CreateNetworkInterface-阿里云帮助中心

Creates an Elastic Network Interface (ENI) and allows you to specify the primary private IP address.

Operation description

When you invoke this operation, take note of the following items:

This operation is a synchronization operation. A newly created Elastic Network Interface (ENI) is in the active (Available) state and can be attached to an instance immediately.
If the NetworkInterfaceId parameter in the response is empty, try to create the Elastic Network Interface (ENI) again.
An Elastic Network Interface (ENI) can be attached to only one instance in a VPC.
When an Elastic Network Interface (ENI) is reattached to another instance, its property remains unchanged, and network traffic is also redirected to the new instance.
When you create an Elastic Network Interface (ENI), you can allocate up to 49 secondary private IP addresses by invoking this operation.
When you create an Elastic Network Interface (ENI), if you need to configure Settings for IPv6 addresses, you must ensure that IPv6 is enabled for the specified vSwitch. For more information, see What is an IPv6 gateway.
The number of Elastic Network Interfaces (ENIs) that an Alibaba Cloud account can create in a region is limited. You can view the resource quota in the ECS console. For more information, see View and increase resource quotas.

Request examples

Create an Elastic Network Interface (ENI)

RegionId:  cn-hangzhou,   // Settings: China (Hangzhou) region.
SecurityGroupId:  sg-bp10jztp6b0sdsyl****,   // Settings: security group ID.
VSwitchId:  vsw-bp19wo63nleroq22g****,   // Settings: vSwitch ID.

Create an Elastic Network Interface (ENI) and specify the primary private IP address

RegionId:  cn-hangzhou,   // The China (Hangzhou) region.
SecurityGroupId:  sg-bp10jztp6b0sdsyl****,   // The security group ID.
VSwitchId:  vsw-bp19wo63nleroq22g****,   // The vSwitch ID.
PrimaryIpAddress:  192.168.0.*,   // The primary private IP address.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

