Elastic Compute Service (ECS) is subject to limits on its features, performance, and related quotas. Before you use ECS, you must understand these limits to plan for your business needs. You can request an increase for some quotas, while others are fixed and may require workarounds. This topic describes the limits of ECS and explains how to request an increase for specific quotas.
Column descriptions
The tables in this topic describe the limits for each module and contain the following columns:
Limit item: The feature, performance metric, or quota that is subject to a limit.
NoteA quota is the maximum amount of a cloud resource or the maximum number of operations that a single Alibaba Cloud account can use.
Limit: The specific restriction for the limit item.
If the limit item is an ECS-related quota, it has a corresponding quota ID that you can use to check its current value.
How to increase quota: The method to request a quota increase, if available.
If a quota cannot be increased, you must plan a workaround. If a quota can be increased, you can request an increase using the specified method.
Instances
Limit item | Limit | How to increase quota |
vCPU quota items | The maximum number of vCPUs for a specific instance family that a single Alibaba Cloud account can have in a specific region and for a specific billing method (subscription, pay-as-you-go, or spot). For specific limits, see vCPU quota items. | |
GPU and vGPU quota items | The maximum number of GPUs or vGPU instances for a specific instance family that a single Alibaba Cloud account can have in a specific region and for a specific billing method (subscription, pay-as-you-go, or spot). For specific limits, see GPU and vGPU quota items. | |
Maximum number of subscription instances that a single Alibaba Cloud account can purchase at a time in a specific region | Use the quota ID | None |
Convert pay-as-you-go to subscription |
| None |
Convert subscription to pay-as-you-go | Converting a subscription instance to a pay-as-you-go instance generates a refund. This refund consumes your refund quota. If your monthly refund quota is exceeded, you cannot receive more refunds. This means you cannot convert subscription instances to pay-as-you-go instances. For more information, see Convert a subscription instance to a pay-as-you-go instance. Note The refund quota is subject to the amount displayed on the conversion page. The quota is reset to zero on the first day of the next month. | None |
Instance families that support secondary virtualization | Only ECS Bare Metal Instances and Super Computing Clusters support secondary virtualization. Other instance families do not support the installation of virtualization software or secondary virtualization. | None |
Sound card applications | Sound card applications are not supported. | None |
Attach external hardware devices | You cannot directly attach external hardware devices, such as hardware dongles, USB flash drives, external hard drives, or bank U-Keys. You can try using software dongles or dynamic password for secondary authentication. | None |
Multicast protocol | The multicast protocol is not supported. To implement one-to-many communication similar to multicast, use unicast point-to-point communication instead. | None |
Website ICP filing | To apply for an ICP filing for a website or an app, you must purchase a subscription ECS instance for three months or longer. Each ECS instance can be used for the ICP filing of a maximum of five websites or apps. For more information, see ICP filing server check. | None |
License | The licenses of some software or applications must be bound to the hardware information of the ECS instance. Migrating an ECS instance may change its hardware information, which can invalidate the license. | None |
vCPU quota items
GPU and vGPU quota items
Images
Limit item | Limit | How to increase quota |
Maximum number of custom images that a single Alibaba Cloud account can have in a specific region | Use the quota ID | |
Maximum number of users with which a single custom image can be shared | Use the quota ID | |
Limits on images and instance types | Instance types with 4 GiB or more of memory cannot use 32-bit images. | None |
For more information, see Image overview.
