Elastic Compute Service (ECS) has limits on its features, performance, and quotas. Before you use ECS, you should understand these limits to ensure that the service can meet your business requirements. You can plan your resources and apply for quota increases in advance. This topic describes the limits of ECS and explains how to increase them.
Table dimensions
View the tables in this topic to learn about the specific limits. The columns in the tables are described as follows:
Item: The feature, performance metric, or quota that has a limit.
NoteA quota is the maximum amount of a cloud resource that an Alibaba Cloud account can use or the maximum number of operations that the account can perform.
Limit: The specific limit on the item.
If the item is an ECS-related quota, it has a quota ID. You can use the quota ID to query the current quota value.
How to increase the limit: The method to increase the limit on the item.
If a limit cannot be increased, you must plan accordingly. If a limit can be increased, you can apply for a quota increase as needed.
Instances
Restrictions | Limit | How to increase the limit |
vCPU quotas | The maximum number of vCPUs for an instance family that an Alibaba Cloud account can have in a specific region with a specific billing method (subscription, pay-as-you-go, or spot instance). For more information about the limits, see vCPU quotas. | |
GPU and vGPU quotas | The maximum number of GPUs or vGPU instances for an instance family that an Alibaba Cloud account can have in a specific region with a specific billing method (subscription, pay-as-you-go, or spot instance). For more information about the limits, see GPU and vGPU quotas. | |
Maximum number of subscription instances that an Alibaba Cloud account can purchase at a time in a region | View the quota based on the quota ID | None |
Convert pay-as-you-go to subscription |
| None |
Convert subscription to pay-as-you-go | When you convert the billing method from subscription to pay-as-you-go, a refund is generated. The refund consumes your refund quota. If your refund quota for the current month is exceeded, you cannot request more refunds. This means you cannot convert the billing method from subscription to pay-as-you-go. For more information, see Convert the billing method of instances from subscription to pay-as-you-go. Note The refund quota is subject to the amount displayed on the conversion page. The quota is reset to zero on the first day of the next month. | None |
Instance families that support secondary virtualization | Only ECS Bare Metal Instances and Super Computing Clusters support secondary virtualization. Other instance families do not support the installation of virtualization software or secondary virtualization. | None |
Sound card applications | Sound card applications are not supported. | None |
Attach external hardware devices | External hardware devices, such as hardware dongles, USB flash drives, external hard disks, and bank U-keys, cannot be directly attached. Try using software dongles or dynamic password-based secondary authentication. | None |
Multicast protocol | The multicast protocol is not supported. To achieve one-to-many communication similar to multicast, use the unicast point-to-point method as an alternative. | None |
Website ICP filing | To apply for an ICP filing for a website or app, you must purchase a subscription ECS instance for 3 months or longer. Each ECS instance can be used for ICP filings for a maximum of 5 websites or apps. For more information, see Check the server for ICP filing. | None |
License | Some software or application licenses must be bound to the hardware information of an ECS instance. Migrating an ECS instance may change its hardware information. This can cause licenses that are bound to the hardware to become invalid. | None |
vCPU quotas
GPU and vGPU quotas
Images
Restrictions | Limit | How to increase the limit |
Maximum number of custom images that an Alibaba Cloud account can retain in a region | View the quota based on the quota ID | |
Maximum number of accounts with which a custom image can be shared | View the quota based on the quota ID | |
Limits on images and instance types | Instance types with 4 GiB of memory or more do not support 32-bit images. | None |
For more information about images, see Image overview.