ecs:CreateNetworkInterface

create

*NetworkInterface

acs:ecs:{#regionId}:{#accountId}:eni/*

*SecurityGroup

acs:ecs:{#regionId}:{#accountId}:securitygroup/{#securitygroupId}

*VSwitch

acs:vpc:{#regionId}:{#accountId}:vswitch/{#vswitchId}

vpc:IsDefaultVSwitch
vpc:IsDefaultVpc
vpc:VPC
vpc:tag
vpc:tag
vpc:tag

None

Request parameters

Parameter	Type	Required	Description	Example
RegionId	string	Yes	The region ID of the Elastic Network Interface (ENI) to be created. You can invoke the DescribeRegions operation to query the most recent region list.	cn-hangzhou
Tag	array<object>	No	The tags of the Elastic Network Interface (ENI).
	object	No	The tag of the Elastic Network Interface (ENI).
Key	string	No	The tag key of the Elastic Network Interface (ENI). Valid values of N: 1 to 20. The tag key cannot be an empty string. The tag key can be up to 128 characters in length and cannot start with aliyun or acs:. The tag key cannot contain http:// or https://.	TestKey
Value	string	No	The tag value of the Elastic Network Interface (ENI). Valid values of N: 1 to 20. The tag value can be an empty string. The tag value can be up to 128 characters in length and cannot contain http:// or https://.	TestValue
ResourceGroupId	string	No	The resource group ID. You can call the ListResourceGroups operation to query resource group information.	rg-bp67acfmxazb4ph****
VSwitchId	string	Yes	The vSwitch ID of the Elastic Network Interface (ENI). The private IP address of the Elastic Network Interface (ENI) is selected from the idle IP addresses in the CIDR block of the vSwitch. Important The Elastic Network Interface (ENI) and the instance to which you want to attach the Elastic Network Interface (ENI) must belong to the same zone, but they can belong to different vSwitches.	vsw-bp1s5fnvk4gn2tws03****
PrimaryIpAddress	string	No	The primary private IP address of the Elastic Network Interface (ENI). The specified IP address must be an idle IP address in the CIDR block of the vSwitch to which the Elastic Network Interface (ENI) belongs. If you do not specify this parameter, an idle IP address in the vSwitch is randomly allocated by default.	172.17..
SecurityGroupId	string	No	The ID of the security group to which you want to add the Elastic Network Interface (ENI). The security group and the Elastic Network Interface (ENI) must belong to the same VPC. Note When you invoke this operation, you must configure Settings for either SecurityGroupId or SecurityGroupIds.N. You cannot configure Settings for both.	sg-bp1fg655nh68xyz9i****
NetworkInterfaceName	string	No	The name of the Elastic Network Interface (ENI). The name must be 2 to 128 characters in length. It can contain letters in the Unicode letter categorization (including English and Chinese characters) and ASCII digits (0-9). It can also contain colons (:), underscores (_), periods (.), and hyphens (-). Default value: empty.	testNetworkInterfaceName
Description	string	No	The description of the Elastic Network Interface (ENI). The description must be 2 to 256 characters in length and cannot start with http:// or https://. Default value: empty.	testDescription
Visible	boolean	No	Note [Deprecated]	null
InstanceType	string	No	The type of the Elastic Network Interface (ENI). Valid values: Secondary: secondary Elastic Network Interface (ENI). Trunk: trunk network interface controller (NIC) (in invitational preview). Default value: Secondary.	Secondary
BusinessType	string	No	Note [Deprecated]	null
SecondaryPrivateIpAddressCount	integer	No	The number of private IP addresses that you want Elastic Compute Service (ECS) to allocate for automatic creation. Valid values: 1 to 49.	1
QueueNumber	integer	No	The number of queues for the Elastic Network Interface (ENI). Valid values: 1 to 2048. When you attach the Elastic Network Interface (ENI) to an instance, the value of this parameter must be less than the maximum number of queues per single network interface controller (NIC) supported by the instance type. You can invoke the DescribeInstanceTypes operation to query the MaximumQueueNumberPerEni value for the instance type. Default value: empty. When you attach the Elastic Network Interface (ENI), the default number of queues per Elastic Network Interface (ENI) for the instance type is used. You can invoke the DescribeInstanceTypes operation to query the SecondaryEniQueueNumber value for the instance type.	1
ClientToken	string	No	The client token that is used to ensure the idempotence of the request. You can use the client to generate the token, but you must make sure that the token is unique among different requests. The token can contain only ASCII characters and cannot exceed 64 characters in length. For more information, see Ensure idempotence.	123e4567-e89b-12d3-a456-426655440000
NetworkInterfaceTrafficMode	string	No	The communication pattern of the Elastic Network Interface (ENI). Valid values: Standard: uses the TCP communication pattern. HighPerformance: enables the Elastic RDMA Interface (ERI) and uses the RDMA communication pattern. Note For an Elastic Network Interface (ENI) that uses the RDMA communication pattern, you can attach the Elastic Network Interface (ENI) only to an instance of an instance type that supports ERI. The number of Elastic Network Interfaces (ENIs) that use the RDMA pattern cannot exceed the limit for the instance family. For more information, see Instance families and Configure eRDMA on enterprise-level instancesand Configure eRDMA on GPU-accelerated instances. Default value: Standard.	Standard
