All Products
Search
Document Center

Cloud Enterprise Network:Quotas

Last Updated:Oct 15, 2025

A service quota defines the maximum number of cloud resources or operations that an Alibaba Cloud account can use. This topic describes the quotas, default values, and adjustment options for Cloud Enterprise Network (CEN).

Quota overview

Alibaba Cloud service quotas apply to specific accounts or regions and are categorized into the following types:

  • General quotas: The maximum number of cloud resources that an Alibaba Cloud account can use.

  • API rate limits: The frequency at which an Alibaba Cloud account can call API operations of an Alibaba Cloud service. This is also known as a queries per second (QPS) limit.

  • Privilege quotas: The permissions that an Alibaba Cloud account is granted by Alibaba Cloud, such as the permission to use a specific feature.

Cloud Enterprise Network (CEN) has general quotas, API rate limits, and privilege quotas. You can also adjust some of the quotas. You can view quotas or request quota increases in the Alibaba Cloud Quota Center console or on the CEN quota management page. For more information, see Increase CEN quotas.

General quotas

The following tables list the general quotas of Cloud Enterprise Network.

Note
  • For quotas that have a quota name and a quota ID, if the default value in the following tables is different from the value displayed in the console, the value in the console prevails.

  • You can also obtain information about quotas that have a quota name and a quota ID by calling the ListProductQuotas API operation.

CEN instances

Description

Default value

Can I make adjustments?

Number of CEN instances that can be created by each Alibaba Cloud account

5

Yes

  • Quota name: cen_quota_instances_num

  • Quota ID: q_6lz142

Enterprise Edition transit routers

Table 1. Enterprise Edition transit router instances

Description

Default value

Can I make adjustments?

Number of transit router CIDR blocks that can be created for each transit router

5

No

Table 2. Network instance connections (adjustable quotas)

Description

Default value

Adjustable

Number of transit routers that can be connected to a virtual private cloud (VPC)

5

Yes

  • Quota name: cen_quota_attach_per_vpc

  • Quota ID: q_5bxb4o

Maximum inter-region bandwidth of each inter-region connection for communication between regions in the Chinese mainland when the bandwidth allocation method is Pay-As-You-Go

1,000 Mbps

Yes

  • Quota name: cen_max_bandwidth_payg_china

  • Quota ID: cen_max_bandwidth_payg_china

Maximum inter-region bandwidth of each inter-region connection for communication between regions outside the Chinese mainland when the bandwidth allocation method is Pay-As-You-Go

100 Mbps

Yes

  • Quota name: cen_max_bandwidth_payg_oversea

  • Quota ID: cen_max_bandwidth_payg_oversea

Maximum inter-region bandwidth of each inter-region connection for communication between a region in the Chinese mainland and a region outside the Chinese mainland when the bandwidth allocation method is Pay-As-You-Go

100 Mbps

Yes

  • Quota name: cen_max_bandwidth_payg_cross_border

  • Quota ID: cen_max_bandwidth_payg_cross_border

Number of virtual border router (VBR) instances that can be connected to each transit router

32

No

  • Quota name: cen_quota_vbr_attach_per_tr

  • Quota ID: q_219gf5

Number of VPN connections that can be created for each transit router

50

Yes

  • Quota name: cen_quota_vpn_attach_per_tr

  • Quota ID: q_fob3hm

Table 3. Network instance connections (non-adjustable quotas)

Description

Default value

Can I make adjustments?

Maximum bandwidth of each network instance connection (VPC connection, ECR connection, VPN connection, or VBR connection)

  • 100 Gbps per zone in the China (Hangzhou), China (Shanghai), China (Beijing), China (Shenzhen), China (Hong Kong), and Singapore regions

  • 50 Gbps per zone in the China (Guangzhou), China (Heyuan), , Indonesia (Jakarta), and Mexico regions

  • 15 Gbps per zone in other regions

No

Number of VPCs that can be connected to each transit router

1,000

No

  • Quota name: cen_quota_vpc_attach_per_tr

  • Quota ID: q_wo82fu

Number of transit routers that can be connected to each IPsec-VPN connection

1

No

Number of VPN connections that support Equal-Cost Multipath (ECMP) routing on each transit router

16

No

Number of inter-region connections supported between each pair of transit routers

1

No

Express Connect Router (ECR) connections

For information about ECR-related resource quotas, see Express Connect quotas.

Table 4. Routing

Description

Default value

Are adjustments supported?

Number of route tables supported by each transit router

50

No

Number of route entries supported by each transit router route table

Important

The total number of routes of all route tables of a transit router cannot exceed 40,000.