Block storage
Limitations | Limit | How to increase the limit |
Number of system disks per instance | 1 | None |
Number of data disks per instance | The maximum number of disks that you can attach to an instance varies by instance type. For more information, see Instance families. Note When you create an instance, you can attach a maximum of 1 system disk and 16 data disks. If the instance requires more data disks, attach them after the instance is created. You can call the DescribeInstanceTypes operation to query the maximum number of disks that can be attached to an instance of a specific type. | None |
Disk capacity quota for an Alibaba Cloud account in a specific region and zone | The disk capacity quota varies by disk category. You can view the capacity quota for each disk category. For more information, see View or increase block storage quotas. | |
Capacity of a single basic disk | 5 GiB to 2,000 GiB | None |
Capacity of a single standard SSD | 20 GiB to 32,768 GiB | None |
Capacity of a single ultra disk | 20 GiB to 32,768 GiB | None |
Capacity of a single ESSD |
| None |
Capacity of a single ESSD AutoPL disk | 1 GiB to 65,536 GiB | None |
Single ESSD Entry disk | 10 GiB to 32,768 GiB | None |
Single Regional Enterprise SSD (ESSD) | 1 GiB to 65,536 GiB | None |
Capacity of a single local SSD | 5 GiB to 800 GiB | None |
Total capacity of local SSDs on a single instance | 1,024 GiB | None |
Capacity of a single elastic ephemeral disk | 64 GiB to 8,192 GiB | None |
Capacity limit of a single system disk |
Note If a basic disk (a previous-generation disk that is being phased out) is used as a system disk, its maximum capacity is 500 GiB. | None |
Whether you can attach new local disks to an instance that has local disks | Not allowed. | None |
Whether you can change the configuration of an instance that has local disks | Only the bandwidth can be changed. | None |
Mount point range for Linux system disks |
| None |
Mount point range for Linux data disks | The naming of mount points varies based on the number of attached data disks:
| None |
Block storage is calculated in binary units, where 1 GiB = 1,024 MiB.
For more information about block storage, see Block storage overview.
Snapshots
Limitations | Limit | How to increase the limit |
Number of manual snapshots that can be retained for a single disk |
| None |
Number of automatic snapshots that can be retained for a single disk |
| None |
Number of archived snapshots that can be retained for a single disk | 10,000 | None |
Number of automatic snapshot policies that an Alibaba Cloud account can retain in a single region | 100 | None |
Number of automatic snapshot policies that can be applied to a single disk | 1 | None |
Number of snapshots that can be concurrently created for a single disk |
| None |
Number of snapshots that can be concurrently archived for a single disk | 10 | None |
Block storage type |
| None |
Download or export snapshots | You cannot download or export created snapshots. You can create custom images from snapshots and export the custom images to your on-premises device. | None |
Constraints on manual and automatic snapshot creation |
| None |
For more information about snapshots, see Snapshot overview.
SSH key pairs
Limits | Limit | How to increase the limit |
SSH key pair quota for an Alibaba Cloud account in a single region | 500 | None |
Image types that support SSH key pairs | Only Linux systems are supported. | None |
For more information about SSH key pairs, see Manage SSH key pairs.
Public bandwidth
Total peak public bandwidth limit for all pay-as-you-go and spot instances that are billed on a pay-by-bandwidth basis for an Alibaba Cloud account in a single region:
NoteTo request a higher bandwidth limit, you can view and apply to increase the quota using the quota ID
q_internet-bandwidth-pay-by-bandwidth-of-postpaid-instance. For more information, see View or increase ECS quotas.Region
Limit
China (Beijing), China (Shanghai), China (Hangzhou), China (Shenzhen)
50 Gbps
Hong Kong (China), Singapore
20 Gbps
Other
10 Gbps
Since November 27, 2020, the peak bandwidth for creating and upgrading ECS instances has been subject to account throttling policies:
NoteTo request a higher peak bandwidth, submit a ticket.
In a single region, the total actual peak bandwidth of all ECS instances that are billed on a pay-by-traffic basis for an Alibaba Cloud account cannot exceed 5 Gbps.
In a single region, the total actual peak bandwidth of all ECS instances that are billed on a pay-by-bandwidth basis for an Alibaba Cloud account cannot exceed 50 Gbps.
Limits on the peak bandwidth per instance and public IP address replacement:
ImportantFor the Pay-by-traffic billing method, the maximum inbound and outbound bandwidth is an upper limit and not a guaranteed performance metric. When resource contention occurs, the maximum bandwidth may be limited. If your business requires guaranteed bandwidth, use the Pay-by-bandwidth billing method.
Limits
Limit
How to increase the limit
Peak inbound bandwidth per instance
If the purchased peak outbound bandwidth is 10 Mbit/s or less, Alibaba Cloud allocates an inbound bandwidth of 10 Mbit/s.