QueuePairNumber	integer	No	The number of queues for the RDMA ENI. If you want to attach multiple RDMA ENIs to an instance, we recommend that you manually specify the QueuePairNumber value for each ENI based on the maximum QueuePairNumber value supported by the instance type and the number of ENIs that you plan to use. Make sure that the total number of queue pairs for all ENIs does not exceed the maximum value allowed for the instance type. You can call the DescribeInstanceTypes operation to query the maximum value for the instance type. Important If you do not specify the QueuePairNumber value for an RDMA ENI, the maximum QueuePairNumber value supported by the instance type for all RDMA ENIs is used by default. Therefore, after you attach an RDMA ENI for which QueuePairNumber is not specified, you cannot attach more RDMA ENIs. This limit does not apply to standard ENIs.	22
SecurityGroupIds	array	No	The IDs of one or more security groups to which you want to add the Elastic Network Interface (ENI). The security groups and the Elastic Network Interface (ENI) must belong to the same VPC. The valid values of N depend on the quota of security groups to which an Elastic Network Interface (ENI) can be added. For more information, see Limits. Note When you invoke this operation, you must configure Settings for either SecurityGroupId or SecurityGroupIds.N. You cannot configure Settings for both.	sg-bp1fg655nh68xyz9i****
	string	No	The IDs of one or more security groups to which you want to add the Elastic Network Interface (ENI). The security groups and the Elastic Network Interface (ENI) must belong to the same VPC. The valid values of N depend on the quota of security groups to which an Elastic Network Interface (ENI) can be added. For more information, see Limits. Note When you invoke this operation, you must configure Settings for either SecurityGroupId or SecurityGroupIds.N. You cannot configure Settings for both.	sg-bp1fg655nh68xyz9i****
PrivateIpAddress	array	No	One or more secondary private IP addresses that are selected from the idle IP addresses in the CIDR block of the vSwitch to which the Elastic Network Interface (ENI) belongs. Valid values of N: 0 to 10. Note When you allocate secondary private IP addresses, you cannot specify both the PrivateIpAddress.N parameter and the SecondaryPrivateIpAddressCount parameter.	172.17..
	string	No	One or more secondary private IP addresses that are selected from the idle IP addresses in the CIDR block of the vSwitch to which the Elastic Network Interface (ENI) belongs. Valid values of N: 0 to 10. Note When you allocate secondary private IP addresses, you cannot specify both the PrivateIpAddress.N parameter and the SecondaryPrivateIpAddressCount parameter.	172.17..
Ipv6Address	array	No	One or more IPv6 addresses that are allocated to the Elastic Network Interface (ENI). It supports Settings for up to 10 IPv6 addresses. Valid values of N: 1 to 10. Example: Ipv6Address.1=2001:db8:1234:1a00::** Note** If you want to allocate IPv6 addresses to the Elastic Network Interface (ENI), you must configure Settings for either Ipv6Addresses.N or Ipv6AddressCount. You cannot configure Settings for both parameters.	2001:db8:1234:1a00::****
	string	No	One or more IPv6 addresses that are allocated to the Elastic Network Interface (ENI). It supports Settings for up to 10 IPv6 addresses. Valid values of N: 1 to 10. Example: Ipv6Address.1=2001:db8:1234:1a00::** Note** If you want to allocate IPv6 addresses to the Elastic Network Interface (ENI), you must configure Settings for either Ipv6Addresses.N or Ipv6AddressCount. You cannot configure Settings for both parameters.	2001:db8:1234:1a00::****
Ipv6AddressCount	integer	No	The number of IPv6 addresses that are randomly generated for the Elastic Network Interface (ENI). Valid values: 1 to 10. Note If you want to allocate IPv6 addresses to the Elastic Network Interface (ENI), you must configure Settings for either Ipv6Addresses.N or Ipv6AddressCount. You cannot configure Settings for both parameters.	1
Ipv4Prefix	array	No	One or more IPv4 prefixes that are allocated to the Elastic Network Interface (ENI). Valid values of N: 1 to 10. Note If you want to allocate IPv4 prefixes to the Elastic Network Interface (ENI), you must configure Settings for either Ipv4Prefix.N or Ipv4PrefixCount. You cannot configure Settings for both parameters.
	string	No	One or more IPv4 prefixes that are allocated to the Elastic Network Interface (ENI). Valid values of N: 1 to 10. Note If you want to allocate IPv4 prefixes to the Elastic Network Interface (ENI), you must configure Settings for either Ipv4Prefix.N or Ipv4PrefixCount. You cannot configure Settings for both parameters.	192.168../28
Ipv4PrefixCount	integer	No	The number of IPv4 prefixes that are allocated to the Elastic Network Interface (ENI). Valid values: 1 to 10. Note If you want to allocate IPv4 prefixes to the Elastic Network Interface (ENI), you must configure Settings for either Ipv4Prefix.N or Ipv4PrefixCount. You cannot configure Settings for both parameters.	1
