Reference
Limits
Every number you might run into, in one place.
| Plan | People | Devices |
|---|
| Free | Up to 6 | 100 |
| Team | Unlimited | 25 per person, pooled, at least 100 |
| Business | Unlimited | 50 per person, pooled, at least 250 |
Every feature is on every plan. See Plans and billing.
| What | Limit |
|---|
| Machine name | A DNS label: lowercase a-z, 0-9 and -, up to 63 characters |
| Key expiry | 180 days by default; 1 to 365, or off |
| Ephemeral machines | Removed after 10 minutes offline |
| Counts as offline | 90 seconds without checking in |
| What | Limit |
|---|
| Rules (including SSH rules) | 200 |
| Groups | 100, up to 500 members each |
| Tests | 100, up to 50 targets each |
| Sources and destinations per rule | 1 to 50 |
| What | Limit |
|---|
| Nameservers | 8 |
| Split DNS domains | 32, with up to 4 servers each |
| Search domains | 16 |
| Network name | 3 to 40 characters: lowercase letters, digits and -, no -- |
| What | Limit |
|---|
| Ports per service | 1 to 16, TCP only |
| Services per host | 64 |
| Subnet routes per machine | 64, IPv4 only |
| Domains per app | 1 to 50 |
| Routed addresses per app connector, per app | 512 |
| What | Limit |
|---|
| Auth key lifetime | 1 to 90 days; 7 by default in the dashboard, 90 through the API |
| API token lifetime | Up to 90 days (the default) |
| API tokens per workspace | 50 |
| What | Limit |
|---|
| Audit log retention | 90 days |
| Network log retention | 30 days |
| Webhooks and log streams | 10 of each per workspace |
| A destination is paused after | 20 failed deliveries in a row |
| What | Limit |
|---|
| New certificates per machine | 1 per hour, unless the current one is due |
| Renewal | 30 days before expiry |
| What | Limit |
|---|
| Throughput per device | 2 MiB/s, 4 MiB bursts |
| Connections per IP address | 32 |
