{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": true,
  "whole_disk": null,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": false,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": false,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": false,
  "ssh": true,
  "public_ipv4": true,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": true,
  "static_egress_ip": true,
  "private_network": null,
  "self_host": false,
  "byoc": true,
  "open_source": false,
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "gpu": true,
  "arm64": true,
  "windows": true,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": true,
  "snapshot_auto": false,
  "snapshot_on_demand": true,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": false,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": true,
  "volume_shared": true,
  "sidecar": null,
  "fuse": null,
  "kernel_features": null,
  "burst": null
 },
 "company": {
  "id": "alibaba-ack",
  "checked": "2026-09-30",
  "company": "Alibaba Cloud (Alibaba Cloud Intelligence Group), a business group of Alibaba Group Holding Limited",
  "ownership": {
   "value": "subsidiary",
   "parent": "Alibaba Group Holding Limited (public company, NYSE: BABA, SEHK: 9988)",
   "source": "https://en.wikipedia.org/wiki/Alibaba_Cloud",
   "quote": "Alibaba Cloud ... is a cloud computing company, a subsidiary of Alibaba Group."
  },
  "stage": {
   "value": "subsidiary",
   "source": "https://en.wikipedia.org/wiki/Alibaba_Group",
   "quote": "In March 2023, Alibaba announced its \"1+6+N\" restructuring plan, which reorganized its business structure into six independently run entities: Cloud Intelligence Group, Taobao and Tmall Group, Cainiao Smart Logistics Network...",
   "confidence": "high",
   "note": "Alibaba Cloud (Container Service for Kubernetes / ACK is one of its products) is the Cloud Intelligence Group business unit of Alibaba Group Holding Limited, a publicly traded company (NYSE: BABA, SEHK: 9988). It is not an independently funded startup; there is no separate venture funding history for Alibaba Cloud as such. Alibaba Group itself IPO'd in 2014 (NYSE) and listed secondarily in Hong Kong in 2019, so at the parent level the stage is 'public'."
  },
  "accelerators": [],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "subsidiary",
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [
   "Alibaba Group Holding Limited (parent; public shareholders via NYSE: BABA / SEHK: 9988)"
  ],
  "portfolio_listings": [],
  "revenue": {
   "value_usd": 148400000000,
   "kind": "annual revenue",
   "as_of": "FY2026 (ended March 31, 2026)",
   "status": "confirmed",
   "basis": "Whole-company (Alibaba Group Holding Limited) revenue from its Form 20-F annual report; figure is for the entire group, not the Cloud Intelligence Group / ACK product line specifically. Cloud segment revenue alone could not be confirmed within the research window.",
   "source": "https://www.sec.gov/Archives/edgar/data/1577552/000119312526231755/baba-20260331.htm",
   "quote": "US$148.40 billion (2026)"
  },
  "employees": {
   "value": 124320,
   "source": "https://en.wikipedia.org/wiki/Alibaba_Group (citing Alibaba Group FY2025 Annual Report, Form 20-F)"
  },
  "note": "Alibaba Cloud ACK (Container Service for Kubernetes) is a product of Alibaba Cloud, itself the 'Cloud Intelligence Group' business unit of Alibaba Group Holding Limited — a publicly traded, diversified technology/e-commerce conglomerate (NYSE: BABA, SEHK: 9988), not an independently funded startup. There is no separate accelerator history, funding round, or standalone revenue figure for ACK; revenue shown is for the whole Alibaba Group. Under the 2023 '1+6+N' restructuring, Cloud Intelligence Group was set up as an independently run entity able to seek its own fundraising/listing, but no external funding round or IPO for Cloud Intelligence Group specifically was confirmed as of this check."
 },
 "id": "alibaba-ack",
 "name": "Alibaba Cloud ACK (Harbor backend)",
 "url": "https://www.alibabacloud.com/product/kubernetes",
 "category": "hyperscaler",
 "isolation": "container",
 "modes": [
  {
   "key": "ack",
   "label": "ACK cluster runtime",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Pods on ECS worker nodes: price = ECS node rates (see alibaba-ecs card) for whole nodes; ACK requires worker nodes of at least 4 vCPU / 8 GB. ACK itself adds the Pro cluster fee."