Ipv6Prefix	array	No	One or more IPv6 prefixes that are allocated to the Elastic Network Interface (ENI). Valid values of N: 1 to 10. Note If you want to allocate IPv6 prefixes to the Elastic Network Interface (ENI), you must configure Settings for either Ipv6Prefix.N or Ipv6PrefixCount. You cannot configure Settings for both parameters.
	string	No	One or more IPv6 prefixes that are allocated to the Elastic Network Interface (ENI). Valid values of N: 1 to 10. Note If you want to allocate IPv6 prefixes to the Elastic Network Interface (ENI), you must configure Settings for either Ipv6Prefix.N or Ipv6PrefixCount. You cannot configure Settings for both parameters.	2001:db8:1234:1a00:****::/80
Ipv6PrefixCount	integer	No	The number of IPv6 prefixes that are allocated to the Elastic Network Interface (ENI). Valid values: 1 to 10. Note If you want to allocate IPv6 prefixes to the Elastic Network Interface (ENI), you must configure Settings for either Ipv6Prefix.N or Ipv6PrefixCount. You cannot configure Settings for both parameters.	1
DeleteOnRelease	boolean	No	Specifies whether to retain the ENI when the instance is released. Valid values: true: The ENI is not retained. false: The ENI is retained.	true
TxQueueSize	integer	No	The outbound queue depth of the Elastic Network Interface (ENI). Take note of the following items: The outbound queue depth of the network interface controller (NIC) must be equal to the inbound queue depth. Valid values: 8192 to 16384. The value must be a power of 2. A larger outbound queue depth can improve outbound throughput but consumes more memory. Note This parameter is not available.	8192
RxQueueSize	integer	No	The inbound queue depth of the Elastic Network Interface (ENI). Take note of the following items: The inbound queue depth of the network interface controller (NIC) must be equal to the outbound queue depth. Valid values: 8192 to 16384. The value must be a power of 2. A larger inbound queue depth can improve inbound throughput but consumes more memory. Note This parameter is not available.	8192
NetworkInterfaceTrafficConfig	object	No	The communication parameters of the Elastic Network Interface (ENI).
QueueNumber	integer	No	The number of queues for the Elastic Network Interface (ENI).	8
NetworkInterfaceTrafficMode	string	No	The communication pattern of the Elastic Network Interface (ENI).	HighPerformance
QueuePairNumber	integer	No	The number of queues for the RDMA ENI.	8
TxQueueSize	integer	No	The outbound queue depth of the Elastic Network Interface (ENI). Note This parameter is in invitational preview and is not available. If you want to use this parameter, submit a ticket to apply for whitelist access. When you use this parameter, take note of the following items: This parameter applies only to seventh-generation and later ECS instance families. This parameter applies only to Linux images. A larger outbound queue depth can improve outbound throughput and reduce the packet loss rate, but consumes more memory.	8192
RxQueueSize	integer	No	The inbound queue depth of the Elastic Network Interface (ENI). Note This parameter is in invitational preview and is not available. If you want to use this parameter, submit a ticket to apply for whitelist access. When you use this parameter, take note of the following items: This parameter applies only to seventh-generation and later ECS instance families. This parameter applies only to Linux images. A larger inbound queue depth can improve inbound throughput and reduce the packet loss rate, but consumes more memory.	8192
ConnectionTrackingConfiguration	object	No	The network connectivity tracking configurations. Before you use this parameter, read Connection timeout management.
TcpEstablishedTimeout	integer	No	The timeout period for established TCP connections. Unit: seconds. Valid values: 30, 60, 80, 100, 200, 300, 500, 700, and 910. Default value: 910.	910
TcpClosedAndTimeWaitTimeout	integer	No	The timeout period for closed and TIME_WAIT TCP connections. Unit: seconds. Valid values: integers from 3 to 15. Default value: 3. Note If your ECS instance is used together with an NLB or CLB instance, the default timeout period for connections in the TIME_WAIT state is 15 seconds.	3
UdpTimeout	integer	No	The timeout period for UDP flows. Unit: seconds. Valid values: 10, 20, 30, 60, 80, and 100. Default value: 30. Note If your ECS instance is used together with an NLB or CLB instance, the default value is 100 seconds.	30
EnhancedNetwork	object	No	Note This parameter is not available.
EnableSriov	boolean	No	Note This parameter is not available.	true
EnableRss	boolean	No	Note This parameter is not available.	true
VirtualFunctionTotalQueueNumber	integer	No
VirtualFunctionQuantity	integer	No
EnableExpress	boolean	No
SourceDestCheck	boolean	No	Specifies whether to enable source/destination checking. We recommend that you enable this feature to improve network security. Valid values: true: enables source/destination checking. false: disables source/destination checking. Default value: false. Note This feature is supported only in specific regions. Before you use this feature, read Source/destination checking.	false
EnablePrimaryIPv6	boolean	No

