Billing of Enterprise Edition instances
Container Registry Enterprise Edition instances use subscription billing. You pay for the instance and, optionally, for the Object Storage Service (OSS) bucket that stores your artifacts.
Billable items
| Billable item | Description | Pricing |
|---|---|---|
| Instance | Enterprise Edition instances use subscription billing. The price varies by instance specification and region. | See Pricing of Enterprise Edition. |
| OSS bucket | Container images, Helm charts, and other cloud native application artifacts are stored in an OSS bucket. Storage and outbound Internet traffic fees may apply. If you pull artifacts only over virtual private cloud (VPC) endpoints without enabling Internet access, no outbound Internet traffic fees are charged in OSS. OSS is billed on a pay-as-you-go basis by default. Purchase resource plans to offset costs when your workloads are stable. | Visit the OSS pricing page. |
Cross-region image replication does not incur traffic costs in OSS.
|
Billable item |
Billing |
Price |
Notes |
|
|
(Required) Instance |
Enterprise Edition instances use the subscription billing method. Prices vary based on the instance type. |
For more information, see Pricing of Enterprise Edition instances. |
- |
|
|
(Required) Object Storage Service (OSS) bucket |
By default, OSS uses the pay-as-you-go billing method. If you have stable business usage, you can purchase a resource plan to cover the fees. Important
The Enterprise Edition provides a multi-region instance synchronization feature that does not incur additional OSS traffic fees. |
For more information, see OSS pricing. |
- |
|
|
(Recommended) Security scan quota |
Trivy scan engine |
By default, Container Registry provides a security scan feature based on Trivy. This feature can detect risks such as system and application vulnerabilities. If you require in-depth threat detection and simplified image fixing, you can use the Security Center scan engine. |
- |
The security scan feature lets you downgrade the scan engine from the Security Center scan engine to the Trivy scan engine. You can downgrade the scan engine on the instance list page. For more information about security scans, see Container image security scan. |
|
Security Center scan engine |
Container Registry integrates with Security Center to provide an enhanced image security scan feature. This feature supports scans for system vulnerabilities, application vulnerabilities, viruses, and malicious samples. It also provides continuous threat detection and automated fixing. You can enable and use the image security administration feature. |
CNY 800/month. This fee covers up to 10,000 scans per month for different digests. You can perform an unlimited number of scans for the same digest. |
||
|
(Optional) Namespace quota |
This package increases the namespace quota for your current instance type. |
An additional CNY 25/month is charged for every five additional namespaces. |
The instance type, repository quota, and namespace quota of an Enterprise Edition instance can be downgraded.
|
|
|
(Optional) Repository quota |
This package increases the repository quota for your current instance type. |
An additional CNY 100/month is charged for every 1,000 additional repositories. |
||
|
(Optional) VPC quota |
This package increases the VPC quota for your current instance type. |
CNY 72/month is charged for each additional VPC. |
You can upgrade or downgrade the VPC quota on the instance list page. |
|
Pricing of Enterprise Edition
The price varies by region. The price displayed on the buy page prevails.
Choose your edition
Basic Edition suits teams with moderate workloads: up to 250 QPS on artifact pulls, 3 concurrent build tasks, and namespace and repository quotas sufficient for most production deployments.
Advanced Edition suits large-scale or high-throughput environments: up to 1,000 QPS on artifact pulls, 10 concurrent build tasks, and expanded namespace and repository quotas.
Both editions include the full feature set — artifact security scanning, P2P acceleration, on-demand distribution, Global Synchronization, signing and signature verification, and more.
Features
The following table compares the features and quotas of Basic Edition and Advanced Edition instances.
|
Feature category |
Breakdown |
Economy Edition |
Basic Edition |
Standard Edition |
Premium Edition |
Notes |
|
|
Artifact management |
Container image |
Hosting |
|
|
|
|
- |
|
Namespace quota |
5 |
15 |
25 |
50 |
|||
|
Public repository quota |
200 |
1000 |
3000 |
5000 |
|||
|
Private repository quota |
|||||||
|
VPC access control quota |
Purchase separately |
||||||
|
OCI Artifact |
|
|
|
|
For more information about OCI artifacts, see Push and pull custom OCI artifacts. |
||
|
Immutable versions |
|
|
|
|
For more information about immutable versions, see Enable immutable image versions. |
||
|
Version management (automatic cleanup) |
|
|
|
|
For more information about image cleanup, see Clean up image versions. |
||
|
Helm Chart |
Hosting |
|
|
|
|
For more information about Helm charts, see Push and pull Helm charts. |
|
|
Namespace quota |
|
15 |
25 |
50 |
|||
|
Public repository quota |
|
1000 |
3000 |
5000 |
|||
|
Private repository quota |
|||||||
|
Artifact build |
Concurrent build quota |
1 |
3 |
5 |
10 |
- |
|
|
Intelligent acceleration |
|
|
|
|
For more information about intelligent acceleration, see Use an Enterprise Edition instance to build images. |
||
|
Multi-architecture image build |
|
|
|
|
For more information about multi-architecture images, see Build multi-architecture container images. |
||
|
Artifact security |
Multi-engine scan |
|
|
|
|
For more information about multi-engine scans, see Container image security scan. |
|
|
Vulnerability fixing |
|
|
|
|
For more information about vulnerability fixing, see Fix system vulnerabilities. |
||
|
Threat blocking |
|
|
|
|
For more information about threat blocking, see Create a delivery chain. |
||
|
Signature generation and verification |
|
|
|
|
For more information about image signing and verification, see Use container image signing. |
||
|
Network access control |
|
|
|
|
For more information about network access control, see Overview of network access control. |
||
|
Operation audit |
|
|
|
|
- |
||
|
Artifact distribution |
Distribution performance (pull QPS) |
30 |
250 |
500 |
1000 |
- |
|
|
P2P distribution |
|
|
|
|
For more information about P2P distribution, see Overview of P2P acceleration. |
||
|
On-demand distribution |
|
|
|
|
For more information about on-demand distribution, see Load container images on demand. |
||
|
Global synchronization |
|
|
|
|
For more information about global synchronization, see Synchronize instances within the same account and Synchronize instances across different accounts. |
||
|
Artifact subscription |
|
5 |
10 |
30 |
- |
||
|
Artifact delivery |
Event notification |
|
|
|
|
For more information about event notifications, see Create an event notification. |
|
|
Passwordless pull |
|
|
|
|
For more information about passwordless pull, see Use the passwordless component to pull container images. |
||
|
Cloud-native application delivery chain |
|
|
|
|
For more information about cloud-native delivery chains, see Cloud-native delivery chain management. |
||
|
Instance management |
Custom domain name |
|
|
|
|
For more information about custom domain names, see Custom domain names. |
|
|
Fast import of Harbor images |
|
|
|
|
For more information about fast import of Harbor images, see Migrate a self-managed Harbor instance to Container Registry Enterprise Edition in 10 minutes. |
||