Block storage
Limit item | Limit | How to increase quota |
Number of system disks per instance | 1 | None |
Number of data disks per instance | The maximum number of disks that can be attached to an instance varies by instance type. For more information, see Instance families. Note The maximum number of disks that can be attached to an instance is determined by its type. You can call the DescribeInstanceTypes operation to query this limit. When you create an instance, you can specify a maximum of 1 system disk and 64 data disks. The actual number is subject to what is displayed in the console. If you need more data disks, you can attach them after the instance is created. | None |
Disk capacity quota for a single Alibaba Cloud account in a specific region and zone | The capacity quotas for different types of disks vary. You can view the quota for each disk type. For more information, see View or increase block storage quotas. | |
Capacity of a single basic disk | 5 GiB to 2,000 GiB | None |
Capacity of a single standard SSD | 20 GiB to 32,768 GiB | None |
Capacity of a single ultra disk | 20 GiB to 32,768 GiB | None |
Capacity of a single ESSD |
| None |
Capacity of a single ESSD AutoPL disk | 1 GiB to 65,536 GiB | None |
Single ESSD Entry disk | 10 GiB to 32,768 GiB | None |
Single regional Enterprise SSD (ESSD) | 1 GiB to 65,536 GiB | None |
Capacity of a single local SSD | Varies by instance type, from 5 GiB to 7,152 GiB | None |
Total capacity of local SSDs for a single instance | Varies by instance type, up to 8 × 7,152 GiB | None |
Capacity of a single elastic ephemeral disk | 64 GiB to 8,192 GiB | None |
Capacity limit for a single system disk |
Note The maximum capacity of a basic disk (a previous-generation disk that is being phased out) used as a system disk is 500 GiB. | None |
Whether new local disks can be attached to an instance with local disks | Not allowed. | None |
Whether instances with local disks support configuration changes | Only bandwidth changes are allowed. | None |
Mount point range for Linux system disks |
| None |
Mount point range for Linux data disks | The naming of mount points varies based on the number of attached data disks:
| None |
Block storage is calculated in binary, which is base-1024. For example, 1 GiB = 1,024 MiB.
For more information, see Block storage overview.
Snapshots
Limit item | Limit | How to increase quota |
Number of manual snapshots that can be retained for a single disk |
| None |
Number of automatic snapshots that can be retained for a single disk |
| None |
Number of archived snapshots that can be retained for a single disk | 10,000 | None |
Number of automatic snapshot policies that a single Alibaba Cloud account can retain in a single region | 100 | None |
Number of automatic snapshot policies that can be set for a single disk | In the console: 1 API operations:
| None |
Number of concurrent snapshot creation tasks for a single disk |
| None |
Number of concurrent snapshot archiving tasks for a single disk | 10 | None |
Block storage type |
| None |
Download or export snapshots | You cannot download or export created snapshots. You can first use a snapshot to create a custom image, and then export the custom image to a local device. | None |
Constraints on manual and automatic snapshot creation |
| None |
For more information, see Snapshot overview.
SSH key pairs
Limit item | Limit | How to increase quota |
SSH key pair quota for a single Alibaba Cloud account in a single region | 500 | None |
Image types that support SSH key pairs | Only Linux operating systems are supported. | None |
For more information, see Manage SSH key pairs.
Public bandwidth
A limit applies to the total peak public bandwidth that you can purchase for all pay-as-you-go and spot instances that use the pay-by-bandwidth billing method for an Alibaba Cloud account in a region.
NoteIf you need a higher bandwidth limit, you can use the quota ID
q_internet-bandwidth-pay-by-bandwidth-of-postpaid-instanceto view this quota and request an increase. For more information, see View or increase ECS quotas.Region Name
Limit
China (Beijing), China (Shanghai), China (Hangzhou), China (Shenzhen)
50 Gbps
China (Hong Kong), Singapore
20 Gbps
Other
10 Gbps
Effective November 27, 2020, the peak bandwidth for creating ECS instances and changing their configurations is subject to account-level throttling policies:
NoteIf you need a higher peak bandwidth, submit a ticket.
In a single region, the total actual peak bandwidth of all pay-by-traffic ECS instances for a single Alibaba Cloud account cannot exceed 5 Gbps.
In a single region, the total actual peak bandwidth of all pay-by-bandwidth ECS instances for a single Alibaba Cloud account cannot exceed 50 Gbps.
Limits on the peak bandwidth and public IP address replacement for a single instance:
ImportantFor the pay-by-traffic billing method, the peak inbound and outbound bandwidth values are upper limits and are not guaranteed. In cases of resource contention, the peak bandwidth may be limited. If your business requires guaranteed bandwidth, use the pay-by-bandwidth billing method.
Limit item
Limit
How to increase quota
Peak inbound bandwidth for a single instance
If the purchased peak outbound bandwidth is 10 Mbit/s or less, Alibaba Cloud allocates 10 Mbit/s of inbound bandwidth.
