Use the CreateNetworkInterface API to create an elastic network interface - Elastic Compute Service - Alibaba Cloud - Elastic Compute Service

Creates an Elastic Network Interface (ENI) with support for specifying a primary private IP address.

Operation description

Take note of the following items when you invoke this operation:

This is a synchronous operation. The newly created Elastic Network Interface (ENI) is in the active (Available) state and can be attached immediately.
If NetworkInterfaceId is empty in the response, try to create the ENI again.
An ENI can be attached only to a single instance in a virtual private cloud (VPC).
When an ENI is reattached to another instance, its properties remain unchanged and network traffic is redirected to the new instance.
When you create an ENI, you can allocate up to 49 secondary private IP addresses by invoking this operation.
When you create an ENI, if you want to configure IPv6 addresses, make sure that IPv6 is enabled for the specified vSwitch. For more information, see What is IPv6 Gateway?.
The number of ENIs that can be created per account in a region is limited. You can view resource quotas in the ECS console. For more information, see View and increase resource quotas.

Request examples

Create an Elastic Network Interface (ENI)

RegionId:  cn-hangzhou,   //Set the China (Hangzhou) region.
SecurityGroupId:  sg-bp10jztp6b0sdsyl****,   //Set the security group ID.
VSwitchId:  vsw-bp19wo63nleroq22g****,   //Set the vSwitch ID.

Create an Elastic Network Interface (ENI) and specify a primary private IP address

RegionId:  cn-hangzhou,   //China (Hangzhou) region.
SecurityGroupId:  sg-bp10jztp6b0sdsyl****,   //Security group ID.
VSwitchId:  vsw-bp19wo63nleroq22g****,   //vSwitch ID.
PrimaryIpAddress:  192.168.0.*,   //Primary private IP address.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

