The ALB Ingress controller is a fully managed component that routes Layer 7 traffic in Alibaba Cloud Container Compute Service (ACS) clusters using Application Load Balancer (ALB). ALB offers three instance editions: Basic, Standard, and Web Application Firewall (WAF)-enabled.
This topic lists the quotas and fixed limits that apply to ALB Ingresses, and explains how to increase adjustable quotas.
A hyphen (-) means the limit does not apply to that edition. If the same resource is associated with more than one object, it consumes quota on each object. For example, a backend server associated with two listeners and two forwarding rules of the same ALB instance reduces the remaining backend server quota by four.
Fixed limits
The following limits are fixed and cannot be increased.
Limits per listener
| Item | Edition | Limit |
|---|---|---|
| Network ACLs per listener | Basic / Standard / WAF-enabled | 3 |
| Network ACL entries per listener | Basic | 300 |
| Network ACL entries per listener | Standard / WAF-enabled | 500 |
Limits per forwarding rule
| Item | Edition | Limit |
|---|---|---|
| Actions per forwarding rule | Basic | 3 |
| Actions per forwarding rule | Standard / WAF-enabled | 5 |
| Match conditions per forwarding rule | Basic | 5 |
| Match conditions per forwarding rule | Standard / WAF-enabled | 10 |
| Wildcard character matching rules per forwarding rule | Basic | 5 |
| Wildcard character matching rules per forwarding rule | Standard / WAF-enabled | 10 |
Limits per server group
| Item | Edition | Limit |
|---|---|---|
| Backend servers (IP addresses and ports) per server group | Basic / Standard / WAF-enabled | 1,000 |
Limits per network ACL and security policy
| Item | Edition | Limit |
|---|---|---|
| Listeners per network ACL | Basic / Standard / WAF-enabled | 50 |
| Entries per network ACL | Basic / Standard / WAF-enabled | 500 |
| Listeners per custom security policy | Basic / Standard / WAF-enabled | 10 |
| ACLs per ALB instance | Basic / Standard / WAF-enabled | 800 |
Limits per region
| Item | Edition | Limit |
|---|---|---|
| Custom security policies per region | Basic / Standard / WAF-enabled | 50 |
| Health check templates per region | Basic / Standard / WAF-enabled | 50 |
| Network ACLs per region | Basic / Standard / WAF-enabled | 1,000 |
| Server groups per region | Basic / Standard / WAF-enabled | 3,000 |
Adjustable quotas
The following quotas have a default value and a maximum value. To request an increase, see Manage quotas.
Quotas per ALB instance
| Item | Edition | Default | Maximum | Quota name |
|---|---|---|---|---|
| Additional certificates per ALB instance (excluding the default certificate) | Basic | 10 | 150 | alb_quota_loadbalancer_certificates_num_basic_edition |
| Additional certificates per ALB instance (excluding the default certificate) | Standard | 25 | 300 | alb_quota_loadbalancer_certificates_num_standard_edition |
| Additional certificates per ALB instance (excluding the default certificate) | WAF-enabled | 25 | 300 | alb_quota_loadbalancer_certificates_num_standardwithwaf_edition |
| Forwarding rules per ALB instance (excluding default forwarding rules) | Basic | 40 | 100 | alb_quota_loadbalancer_rules_num_basic_edition |
| Forwarding rules per ALB instance (excluding default forwarding rules) | Standard | 100 | 200 | alb_quota_loadbalancer_rules_num_standard_edition |
| Forwarding rules per ALB instance (excluding default forwarding rules) | WAF-enabled | 100 | 200 | alb_quota_loadbalancer_rules_num_standardwithwaf_edition |
| Listeners per ALB instance | Basic | 50 | 80 | alb_quota_loadbalancer_listeners_num_basic_edition |
| Listeners per ALB instance | Standard | 50 | 100 | alb_quota_loadbalancer_listeners_num_standard_edition |
| Listeners per ALB instance | WAF-enabled | 50 | 100 | alb_quota_loadbalancer_listeners_num_standardwithwaf_edition |
| Backend servers per ALB instance | Basic | 200 | 400 | alb_quota_loadbalancer_servers_num_basic_edition |
| Backend servers per ALB instance | Standard | 1,000 | 1,500 | alb_quota_loadbalancer_servers_num_standard_edition |
| Backend servers per ALB instance | WAF-enabled | 1,000 | 1,500 | alb_quota_loadbalancer_servers_num_standardwithwaf_edition |
Quotas per listener
| Item | Edition | Default | Maximum | Quota name |
|---|---|---|---|---|
| Connection request timeout | Basic / Standard / WAF-enabled | 180 seconds | 600 seconds | alb_quota_max_request_timeout |
| Idle connection timeout | Basic / Standard / WAF-enabled | 60 seconds | 600 seconds | alb_quota_max_idle_timeout |
Quotas per server group
| Item | Edition | Default | Maximum | Quota name |
|---|---|---|---|---|
| Listeners or forwarding rules per server group | Basic / Standard / WAF-enabled | 50 | 100 | alb_quota_servergroup_attached_num |
| Server groups a backend server (IP address) can be added to | Basic / Standard / WAF-enabled | 200 | 300 | alb_quota_server_added_num |
Quotas per region
| Item | Edition | Default | Maximum | Quota name |
|---|---|---|---|---|
| ALB instances per region | Basic / Standard / WAF-enabled | 60 | 150 | alb_quota_loadbalancers_num |
Manage quotas
Use either of the following methods to view your current quota usage or request an increase.
SLB Management page
Go to the SLB Management page.
Click the ALB tab.
Find the quota by its quota name and submit an increase request.
Quota Center console
Log on to the Quota Center console.
Search for the quota by its quota name.
Submit an increase request.