10,000

No

  • Quota name: cen_quota_route_entries_per_tr_route_table

  • Quota ID: q_j620sm

Number of route entries supported by each transit router instance

40,000

No

  • Quota name: cen_quota_max_route_entries_per_tr

  • Quota ID: q_9w3fcr

Number of VPC-connected instances for which route synchronization can be enabled on each transit router

50

No

  • Quota name: cen_quota_max_route_auto_publish_vpc_attachments

  • Quota ID: q_1e8d3e

Number of aggregate routes that can be created in each transit router route table

20

No

Number of routing policies that can be created for each transit router in the inbound direction

100

No

Number of routing policies that can be created for each transit router in the outbound direction

100

No

Table 5. Multicast

Description

Default value

Can I make adjustments?

Number of static or dynamic (IGMP) multicast sources and members supported by each transit router

2,000

Yes

You can manually increase the quota to 3,000. To request a higher quota, contact your business manager. The maximum quota is 10,000.

  • Quota name: cen_multicast_member_per_transit_router

  • Quota ID: q_uwd4qo

Number of multicast domains that can be created for each transit router

20

No

  • Quota name: cen_multicast_group_per_domain

  • Quota ID: q_q8ujuc

Number of multicast domains that can be associated with each VPC

Note

The total number of multicast domains associated with all vSwitch instances in a VPC cannot exceed the requested quota.

20

No

  • Quota name: cen_multicast_domain_per_vpc

  • Quota ID: q_ubyekj

Number of static and dynamic (IGMP) multicast members supported by a single multicast group of a transit router

100

No

  • Quota name: cen_multicast_member_per_group

  • Quota ID: q_s8gqr5

Number of vSwitches that can be associated with a single multicast domain of a transit router

10

No

  • Quota name: cen_multicast_vsw_per_domain

  • Quota ID: q_s1curu

Number of static and dynamic (IGMP) multicast sources supported by a single multicast group of a transit router

100

No

  • Quota name: cen_multicast_source_per_group

  • Quota ID: q_fw2may

Number of inter-region multicast members that can be associated with a single multicast group of a transit router

15

No

  • Quota name: cen_multicast_peer_member_per_group

  • Quota ID: q_s6klby

Number of multicast groups supported by each multicast domain

20 (Deprecated)

No

  • Quota name: cen_multicast_group_per_domain

  • Quota ID: q_q8ujuc

Maximum bandwidth supported by each multicast group

Note

The bandwidth refers to the sum of the bandwidth that the multicast sources use to transmit packets to the multicast group and the bandwidth that the multicast group uses to transmit packets to the multicast members.

10 Gbps

No

Table 6. Traffic rerouting

Description

Default value

Can I make adjustments?

Number of traffic classification rules that can be created for each transit router

500

No

Number of queues that can be created in each QoS policy

64

No

Basic Edition transit routers

Table 7. Network instance connections

Description

Default value

Can I make adjustments?

Total number of VPC-connected and VBR-connected instances that can be attached to each transit router

10

No

  • Quota name: cen_quota_max_endpoints_num

  • Quota ID: q_eqcs7x

Number of Cloud Connect Network (CCN) instances that can be attached to each transit router

1

No

Number of inter-region connections supported between each pair of transit routers

1

No

Number of transit routers to which a VPC can be attached

1

No

Table 8. Routing

Description

Default value

Can I make adjustments?

Number of route tables supported by each transit router

1

No

Number of route entries supported on each transit router

100

No

  • Quota name: cen_quota_max_route_entries_num

  • Quota ID: q_wugqbw

Number of routing policies that can be created for each transit router in the inbound direction

100

No

Number of routing policies that can be created for each transit router in the outbound direction

100

No

API rate limits

Limitations

Limit

How to increase the limit

API rate limit

View the API rate limits in one of the following ways:

  • On the API Rate Limits page in Quota Center, view the rate quotas for CEN API operations.

  • On the Quota Management page, go to the Quota Type section and click the API Rate Limit tab to view the rate quotas for CEN API operations.

None.

Privilege quotas

The following table lists the privilege quotas of Cloud Enterprise Network. A value of 0 indicates that you do not have the permission to use the specific feature.

Quota name

Quota ID

Description

Default value

Can I make adjustments?

CEN Bandwidth Plans Support A Maximum Bandwidth Of 50 Gbps

cen_max_bandwidth/cen_50G

Lets you purchase bandwidth plan instances with a maximum bandwidth of up to 50 Gbps.

0

Yes