ecs:CreateNetworkInterface

create

*NetworkInterface

acs:ecs:{#regionId}:{#accountId}:eni/*

*SecurityGroup

acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId}

vpc:IsDefaultVSwitch
vpc:IsDefaultVpc
vpc:VPC
vpc:tag
vpc:tag
vpc:tag

None

Request parameters

Parameter	Type	Required	Description	Example
RegionId	string	Yes	The region ID of the network interface controller (NIC) to create. You can invoke DescribeRegions to query the most recent list of Alibaba Cloud regions.	cn-hangzhou
Tag	array<object>	No	The tags of the network interface controller (NIC).
	object	No	The tag of the network interface controller (NIC).
Key	string	No	The tag key of the network interface controller (NIC). Valid values of N: 1 to 20. The tag key cannot be an empty string. The tag key can be up to 128 characters in length and cannot start with aliyun or acs:. It cannot contain `http://` or `https://`.	TestKey
Value	string	No	The tag value of the network interface controller (NIC). Valid values of N: 1 to 20. The tag value can be an empty string. The tag value can be up to 128 characters in length and cannot contain `http://` or `https://`.	TestValue
ResourceGroupId	string	No	The resource group ID. You can call ListResourceGroups to query resource group information.	rg-bp67acfmxazb4ph****
VSwitchId	string	Yes	The vSwitch ID of the network interface controller (NIC). The private IP address of the ENI is allocated from the idle addresses within the CIDR block of the vSwitch. Important The network interface controller (NIC) and the instance to which you want to attach the ENI must be in the same zone but can belong to different vSwitches.	vsw-bp1s5fnvk4gn2tws03****
PrimaryIpAddress	string	No	The primary private IP address of the network interface controller (NIC). The specified IP address must be an idle address within the CIDR block of the vSwitch. If you do not specify this parameter, an idle private IP address in the vSwitch CIDR block is randomly allocated by default.	172.17..
SecurityGroupId	string	No	The ID of the security group to which the network interface controller (NIC) belongs. The security group and the ENI must be in the same VPC. Note When you invoke this operation, you must set either `SecurityGroupId` or `SecurityGroupIds.N` but not both.	sg-bp1fg655nh68xyz9i****
NetworkInterfaceName	string	No	The name of the network interface controller (NIC). The name must be 2 to 128 characters in length and can contain characters from the Unicode letter categorization (including English and Chinese characters) and ASCII digits (0-9). The name can contain colons (:), underscores (_), periods (.), or hyphens (-). Default value: empty.	testNetworkInterfaceName
Description	string	No	The description of the network interface controller (NIC). The description must be 2 to 256 characters in length and cannot start with `http://` or `https://`. Default value: empty.	testDescription
Visible	boolean	No	Note This parameter is deprecated.	null
InstanceType	string	No	The type of the Elastic Network Interface (ENI). Valid values: Secondary: secondary ENI. Trunk: trunk network interface controller (NIC) (in invitational preview). Default value: Secondary.	Secondary
BusinessType	string	No	Note This parameter is deprecated.	null
SecondaryPrivateIpAddressCount	integer	No	The number of private IP addresses for automatic creation by ECS. Valid values: 1 to 49.	1
QueueNumber	integer	No	The number of queues for the network interface controller (NIC). Valid values: 1 to 2048. When you attach the ENI to an instance, the value must be less than the maximum number of queues per network interface controller (NIC) supported by the instance type. You can call DescribeInstanceTypes to query the `MaximumQueueNumberPerEni` field. Default value: empty. When the ENI is attached, the default queue number for the instance type is used. You can call DescribeInstanceTypes to query the `SecondaryEniQueueNumber` field.	1
ClientToken	string	No	The client token that is used to ensure the idempotence of the request. You can use the client to generate the token, but make sure that the token is unique among different requests. ClientToken can contain only ASCII characters and cannot exceed 64 characters in length. For more information, see How to ensure idempotence.	123e4567-e89b-12d3-a456-426655440000
NetworkInterfaceTrafficMode	string	No	The communication pattern of the network interface controller (NIC). Valid values: Standard: uses the TCP communication pattern. HighPerformance: enables the Elastic RDMA Interface (ERI) and uses the RDMA communication pattern. Note A network interface controller (NIC) in RDMA communication pattern can be attached only to an instance whose instance type supports ERI. The number of ENIs in RDMA pattern cannot exceed the limit of the instance family. For more information, see Instance families and Configure eRDMA on enterprise-level instances. Default value: Standard.	Standard
