The following information shows quotas and limits for IBM Cloud® Virtual Private Cloud and the resources available within it.
Quotas
The following tables show the quotas for various VPC resources.
To increase a quota for a particular resource, contact support.
Compute resources
Quotas for virtual server instances
| Resource |
Quota |
| vCPU |
200 per region |
| RAM |
5600 GB per region |
| Bare metal servers |
25 per account |
| Instance storage |
18 TB per region |
| SSH keys |
200 per region |
| GPU |
16 per region |
| Dedicated host groups |
100 per region |
| Storage optimized (ox2) instance storage |
96 TB per region |
When you provision virtual server instances dedicated hosts, the vCPU, RAM, and solid-state drives, which are associated with the instances count toward the vCPU, RAM, and instance storage quotas per region. Instances that are provisioned
on dedicated hosts do not count against the vCPU quota. For more information, see About instance storage.
Reservations for virtual servers count against the vCPU, RAM, instance storage, Storage optimized (ox2) instance storage, and GPU quotas.
Bare metal servers use physical cores and don't count toward your vCPU quota.
VPCs
Quotas for the VPC service
| Resource |
Quota |
| Virtual private clouds |
10 per region |
| Subnets |
100 per VPC |
| Address prefixes |
25 per VPC |
Access control lists
Quotas for access control lists
| Resource |
Quota |
| ACLs |
100 per VPC |
| Rules |
100 per ACL |
Security groups
Quotas for security groups
| Resource |
Quota |
| Security groups |
100 per VPC |
| Rules |
250 per security group |
| Targets |
1000 per security group |
VPN gateways (site-to-site)
Quotas for the site-to-site VPN gateway service
| Resource |
Quota |
| VPN gateways |
9 per region, 3 per zone |
| VPN connections |
10 per VPN gateway |
| IKE policies |
20 per region |
| IPsec policies |
20 per region |
| Peer subnets |
50 across all connections of a VPN gateway, 15 per individual VPN connection |
| Local subnets |
50 across all connections of a VPN gateway, 15 per individual VPN connection |
| Route-based VPN gateway |
1 per zone per VPC |
VPN servers (client-to-site)
Quotas for the client-to-site VPN server service
| Resource |
Quota |
| Active connections per VPN server |
2000 |
| Active VPN servers |
10 per region |
| Active routes per VPN server |
50 |
| Number of certificate revocations lists |
20000 |
| Number of VPN servers in a security group |
10 |
| Number of auth clients per second per VPN server |
10 |
Application load balancers
Quotas for load balancers
| Resource |
Quota |
| Load balancers |
50 per region |
| Listeners |
10 per load balancer |
| Pools |
10 per load balancer |
| Members |
50 per pool |
| Policies |
10 per listener |
| Rules |
10 per policy |
| Subnets |
15 per load balancer |
Network load balancers
Quotas for load balancers
| Resource |
Quota |
| Load balancers |
50 per region |
| Listeners |
10 per load balancer |
| Pools |
10 per load balancer |
| Members |
50 per pool |
| Policies |
N/A |
| Rules |
N/A |
| Subnets |
1 per load balancer |
Private Path network load balancers
The beta release of IBM Cloud Private Path is available only to allowlisted users. Contact your IBM Support representative if you are interested in getting early access to this beta offering.
Quotas for Private Path load balancers
| Resource |
Quota |
| Load balancers |
50 per region |
| Listeners |
10 per load balancer |
| Pools |
10 per load balancer |
| Members |
50 per pool |
Cluster networks
Contact your IBM Support representative if you are interested in getting early access to this offering. It is currently available for early access users of the gx3d-160x1792x8h100 virtual server instance profiles in the us-east region.
Quotas for cluster networks
| Resource |
Quota |
| Maximum number of cluster networks per account per region |
5 (limited to 10) |
| Maximum number of cluster network subnets per cluster network |
32 (limited to 64) |
| Maximum number of cluster network subnet reserved IPs per account |
20000 (limited to 100000) |
Routing tables and routes
Quotas for routing tables and routes
| Resource |
Quota |
| Routing tables per VPC |
50 |
| Routes per routing table |
200 |
| Advertise routes per VPC |
30 |
Each route has a destination property, which includes a prefix length (/24 in 10.2.0.0/24). The number of unique prefix lengths that are supported per custom routing table is 14. Multiple routes with the same prefix
count as only one unique prefix.
Reserved IP addresses
Quotas for reserved IP addresses
| Resource |
Quota |
| Reserved IP addresses |
20,000 per region |
Virtual network interfaces
Quotas for virtual network interfaces
| Resource |
Quota |
| IP addresses |
8 per virtual network interface |
Block Storage volumes and snapshots
Quotas for Block Storage volumes and snapshots
| Resource |
Quota |
| Boot and secondary volumes |
300 total VPC volumes per region. |
| Snapshots and backup snapshots |
Up to 750 per volume in a region. |
File shares and snapshots
Quotas for file shares
| Resource |
Quota |
| File shares |
300 file shares per account, across all VPCs |
| Mount targets |
256 per file share per account per zone |
| Accessor share bindings |
A file share can have maximum of 100 accessor bindings. |
Share mount targets
10 per file share
Placement groups
Quotas for placement groups
| Resource |
Quota |
| Placement groups |
100 placement groups per region |
| Instances (host_spread) |
12 instances per placement group per region with host_spread placement group strategy. |
| Instances (power_spread) |
4 instances per placement group per region with power_spread placement group strategy. |
The quotas for placement groups are preset and can't be adjusted.