ACS limits and quotas - Container Compute Service - Alibaba Cloud Documentation Center

This topic describes the cluster, capacity, and concurrency limits for Alibaba Cloud Container Compute Service (ACS) and how to request a quota increase.

Overview of limits

Note the following limits for Alibaba Cloud Container Compute Service (ACS):

After you create an ACS cluster, the following changes are not supported:
- Change the VPC of the cluster.
- Change the container network plugin.
- Change the storage plugin.
- Migrate applications between different namespaces.
The traffic limits for accessing cluster control plane components are as follows:
When you access control plane components, such as the API Server and etcd, through an API or the command line, bandwidth limits apply. If you read many cluster events at once, your request may be throttled and fail. To prevent this, you can query cluster events in the ACS console. Navigate to Operations Management > Event Center. You can also add a paging parameter, such as --chunk-size=500, to your API call or command to reduce the amount of data in each request.

Quotas

Type	Quota limit	Default quota	How to increase the quota
Total number of ACS clusters that can be created by a single account	20	3	Go to Quota Center to request an increase in the default quota. Select the quota name Total number of ACS clusters. Note If the quota limit still cannot meet your requirements, you can submit a ticket to contact technical support to increase your quota. Select Container Service For Kubernetes as the product category.
Maximum total number of pay-as-you-go elastic vCPUs that can be used in a single region	30,000 vCPU	100 vCPU	Go to Quota Center and select the target Region to request an increase in the default quota. Note If the quota limit is still insufficient, you can submit a ticket to contact technical support for a quota increase. Select Container Compute Service as the product category.

Capacity limits

Type	Quota limit	How to increase the quota
etcd storage capacity	8 GB	Cannot be increased
Total size of etcd objects of each type	800 MB	Cannot be increased
Pod	50,000	By default, requests that exceed 50,000 are rejected. You can submit a ticket to request technical support to increase your quota.
Service	10,000	Creation requests are rejected if the total number exceeds 10,000. You can submit a ticket to request technical support to increase your quota.
ConfigMap	30,000	You can submit a ticket to request technical support to increase your quota.
Secret	10,000
PVC	10,000
PV	10,000
Total number of CRs of a single type	100,000	The default upper limit of custom resources that belong to the same type is 10,000. You can submit a ticket to request technical support to increase your quota.
Total number of CRDs	100,000	Cannot be increased

Concurrency limits

Cluster control plane

Note

QPS (Queries Per Second) is the number of requests received per second.

Type	Concurrency limit	Default concurrency	How to increase the concurrency
Pod full list QPS	1	1	Frequently pulling the full list of pod data puts heavy pressure on the control plane. Optimize your code by adding a `selector` or `namespace` filter to reduce the amount of data pulled in a single request.
Pod Create QPS	300	300	If the QPS exceeds 300, requests are rejected by default and return HTTP status code 429. You cansubmit a ticket to request technical support to increase your concurrency limit.
Pod Delete QPS	300	300
Pod Patch QPS	300	300
Pod Update QPS	300	300
Services Create QPS	20	20	If the QPS exceeds 20, requests are rejected by default and return an HTTP status code of 429. You can submit a ticket to request technical support to increase the concurrency.
Services Delete QPS	30	30	If the QPS exceeds 30, requests are rejected by default and an HTTP 429 status code is returned. You can submit a ticket to request technical support to increase the concurrency.
Services Patch QPS	30	30
Services Update QPS	30	30
Lease Update QPS	2000	2000	If the QPS exceeds 2,000, requests are rejected by default and return an HTTP status code of 429. You can submit a ticket to request technical support to increase your concurrency limit.
Configmap Update QPS	200	200	If the QPS exceeds 200, requests are rejected by default and return HTTP status code 429. You can submit a ticket to increase your concurrency limit.
Endpoint Update QPS	200	200
Other Create QPS	500	500	If the QPS exceeds 500, requests are rejected by default and an HTTP status code of 429 is returned. You can submit a ticket to request technical support and increase the concurrency.
Other Delete QPS	500	500
Other Patch QPS	500	500
Other Update QPS	500	500

Image cache

The following table describes the maximum number of times that you can call each API operation per minute in a single region.