QueuePairNumber	integer	No	The number of queues for the RDMA ENI. If you want to attach multiple RDMA ENIs to an instance, we recommend that you manually specify QueuePairNumber for each ENI based on the upper limit of `QueuePairNumber` supported by the instance type and the number of ENIs you plan to use. Make sure that the total QueuePairNumber of all ENIs does not exceed the maximum value allowed by the instance type. Call DescribeInstanceTypes to query the upper limit for the instance type. Important If QueuePairNumber is not specified for an RDMA ENI, the upper limit of QueuePairNumber for all RDMA ENIs supported by the instance type is used by default. Therefore, after an RDMA ENI without a specified QueuePairNumber is attached, no more RDMA ENIs can be added (regular ENIs are not affected by this limit).	22
SecurityGroupIds	array	No	The IDs of one or more security groups to which the network interface controller (NIC) belongs. The security groups and the ENI must be in the same VPC. The valid values of N depend on the quota for the maximum number of security groups to which an ENI can belong. For more information, see Limits. Note When you invoke this operation, you must set either `SecurityGroupId` or `SecurityGroupIds.N` but not both.	sg-bp1fg655nh68xyz9i****
	string	No	The IDs of one or more security groups to which the network interface controller (NIC) belongs. The security groups and the ENI must be in the same VPC. The valid values of N depend on the quota for the maximum number of security groups to which an ENI can belong. For more information, see Limits. Note When you invoke this operation, you must set either `SecurityGroupId` or `SecurityGroupIds.N` but not both.	sg-bp1fg655nh68xyz9i****
PrivateIpAddress	array	No	One or more secondary private IP addresses selected from the idle addresses within the CIDR block of the vSwitch to which the network interface controller (NIC) belongs. Valid values of N: 0 to 10. Note When you allocate secondary private IP addresses, you cannot specify both the parameter `PrivateIpAddress.N` and the parameter `SecondaryPrivateIpAddressCount` at the same time.	172.17..
	string	No	One or more secondary private IP addresses selected from the idle addresses within the CIDR block of the vSwitch to which the network interface controller (NIC) belongs. Valid values of N: 0 to 10. Note When you allocate secondary private IP addresses, you cannot specify both the parameter `PrivateIpAddress.N` and the parameter `SecondaryPrivateIpAddressCount` at the same time.	172.17..
Ipv6Address	array	No	One or more IPv6 addresses to assign to the network interface controller (NIC). You can specify up to 10 IPv6 addresses. Valid values of N: 1 to 10. Example: Ipv6Address.1=2001:db8:1234:1a00::** Note** If you want to set IPv6 addresses for the network interface controller (NIC), you must set either the parameter `Ipv6Addresses.N` or the parameter `Ipv6AddressCount` but not both.	2001:db8:1234:1a00::****
	string	No	One or more IPv6 addresses to assign to the network interface controller (NIC). You can specify up to 10 IPv6 addresses. Valid values of N: 1 to 10. Example: Ipv6Address.1=2001:db8:1234:1a00::** Note** If you want to set IPv6 addresses for the network interface controller (NIC), you must set either the parameter `Ipv6Addresses.N` or the parameter `Ipv6AddressCount` but not both.	2001:db8:1234:1a00::****
Ipv6AddressCount	integer	No	The number of IPv6 addresses to randomly generate for the network interface controller (NIC). Valid values: 1 to 10. Note If you want to set IPv6 addresses for the network interface controller (NIC), you must set either the parameter `Ipv6Addresses.N` or the parameter `Ipv6AddressCount` but not both.	1
Ipv4Prefix	array	No	One or more IPv4 prefixes to assign to the network interface controller (NIC). Valid values of N: 1 to 10. Note If you want to set IPv4 prefixes for the network interface controller (NIC), you must set either the parameter Ipv4Prefix.N or the parameter Ipv4PrefixCount but not both.
	string	No	One or more IPv4 prefixes to assign to the network interface controller (NIC). Valid values of N: 1 to 10. Note If you want to set IPv4 prefixes for the network interface controller (NIC), you must set either the parameter Ipv4Prefix.N or the parameter Ipv4PrefixCount but not both.	192.168../28
Ipv4PrefixCount	integer	No	The number of IPv4 prefixes to assign to the network interface controller (NIC). Valid values: 1 to 10. Note If you want to set IPv4 prefixes for the network interface controller (NIC), you must set either the parameter Ipv4Prefix.N or the parameter Ipv4PrefixCount but not both.	1
Ipv6Prefix	array	No	One or more IPv6 prefixes to assign to the network interface controller (NIC). Valid values of N: 1 to 10. Note If you want to set IPv6 prefixes for the network interface controller (NIC), you must set either the parameter Ipv6Prefix.N or the parameter Ipv6PrefixCount but not both.
