An Elastic Network Interface (ENI) is a virtual network interface that can be attached to an ECS instance in a VPC. By using ENIs, you can build high-availability clusters, implement failover at a lower cost, and achieve refined network management. The ENI feature is available in all regions.

Scenarios

ENIs can be used in the following scenarios:

  • Deploying a high-availability cluster

    An ENI can meet the demands of a high-availability architecture for multiple network interfaces on a single instance.

  • Providing a low-cost failover solution

    You can detach an ENI from a failed ECS instance and then attach it to another ECS instance to quickly redirect the failed instance’s traffic to a backup instance. This action recovers the service immediately.

  • Managing the network with refined controls

    You can configure multiple ENIs for an instance. For example, you can use some ENIs for internal management and other ENIs for Internet business access, so as to isolate managerial data from business data. You can also configure precisely-targeted security group rules for each ENI based on the source IP address, protocols, ports, and more to achieve secured traffic control.

ENI types

ENIs are classified into two types:

  • Primary ENI

    The ENI created by default upon the creation of an instance in a VPC is called the primary ENI. The lifecycle of the primary ENI is the same as that of the instance and you are not allowed to remove the primary ENI from the instance.

  • Secondary ENI

    You can create a secondary ENI and attach it to an instance or detach it from the instance. The maximum number of ENIs that you can attach to one instance differs with the instance type. For more information, see Instance type families.

ENI attributes

The following table displays ENI attributes.

Attribute  Quantity
Primary private IP addresses 1
MAC address 1
Security group Min. 1, and Max. 5
Description 1
ENI name 1

Limits

ENIs have the following limits:

  • By default, one account can own up to 100 ENIs in one region. If you require a higher quota, open a ticket.

  • The ECS instance must be in the same zone of the same region as the ENI, but they do not have to be in the same VSwitch.

  • The number of ENIs that can be attached to an ECS instance is determined by the instance type. For more information, see ECS instance type families.

  • Only I/O optimized instance types support ENIs.

  • You cannot increase the instance bandwidth capability by attaching multiple ENIs.

    Note
    The instance bandwidth capability varies with the instance type.

Related operations

For images that cannot recognize ENIs, you can log on to a created instance using the ECS console or APIs then configure the ENI.

Console operations

You can complete the following operations in the ECS console:

API operations

You can complete the following operations by using APIs: