Querying Quotas

Function

This API is used to query the quotas of VPC resources, including security group quotas and security group rule quotas.

Calling Method

For details, see Calling APIs.

Authorization Information

Each account has all the permissions required to call all APIs, but IAM users must be assigned the required permissions.

If you are using role/policy-based authorization, see Permissions Policies and Supported Actions for details on the required permissions.

If you are using identity policy-based authorization, the following identity policy-based permissions are required.

Action	Access Level	Resource Type (*: required)	Condition Key	Alias	Dependencies
vpc:quotas:list	List	-	-	vpc:quotas:get	-

URI

GET /v3/{project_id}/vpc/quotas

**Table 1** Path Parameters
Parameter	Mandatory	Type	Description
project_id	Yes	String	Definition: ID of the project that the network ACL belongs to. For details about how to obtain a project ID, see Obtaining a Project ID. Range: N/A

Request Parameters

None

Response Parameters

Status code: 200

**Table 2** Response body parameters
Parameter	Type	Description
quota	VpcQuotas object	Definition: Response body for querying quotas. Range: N/A
request_id	String	Definition: Request ID. Range: N/A

**Table 3** VpcQuotas
Parameter	Type	Description
acl_policy_contain_rules	Integer	Definition: Quota of network ACL rules in one direction. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
address_group	Integer	Definition: Quota of IP address groups. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
address_group_contain_ipset	Integer	Definition: Quota of IP address sets in an IP address group. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
edge_gateway	Integer	Definition: Quota of edge gateways. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
eni_contain_secgroup	Integer	Definition: Quota of security groups that can be associated with an elastic network interface. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
firewall_policy_contain_ipv4_composite_rules	Integer	Definition: Quota of IPv4 rules configured with IP address groups or non-consecutive ports in a network ACL. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
firewall_policy_contain_ipv6_composite_rules	Integer	Definition: Quota of IPv6 rules configured with IP address groups or non-consecutive ports in a network ACL. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
peering	Integer	Definition: Quota of VPC peering connections. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
secgroup_contain_rules	Integer	Definition: Quota of rules in a security group. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
secgroup_referred_by_nic	Integer	Definition: Quota of network interfaces that can be associated with a security group. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
security_group	Integer	Definition: Quota of security groups. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
security_group_contain_egress_ipv4_composite_rules	Integer	Definition: Quota of IPv4 outbound rules configured with IP address groups, non-consecutive ports, or remote security groups in a security group. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
security_group_contain_egress_ipv6_composite_rules	Integer	Definition: Quota of IPv6 outbound rules configured with IP address groups, non-consecutive ports, or remote security groups in a security group. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
security_group_contain_ingress_ipv4_composite_rules	Integer	Definition: Quota of IPv4 inbound rules configured with IP address groups, non-consecutive ports, or remote security groups in a security group. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
security_group_contain_ingress_ipv6_composite_rules	Integer	Definition: Quota of IPv6 inbound rules configured with IP address groups, non-consecutive ports, or remote security groups in a security group. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
security_group_rule	Integer	Definition: Quota of security group rules. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
subnet_contain_eni	Integer	Definition: Quota of elastic network interfaces in a subnet. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
traffic_mirror_filter	Integer	Definition: Quota of traffic mirror filters. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
traffic_mirror_filter_referred_by_session	Integer	Definition: Quota of mirror sessions that can be associated with a traffic mirror filter. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
traffic_mirror_filter_contain_rules_each_direction	Integer	Definition: Quota of traffic mirror filter rules in a direction. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
traffic_mirror_session	Integer	Definition: Quota of traffic mirror sessions. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
traffic_mirror_session_contain_sources	Integer	Definition: Quota of mirror sources that can be associated with a traffic mirror session. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
traffic_mirror_source_referred_by_session	Integer	Definition: Quota of traffic mirror sessions that can be associated with a mirror source. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
traffic_mirror_target_elb_referred_by_session	Integer	Definition: Quota of traffic mirror sessions that can be associated with a mirror target of the private network load balancer type. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
traffic_mirror_target_eni_referred_by_session	Integer	Definition: Quota of traffic mirror sessions that can be associated with a mirror target of the elastic network interface type. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
vip	Integer	Definition: Quota of virtual IP addresses. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
virsubnet	Integer	Definition: Quota of subnets. Range: The value is an integer. The value -1 indicates that the quota is not brought online. You can query quotas using the API v1 for querying quotas.
virsubnet_contain_ipv4_cidr_reservations	Integer	Definition: Quota of IPv4 CIDR reservations in a subnet. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
virsubnet_contain_ipv6_cidr_reservations	Integer	Definition: Quota of IPv6 CIDR reservations in a subnet. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
vpc	Integer	Definition: Quota of VPCs. Range: The value is an integer. The value -1 indicates that the quota is not brought online. You can query quotas using the API v1 for querying quotas.
vpc_contain_eni	Integer	Definition: Quota of elastic network interfaces in a VPC. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
vpc_contain_vip	Integer	Definition: Quota of virtual IP addresses in a VPC. Range: The value is an integer. The value -1 indicates that the quota is not brought online.
vpc_contain_virsubnet	Integer	Definition: Quota of subnets in a VPC. Range: The value is an integer. The value -1 indicates that the quota is not brought online.

Example Requests

Query quotas.

GET https://{Endpoint}/v3/{project_id}/vpc/quotas

Example Responses

Status code: 200

The GET operation is successful. For more status codes, see Status Codes.

{
  "quota" : {
    "vpc" : -1,
    "security_group" : 100,
    "security_group_rule" : 5000,
    "peering" : 50,
    "address_group" : 50,
    "address_group_contain_ipset" : 100,
    "vpc_contain_virsubnet" : -1,
    "secgroup_referred_by_nic" : 50000,
    "secgroup_contain_rules" : 50,
    "vpc_contain_eni" : -1,
    "eni_contain_secgroup" : -1,
    "acl_policy_contain_rules" : 40,
    "vip" : 10,
    "edge_gateway" : 3,
    "vpc_contain_vip" : -1,
    "subnet_contain_eni" : -1,
    "traffic_mirror_session" : 20000,
    "traffic_mirror_filter" : 2000,
    "traffic_mirror_filter_referred_by_session" : 1000,
    "traffic_mirror_filter_contain_rules_each_direction" : 10,
    "traffic_mirror_target_elb_referred_by_session" : 200,
    "traffic_mirror_target_eni_referred_by_session" : 10,
    "traffic_mirror_source_referred_by_session" : 3,
    "traffic_mirror_session_contain_sources" : 10,
    "security_group_contain_ingress_ipv4_composite_rules" : 120,
    "security_group_contain_ingress_ipv6_composite_rules" : 120,
    "security_group_contain_egress_ipv4_composite_rules" : 120,
    "security_group_contain_egress_ipv6_composite_rules" : 120,
    "firewall_policy_contain_ipv4_composite_rules" : 120,
    "firewall_policy_contain_ipv6_composite_rules" : 120,
    "virsubnet_contain_ipv4_cidr_reservations" : 10,
    "virsubnet_contain_ipv6_cidr_reservations" : 10,
    "virsubnet" : -1
  },
  "request_id" : "c36874fe67538207eff03797e6a50734"
}