	string	No	One or more IPv6 prefixes to assign to the network interface controller (NIC). Valid values of N: 1 to 10. Note If you want to set IPv6 prefixes for the network interface controller (NIC), you must set either the parameter Ipv6Prefix.N or the parameter Ipv6PrefixCount but not both.	2001:db8:1234:1a00:****::/80
Ipv6PrefixCount	integer	No	The number of IPv6 prefixes to assign to the network interface controller (NIC). Valid values: 1 to 10. Note If you want to set IPv6 prefixes for the network interface controller (NIC), you must set either the parameter Ipv6Prefix.N or the parameter Ipv6PrefixCount but not both.	1
DeleteOnRelease	boolean	No	Specifies whether to retain the ENI when the associated instance is released. Valid values: true: does not retain the ENI. false: retains the ENI.	true
TxQueueSize	integer	No	The outbound queue depth of the network interface controller (NIC). Take note of the following items: The outbound queue depth of the network interface controller (NIC) must be equal to the inbound queue depth. Valid values: 8192 to 16384. The value must be a power of 2. A larger outbound queue depth increases outbound throughput but consumes more memory. Note This parameter is not publicly available.	8192
RxQueueSize	integer	No	The inbound queue depth of the network interface controller (NIC). Take note of the following items: The inbound queue depth of the network interface controller (NIC) must be equal to the outbound queue depth. Valid values: 8192 to 16384. The value must be a power of 2. A larger inbound queue depth increases inbound throughput but consumes more memory. Note This parameter is not publicly available.	8192
NetworkInterfaceTrafficConfig	object	No	The traffic configuration parameter set of the network interface controller (NIC).
QueueNumber	integer	No	The number of queues for the network interface controller (NIC).	8
NetworkInterfaceTrafficMode	string	No	The communication pattern of the network interface controller (NIC).	HighPerformance
QueuePairNumber	integer	No	The number of queues for the RDMA ENI.	8
TxQueueSize	integer	No	The outbound queue depth of the network interface controller (NIC). Note This parameter is in invitational preview and is not publicly available. If you want to use this parameter, submit a ticket to request access. Take note of the following items: This parameter applies only to seventh-generation and later ECS instance types. This parameter currently applies only to Linux images. A larger outbound queue depth of the network interface controller (NIC) increases outbound throughput and reduces packet loss probability but consumes more memory.	8192
RxQueueSize	integer	No	The inbound queue depth of the network interface controller (NIC). Note This parameter is in invitational preview and is not publicly available. If you want to use this parameter, submit a ticket to request access. Take note of the following items: This parameter applies only to seventh-generation and later ECS instance types. This parameter currently applies only to Linux images. A larger inbound queue depth of the network interface controller (NIC) increases inbound throughput and reduces packet loss probability but consumes more memory.	8192
ConnectionTrackingConfiguration	object	No	The network connectivity tracking configuration. Before you use this parameter, read Connection timeout management.
TcpEstablishedTimeout	integer	No	The timeout period for established TCP connections. Unit: seconds. Valid values: [30, 60, 80, 100, 200, 300, 500, 700, 910]. Default value: 910.	910
TcpClosedAndTimeWaitTimeout	integer	No	The timeout period for TCP connections in the TIME_WAIT and CLOSED states. Unit: seconds. Valid values: integers from 3 to 15. Default value: 3. Note If your ECS instance is used with NLB/CLB, the default timeout period for connections in the `TIME_WAIT` state is 15 seconds.	3
UdpTimeout	integer	No	The timeout period for UDP flows. Unit: seconds. Valid values: [10, 20, 30, 60, 80, 100]. Default value: 30. Note If your ECS instance is used with NLB/CLB, the default value is 100 seconds.	30
EnhancedNetwork	object	No	Note This parameter is not publicly available.
EnableSriov	boolean	No	Note This parameter is not publicly available.	true
EnableRss	boolean	No	Note This parameter is not publicly available.	true
VirtualFunctionTotalQueueNumber	integer	No
VirtualFunctionQuantity	integer	No
EnableExpress	boolean	No
SourceDestCheck	boolean	No	Specifies whether to enable source/destination checking. We recommend that you enable this feature to improve network security. Valid values: true: enabled. false: disabled. Default value: false. Note This feature is supported only in specific regions. Before you use this feature, read Source/destination checking.	false
EnablePrimaryIPv6	boolean	No