Response elements

Element	Type	Description	Example
	object
Status	string	The status of the elastic network interface (ENI).	Available
Type	string	The type of the network interface controller (NIC).	Secondary
VpcId	string	The ID of the virtual private cloud (VPC) to which the ENI belongs.	vpc-bp1j7w3gc1cexjqd****
NetworkInterfaceName	string	The name of the network interface controller (NIC).	my-eni-name
MacAddress	string	The MAC address of the network interface controller (NIC).	00:16:3e:12::
NetworkInterfaceId	string	The ID of the network interface controller (NIC).	eni-bp14v2sdd3v8htln****
ServiceID	integer	The ID of the Virtual Network Operator (VNO) associated with the network interface controller (NIC).	12345678910
OwnerId	string	The ID of the account to which the network interface controller (NIC) belongs.	123456****
ServiceManaged	boolean	Indicates whether the user of the network interface controller (NIC) is a cloud service or a VNO.	true
VSwitchId	string	The ID of the vSwitch in the VPC.	vsw-bp16usj2p27htro3****
RequestId	string	The request ID.	473469C7-AA6F-4DC5-B3DB-A3DC0DE3C83E
Description	string	The description of the network interface controller (NIC).	testDescription
ResourceGroupId	string	The ID of the resource group.	rg-2ze88m67qx5z****
ZoneId	string	The zone ID.	cn-hangzhou-e
PrivateIpAddress	string	The private IP address of the network interface controller (NIC).	172.17..
SecurityGroupIds	object
SecurityGroupId	array	The security groups to which the ENI belongs.
	string	The ID of the security group.	sg-bp18kz60mefsicfg****
PrivateIpSets	object
PrivateIpSet	array<object>	The collection of PrivateIpSet objects.
	object
PrivateIpAddress	string	The private IP address of the instance.	172.17..
Primary	boolean	Indicates whether the private IP address is the primary private IP address.	true
Tags	object
Tag	array<object>	The tags.
	object
TagValue	string	The tag value.	TestValue
TagKey	string	The tag key.	TestKey
Ipv6Sets	object
Ipv6Set	array<object>	The IPv6 addresses allocated to the network interface controller (NIC).
	object	Note This parameter is in invitational preview and is not yet available.
Ipv6Address	string	The IPv6 address.	2001:db8:1234:1a00::****
Primary	boolean
Ipv4PrefixSets	object
Ipv4PrefixSet	array<object>	The collection of IPv4 prefixes allocated to the network interface controller (NIC).
	object
Ipv4Prefix	string	The IPv4 prefix.	192.168../28
Ipv6PrefixSets	object
Ipv6PrefixSet	array<object>	The collection of IPv6 prefixes allocated to the network interface controller (NIC).
	object
Ipv6Prefix	string	The IPv6 prefix.	2001:db8:1234:1a00:****::/80
SourceDestCheck	boolean	Note This parameter is in invitational preview and is not yet available.	false

Examples

Success response

JSON format

{
  "Status": "Available",
  "Type": "Secondary",
  "VpcId": "vpc-bp1j7w3gc1cexjqd****",
  "NetworkInterfaceName": "my-eni-name",
  "MacAddress": "00:16:3e:12:**:**",
  "NetworkInterfaceId": "eni-bp14v2sdd3v8htln****",
  "ServiceID": 12345678910,
  "OwnerId": "123456****",
  "ServiceManaged": true,
  "VSwitchId": "vsw-bp16usj2p27htro3****",
  "RequestId": "473469C7-AA6F-4DC5-B3DB-A3DC0DE3C83E",
  "Description": "testDescription",
  "ResourceGroupId": "rg-2ze88m67qx5z****",
  "ZoneId": "cn-hangzhou-e",
  "PrivateIpAddress": "172.17.**.**",
  "SecurityGroupIds": {
    "SecurityGroupId": [
      "sg-bp18kz60mefsicfg****"
    ]
  },
  "PrivateIpSets": {
    "PrivateIpSet": [
      {
        "PrivateIpAddress": "172.17.**.**",
        "Primary": true
      }
    ]
  },
  "Tags": {
    "Tag": [
      {
        "TagValue": "TestValue",
        "TagKey": "TestKey"
      }
    ]
  },
  "Ipv6Sets": {
    "Ipv6Set": [
      {
        "Ipv6Address": "2001:db8:1234:1a00::****",
        "Primary": false
      }
    ]
  },
  "Ipv4PrefixSets": {
    "Ipv4PrefixSet": [
      {
        "Ipv4Prefix": "192.168.**.**/28"
      }
    ]
  },
  "Ipv6PrefixSets": {
    "Ipv6PrefixSet": [
      {
        "Ipv6Prefix": "2001:db8:1234:1a00:****::/80"
      }
    ]
  },
  "SourceDestCheck": false
}

