Limits
Updated at:
This page lists the default quotas and performance limits for VPN Gateway resources, and identifies which quotas you can increase. Unless noted otherwise, all quotas apply per Alibaba Cloud account — not per region or virtual private cloud (VPC).
VPN gateways
| Resource | Default quota | Adjustable |
|---|---|---|
| VPN gateways per Alibaba Cloud account | 30 | Yes |
| Maximum bandwidth per VPN gateway | 1,000 Mbit/s | No |
| Maximum packets per second per VPN gateway | 120,000 (256 bytes per packet) | No |
| Maximum connections per VPN gateway | 200,000 | No |
The 30-gateway quota counts across all regions and VPCs in a single account. For example, an account can have 30 VPN gateways in one region, or spread across multiple regions — the total cannot exceed 30.
In some regions, the maximum bandwidth per VPN gateway is 500 Mbit/s. For the list of affected regions, see the Limits section in "Create and manage a VPN gateway."
Each connection is uniquely identified by a 5-tuple: source IP address, destination IP address, source port, destination port, and protocol. TCP, UDP, and Internet Control Message Protocol (ICMP) connections all count toward the 200,000 limit.
To request a quota increase for VPN gateways, go to the Quota Management page or the Quota Center console. For instructions, see Manage SSL-VPN quotas.
SSL-VPN connections
| Resource | Default quota | Adjustable |
|---|---|---|
| SSL client certificates per Alibaba Cloud account | 50 | Yes |
| SSL servers per VPN gateway | 1 | No |
| Local CIDR blocks per SSL server | 5 | No |
| Peer CIDR blocks per SSL server | 1 | No |
| Clients per VPN gateway | 1,000 | No |
| SSL client certificate validity period | Three years | No |
Unsupported ports for SSL servers: 22, 2222, 22222, 9000, 9001, 9002, 7505, 80, 443, 53, 68, 123, 4510, 4560, 500, and 4500.
To request a quota increase for SSL client certificates, go to the Quota Management page or the Quota Center console. For instructions, see Manage SSL-VPN quotas.
IPsec servers
| Resource | Default quota | Adjustable |
|---|---|---|
| IPsec servers per VPN gateway | 1 | No |
| Clients per IPsec server | 50 | No |
Is this page helpful?