Response elements

Element	Type	Description	Example
	object
Status	string	The status of the network interface controller (NIC).	Available
Type	string	The type of the network interface controller (NIC).	Secondary
VpcId	string	The ID of the VPC to which the ENI belongs.	vpc-bp1j7w3gc1cexjqd****
NetworkInterfaceName	string	The name of the network interface controller (NIC).	my-eni-name
MacAddress	string	The MAC address of the network interface controller (NIC).	00:16:3e:12::
NetworkInterfaceId	string	The ID of the network interface controller (NIC).	eni-bp14v2sdd3v8htln****
ServiceID	integer	The ID of the Virtual Network Operator (VNO) to which the network interface controller (NIC) corresponds.	12345678910
OwnerId	string	The ID of the account that owns the network interface controller (NIC).	123456****
ServiceManaged	boolean	Indicates whether the user of the network interface controller (NIC) is an Alibaba Cloud service or a VNO.	true
VSwitchId	string	The ID of the vSwitch in the VPC.	vsw-bp16usj2p27htro3****
RequestId	string	The request ID.	473469C7-AA6F-4DC5-B3DB-A3DC0DE3C83E
Description	string	The description of the network interface controller (NIC).	testDescription
ResourceGroupId	string	The resource group ID.	rg-2ze88m67qx5z****
ZoneId	string	The zone ID.	cn-hangzhou-e
PrivateIpAddress	string	The private IP address of the network interface controller (NIC).	172.17..
SecurityGroupIds	object
SecurityGroupId	array	The security groups to which the ENI belongs.
	string	The security group ID.	sg-bp18kz60mefsicfg****
PrivateIpSets	object
PrivateIpSet	array<object>	The collection of PrivateIpSet objects.
	object
PrivateIpAddress	string	The private IP address of the instance.	172.17..
Primary	boolean	Indicates whether the IP address is the primary private IP address.	true
Tags	object
Tag	array<object>	The tags.
	object
TagValue	string	The tag value.	TestValue
TagKey	string	The tag key.	TestKey
Ipv6Sets	object
Ipv6Set	array<object>	The IPv6 addresses allocated to the network interface controller (NIC).
	object	Note This parameter is in invitational preview and is not publicly available.
Ipv6Address	string	The IPv6 address.	2001:db8:1234:1a00::****
Primary	boolean
Ipv4PrefixSets	object
Ipv4PrefixSet	array<object>	The IPv4 prefixes allocated to the network interface controller (NIC).
	object
Ipv4Prefix	string	The IPv4 prefix.	192.168../28
Ipv6PrefixSets	object
Ipv6PrefixSet	array<object>	The IPv6 prefixes allocated to the network interface controller (NIC).
	object
Ipv6Prefix	string	The IPv6 prefix.	2001:db8:1234:1a00:****::/80
SourceDestCheck	boolean	Note This parameter is in invitational preview and is not publicly available.	false

Examples

Success response

JSON format

{
  "Status": "Available",
  "Type": "Secondary",
  "VpcId": "vpc-bp1j7w3gc1cexjqd****",
  "NetworkInterfaceName": "my-eni-name",
  "MacAddress": "00:16:3e:12:**:**",
  "NetworkInterfaceId": "eni-bp14v2sdd3v8htln****",
  "ServiceID": 12345678910,
  "OwnerId": "123456****",
  "ServiceManaged": true,
  "VSwitchId": "vsw-bp16usj2p27htro3****",
  "RequestId": "473469C7-AA6F-4DC5-B3DB-A3DC0DE3C83E",
  "Description": "testDescription",
  "ResourceGroupId": "rg-2ze88m67qx5z****",
  "ZoneId": "cn-hangzhou-e",
  "PrivateIpAddress": "172.17.**.**",
  "SecurityGroupIds": {
    "SecurityGroupId": [
      "sg-bp18kz60mefsicfg****"
    ]
  },
  "PrivateIpSets": {
    "PrivateIpSet": [
      {
        "PrivateIpAddress": "172.17.**.**",
        "Primary": true
      }
    ]
  },
  "Tags": {
    "Tag": [
      {
        "TagValue": "TestValue",
        "TagKey": "TestKey"
      }
    ]
  },
  "Ipv6Sets": {
    "Ipv6Set": [
      {
        "Ipv6Address": "2001:db8:1234:1a00::****",
        "Primary": false
      }
    ]
  },
  "Ipv4PrefixSets": {
    "Ipv4PrefixSet": [
      {
        "Ipv4Prefix": "192.168.**.**/28"
      }
    ]
  },
  "Ipv6PrefixSets": {
    "Ipv6PrefixSet": [
      {
        "Ipv6Prefix": "2001:db8:1234:1a00:****::/80"
      }
    ]
  },
  "SourceDestCheck": false
}