Error codes

HTTP status code	Error code	Error message	Description
400	MissingParameter	%s	A parameter is not specified.
400	UnsupportedParameter	%s	The parameter is not supported.
400	InvalidParameter	%s	The specified parameter is invalid.
400	InvalidInstanceID.Malformed	%s	The specified InstanceId parameter is invalid.
400	InvalidOperation.InvalidEcsState	%s	This operation is not allowed due to the current status of the cloud service.
400	InvalidOperation.InvalidEniState	%s	The current status of the ENI does not support this operation.
400	InvalidOperation.DetachPrimaryEniNotAllowed	%s	You cannot detach the primary ENI from an instance.
400	Forbidden.RegionId	%s	The service is unavailable in the current region.
400	Duplicate.TagKey	The Tag.N.Key contain duplicate key.	The specified tag key already exists. Tag keys must be unique.
400	InvalidTagKey.Malformed	The specified Tag.n.Key is not valid.	The specified Tag.N.Key parameter is invalid.
400	InvalidTagValue.Malformed	The specified Tag.n.Value is not valid.	The specified tag value is invalid.
400	JoinedGroupLimitExceed	%s	The maximum number of security groups to which the specified resource can be added has been reached. For more information, see the return value of the %s placeholder in the error message.
400	InvalidParameter.SecurityGroupIdRepeated	%s	The security group ID passed in is duplicate.
400	InvalidSecurityGroupId.SingleIdAndMultiIdConflict	%s
400	InvalidParameter.Conflict	%s	The specified parameter is invalid. Check whether parameter conflicts exist. %s is a variable. An error message is dynamically returned based on call conditions.
400	InvalidConnectionTrackingConfiguration.RegionOrUserNotSupported	The specified parameter ConnectionTrackingConfiguration is not supported in this region, or this account is not in the whitelist of using network interface ConnectionTrackingConfiguration.	The specified parameter ConnectionTrackingConfiguration is not supported in this region, or this account is not in the whitelist of using network interface ConnectionTrackingConfiguration.
400	InvalidOperation.EniCountExceeded	%s.	The maximum number of NICs in the Enterprise Security Group has been reached.
400	InvalidPrivateIpAddress.Duplicated	The specified private IP address "%s" is duplicated.	The specified IP address is already in use.
400	IncorrectVSwitchStatus	The operation is not allowed in the current VSwitch state. Expecting state includes "Created Available", but current state is "%s".	The operation is not supported in the current state of the vSwitch.
400	InvalidEniQueueSize.RegionOrUserNotSupported	The specified parameter "RxQueueSize" or "TxQueueSize" is not supported in this region or this account is not allowed to use ENI QueueSize.	You are not authorized to specify the length of NIC queues or cannot specify the length of NIC queues in the current region.
400	InvalidParameter.EniQueueSize	The specified parameter "TxQueueSize" and "RxQueueSize" are not equal or the value must be 8192 or 16384.	The specified parameter TxQueueSize and RxQueueSize are not equal or not the allowed value.
400	InvalidParameter.EniConnectionTrackingConfiguration	The specified ENI connection tracking configuration "%s" must be between %s and %s.	The network connection configuration specified by the network card exceeds the allowable range
400	QuotaExceeded.PrivateIpAddress	There are not enough private IPs in the specified VSwitch.	The current VSwitch does not have enough Ip
400	Throttling	Request was denied due to request throttling.	The request is throttled.
400	InvalidVSwitch.IllegalStatus	The operation is not allowed in the current VSwitch state. Expecting state includes "Created", but current state is "%s".	The current VSwitch status does not support this operation.