If the purchased peak outbound bandwidth is greater than 10 Mbit/s, Alibaba Cloud allocates inbound bandwidth equal to the purchased peak outbound bandwidth.
None
Peak outbound bandwidth for a single instance
Pay-by-traffic:
Subscription instances: 200 Mbit/s
Pay-as-you-go instances: 100 Mbit/s
Pay-by-bandwidth: 200 Mbit/s
NoteThe public bandwidth limit for a single ECS instance also depends on the instance type. You can view the Baseline Network Bandwidth metric in the Instance families list. The total public bandwidth of a single instance cannot exceed this limit.
Due to network baseline bandwidth limits, the peak bandwidth for some instance types, such as ecs.t6-c4m1.large, ecs.t6-c2m1.large, ecs.t6-c1m1.large, and ecs.t6-c1m4.large, is 80 Mbit/s.
None
Limit on replacing the public IP address of a single instance
You can replace the public IP address of a new instance within six hours of its creation. You can replace the public IP address of an instance a maximum of three times.
None
For more information, see Public bandwidth.
Elastic Network Interface
Limits | Limit | How to increase quota |
Maximum number of ENIs (secondary ENIs) that a single Alibaba Cloud account can create in a specific region | Use the quota ID | |
VPC and zone limits for attaching an ENI to an instance | The instance and the attached ENI must be in the same VPC and zone.
| None |
Maximum number of ENIs that can be attached to a single instance | The number of ENIs that can be attached to an instance is determined by the instance type. For more information, see the Elastic Network Interface column in Instance families. | None |
For more information, see ENI overview.
Prefix lists
Limit item | Limit | How to increase quota |
Maximum number of prefix lists for a single Alibaba Cloud account in a single region | 100 | None |
Maximum number of entries in a single prefix list | 200 | None |
Maximum number of associated resources for a single prefix list | 1,000 | None |
For more information, see Prefix list overview.
Security groups
Limit item | Basic security group limits | Enterprise security group limits |
Maximum number of security groups per Alibaba Cloud account in a region | Use the quota ID | Same as basic security groups |
Number of security groups that can be associated with a single Elastic Network Interface (ENI) | 10 | Same as basic security groups |
Maximum total number of rules (inbound and outbound) for all security groups associated with a single ENI | 1,000 | Same as basic security groups |
Number of rules in a single security group where the authorization object is another security group | 20 | 0. In an enterprise security group, you cannot add rules where the authorization object is another security group. You also cannot use an enterprise security group as the authorization object in other security group rules. |
Number of VPC-type ECS instances that a single VPC-type security group can contain | Not fixed. The number is affected by the number of private IP addresses the security group can contain. | Unlimited |
Number of private IP addresses that a single VPC-type security group can contain for a single Alibaba Cloud account in a specific region | 6,000 Note
| 65,536 Note The number of used IP addresses represents the total number of ENIs associated with a security group, including both primary and secondary network interfaces of an instance. |
Public access port | For security reasons, port 25 of ECS instances is restricted by default. Use a Secure Sockets Layer (SSL) encrypted port, usually port 465, to send emails. | Same as basic security groups |
For more information, see Security group overview.
Reserved instances
Limit item | Limit | How to increase quota |
Total number of regional reserved instances for a single Alibaba Cloud account across all regions | 20 | |
Number of zonal reserved instances for a single Alibaba Cloud account in a single zone | 20 | |
Reserved Instance specifications | The gn6i and t5 instance families do not support regional reserved instances, splitting, or merging. Note The instance types available for purchase with reserved instances are subject to what is displayed on the actual interface. | None |
Resource types that can be offset |
| None |
For more information, see What is a reserved instance?.
Savings plans
Limit item | Limit | How to increase quota |
Number of savings plans a single Alibaba Cloud account can purchase | 200 | None |
Resource types that can be offset |
| None |
For more information, see What is a savings plan?.
