This topic describes the resource quotas, limits, and quota management for Application Load Balancer (ALB).
Usage limits
The following hard limits cannot be increased.
Listener limits
|
Resource |
Edition |
Default limit |
|
Maximum number of access control lists (ACLs) per listener |
Basic/Standard/WAF-enabled |
3 |
|
Maximum number of access control entries per listener |
Basic |
300 |
|
Standard/WAF-enabled |
500 |
Forwarding rule limits
|
Resource |
Edition |
Default limit |
|
Maximum number of actions per forwarding rule |
Basic |
3 |
|
Standard/WAF-enabled |
5 |
|
|
Maximum number of match conditions per forwarding rule |
Basic |
5 |
|
Standard/WAF-enabled |
10 |
|
|
Maximum number of conditions with wildcards per forwarding rule |
Basic |
5 |
|
Standard/WAF-enabled |
10 |
Server group limits
|
Resource |
Edition |
Default limit |
|
Maximum number of backend servers per server group |
Basic/Standard/WAF-enabled |
1,000 |
Access control and security policy limits
|
Resource |
Edition |
Default limit |
|
Maximum number of listeners per access control list (ACL) |
Basic/Standard/WAF-enabled |
50 |
|
Maximum number of entries per access control list (ACL) |
Basic/Standard/WAF-enabled |
500 |
|
Maximum number of listeners per custom security policy |
Basic/Standard/WAF-enabled |
10 |
|
Maximum number of access control entries per ALB instance |
Basic/Standard/WAF-enabled |
800 |
Region limits
|
Resource |
Edition |
Default limit |
|
Maximum number of custom security policies per region |
Basic/Standard/WAF-enabled |
50 |
|
Maximum number of health check templates per region |
Basic/Standard/WAF-enabled |
50 |
|
Maximum number of access control lists (ACLs) per region |
Basic/Standard/WAF-enabled |
1,000 |
|
Maximum number of server groups per region |
Basic/Standard/WAF-enabled |
3,000 |
Other limits
The following limits apply only to upgraded ALB instances.
Within a single availability zone, an ALB instance supports a maximum of 250,000 concurrent connections to a single backend server. Exceeding this limit may cause port allocation to fail, preventing new connections.
-
To ensure this capacity, follow these recommendations:
-
Reserve at least eight IP addresses in each vSwitch used by the ALB instance, and allow traffic from the CIDR blocks of those vSwitches.
-
Reserve sufficient quota for ALB-managed security group rules within the overall quota for security group rules of an ECS instance or elastic network interface.
ALB-managed security groups automatically allow traffic from local IP addresses with a priority of 1. The number of security group rules for the ALB instance is governed by the following formula:
Number of ALB-managed security group rules + Number of custom security group rules associated with the ALB instance ≤ Quota for security group rules of the ECS instance or elastic network interface. For more information, see ALB security group limits.
-
-
To avoid exceeding the concurrent connection limit, add more backend servers to the server group. This distributes requests and reduces the load on any single server.
General quotas
-
If a resource is associated multiple times within the same scope, it is counted for each association. For example, if the same backend server is associated with multiple listeners and forwarding rules of a single ALB instance, it is counted multiple times toward the Backend servers per ALB instance quota.
-
The default quota values listed in this topic are for reference only. For actual values, refer to the console.
Instance quotas
|
Parameter |
Description |
Default |
Maximum |
Adjustable |
|
alb_quota_loadbalancers_num |
ALB instances per Alibaba Cloud account per region |
60 |
150 |
Basic edition ALB instance quotas
|
Parameter |
Description |
Default |
Maximum |
Adjustable |
|
alb_quota_loadbalancer_certificates_num_basic_edition |
Additional certificates per ALB instance (default certificate excluded) |
10 |
150 |
|
|
alb_quota_loadbalancer_rules_num_basic_edition |
Forwarding rules per ALB instance (default rule excluded) |
40 |
100 |
|
|
alb_quota_loadbalancer_servers_num_basic_edition |
Backend servers per ALB instance |
200 |
400 |
|
|
alb_quota_loadbalancer_listeners_num_basic_edition |
Listeners per ALB instance |
50 |
80 |
Standard edition ALB instance quotas
|
Parameter |
Description |
Default |
Maximum |
Adjustable |
|
alb_quota_loadbalancer_certificates_num_standard_edition |
Additional certificates per ALB instance (default certificate excluded) |
25 |
300 |
|
|
alb_quota_loadbalancer_rules_num_standard_edition |
Forwarding rules per ALB instance (default rule excluded) |
100 |
200 |
|
|
alb_quota_loadbalancer_servers_num_standard_edition |
Backend servers per ALB instance |
1,000 |
1,500 |
|
|
alb_quota_loadbalancer_listeners_num_standard_edition |
Listeners per ALB instance |
50 |
100 |
WAF-enabled edition ALB instance quotas
|
Parameter |
Description |
Default |
Maximum |
Adjustable |
|
alb_quota_loadbalancer_certificates_num_standardwithwaf_edition |
Additional certificates per ALB instance (default certificate excluded) |
25 |
300 |
|
|
alb_quota_loadbalancer_rules_num_standardwithwaf_edition |
Forwarding rules per ALB instance (default rule excluded) |
100 |
200 |
|
|
alb_quota_loadbalancer_servers_num_standardwithwaf_edition |
Backend servers per ALB instance |
1,000 |
1,500 |
|
|
alb_quota_loadbalancer_listeners_num_standardwithwaf_edition |
Listeners per ALB instance |
50 |
100 |
Listener quotas
|
Parameter |
Description |
Default |
Maximum |
Adjustable |
|
alb_quota_max_request_timeout |
Maximum request timeout per listener |
600 seconds |
3,600 seconds |
|
|
alb_quota_max_idle_timeout |
Maximum idle timeout per listener |
600 seconds |
3,600 seconds |
The maximum for thealb_quota_max_request_timeoutandalb_quota_max_idle_timeoutquotas is 3,600 seconds for upgraded ALB instances, and 900 seconds for other instances.