  },
  {
   "key": "eci-virtual-node",
   "label": "ACK pods on virtual nodes (ECI), per vCPU/GiB",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "pricing": "resource",
   "vcpu_h": 0.02772,
   "ram_gib_h": 0.003456,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "max_vcpu": 64,
   "max_ram_gib": null,
   "min_billed_seconds": 0,
   "granularity_s": 1,
   "start_fee": 0,
   "boot_overhead_s": null,
   "multiplier": 1,
   "note": "ECI list rate (docs give no region; 'Prices displayed on the purchase page and in bills take precedence'). Billed from Pending (image pull) to Succeeded/Failed on requested, not used, resources. Economy vCPU $0.015264/h. 30 GiB temp storage free per pod, extra ~$0.000000093/GiB-s. ack-virtual-node component is free; cluster fee (Pro $0.09/h or Basic free) still applies. Regional ECI vCPU quota varies by account history. Each ECI pod runs in its own CIPU-based sandbox with 'VM-class security and isolation'.",
   "features": {
    "isolation": "vm"
   }
  }
 ],
 "storage": {
  "included_disk_gib": 30,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null,
  "internet": {
   "default": "none",
   "gate": {
    "kind": "addon",
    "plan": "Internet NAT Gateway + EIP",
    "usd": null,
    "recurring": true
   },
   "evidence": [
    {
     "quote": "Create NAT gateway SNAT rules in the cluster's Virtual Private Cloud (VPC) for Internet access, such as pulling images or downloading packages.",
     "url": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/enable-an-existing-ack-cluster-to-access-the-internet"
    },
    {
     "quote": "Configuring SNAT rules involves the following billable services: Service Description Billing details NAT Gateway ... Elastic IP Address",
     "url": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/enable-an-existing-ack-cluster-to-access-the-internet"
    }
   ]
  }
 },
 "plans": [
  {
   "name": "ACK managed Pro",
   "fee": 65.7,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "USD 0.09 per cluster per hour x 730 h. Per cluster, not per sandbox; billed every hour the cluster is Running/Upgrading/etc. even with zero pods; first and last partial hour free; 'Prices may vary by region'. Can be offset by a resource package. Workers (ECS/ECI), API-server CLB, NAT gateway, EIP, disks billed separately."
  },
  {
   "name": "ACK managed Basic",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "No cluster management fee; max 10 nodes/cluster, 1,000 serverless pods/cluster, 2 clusters/account, not raisable; docs say 'For personal testing or learning only'. All cloud resources still billed."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": true,
  "macos": false,
  "arm64": true,
  "gpu": true,
  "snapshot": "fs",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": true,
  "volumes": null,
  "auto_stop_idle": false,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "agent_harnesses": false,
  "ssh": true,
  "public_ipv4": true,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": true,
  "private_network": null,
  "self_host": false,
  "byoc": true,
  "open_source": false,
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "gpu_types": [],
  "regions": [
   "asia",
   "other",
   "us",
   "eu"
  ],
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "snapshot_on_demand": true,
  "egress_allowlist_level": "ip",
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": false,
  "volume_attach": true,
  "volume_shared": true,
  "isolation": "container",
  "image_oci": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "static-datacenter",
  "snapshot_auto": false,
  "harness_api": false,
  "own_agent_api": false,
  "max_session_unlimited": true,
  "open_internet": true,
  "usage_api": true
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "knobs": [],
 "caveats": [
  "Harbor ACK is customer-managed Alibaba Kubernetes, distinct from Alibaba AgentRun/FC sandbox. Harbor's ack.py is generic (\"Generic Kubernetes implementation for Harbor sandboxes\" / \"Supports any Kubernetes cluster accessible via kubeconfig.\"): it never mentions ECS or ECI, so whether pods land on ECS nodes or ECI virtual nodes is a cluster choice. Platform and underlying worker node/storage/network billing must be combined.",
  "Not fully priceable in ENGINE_CARD: unknown USD resource rates or machine shape. Null is not zero; do not rank as a free provider.",
  "Features set to null were not verified. No sandbox was purchased or tested; feature/performance statements are documentation claims. Null maximums are unknown unless a cited note explicitly states unlimited.",
  "A complete monthly bill requires known snapshot/egress/plan limits; do not silently treat missing ancillary charges as free."