Error codes

HTTP status code	Error code	Error message	Description
400	MissingParameter	%s	A parameter is not specified.
400	UnsupportedParameter	%s	The parameter is not supported.
400	InvalidParameter	%s	The specified parameter is invalid.
400	InvalidInstanceID.Malformed	%s	The specified InstanceId parameter is invalid.
400	InvalidOperation.InvalidEcsState	%s	The current status of the instance does not support this operation.
400	InvalidOperation.InvalidEniState	%s	The current status of the ENI does not allow modifying the ENI attributes.
400	InvalidOperation.DetachPrimaryEniNotAllowed	%s	Detaching the primary ENI from an instance is not allowed.
400	Forbidden.RegionId	%s	The service is unavailable in the current region.
400	Duplicate.TagKey	The Tag.N.Key contain duplicate key.	The specified tag key already exists. Tag keys must be unique.
400	InvalidTagKey.Malformed	The specified Tag.n.Key is not valid.	The specified Tag.N.Key parameter is invalid.
400	InvalidTagValue.Malformed	The specified Tag.n.Value is not valid.	The specified tag value is invalid.
400	JoinedGroupLimitExceed	%s	The maximum number of security groups to which the specified resource can be added has been reached. For more information, see the return value of the %s placeholder in the error message.
400	InvalidParameter.SecurityGroupIdRepeated	%s	The security group ID passed in is duplicate.
400	InvalidSecurityGroupId.SingleIdAndMultiIdConflict	%s
400	InvalidParameter.Conflict	%s	The specified parameter is invalid. Check whether parameter conflicts exist. %s is a variable. An error message is dynamically returned based on call conditions.
400	InvalidConnectionTrackingConfiguration.RegionOrUserNotSupported	The specified parameter ConnectionTrackingConfiguration is not supported in this region, or this account is not in the whitelist of using network interface ConnectionTrackingConfiguration.	The specified parameter ConnectionTrackingConfiguration is not supported in this region, or this account is not in the whitelist of using network interface ConnectionTrackingConfiguration.
400	InvalidOperation.EniCountExceeded	%s.	The maximum number of NICs in the Enterprise Security Group has been reached.
400	InvalidPrivateIpAddress.Duplicated	The specified private IP address "%s" is duplicated.	The specified IP address is already in use.
400	IncorrectVSwitchStatus	The operation is not allowed in the current VSwitch state. Expecting state includes "Created Available", but current state is "%s".	The operation is not supported in the current state of the vSwitch.
400	InvalidEniQueueSize.RegionOrUserNotSupported	The specified parameter "RxQueueSize" or "TxQueueSize" is not supported in this region or this account is not allowed to use ENI QueueSize.	You are not authorized to specify the length of NIC queues or cannot specify the length of NIC queues in the current region.
400	InvalidParameter.EniQueueSize	The specified parameter "TxQueueSize" and "RxQueueSize" are not equal or the value must be 8192 or 16384.	The specified parameter TxQueueSize and RxQueueSize are not equal or not the allowed value.
400	InvalidParameter.EniConnectionTrackingConfiguration	The specified ENI connection tracking configuration "%s" must be between %s and %s.	The network connection configuration specified by the network card exceeds the allowable range
400	QuotaExceeded.PrivateIpAddress	There are not enough private IPs in the specified VSwitch.	The current VSwitch does not have enough Ip
400	Throttling	Request was denied due to request throttling.	The request is throttled. Use the NextToken-based pagination method instead of the PageNumber-based pagination method for queries.
400	InvalidVSwitch.IllegalStatus	The operation is not allowed in the current VSwitch state. Expecting state includes "Created", but current state is "%s".	The current VSwitch status does not support this operation.
