# Limits

> Every number you might run into, in one place.

## Plans

| Plan | People | Devices |
|---|---|---|
| Free | Up to 6 | 100 |
| Team | Unlimited | 25 per person, pooled, at least 100 |
| Business | Unlimited | 50 per person, pooled, at least 250 |

Every feature is on every plan. See [Plans and billing](/manage/plans).

## Machines

| What | Limit |
|---|---|
| Machine name | A DNS label: lowercase `a-z`, `0-9` and `-`, up to 63 characters |
| Key expiry | 180 days by default; 1 to 365, or off |
| Ephemeral machines | Removed after 10 minutes offline |
| Counts as offline | 90 seconds without checking in |

## Access controls

| What | Limit |
|---|---|
| Rules (including SSH rules) | 200 |
| Groups | 100, up to 500 members each |
| Tests | 100, up to 50 targets each |
| Sources and destinations per rule | 1 to 50 |

## DNS

| What | Limit |
|---|---|
| Nameservers | 8 |
| Split DNS domains | 32, with up to 4 servers each |
| Search domains | 16 |
| Network name | 3 to 40 characters: lowercase letters, digits and `-`, no `--` |

## Services, routes and apps

| What | Limit |
|---|---|
| Ports per service | 1 to 16, TCP only |
| Services per host | 64 |
| Subnet routes per machine | 64, IPv4 only |
| Domains per app | 1 to 50 |
| Routed addresses per app connector, per app | 512 |

## Keys and tokens

| What | Limit |
|---|---|
| Auth key lifetime | 1 to 90 days; 7 by default in the dashboard, 90 through the API |
| API token lifetime | Up to 90 days (the default) |
| API tokens per workspace | 50 |

## Logs and webhooks

| What | Limit |
|---|---|
| Audit log retention | 90 days |
| Network log retention | 30 days |
| Webhooks and log streams | 10 of each per workspace |
| A destination is paused after | 20 failed deliveries in a row |

## HTTPS certificates

| What | Limit |
|---|---|
| New certificates per machine | 1 per hour, unless the current one is due |
| Renewal | 30 days before expiry |

## Relay

| What | Limit |
|---|---|
| Throughput per device | 2 MiB/s, 4 MiB bursts |
| Connections per IP address | 32 |