 ],
 "sources": [
  "https://www.alibabacloud.com/product/kubernetes",
  "https://github.com/laude-institute/harbor/blob/main/src/harbor/environments/ack.py",
  "https://www.alibabacloud.com/help/en/eci/product-overview/what-is-elastic-container-instance",
  "https://www.alibabacloud.com/help/en/user-center/developer-reference/api-bssopenapi-2017-12-14-describeinstancebill",
  "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/comparison-of-docker-containerd-and-sandboxed-container"
 ],
 "fleet": {
  "default_max_instances": null,
  "default_max_vcpu": 500,
  "default_max_gpus": null,
  "raise": "ticket",
  "raise_time_days": null,
  "verification": "Identity verification required before creating a cluster.",
  "tiers": "Basic: 2 clusters/account, 10 nodes/cluster, 10 node pools, 1,000 serverless pods/cluster (not adjustable; 'for personal testing or learning only'). Pro: 100 clusters/account; nodes/cluster Flannel 200 default (1,000 max) or Terway 5,000 default (50,000 max); 50,000 serverless (ECI) pods/cluster; increases via Quota Center. Underlying ECS on-demand quota 500 vCPU, spot 800 vCPU (ticket).",
  "notes": "Cluster/node ceilings are not a new-account machine entitlement: backing ECS/ECI quotas, network quotas and stock still bind. Do not multiply cluster maxima into default instances. ECI create rate: CreateContainerGroup token bucket burst 100, refill 20/s (ticket to raise); ECI regional vCPU quota 'Varies by account based on historical usage' (Quota Center). The cluster fee, API-server CLB and NAT are paid per cluster.",
  "sources": [
   "https://www.alibabacloud.com/help/en/ack/product-overview/limits",
   "https://www.alibabacloud.com/help/en/ecs/user-guide/quota-management"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 5,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 8
 },
 "feature_evidence": {
  "snapshot_on_demand": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-volume-snapshots-created-from-disks",
   "quote": "Volume snapshots help you back up and restore application data.",
   "note": "Disk-volume (PVC) snapshots only via Kubernetes VolumeSnapshot backed by ECS disk snapshots (billed as ECS snapshots); restore into a new PVC via dataSource, so new pods can start from it. No memory, no container rootfs. ECS worker-node disks can also be snapshotted via ECS. ACS Agent Sandbox (separate product) offers memory checkpoint and cloning.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-network-policies",
   "quote": "you can use network policies to control network traffic at the IP address or port level for specific applications in your cluster",
   "note": "Kubernetes NetworkPolicy (egress ipBlock rules) enforced by Terway eBPF (shared ENI mode only; 'ACK supports only standard Kubernetes network policies', no Calico/Cilium FQDN policies); ACK Pro GlobalNetworkPolicy via Poseidon; ECS/ECI security-group egress rules. No domain-level egress for plain ACK documented (ACS Agent Sandbox SecurityProfile does domain/URL rules).",
   "checked": "2026-09-29",
   "level": "ip"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-network-policies",
   "quote": "Each network policy can contain a whitelist of source (ingress) rules.",
   "note": "NetworkPolicy ingress rules (podSelector/ipBlock), ECS/ECI security groups, and choice of Service type (ClusterIP vs LoadBalancer/Ingress with CLB/ALB) decide which ports are exposed.",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/eci/user-guide/configure-a-security-context-for-an-elastic-container-instance-or-a-container",
   "quote": "NET_ADMIN Perform network-related operations such as configuring interfaces and routing tables.",
   "note": "Containers, not VMs: iptables inside the pod needs the NET_ADMIN capability added via securityContext (listed as supported for ECI pods; default containers lack it). Pods on ECS nodes follow standard Kubernetes capability rules. Rules apply to the pod's network namespace only.",
   "checked": "2026-09-29"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/security-and-compliance/use-ack-secret-manager-to-import-alibaba-cloud-kms-service-credentials",
   "quote": "ack-secret-manager syncs secrets from Key Management Service (KMS) to your Container Service for Kubernetes (ACK) cluster as Kubernetes Secrets.",
   "note": "Plain ACK: secrets reach the pod as Kubernetes Secrets (env/files), also via csi-secrets-store-provider. ACS Agent Sandbox's egress gateway has a SecurityProfile 'tokenTransformation' action ('API key injection, or Alibaba Cloud STS credential replacement and re-signing', HTTP/HTTPS with TLS termination) - a real first-party credential-injection proxy, but documented for ACS Agent Sandbox, not ACK.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-dynamically-provisioned-disk-volumes",
   "quote": "automatically creating and mounting a dedicated cloud disk for each application replica",
   "note": "Cloud-disk PVs via CSI (static/dynamic), also NAS, OSS, CPFS volumes.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/mount-statically-provisioned-nas-volumes",
   "quote": "data sharing, enabling simultaneous read and write access by multiple pods",
   "note": "Read-write NAS (NFS) PVs with ReadWriteMany; OSS bucket mounts (ossfs) also available.",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "container",
   "source": "https://www.alibabacloud.com/help/en/eci/product-overview/what-is-elastic-container-instance",
   "quote": "Each container runs inside an Alibaba Cloud CIPU-based sandbox, which provides VM-class security and isolation with lower overhead and faster startup than traditional VMs",
   "note": "Card top-level isolation stays 'container': pods on ECS worker nodes share the node kernel. The eci-virtual-node mode overrides features.isolation to 'vm' from this ECI statement (one sandbox per pod).",
   "checked": "2026-10-14"
  },
  "image_oci": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/create-an-ack-managed-cluster",