400	InvalidParameter.EniEnhancedNetwork	The input parameter "EnhancedNetwork" is illegal, when EnableSriov is true, VirtualFunctionTotalQueueNumber must not be empty, and VirtualFunctionQuantity must be 1 to 256. When EnableSriov is empty or false, VirtualFunctionTotalQueueNumber and VirtualFunctionQuantity must be empty.	The specified network enhancement function parameter is illegal. When the EnableSriov is set to true, the VirtualFunctionTotalQueueNumber must not be empty and the VirtualFunctionQuantity value range is 1-256; When the EnableSriov is empty or set to false, the VirtualFunctionTotalQueueNumber and VirtualFunctionQuantity must be empty
400	InvalidOperation.EnablePrimaryIPv6	The specified ENI can not enable primary IPv6 or already has primary IPv6.	The specified ENI can not enable primary IPv6 or already has primary IPv6.
400	InvalidVSwitch.Ipv4NotEnabled	The specify VSwitch of ECS does not support IPv4.
401	InvalidOperation.SecurityGroupNotAuthorized	The specified security group is not authorized to operate.	You do not have permission to operate the current security group.
500	InternalError	The request processing has failed due to some unknown error, exception or failure.	An internal error has occurred. Try again later.
500	InvalidOperation.RegionNotSupportIpPrefix	The current region does not support IP prefix feature.	The region does not support IP prefix allocation.
500	ServiceUnavailable	The request processing has failed due to some unknown error.	Request timed out, please try again.
403	InvalidUserType.NotSupported	%s	Your account does not support this operation.
403	Abs.InvalidAccount.NotFound	%s	Your Alibaba Cloud account does not exist or your AccessKey pair has expired.
403	Forbidden.NotSupportRAM	%s	RAM users are not authorized to perform this operation.
403	Forbidden.SubUser	%s	You are not authorized to manage this resource. Contact the owner of the Alibaba Cloud account for authorization.
403	InValidParameter	%s
403	MaxEniCountExceeded	%s	The maximum number of ENIs that can be managed has been reached.
403	EniPerInstanceLimitExceeded	%s	The maximum number of ENIs that can be attached to the specified instance has been reached.
403	InvalidOperation.AvailabilityZoneMismatch	%s	The operation is invalid.
403	InvalidOperation.VpcMismatch	%s	The operation is invalid. Check whether the VPC in the operation corresponds to other parameters.
403	SecurityGroupInstanceLimitExceed	%s	The number of instances in the security group has reached the maximum limit.
403	InvalidSecurityGroupId.NotVpc	%s	The specified SecurityGroupId parameter is invalid and the network type of the security group is not VPC.
403	InvalidOperation.InvalidEniType	%s	The current type of the Elastic Network Interface (ENI) does not support this operation.
403	InvalidVSwitchId.IpNotEnough	%s	The number of available IP addresses on the specified vSwitch is insufficient.
403	InvalidVSwitchId.IpInvalid	%s	The specified private IP address is invalid.
403	QuotaExceed.Tags	%s	The number of specified tags exceeds the upper limit. %s is a variable. An error message is dynamically returned based on call conditions.
403	InvalidIp.Address	%s	The IP entered is not in the correct format or is not in the optional CIDR range.
403	InvalidIp.IpRepeated	%s	The specified IP address already exists.
403	MaxEniPrivateIpsCountExceeded	%s	The maximum number of secondary private IP addresses that can be assigned to the specified ENI has been exceeded. For more information, see the return value of the %s placeholder in the error message.
403	InvalidOperation.ResourceManagedByCloudProduct	%s	You cannot modify security groups managed by cloud services.
403	InvalidOperation.TrunkingIsNotAllowed	%s	The trunk network card is not operational.
403	InvalidParameter.InvalidEniQueueNumber	%s	The network interface controller (NIC) queue number is incorrect. For more information, refer to the actual return result of the %s placeholder in the error message.
403	InvalidOperation.MaxEniQueueNumberExceeded	%s	The number of Elastic Network Interface (ENI) queues exceeds the upper limit. For more information, see the actual return result of the %s placeholder in the error message.
403	InvalidOperation.ExceedInstanceTypeQueueNumber	%s	The maximum number of queues for all ENIs on an instance has been exceeded. For more information, see the return value of the %s placeholder in the error message.
