This topic describes the limits on using API Gateway.
Item | Limits |
API Gateway user | Real-name authentication is required. |
API groups that can be created | - Each Alibaba Cloud account can create a maximum of 200 API groups in each region. The API groups include both the groups to which domain names are bound and those to which domain names are not bound. - By default, each Alibaba Cloud account can create up to five API groups to which a domain name is not bound in each region. If the account has one or more API groups to which a domain name is bound in the region, the account can create up to 20 API groups to which a domain name is not bound in the region. To increase the limit on the number of API groups, submit a ticket. |
Public second-level domain name | When you use the public second-level domain name to make API calls: - You can make up to 1,000 calls per day in regions in the Chinese mainland and up to 100 calls per day in the China (Hong Kong) region and other regions outside the Chinese mainland. - If you make calls by using a browser, the browser is used to download data by default. |
Independent domain names that can be bound | Up to five independent domain names can be bound to each API group, including wildcard domain names. |
APIs that can be created | You can create up to 1,000 APIs in each API group. |
Requests per second (RPS) on APIs | - For dedicated instances, the upper limit of RPS for each API group varies based on the instance specification. Important In RPS calculation, all requests that arrive at API Gateway are included, including requests to which a non-200 code is returned. The combined number of requests and responses per second cannot exceed 4,000. |
Connections | - The maximum number of connections that each dedicated instance supports varies based on the instance specification. |
Applications | - By default, each account can create up to 1,000 applications. To increase the limit, submit a ticket. - Up to 1,000 applications can be bound to each API. To increase the limit, submit a ticket. |
HTTP-related limits | - The combined size of the URL and header of each HTTP request cannot exceed 8 KB. - For APIs on a serverless instance, the body of each HTTP request can be up to 8 MB in size. For APIs on a dedicated instance, the body of each HTTP request can be up to 32 MB in size. - The body of each HTTP response is not limited in size. However, each HTTP response must be returned within the specified timeout period. |
Response from Function Compute | The body of a response returned by Function Compute can be up to 6 MB in size. |
Use of HTTP or Object Storage Service (OSS) as the backend service type | You cannot create a backend service of the HTTP or OSS type in the China (Hong Kong) region and other regions outside the Chinese mainland. |
Default circuit breaker protection | If timeout occurs 1,000 times at the backend of an API within 30 seconds, a circuit breaker trips and lasts for 90 seconds. During the 90-second period, the You can configure a circuit breaker plug-in with custom settings to meet your business requirements for a dedicated instance. For more information, see Circuit breaker plug-ins (for dedicated instances only). Note Third-party authentication plug-ins also provide a default circuit breaker mechanism. |