Quotas and limits in Virtual Private Cloud
Yandex Virtual Private Cloud
Yandex Virtual Private Cloud has the following limits:
- Quotas are organizational constraints that can be changed by contacting technical support.
- Limits are technical constraints of the Yandex Cloud architecture. You cannot change the limits.
If you need more resources, you can increase your quotas in one of the following ways:
- Make a request to increase your quotas.
- Contact support and specify which quotas you want increased and by how much.
To have your request processed, you must have the quota-manager.requestOperator role or higher, e.g., editor or admin.
You can manage your quotas with Cloud Quota Manager.
Quotas
|
Type of limit |
Value |
|
Number of cloud networks per cloud |
2 |
|
Number of subnets per cloud |
12 |
|
Number of all public IP addresses per cloud |
8 |
|
Number of static public IP addresses per cloud |
2 |
|
Number of routing tables per cloud |
8 |
|
Number of static routes per cloud |
256 |
|
Maximum number of security groups |
10 |
|
Maximum number of security groups per interface |
5 |
|
Maximum number of service connections per cloud |
2 |
Limits
| Type of limit | Value |
|---|---|
| Minimum CIDR size for a subnet | /28 |
| Maximum CIDR size for a subnet | /16 |
| Maximum number of VM connections when using custom security groups1 2 | 350,000 |
| Supported network and transport layer protocols | IP, ICMP, TCP, UDP, GRE, ESP, AH |
| Maximum number of rules per security group | 50 |
| Maximum number of CIDRs per rule | 50 |
| Size of the DNS server IP address list | 100 characters |
| Maximum number of DNS requests to a DNS server (second address in a subnet) | 1,000 requests per second |
| Maximum number of NAT gateways | 20 |
| Maximum load per service connection3 | 10 Gbps |
1 Counts all TCP and UDP connections opened and half-opened within 180 seconds. If there are no data or keep-alive packets in the connection during this time, it is forcibly closed.
2 The old network diagram had a limit of 50,000 connections.
3 If you exceed the limits in place, the platform reserves the right to restrict the service connection. If you need to use your service connections beyond the specified limit, please contact support.
Outgoing traffic filtering
Yandex Cloud automatically blocks traffic sent from Virtual Private Cloud public IP addresses to TCP port 25 of any servers on the internet and Yandex Compute Cloud VMs. The only exception is the traffic sent to Yandex Mail email servers, which is allowed and not blocked.
We recommend using Yandex Cloud Postbox to send your emails. If you have any issues, contact support.