[Yandex Cloud documentation](../../index.md) > [Yandex Virtual Private Cloud](../index.md) > [Concepts](index.md) > Quotas and limits

# Quotas and limits in Virtual Private Cloud

## Yandex Virtual Private Cloud

Yandex Virtual Private Cloud has the following limits:

* [_Quotas_](https://console.yandex.cloud/cloud?section=quotas) are organizational constraints that can be changed by contacting technical support.
* _Limits_ are technical constraints of the Yandex Cloud architecture. You cannot change the limits.

If you need more resources, you can increase your quotas in one of the following ways:

* [Make a request to increase your quotas](https://console.yandex.cloud/cloud?section=quotas).
* Contact [support](https://center.yandex.cloud/support) and specify which quotas you want increased and by how much.

To have your request processed, you must have the `quota-manager.requestOperator` [role](../../iam/roles-reference.md#quota-manager-requestoperator) or higher, e.g., `editor` or `admin`.

You can manage your quotas with [Cloud Quota Manager](../../quota-manager/quickstart.md).

#### Quotas {#vpc-quotas}

#|
|| Type of limit | Value ||
|| Number of cloud networks per cloud
`vpc.networks.count` | 2 ||
|| Number of subnets per cloud
`vpc.subnets.count` | 12 ||
|| Number of all public IP addresses per cloud
`vpc.externalAddresses.count` | 8 ||
|| Number of static public IP addresses per cloud
`vpc.externalStaticAddresses.count` | 2 ||
|| Number of routing tables per cloud
`vpc.routeTables.count` | 8 ||
|| Number of static routes per cloud
`vpc.staticRoutes.count` | 256 ||
|| Maximum number of security groups
`vpc.securityGroups.count` | 10 ||
|| Maximum number of security groups per interface | 5 ||
|| Maximum number of service connections per cloud 
`vpc.privateEndpoints.count` | 2 ||
|#

#### Limits {#vpc-limits}
Type of limit | Value
----- | -----
Minimum CIDR size for a subnet | /28
Maximum CIDR size for a subnet | /16
Maximum number of VM connections when using custom security groups^1^ ^2^ | 350,000
Supported network and transport layer protocols | IP, ICMP, TCP, UDP, GRE, ESP, AH
Maximum number of rules per security group | 50
Maximum number of CIDRs per rule | 50
Size of the DNS server IP address list | 100 characters
Maximum number of DNS requests to a DNS server (second address [in a subnet](network.md#subnet)) | 1,000 requests per second
Maximum number of NAT gateways | 20
Maximum load per service connection^3^ | 10 Gbps

^1^ Counts all TCP and UDP connections opened and half-opened within 180 seconds. If there are no data or keep-alive packets in the connection during this time, it is forcibly closed.
^2^ The old network diagram had a limit of 50,000 connections.
^3^ If you exceed the limits in place, the platform reserves the right to restrict the service connection. If you need to use your service connections beyond the specified limit, please contact [support](../../support/overview.md).

#### Outgoing traffic filtering {#vpc-egress-traffic-filter}

Yandex Cloud automatically blocks traffic sent from Virtual Private Cloud public IP addresses to TCP port 25 of any servers on the internet and Yandex Compute Cloud VMs. The only exception is the traffic sent to Yandex Mail email servers, which is allowed and not blocked.

We recommend using [Yandex Cloud Postbox](../../postbox/index.md) to send your emails. If you have any issues, contact [support](../../support/overview.md).