API operations	Maximum calls per minute
CreateImageCache	300
DeleteImageCache	300
ListImageCaches	600
GetImageCache	6000

Instance delivery throughput

The following table describes the maximum throughput for instance-related operations per minute in a single region. This includes internal retries.

Instance-related capability	Maximum pod delivery throughput per minute
Instance creation	1000
Instance deletion	1000

Quotas of underlying cloud products

Limit category	Limit item	Default quota	How to increase the quota
VPC limits	The maximum number of custom route entries per route table (excluding dynamically propagated route entries)	200	Go to the quota management page or Quota Center to request a quota increase.
	The number of routes that are dynamically propagated to a route table.	500
	The number of vSwitches that can be created in a VPC.	150
	The number of VPCs that can be created in a region.	10
	The number of private IP addresses that can be used by cloud resources in a VPC.	300,000 1. If an ECS instance has only one private IP address, the ECS instance uses only one network address. 2. If an ECS instance is associated with multiple ENIs or multiple IP addresses are configured for the ENIs, the number of network addresses used by the ECS instance is the sum of the IP addresses that are assigned to the ENIs associated with the ECS instance.	Cannot be increased.
	The maximum number of private IP addresses that a security group of the VPC type can contain within an Alibaba Cloud account per region	Basic security group limit: 6,000 Note The number of used IP addresses is calculated based on the number of private IP addresses on the ENIs (including the primary and secondary ENIs of an instance) associated with a security group. This count is the sum of all IP address types, such as primary private IPv4, IPv6, secondary private IPv4, IPv4 prefixes, and IPv6 prefixes. If you have more than 6,000 private IP addresses to access each other over the internal network, add the ECS instances which use the private IP addresses, to multiple security groups, and configure security group rules to allow access between the security groups. You can view the maximum number of private IP addresses in a basic security group in a VPC in the Quota Center by using the quota ID `q_vpc-normal-security-group-ip-count`. Enterprise security group limit: 65,536 The number of used IP addresses represents the total number of ENIs associated with a security group, including both primary and secondary network interfaces of an instance.	Cannot be increased.
	The maximum number of secondary elastic network interfaces (ENIs) that can be created for an Alibaba Cloud account per region	You can view this quota in Quota Center.	Go to Quota Center to request a quota increase.
	Maximum number of EIPs that each Alibaba Cloud account can apply for	20	Go to Quota Center to request a quota increase.
SLB limits	Maximum number of CLB instances that can be created by each Alibaba Cloud account	30	You can request a quota increase by using one of the following methods: Go to the Quota Management page in the CLB console, find the quota slb_quota_instances_num, and then click Apply in the Actions column. For more information, see Manage quotas. Log on to the Quota Center console and request a quota increase. For more information, see Manage CLB quotas.
	Maximum number of backend servers that can be added to a CLB instance	200	You can request a quota increase by using one of the following methods: Go to the Quota Management page in the CLB console, find the quota slb_quota_backendservers_num, and then click Apply in the Actions column. For more information, see Manage quotas. Log on to the Quota Center console and request a quota increase. For more information, see Manage CLB quotas.
	Maximum number of listeners that can be added to a CLB instance	50	You can request a quota increase by using one of the following methods: Go to the Quota Management page in the CLB console, find the quota slb_quota_listeners_num, and then click Apply in the Actions column. For more information, see Manage quotas. Log on to the Quota Center console and request a quota increase. For more information, see Manage CLB quotas.
Disk limits	The quota for the number of pay-as-you-go disks for a single account across all regions	You can view this quota in Quota Center.	You can submit a ticket to increase your quota.
Disk limits	The quota for the capacity of pay-as-you-go disks used as data disks for a single account	The quota depends on the Elastic Compute Service usage, region, and disk type. You can view this quota in Quota Center. For more information, see View or increase block storage quotas.	You can submit a ticket to increase your quota.