Quotas and limits

This document lists the quotas and system limits that apply to Secure Web Proxy.

  • Quotas specify the amount of a countable, shared resource that you can use. Quotas are defined by Google Cloud services such as Secure Web Proxy.
  • System limits are fixed values that cannot be changed.

Google Cloud uses quotas to help ensure fairness and reduce spikes in resource use and availability. A quota restricts how much of a Google Cloud resource your Google Cloud project can use. Quotas apply to a range of resource types, including hardware, software, and network components. For example, quotas can restrict the number of API calls to a service, the number of load balancers used concurrently by your project, or the number of projects that you can create. Quotas protect the community of Google Cloud users by preventing the overloading of services. Quotas also help you to manage your own Google Cloud resources.

The Cloud Quotas system does the following:

  • Monitors your consumption of Google Cloud products and services
  • Restricts your consumption of those resources
  • Provides a way to request changes to the quota value

In most cases, when you attempt to consume more of a resource than its quota allows, the system blocks access to the resource, and the task that you're trying to perform fails.

Quotas generally apply at the Google Cloud project level. Your use of a resource in one project doesn't affect your available quota in another project. Within a Google Cloud project, quotas are shared across all applications and IP addresses.

There are also system limits on Secure Web Proxy resources. System limits can't be changed.

Allocation quotas

The following quotas don't reset over time and instead are released when you release the resource.

Usage limit Value
Secure Web Proxy instances defined per project per region 5
URL lists defined per project per region 10
Policies defined per project per region 10

To display quotas for Secure Web Proxy instances for your project, in the Google Cloud console, go to the Network Services API quotas page.

Go to Network Services API quotas

To display quotas for policies for your project, in the Google Cloud console, go to the Network Security API quotas page.

Go to Network Security API quotas

Usage limits

Secure Web Proxy enforces the following usage limits:

Usage limit Value
Rules per policy 250
CEL regex matchers per policy 5
Maximum sub-expressions per rule 5000
Maximum entries per URL list 2500
Regex length 100 characters
Maximum matcher length 2048 characters

Request a quota increase

To adjust most quotas, use the Google Cloud console. For more information, see Request a quota adjustment.