Server group quotas
|
Parameter |
Description |
Default |
Maximum |
Adjustable |
|
alb_quota_server_added_num |
Number of times a single backend server (by IP address) can be added to server groups |
200 |
300 |
|
|
alb_quota_servergroup_attached_num |
Number of times a single server group can be associated with listeners and forwarding rules |
50 |
100 |
|
|
alb_quota_server_groups_weight |
Maximum weight for a server group as a forwarding rule target |
100 |
10,000 |
Contact Sales |
Reserved capacity quotas
|
Parameter |
Description |
Default |
Maximum |
Adjustable |
|
alb_quota_reserved_capacity_units_per_loadbalancer |
Maximum reserved load balancer capacity units (LCUs) per ALB instance |
5,000 |
- |
Contact Sales |
|
alb_quota_reserved_capacity_units_per_region |
Maximum reserved LCUs per region |
20,000 |
- |
Contact Sales |
API rate quotas
You can view the API rate quotas for ALB in Quota Center.
Privilege quotas
A privilege quota defaults to 0, which makes the corresponding feature unavailable. You can use these features only after Alibaba Cloud grants authorization.
|
Quota ID |
Description |
Actions |
|
slb_user_visible_gray_label/ip_target_cidr_not_limited |
Removes CIDR block restrictions for IP-based server groups. |
|
|
slb_user_visible_gray_label/alb_extensible_edition |
Extended edition for ALB. |
|
|
slb_user_visible_gray_label/alb_resource_reservation |
Resource reservation for ALB. |
|
|
slb_user_visible_gray_label/support_sm_certificate |
Enables SM certificate support for ALB. |
Manage quotas
You can manage quotas for Application Load Balancer (ALB) in the following ways:
-
Quota Center: Suitable for managing quotas across multiple Alibaba Cloud services.
-
Quota management page in the Load Balancer Console: Suitable for managing only ALB quotas.
View quotas
Quota Center
-
Log on to the Quota Center console. In the left-side navigation pane, click Product List and select a quota type: General Quota, API Rate Limits, or Privilege.
-
On the Product List page, click Application Load Balancer (ALB) in the Networking section to view the quota information.
Load Balancer Console
-
Log on to the quota management page of the Load Balancer Console and for Product, select Application Load Balancer (ALB).
-
Select a quota type (General Quota, API Rate Limits, or Privilege) to view the quota information.
Increase quotas
Quota Center
-
Log on to the Quota Center console. In the left-side navigation pane, click Product List, select General Quota or Privilege, and then click Application Load Balancer (ALB) in the Networking section.
-
Find the quota that you want to increase and click Apply in the Actions column.
-
In the dialog box that appears, enter the required information and click Confirm.
The Technical Support team reviews each quota increase request. Specify a reasonable value and provide a detailed reason for your request. You will be notified of the result by SMS and email.
Load Balancer Console
-
Log on to the quota management page of the Load Balancer Console and for Product, select Application Load Balancer (ALB).
-
Select General Quota or Privilege as the quota type, find the quota that you want to increase, and click Apply in the Actions column.
-
In the dialog box that appears, enter the required information and click Confirm.
The Technical Support team reviews each quota increase request. Specify a reasonable value and provide a detailed reason for your request. You will be notified of the result by SMS and email.
Create alert rules
You can create alert rules for some General Quota items of ALB. When your quota usage reaches a predefined threshold, the system sends an alert. This enables you to request a quota increase before you reach the limit.
Quota Center
-
Log on to the Quota Center console. In the left-side navigation pane, click Product List, select General Quota, and then click Application Load Balancer (ALB) in the Networking section.
-
Find the target quota and click create alert rule in the Actions column.
-
On the Create alert rule page, set the parameters for the alert rule and click Confirm. For more information, see Create a General Quota alert rule.
Load Balancer Console
-
Log on to the quota management page of the Load Balancer Console and for Product, select Application Load Balancer (ALB).
-
Select General Quota as the quota type, find the target quota, and click create alert rule in the Actions column.
-
On the Create alert rule page, set the parameters for the alert rule and click Confirm. For more information, see Create a General Quota alert rule.
Create a quota template
Make sure that:
-
You are logged on with a management account.
-
You have enabled Resource Directory and enabled quota templates.
Quota Center
-
Log on to the Quota Center console. In the left-side navigation pane, click Product List, select General Quota or Privilege, and then click Application Load Balancer (ALB) in the Networking section.
-
Find the target quota and click Add to Quota Template in the Actions column.
-
In the Add to Quota Template dialog box, configure the settings and click OK.
Load Balancer Console
-
Log on to the quota management page of the Load Balancer Console and for Product, select Application Load Balancer (ALB).
-
Select General Quota or Privilege as the quota type, find the target quota, and click Add to Quota Template in the Actions column.
-
In the Add to Quota Template dialog box, configure the settings and click Confirm.