If the purchased peak outbound bandwidth is greater than 10 Mbit/s, Alibaba Cloud allocates an inbound bandwidth equal to the purchased peak outbound bandwidth.
None
Peak outbound bandwidth per instance
Pay-by-traffic:
Subscription instance: 200 Mbit/s
Pay-as-you-go instance: 100 Mbit/s
Pay-by-bandwidth: 200 Mbit/s
NoteThe maximum public bandwidth of an ECS instance is also related to the instance type. You can view the Baseline Network Bandwidth metric in the Instance families list. The total public bandwidth of a single instance cannot exceed this limit.
Some instance types, such as ecs.t6-c4m1.large, ecs.t6-c2m1.large, ecs.t6-c1m1.large, and ecs.t6-c1m4.large, are subject to a baseline network bandwidth limit, with a peak of 80 Mbit/s.
None
Limit on replacing the public IP address of a single instance
You can replace the public IP address of a new instance within six hours after creation. The IP address of an instance can be replaced a maximum of three times.
None
For more information about public bandwidth, see Public bandwidth.
Elastic network interfaces
Limits | Limit | How to increase the limit |
Maximum number of secondary Elastic Network Interfaces (ENIs) that an Alibaba Cloud account can create in a region | View the quota based on the quota ID | |
VPC and zone limits for attaching ENIs to instances | An instance and its attached ENIs must be in the same VPC and the same zone.
| None |
Maximum number of ENIs that can be attached to a single instance | The number of ENIs that can be attached to an instance is determined by its instance type. For more information, see the ENIs column in Instance families. | None |
For more information about ENIs, see ENI overview.
Prefix lists
Limits | Limit | How to increase the limit |
Maximum number of prefix lists for an Alibaba Cloud account in a single region | 100 | None |
Maximum number of entries in a single prefix list | 200 | None |
Maximum number of associated resources for a single prefix list | 1,000 | None |
For more information about prefix lists, see Prefix list overview.
Security groups
Limits | Limit on basic security groups | Limit on enterprise security groups |
Maximum number of security groups for an Alibaba Cloud account in a region | You can view or apply to increase the quota using the quota ID | Same as for basic security groups. |
Maximum number of security groups that can be associated with a single ENI | 10 | Same as for basic security groups. |
Maximum number of rules (inbound and outbound) in all security groups associated with a single ENI | 1,000 | Same as for basic security groups. |
Maximum number of rules in a single security group where the authorization object is a security group | 20 | 0. In an enterprise security group, you cannot add rules where the authorization object is a security group. You also cannot use an enterprise security group as the authorization object in other security group rules. |
Maximum number of VPC-type ECS instances that a single VPC-type security group can contain | Not fixed. The number depends on the number of private IP addresses that the security group can contain. | No limit |
Maximum number of private IP addresses that a single VPC-type security group can contain for an Alibaba Cloud account in a region | 6,000 Note
| 65,536 Note The number of used IP addresses represents the total number of ENIs associated with a security group, including both primary and secondary network interfaces of an instance. |
Public access ports | For security reasons, port 25 on ECS instances is disabled by default. We recommend that you use an SSL-encrypted port, typically port 465, to send emails. | Same as for basic security groups. |
For more information about security groups, see Security group overview.
Reserved instances
Restrictions | Limit | How to increase the limit |
Total number of regional reserved instances for an Alibaba Cloud account across all regions | 20 | |
Number of zonal reserved instances for an Alibaba Cloud account in a single zone | 20 | |
Reserved Instance Specifications | The gn6i and t5 instance families do not support regional reserved instances. You also cannot split or merge them. Note The instance types available for purchase are displayed on the buy page. | None |
Eligible resources |
| None |
For more information about reserved instances, see What is a reserved instance?
Savings plans
Limits | Limit | How to increase the limit |
Number of savings plans that an Alibaba Cloud account can purchase | 200 | None |
Eligible resources |
| None |
For more information about savings plans, see What is a savings plan?
