use the quota ID | |
File size limits for Bat, PowerShell, or Shell scripts and custom parameters after Base64 encoding |
| None |
Maximum number of custom parameters in a single command | 20 | None |
Operating system | You can run Cloud Assistant commands only on the following operating systems:
Note
| None |
For more information about Cloud Assistant, see Overview of Cloud Assistant.
Network connectivity diagnostics
Limit item | Limit | How to increase the quota |
Maximum number of diagnostic lines in a single region | 100 | None |
Maximum number of diagnostic tasks in a single region | 1,000 | None |
Maximum number of diagnostic tasks that can run concurrently in a single region | 5 | None |
For more information about network connectivity diagnostics, see Diagnose network connectivity.
API
Limit item | Limit | How to increase the quota |
API rate limits | API rate limits restrict the frequency of OpenAPI calls. Based on the API version and resource type, they fall into two categories:
|
|
For more information about ECS APIs, see Integration overview.