配额用于指定您可以使用的可计数共享资源的数量。配额由 Certificate Manager 等 Google Cloud 服务定义。
系统限制是无法更改的固定值。
Google Cloud 使用配额来帮助确保公平性并减少资源使用和可用性的激增。配额用于限制您的 Google Cloud 项目可使用的Google Cloud 资源的数量。配额适用于一系列资源类型，包括硬件、软件和网络组件。例如，配额可以限制对某项服务的 API 调用次数、您的项目并发使用的负载均衡器数量或者您可以创建的项目数量。配额可以防止服务过载，从而保护Google Cloud 用户社区。配额还可以帮助您管理自己的 Google Cloud 资源。
[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-08-21。"],[[["\u003cp\u003eQuotas and system limits govern the use of Certificate Manager resources within Google Cloud projects, with quotas being adjustable and system limits being fixed.\u003c/p\u003e\n"],["\u003cp\u003eRate quotas control the speed of API calls and resource access, while resource quotas define the total quantity of Certificate Manager resources allowed in a project.\u003c/p\u003e\n"],["\u003cp\u003eCertificate Manager has specific resource limits, including the number of Google-managed and self-managed certificates, certificate maps, DNS authorizations, and certificate issuance configs, with certain items also being limited regionally.\u003c/p\u003e\n"],["\u003cp\u003eGoogle-managed certificates have domain name length limitations, per-certificate domain limits, and there are additional independent quotas for Public CA ACME certificate management operations.\u003c/p\u003e\n"],["\u003cp\u003eTrust config limitations, which are fixed and apply to classic and global external Application Load Balancers, include limits on the number of trust stores, certificates within each store, and certificate chain depth.\u003c/p\u003e\n"]]],[],null,["# Quotas and limits\n\nThis document lists the quotas and system limits that apply to\nCertificate Manager.\n\n- *Quotas* specify the amount of a countable, shared resource that you can use. Quotas are defined by Google Cloud services such as Certificate Manager.\n- *System limits* are fixed values that cannot be changed.\n\nGoogle Cloud uses quotas to help ensure fairness and reduce\nspikes in resource use and availability. A quota restricts how much of a\nGoogle Cloud resource your Google Cloud project can use. Quotas\napply to a range of resource types, including hardware, software, and network\ncomponents. For example, quotas can restrict the number of API calls to a\nservice, the number of load balancers used concurrently by your project, or the\nnumber of projects that you can create. Quotas protect the community of\nGoogle Cloud users by preventing the overloading of services. Quotas also\nhelp you to manage your own Google Cloud resources.\n\nThe Cloud Quotas system does the following:\n\n- Monitors your consumption of Google Cloud products and services\n- Restricts your consumption of those resources\n- Provides a way to [request changes to the quota value](/docs/quotas/help/request_increase) and [automate quota adjustments](/docs/quotas/quota-adjuster)\n\nIn most cases, when you attempt to consume more of a resource than its quota\nallows, the system blocks access to the resource, and the task that\nyou're trying to perform fails.\n\nQuotas generally apply at the Google Cloud project\nlevel. Your use of a resource in one project doesn't affect\nyour available quota in another project. Within a Google Cloud project, quotas\nare shared across all applications and IP addresses.\n\n\nThere are also *system limits* on Certificate Manager resources.\nSystem limits can't be changed.\n\nYour use of Certificate Manager is governed by the following types of\nquotas:\n\n- **Rate quotas** determine how quickly you can call the Certificate Manager API\n as well as create and access Certificate Manager resources.\n\n- **Resource quotas** determine the total amount of Certificate Manager\n resources you can create within your Google Cloud project.\n\nFor more information about working with quotas, including steps for increasing\nthem, and for setting up monitoring and alerting on quota metrics, see\nthe [Cloud Quotas documentation](/docs/quotas/overview).\n\nRate quotas\n-----------\n\nThe following table lists the rate quotas for Certificate Manager.\n\nResource quotas and limits\n--------------------------\n\nThe following table lists the resource quotas and limits for\nCertificate Manager certificates.\n\nDomain name length limitations for Google-managed certificates\n--------------------------------------------------------------\n\nThe following table lists domain name length limitations specific to Google-managed\ncertificates in Certificate Manager.\n\nAdditional resource limits for Google-managed certificates\n----------------------------------------------------------\n\nThe following table lists additional resource limits specific to Google-managed\ncertificates in Certificate Manager. These limits *cannot be\nincreased*.\n\nAdditional request quotas for Public CA operations\n--------------------------------------------------\n\nQuotas for Public CA operations are independent from quotas governing Certificate Manager operations\non Google-managed certificates. They are also independent from any other quotas governing operations on\nGoogle-managed certificates performed by any other Google Cloud products.\n\nCertificate Manager enforces the quota limits listed in this section\nfor Public CA operations. Keep the following guidelines in mind:\n\n- Certificate Manager can rate-limit your per-minute requests.\n- Certificate Manager can return HTTP 429 response code asking an ACME client to retry a request after waiting a few seconds. Your ACME clients must support this response code and respect the `Retry-After` header that Certificate Manager sends with the response.\n\nThe production and the staging environment have the same limits, but they are\nindependent of each other. Requests to the production environment and the\nstaging environment only consume their respective quotas.\n\nPublic CA request quotas\n------------------------\n\nThe following table lists the Public CA request quotas that apply to [ACME certificate\nmanagement operations](https://datatracker.ietf.org/doc/html/rfc8555#section-7).\n| **Note:** Certificate Manager applies quotas at the Google Cloud project level. If you create two or more ACME accounts within the same Google Cloud project, those accounts share request quotas.\n\nTrust config\n------------\n\nThe limits documented here cannot be increased and apply to\nclassic Application Load Balancers and global external Application Load Balancers."]]