400	InvalidParameter.EniEnhancedNetwork	The input parameter "EnhancedNetwork" is illegal, when EnableSriov is true, VirtualFunctionTotalQueueNumber must not be empty, and VirtualFunctionQuantity must be 1 to 256. When EnableSriov is empty or false, VirtualFunctionTotalQueueNumber and VirtualFunctionQuantity must be empty.	The specified network enhancement function parameter is illegal. When the EnableSriov is set to true, the VirtualFunctionTotalQueueNumber must not be empty and the VirtualFunctionQuantity value range is 1-256; When the EnableSriov is empty or set to false, the VirtualFunctionTotalQueueNumber and VirtualFunctionQuantity must be empty
400	InvalidOperation.EnablePrimaryIPv6	The specified ENI can not enable primary IPv6 or already has primary IPv6.	The specified ENI can not enable primary IPv6 or already has primary IPv6.
400	InvalidVSwitch.Ipv4NotEnabled	The specify VSwitch of ECS does not support IPv4.
401	InvalidOperation.SecurityGroupNotAuthorized	The specified security group is not authorized to operate.	You do not have permission to operate the current security group.
500	InternalError	The request processing has failed due to some unknown error, exception or failure.	An internal error has occurred. Try again later.
500	InvalidOperation.RegionNotSupportIpPrefix	The current region does not support IP prefix feature.	The region does not support IP prefix allocation.
500	ServiceUnavailable	The request processing has failed due to some unknown error.	Request timed out, please try again.
403	InvalidUserType.NotSupported	%s	Your account does not support this operation.
403	Abs.InvalidAccount.NotFound	%s	Your Alibaba Cloud account does not exist or your AccessKey pair has expired.
403	Forbidden.NotSupportRAM	%s	RAM users are not authorized to perform this operation.
403	Forbidden.SubUser	%s	You are not authorized to manage this resource. Contact the owner of the Alibaba Cloud account for authorization.
403	InValidParameter	%s
403	MaxEniCountExceeded	%s	The maximum number of ENIs that can be managed has been reached.
403	EniPerInstanceLimitExceeded	%s	The maximum number of ENIs that can be attached to the specified instance has been reached.
403	InvalidOperation.AvailabilityZoneMismatch	%s	The operation is invalid.
403	InvalidOperation.VpcMismatch	%s	The operation is invalid. Check whether the VPC in the operation corresponds to other parameters.
403	SecurityGroupInstanceLimitExceed	%s	The maximum number of instances in the security group has been reached.
403	InvalidSecurityGroupId.NotVpc	%s	The specified SecurityGroupId parameter is invalid and the network type of the security group is not VPC.
403	InvalidOperation.InvalidEniType	%s	This operation is not allowed for the current network interface type.
403	InvalidVSwitchId.IpNotEnough	%s	The number of available IP addresses on the specified vSwitch is insufficient.
403	InvalidVSwitchId.IpInvalid	%s	The specified private IP address is invalid.
403	QuotaExceed.Tags	%s	The number of specified tags exceeds the upper limit. %s is a variable. An error message is dynamically returned based on call conditions.
403	InvalidIp.Address	%s	The IP entered is not in the correct format or is not in the optional CIDR range.
403	InvalidIp.IpRepeated	%s	The specified IP address already exists.
403	MaxEniPrivateIpsCountExceeded	%s	The maximum number of secondary private IP addresses that can be assigned to the specified ENI has been exceeded. For more information, see the return value of the %s placeholder in the error message.
403	InvalidOperation.ResourceManagedByCloudProduct	%s	You cannot modify security groups managed by cloud services.
403	InvalidOperation.TrunkingIsNotAllowed	%s	The trunk network card is not operational.
403	InvalidParameter.InvalidEniQueueNumber	%s	The number of elastic network interface controller (NIC) queues is incorrect. For more information, see the actual value of the %s placeholder in the error message.
403	InvalidOperation.MaxEniQueueNumberExceeded	%s	The number of elastic network interface controller (NIC) queues exceeds the upper limit. For more information, see the actual value of the %s placeholder in the error message.
403	InvalidOperation.ExceedInstanceTypeQueueNumber	%s	The maximum number of queues for all ENIs on an instance has been exceeded. For more information, see the return value of the %s placeholder in the error message.
