Limits
This topic describes the limits of DNS Firewall.
Feature component | Limit item | Metrics | Description |
Private Zone DNS Firewall | Number of Custom Rules | 100 | Each account can have a maximum of 100 Custom Rules. |
Number of Threat Intelligence Rules | 100 | Each account can have a maximum of 100 Threat Intelligence Rules. | |
Number of Domain Name per Custom Rules | 2,000 | Each Custom Rules can contain a maximum of 2,000 Domain Name. A wildcard domain name is counted as one domain name. | |
Number of source IP address segments for DNS requests per protection rule (including Custom Rules and Threat Intelligence Rules) | 100 | Each protection rule can contain a maximum of 100 source IP address segments for DNS requests. | |
Number of protection rules with the same Domain Name and Effective Scope | 10 | Each account can have a maximum of 10 protection rules with the same Domain Name and Effective Scope. | |
Number of associated Effective Scope (VPCs) for the same Domain Name | 100 | For each account, a Domain Name can be associated with a maximum of 100 Effective Scope (VPCs). | |
Number of associated Effective Scope (VPCs) for the same secondary threat intelligence type | 100 | For each account, a secondary threat intelligence type can be associated with a maximum of 100 Effective Scope (VPCs). | |
Number of protection rules with the same secondary threat intelligence type (or any type) and the same Effective Scope | 10 | Each account can have a maximum of 10 protection rules with the same secondary threat intelligence type and the same Effective Scope. | |
Public Recursive DNS Firewall | Number of Threat Intelligence Rules | 100 | Each account can have a maximum of 100 Threat Intelligence Rules. |
Number of source IP address segments for DNS requests per Threat Intelligence Rules | 100 | Each Threat Intelligence Rules can contain a maximum of 100 source IP address segments for DNS requests. | |
Number of associated Effective Scope (dedicated configuration IDs) for the same secondary threat intelligence type | 100 | For each account, a secondary threat intelligence type can be associated with a maximum of 100 Effective Scope (dedicated configuration IDs). |