Storage capacity units
Limit item | Limit | How to increase quota |
Maximum capacity of SCUs that can be purchased at a time | 50 TiB | |
Maximum number of SCUs that can be purchased in a single region | 100 | None |
Product types supported by SCUs |
| None |
Offset type | Only pay-as-you-go bills can be offset. Pay-as-you-go bills for disks in spot instances cannot be offset. | None |
Effective time | You can set an effective time, but it cannot be more than six months after the creation time. | None |
Create and manage SCUs using an API | Not supported. | None |
For more information, see Storage Capacity Unit (SCU).
Launch templates
Limit item | Limit | How to increase quota |
Maximum number of launch templates a single Alibaba Cloud account can have in a specific region | Use the quota ID | |
Maximum number of versions for a single launch template that a single Alibaba Cloud account can have in a specific region | Use the quota ID | |
Launch template parameters | When you create a launch template, all parameters are optional. However, if the launch template does not include required parameters (such as instance type and image), you must provide them when using the template to create an instance. | None |
Modify an existing launch template | After a launch template is created, it cannot be modified. You can change configuration parameters by creating a new version of the launch template. For more information, see Manage launch template versions. | None |
For more information, see Launch template overview.
Deployment sets
Limitations | Limit | How to increase quota |
Maximum number of deployment sets a single Alibaba Cloud account can have in a specific region | Use the quota ID | |
Number of instances a single deployment set can contain | The number of instances a deployment set can contain depends on the deployment strategy you choose. For more information, see Deployment strategies. | None |
Create a Dedicated Host in a deployment set | Deployment sets do not support the creation of Dedicated Hosts. | None |
Region and zone limits | The instance and the deployment set must be in the same region. Instances in a deployment set with a low-latency network strategy must be in the same zone. | None |
Instance types that can be created in a deployment set | Different deployment strategies support only specific instance families. You can call the DescribeDeploymentSetSupportedInstanceTypeFamily operation and specify a deployment strategy to get the instance families supported by each strategy. | None |
Merge deployment sets | Deployment sets cannot be merged. | None |
For more information, see Deployment sets.
Auto provisioning groups
Limits | Limit | How to increase quota |
Provision instances across regions | Auto provisioning groups do not support provisioning instances across regions. | None |
Maximum number of configuration sources that can be specified for a single auto provisioning group | A single auto provisioning group can specify a maximum of one specific version of a launch template as the basic configuration for instances. However, you can extend the instance types in the template to form multiple resource pools. | None |
Maximum number of resource pools that can be set for a single auto provisioning group | A single auto provisioning group supports a maximum of 20 resource pools (combinations of zones and instance types). | None |
Maximum number of instances that can be created in a single auto provisioning group | 1000 | None |
For more information, see Auto provisioning overview.
Cloud Assistant
Limit item | Limit | How to increase quota |
Maximum total number of Cloud Assistant commands for a single Alibaba Cloud account in a specific region | Use the quota ID | |
Limit on the output size of Cloud Assistant tasks for a single Alibaba Cloud account in a specific region | Use the quota ID | None |
Retention period for the output of Cloud Assistant tasks for a single Alibaba Cloud account in a specific region | Use the quota ID | None |
Maximum number of activation codes for managed instances of Cloud Assistant for a single Alibaba Cloud account in a specific region | Use the quota ID | None |
Maximum number of instances for command execution per Alibaba Cloud account in a specific region | Use the quota ID | |
File size limits for Base64-encoded Bat, PowerShell, or Shell scripts and custom parameters based on the scenario |
| None |
Maximum number of custom parameters per command | 20 | None |
Operating system | Cloud Assistant commands can run only on the following operating systems:
Note
| None |
For more information about Cloud Assistant, see Cloud Assistant overview.
Network connectivity diagnostics
Limit item | Limit | How to increase quota |
Maximum number of diagnostic lines in a single region | 100 | None |
Maximum number of diagnostic tasks in a single region | 1,000 | None |
Maximum number of concurrent diagnostic tasks in a single region | 5 | None |
For more information, see Diagnose network connectivity.
API
Limit item | Limit | How to increase quota |
API rate limit | An API rate limit is a constraint on the frequency of OpenAPI calls. It is categorized into two types based on the API version and resource type:
|
|
For more information, see Integration overview.