403	InvalidParameter.EniTrafficMode	%s
403	InvalidOperation.HighPerformanceTrafficModeIsNotAllowed	%s
403	InvalidParameter.QueuePairNumberMustEmpty	%s
403	InvalidParameter.InvalidQueuePairNumber	%s
403	InvalidParams.NetworkInterfaceName	%s
403	InvalidIp.IpPrefixIllegal	The ip prefixes %s is/are illegal.	The IP address prefix is invalid and is not in the CIDR format.
403	InvalidIp.IpPrefixMustInReserveSegment	The ip prefix must in vswitch reserve segment.	The IP address prefix is invalid and is not in the reserved CIDR block of the vSwitch.
403	InvalidOperation.Ipv4CountExceeded	%s	The operation is valid because the maximum number of IPv4 addresses has been reached.
403	InvalidOperation.Ipv6CountExceeded	%s	The operation is valid because the maximum number of IPv6 addresses has been reached.
403	InvalidOperation.HighPerformanceTrafficModeEniUnsupported	High performance traffic mode does not support the current ENI type. Expected ENI type is "%s" but the current ENI type is "%s".	High performance traffic mode does not support the current ENI type.
403	AclLimitExceed	%s	The number of ACL rules for an ENI or instance exceeds the upper limit.
403	InvalidIp.IpPrefixMaskInvalid	The IP prefix mask %s is illegal which must be between %s and %s.	The IP prefix mask is invalid and is not in the valid range.
403	InvalidVSwitchId.IpPrefixNotEnough	The specified VSwitch does not have enough IP prefixes.	The number of IP prefixes in the specified switch is insufficient.
403	InvalidIp.IpPrefixMaskNotSame	The IP prefixes %s are illegal.The IP prefix mask must be the same.	The IP prefix masks are not the same.
403	EnterpriseGroupLimited.MutliGroupType	The specified instance can't associate security group of different types.	The specified instance cannot be added to both a common security group and an enterprise security group. You can call the DescribeSecurityGroups query to specify the type of security group.
403	InvalidOperation.BoundingEniSlaveQuotaExceed	The number of Slave ENIs exceeds the limit of Bond ENI.	The number of Slave ENIs exceeds the limit of Bond ENI.
403	InvalidIp.IpPrefixNotAvailable	The IP prefix is not available.	The IP prefix is not free.
403	InvalidIp.IpPrefixMaskIllegal	The current IP prefix mask is illegal.	Illegal IP prefix mask.
403	InvalidIp.IpPrefixNotStrict	The IP prefix "%s" must be strict CIDR format.	Invalid IP prefix, not strictly cidr.
403	InvalidOperation.NotSupport	The specified region does not support allocating IPv6 when creating ENI.	The specified region does not support allocating IPv6 when creating ENI.
404	InvalidEcsId.NotFound	%s	The specified instance ID does not exist.
404	InvalidEniId.NotFound	%s
404	InvalidVSwitchId.NotFound	%s	The specified vSwitch does not exist.
404	InvalidSecurityGroupId.NotFound	%s	The specified security group ID does not exist.
404	InvalidResourceGroup.NotFound	The ResourceGroup provided does not exist in our records.	The specified resource group does not exist.
404	InvalidOperation.MaxEniIpv6IpsCountExceeded	The ipv6 address count exceed limitation.
404	InvalidOperation.VSwitchIpv6Disabled	The specified VSwitch does not support Ipv6 feature.	The specified VSwitch does not support IPv6.
404	InvalidOperation.EnableIpv6Failed	The specified VSwitch does not support Ipv6 feature.
404	InvalidOperation.AddressAlreadyAllocated	The specified ipv6 has been already allocated.
404	InvalidOperation.AddressNotInVSwitchCidr	The specified ipv6 does not match VSwitch cidr scope.
404	InvalidOperation.SlaveEniMustHaveBondingEni	Ensure you create the corresponding Bond ENI before creating Slave ENI.	You must create a Bond network card before creating a Slave network card.
404	InvalidOperation.EniTrafficModeNotSupportIpv6	The High Performance(RDMA) traffic mode does not support IPv6.	ENIs that use the RDMA communication mode do not support IPv6.
404	InvalidOperation.VSwitchCidrReservationNotExist	The specified VSwitch does not have CIDR reservation.	The specified switch does not have a reserved segment available.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.