Elastic IP Address:Limits

Quota

Performance limits

• You can associate an EIP only with one cloud resource. The EIP that you want to associate must be in the Available state. After you associate an EIP with a cloud resource, the EIP immediately takes effect.

• If an EIP is locked for security reasons, you cannot release the EIP, associate the EIP with a cloud resource, or disassociate the EIP from a cloud resource.

• The following table describes the bandwidth limits on EIPs.

  Pay-by-data-transfer EIP	Pay-by-bandwidth EIP
  The maximum bandwidth of a pay-by-data-transfer EIP cannot exceed 200 Mbit/s. The maximum bandwidth is for reference only and is not guaranteed. In scenarios of resource contention, the maximum bandwidth may not be reached.	The maximum bandwidth of a pay-by-bandwidth EIP is 500 Mbit/s. In scenarios of resource contention, the maximum bandwidth is guaranteed. In scenarios of resource contention, the maximum bandwidth is guaranteed.
  For each Alibaba Cloud account, the sum of the peak bandwidth of all pay-by-data-transfer EIPs in a region cannot exceed 5 Gbit/s. If your business requires guaranteed bandwidth or larger bandwidth, you can purchase pay-by-bandwidth EIPs.	For each Alibaba Cloud account, the sum of the peak bandwidth of all pay-by-bandwidth EIPs in a region cannot exceed 50 Gbit/s. You can contact your account manager to request a quota increase.

  Note

  After a pay-by-data-transfer EIP is associated with an Internet Shared Bandwidth instance, the billing method and maximum bandwidth of the EIP become invalid. You are charged a data transfer fee for the Internet Shared Bandwidth instance and the maximum bandwidth of the Internet Shared Bandwidth is the same as that of the Internet Shared Bandwidth instance. Therefore, the preceding rules do not apply to the EIP. For more information, see Associate EIPs with and disassociate EIPs from Internet Shared Bandwidth instances.

• The following limits apply to the inbound and outbound bandwidth for EIPs that are purchased after 00:00:00 (UTC+8) on February 15, 2020:

  • Inbound bandwidth (data is transferred to EIPs)

    • If the maximum bandwidth of the EIP that you purchased is 10 Mbit/s or more, the inbound bandwidth allocated to the EIP equals the maximum bandwidth of the EIP.

    • If the maximum bandwidth of the EIP that you purchased is lower than 10 Mbit/s, the inbound bandwidth allocated to the EIP is 10 Mbit/s.

  • Outbound bandwidth (data is transferred from EIPs)

    The outbound bandwidth allocated to an EIP equals the maximum bandwidth of the EIP.

• The following limits are imposed when you configure Anti-DDoS protection for EIPs:

  • Only pay-as-you-go EIPs of the BGP (Multi-ISP) type support Anti-DDoS Pro/Premium.

  • If you specify an IP address pool to create EIPs protected by Anti-DDoS Pro/Premium, the IP address pool must be of the Anti-DDoS Pro/Premium type.

  • You can select Anti-DDoS Pro/Premium only when you create EIPs and IP address pools. You cannot switch the security protection type between Default and Anti-DDoS Pro/Premium for existing EIPs.

  • The following regions support Anti-DDoS Pro/Premium:

    Regions that support EIPs protected by Anti-DDoS Pro/Premium

    Area	Region
    China	China (Beijing), China (Hangzhou), China (Shanghai), and China (Hong Kong)
    Asia Pacific	Philippines (Manila), Japan (Tokyo), Singapore, Malaysia (Kuala Lumpur), and Indonesia (Jakarta)
    Europe & Americas	US (Virginia), US (Silicon Valley), Germany (Frankfurt), and UK (London)

    Regions that support IP address pools of the Anti-DDoS Pro/Premium type

    Area	Region
    China	China (Hong Kong)
    Asia Pacific	Philippines (Manila), Japan (Tokyo), Singapore, Malaysia (Kuala Lumpur), and Indonesia (Jakarta)
    Europe & Americas	US (Virginia), US (Silicon Valley), Germany (Frankfurt), and UK (London).

• When Elastic Compute Service (Elastic Compute Service) instances associated with EIPs in China (including Hong Kong and Macao, but excluding Taiwan in this example) access ECS instances in other regions and countries, the network latency is high and packet loss may occur. We recommend that you deploy services in the same region or use Cloud Enterprise Network (CEN) for cross-region connections.

  For more information about CEN, see What is CEN?

Limits on associating an EIP with an ECS instance

• The ECS instance must be deployed in a virtual private cloud (VPC).

• The ECS instance and the EIP must belong to the same region.

• The ECS instance must be in the Running or Stopped state.

• The ECS instance is not assigned a static public IP address or associated with an EIP.

• Each ECS instance can be associated only with one EIP. However, you can associate a secondary elastic network interface (ENI) with an ECS instance to associate at most five EIPs with an ECS instance.

  • Associate an EIP with each secondary ENI. Then, associate the secondary ENIs with the ECS instance. The number of ENIs that can be associated varies with the ECS instance family. For more information, see Overview of instance families.

  • Associate multiple EIPs with a secondary ENI in NAT mode. In this mode, each EIP is associated with a secondary private IP address of the secondary ENI. Then, associate the secondary ENI with the ECS instance. For more information, see Associate multiple EIPs with an ECS instance in NAT mode.

Limits on associating an EIP with an Internet NAT gateway

• The EIP and Internet NAT gateway must belong to the same region.

• Each Internet NAT gateway can be associated with at most 20 EIPs.

  Note

  Starting September 19, 2022, if you associate an EIP with a newly created Internet NAT gateway, a private IP address of the vSwitch where the NAT gateway resides is used. Make sure that the vSwitch has sufficient private IP addresses available for use. Otherwise, you cannot associate an EIP with the NAT gateway. Existing NAT gateways are not affected.

Limits on associating an EIP with a Classic Load Balancer (CLB) instance

• The CLB instance must be deployed in a VPC.

• The CLB instance and the EIP must belong to the same region.

• You can associate only one EIP with each CLB instance.

Limits on associating an EIP with a high-availability virtual IP address (HAVIP)

• The HAVIP and the EIP must belong to the same region.

• The HAVIP must be in the Available or Allocated state.

• You can associate only one EIP with each HAVIP.

Limits on associating an EIP with a secondary ENI

• The secondary ENI must be deployed in a VPC.

• The secondary ENI and the EIP must belong to the same region.

• You can associate an EIP with a secondary ENI in NAT mode or cut-through mode.

  • The number of EIPs that you can associate with a secondary ENI in NAT mode depends on the number of private IP addresses of the secondary ENI.

  • You can associate only one EIP with a secondary ENI in cut-through mode.