Storage Capacity Units
Limits | Limit | How to increase the limit |
Maximum capacity of a Storage Capacity Unit (SCU) that can be purchased at a time | 50 TiB | |
Maximum number of SCUs that can be purchased in a single region | 100 | None |
Product types supported by SCUs |
| None |
Deductible types | Only pay-as-you-go bills can be deducted. Pay-as-you-go bills for disks on spot instances cannot be deducted. | None |
Effective time | You can set an effective time, but it cannot be more than six months after the creation time. | None |
Create and manage SCUs using an API | Not supported. | None |
For more information about SCUs, see Storage Capacity Units (SCUs).
Launch templates
Limits | Limit | How to increase the limit |
Maximum number of launch templates that an Alibaba Cloud account can have in a region | View the quota based on the quota ID | |
Maximum number of versions for a single launch template that an Alibaba Cloud account can have in a region | View the quota based on the quota ID | |
Launch template parameters | When you create a launch template, all parameters are optional. However, if a launch template does not include required parameters, such as the instance type and image, you must specify these parameters when you use the template to create an instance. | None |
Modify a created launch template | After a launch template is created, it cannot be modified. You can create a new version of the launch template to change the configuration parameters. For more information, see Manage launch template versions. | None |
For more information about launch templates, see Launch template overview.
Deployment sets
Limitations | Limit | How to increase the limit |
Maximum number of deployment sets that an Alibaba Cloud account can have in a region | View the quota based on the quota ID | |
Number of instances that a single deployment set can contain | The number of instances that a deployment set can contain depends on the deployment strategy you choose. For more information, see Deployment strategies. | None |
Create Dedicated Hosts in a deployment set | You cannot create Dedicated Hosts in a deployment set. | None |
Region and zone limits | Instances and deployment sets must be in the same region. Instances in a deployment set that uses the low-latency network strategy must all be in the same zone. | None |
Instance types that can be created in a deployment set | Different deployment strategies support only specific instance families. You can call the DescribeDeploymentSetSupportedInstanceTypeFamily operation and specify a deployment strategy to get the supported instance families. | None |
Merge deployment sets | Deployment sets cannot be merged. | None |
For more information about deployment sets, see Deployment sets.
Auto provisioning groups
Limitations | Limit | How to increase the limit |
Provision instances across regions | Auto provisioning groups do not support provisioning instances across regions. | None |
Maximum number of configuration sources that can be specified for a single auto provisioning group | You can specify only one specific version of a launch template as the basic configuration for instances in a single auto provisioning group. However, you can extend the instance types in the template to form multiple resource pools. | None |
Maximum number of resource pools that can be set for a single auto provisioning group | A single auto provisioning group supports a maximum of 20 resource pools (combinations of zones and instance types). | None |
Maximum number of instances that can be created in a single auto provisioning group | 1,000 | None |
For more information about auto provisioning groups, see Auto provisioning overview.
Cloud Assistant
Limitations | Limit | How to increase the limit |
Maximum number of Cloud Assistant commands for an Alibaba Cloud account in a region | You can view the quota using the quota ID | |
Output size limit for Cloud Assistant tasks for an Alibaba Cloud account in a region | You can view the quota using the quota ID | None |
Output retention period for Cloud Assistant tasks for an Alibaba Cloud account in a region | You can view the quota using the quota ID | None |
Maximum number of activation codes for Cloud Assistant managed instances for an Alibaba Cloud account in a region | You can view the quota using the quota ID | None |
Maximum number of instances supported for command execution for an Alibaba Cloud account in a region | You can view the quota using the quota ID | |
Size limits for Base64-encoded Bat, PowerShell, or Shell scripts and custom parameters, based on the scenario |
| None |
Maximum number of custom parameters in a single command | 20 | None |
Operating system | You can run Cloud Assistant commands only on instances that use the following operating systems:
Note
| None |
For more information about Cloud Assistant, see Cloud Assistant overview.
Network connectivity diagnostics
Limits | Limit | How to increase the limit |
Maximum number of diagnostic paths in a single region | 100 | None |
Maximum number of diagnostic tasks in a single region | 1,000 | None |
Maximum number of concurrent diagnostic tasks in a single region | 5 | None |
For more information about network connectivity diagnostics, see Diagnose network connectivity.
API
Limitations | Limit | How to increase the limit |
API rate quotas | API rate quotas are constraints on the frequency of OpenAPI calls. They are divided into two categories based on the API version and resource type:
|
|
For more information about ECS APIs, see Integration overview.