Each Alibaba Cloud account has default quotas for SSL-VPN cloud resources and API operations. Some quotas can be increased.
Overview
Quotas apply per region or per account and fall into the following types:
General quotas: limits on cloud resources available to an account.
API rate limits: limits on API calls per unit of time, also known as QPS limits.
Privileges: permissions to use advanced features, granted by Alibaba Cloud.
VPN Gateway is subject to general quotas and API rate limits Quota Center consoleVPC consoleManage SSL-VPN quotas
General quotas
The following tables list the general quotas for SSL-VPN.
Quota values listed here are for reference only. Values in the console take precedence.
General quotas for VPN gateways
Item | Description | Default value | Adjustable |
vpn_quota_instances_num | Maximum number of VPN gateways per account | 30 Note
| |
None | Maximum bandwidth supported by a VPN gateway | 1000 Mbps Note In some regions, VPN Gateway instances support a maximum bandwidth of 500 Mbps. For more information about the regions, see Limits on VPN Gateway. | No |
None | Maximum packets per second (PPS) for a VPN gateway | 120,000 (256 bytes per packet) | No |
None | Maximum connections per VPN gateway | 200,000 Note The 5-tuple (including the source IP address, destination IP address, source port, destination port, and protocol) uniquely identifies a connection. The number of connections includes connections established by using the TCP, UDP, and ICMP protocols. | No |
General quotas for SSL-VPN connections
Item | Description | Default value | Adjustable |
vpn_quota_ssl_cert_num | Maximum number of SSL client certificates per account | 50 | |
None | Maximum SSL servers per VPN gateway | 1 | No |
None | Maximum local CIDR blocks per SSL server | 5 | |
None | Maximum peer CIDR blocks per SSL server | 1 | |
None | Validity period of an SSL client certificate | Three years |
General quotas for IPsec servers
Item | Description | Default value | Adjustable |
None | Maximum IPsec servers per VPN gateway | 1 | No |
None | Maximum clients per IPsec server | 50 |
API rate limits
The following table lists the API rate limits for VPN Gateway.
API | Version | Default value | Description | Adjustable |
CreateSslVpnClientCert | 2016-04-28 | 120/60(s) | Maximum CreateSslVpnClientCert calls per account per minute | No |
CreateSslVpnServer | 2016-04-28 | 100/3600(s) | Maximum CreateSslVpnServer calls per account per hour | No |
CreateVpnGateway | 2016-04-28 | 60/60(s) | Maximum CreateVpnGateway calls per account per minute | No |
DescribeSslVpnClientCerts | 2016-04-28 | 120/60(s) | Maximum DescribeSslVpnClientCerts calls per account per minute | No |
DescribeVpnGateways | 2016-04-28 | 120/60(s) | Maximum DescribeVpnGateways calls per account per minute | No |