403	InvalidParameter.EniTrafficMode	%s
403	InvalidOperation.HighPerformanceTrafficModeIsNotAllowed	%s
403	InvalidParameter.QueuePairNumberMustEmpty	%s
403	InvalidParameter.InvalidQueuePairNumber	%s
403	InvalidParams.NetworkInterfaceName	%s
403	InvalidIp.IpPrefixIllegal	The ip prefixes %s is/are illegal.	The IP address prefix is invalid and is not in the CIDR format.
403	InvalidIp.IpPrefixMustInReserveSegment	The ip prefix must in vswitch reserve segment.	The IP address prefix is invalid and is not in the reserved CIDR block of the vSwitch.
403	InvalidOperation.Ipv4CountExceeded	%s	The operation is valid because the maximum number of IPv4 addresses has been reached.
403	InvalidOperation.Ipv6CountExceeded	%s	The operation is valid because the maximum number of IPv6 addresses has been reached.
403	InvalidOperation.HighPerformanceTrafficModeEniUnsupported	High performance traffic mode does not support the current ENI type. Expected ENI type is "%s" but the current ENI type is "%s".	High performance traffic mode does not support the current ENI type.
403	AclLimitExceed	%s	The number of ACL rules for an ENI or instance exceeds the upper limit.
403	InvalidIp.IpPrefixMaskInvalid	The IP prefix mask %s is illegal which must be between %s and %s.	The IP prefix mask is invalid and is not in the valid range.
403	InvalidVSwitchId.IpPrefixNotEnough	The specified VSwitch does not have enough IP prefixes.	The number of IP prefixes in the specified switch is insufficient.
403	InvalidIp.IpPrefixMaskNotSame	The IP prefixes %s are illegal.The IP prefix mask must be the same.	The IP prefix masks are not the same.
403	EnterpriseGroupLimited.MutliGroupType	The specified instance can't associate security group of different types.	The specified instance cannot be added to both a common security group and an enterprise security group. You can call the DescribeSecurityGroups query to specify the type of security group.
403	InvalidOperation.BoundingEniSlaveQuotaExceed	The number of Slave ENIs exceeds the limit of Bond ENI.	The number of Slave ENIs exceeds the limit of Bond ENI.
403	InvalidIp.IpPrefixNotAvailable	The IP prefix is not available.	The IP prefix is not free.
403	InvalidIp.IpPrefixMaskIllegal	The current IP prefix mask is illegal.	Illegal IP prefix mask.
403	InvalidIp.IpPrefixNotStrict	The IP prefix "%s" must be strict CIDR format.	Invalid IP prefix, not strictly cidr.
403	InvalidOperation.NotSupport	The specified region does not support allocating IPv6 when creating ENI.	The specified region does not support allocating IPv6 when creating ENI.
404	InvalidEcsId.NotFound	%s	The specified instance ID does not exist.
404	InvalidEniId.NotFound	%s
404	InvalidVSwitchId.NotFound	%s	The specified vSwitch does not exist.
404	InvalidSecurityGroupId.NotFound	%s	The specified security group ID does not exist.
404	InvalidResourceGroup.NotFound	The ResourceGroup provided does not exist in our records.	The specified resource group does not exist.
404	InvalidOperation.MaxEniIpv6IpsCountExceeded	The ipv6 address count exceed limitation.
404	InvalidOperation.VSwitchIpv6Disabled	The specified VSwitch does not support Ipv6 feature.	The specified VSwitch does not support IPv6.
404	InvalidOperation.EnableIpv6Failed	The specified VSwitch does not support Ipv6 feature.
404	InvalidOperation.AddressAlreadyAllocated	The specified ipv6 has been already allocated.
404	InvalidOperation.AddressNotInVSwitchCidr	The specified ipv6 does not match VSwitch cidr scope.
404	InvalidOperation.SlaveEniMustHaveBondingEni	Ensure you create the corresponding Bond ENI before creating Slave ENI.	You must create a Bond network card before creating a Slave network card.
404	InvalidOperation.EniTrafficModeNotSupportIpv6	The High Performance(RDMA) traffic mode does not support IPv6.	ENIs that use the RDMA communication mode do not support IPv6.
404	InvalidOperation.VSwitchCidrReservationNotExist	The specified VSwitch does not have CIDR reservation.	The specified switch does not have a reserved segment available.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.