A prefix list is a set of network prefixes (CIDR blocks) and a port list is a set of ports. You can reference prefix lists and port lists to configure network rules for other resources. This eliminates the need to repeatedly add rules for CIDR blocks and ports and improves O&M efficiency. Prefix lists and port lists can be referenced in security group rules.
Terms
Term | Description |
maximum number of entries | The maximum number of CIDR blocks in a prefix list or the maximum number of port ranges in a port list. For example, 10.0.0.0/8 and 172.16.0.0/12 are two CIDR blocks. |
address family | The address family of entries in a prefix list. Prefix lists support the IPv4 or IPv6 address family. Entries in a prefix list must belong to the same address family. |
CIDR block | The CIDR block is an addressing method used over the Internet, which is more efficient than traditional Classes A, B, and C addressing models in IP address allocation. A CIDR block uses the slash notation in the following format: <IP address>/<Length of the network prefix>.
|
port range | The port range in a port list entry, which is used to match the destination ports of traffic. Specify a port range in the format of <Start port number>/<End port number>, such as 8000/9000 or 22/22. |
associated resource | A resource that references a prefix list or port list. |
Limits
Item | Limit | Method to raise limits |
The maximum number of prefix lists allowed for an Alibaba Cloud account per region | 100 | N/A |
The maximum number of entries in a prefix list | 200 | N/A |
The maximum number of resources that can be associated with a prefix list | 1,000 | N/A |
The maximum number of port lists allowed for an Alibaba Cloud account per region | 1,000 | N/A |
The maximum number of entries in a port list | 2,000 | N/A |
The maximum number of resources that can be associated with a port list | 1,000 | N/A |