   "quote": "Deploy applications by using container images stored in Container Registry or any OCI-compatible registry",
   "note": "Card already has custom_image: true. Pods are started from any Docker/OCI image, including customer-pushed images (ACR or external registries).",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": false,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/comparison-of-docker-containerd-and-sandboxed-container",
   "quote": "Docker runtime is discontinued.",
   "note": "not offered as a feature: nodes run containerd (\"If your cluster runs Docker, migrate to containerd.\"), no Docker daemon in pods. Harbor's ack.py runs the sandbox pod privileged as root by default (\"privileged\": True, \"runAsUser\": 0, overridable via pod_overrides) and builds images in a separate privileged Job from dind_image \"docker:dind\", so a user could run DinD themselves, but neither Alibaba nor Harbor provides Docker inside the sandbox.",
   "checked": "2026-10-14"
  },
  "nested_virt": {
   "value": false,
   "source": "https://www.alibabacloud.com/help/en/eci/user-guide/configure-a-security-context-for-an-elastic-container-instance-or-a-container",
   "quote": "NET_ADMIN Perform network-related operations such as configuring interfaces and routing tables.",
   "note": "not offered: outside the product's scope. Pods are containers (ECS containerd or ECI microVM sandboxes); no documented /dev/kvm passthrough or nested-virtualization capability for ACK pods.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "not offered: outside the product's scope. ACK is a generic Kubernetes container platform, not a desktop/remote-GUI product.",
   "checked": "2026-10-14"
  },
  "browser": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "not offered: outside the product's scope. No managed browser ships with ACK.",
   "checked": "2026-10-14"
  },
  "computer_use": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "not offered: outside the product's scope. No screenshot/click desktop-driving API is part of ACK.",
   "checked": "2026-10-14"
  },
  "anti_bot": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "not offered: outside the product's scope. ACK is a Kubernetes runtime, not a browser/bot-automation product.",
   "checked": "2026-10-14"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-10-14"
  },
  "egress_ip_type": {
   "value": "static-datacenter",
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-network-policies",
   "quote": "you can use network policies to control network traffic at the IP address or port level for specific applications in your cluster",
   "note": "Pod outbound traffic is SNAT'd through a NAT Gateway or ECS/EIP, both datacenter Alibaba Cloud IPs; a NAT Gateway EIP is fixed/static unless changed by the customer.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/create-an-ack-managed-cluster",
   "quote": "you can log on to ECS nodes by using SSH key pairs",
   "note": "ACK worker nodes are ECS instances reachable by SSH; individual pods are reached via kubectl exec, not SSH directly.",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "fs",
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-volume-snapshots-created-from-disks",
   "quote": "Volume snapshots help you back up and restore application data.",
   "note": "Disk/PVC snapshots only (backed by ECS disk snapshots); no memory/process-state snapshot for plain ACK pods.",
   "checked": "2026-09-30"
  },
  "snapshot_auto": {
   "value": false,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-volume-snapshots-created-from-disks",
   "quote": "Volume snapshots help you back up and restore application data.",
   "note": "Volume snapshots must be explicitly created via a VolumeSnapshot object/CronJob; there is no automatic checkpoint on pod stop/idle.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-volume-snapshots-created-from-disks",
   "quote": "Volume snapshots help you back up and restore application data.",
   "note": "not offered: outside the product's scope. Kubernetes pods are declarative/replicated from a spec (ReplicaSet scaling), not cloned as a single running machine; there is no 'fork this pod' API.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-volume-snapshots-created-from-disks",
   "quote": "Volume snapshots help you back up and restore application data.",
   "note": "not offered: outside the product's scope; no running-pod clone/fork capability documented.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-volume-snapshots-created-from-disks",
   "quote": "Volume snapshots help you back up and restore application data.",
   "note": "not offered: outside the product's scope; snapshots are disk-only, no memory/process state, and there is no fork/clone feature to carry it.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "not offered: outside the product's scope. Kubernetes pods are scaled to 0 replicas or deleted/recreated, not paused/resumed as a single machine with billing paused mid-state.",
   "checked": "2026-10-14"
  },
  "persistent_disk": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-dynamically-provisioned-disk-volumes",
   "quote": "automatically creating and mounting a dedicated cloud disk for each application replica",
   "note": "Cloud-disk PersistentVolumes survive pod restarts and reattach to rescheduled pods.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "Kubernetes autoscaling (HPA/cluster-autoscaler) scales replica count based on load metrics; it is not a per-machine idle-timeout stop that plain ACK provides out of the box.",
   "checked": "2026-10-14"
  },
  "live_resize": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "Standard Kubernetes pod resource requests/limits require a pod restart/reschedule to change; ACK docs do not advertise in-place CPU/RAM resize without recreating the pod.",
   "checked": "2026-10-14"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "not offered: outside the product's scope. No coding-agent (Claude Code/Codex/OpenCode) templates ship with ACK.",
   "checked": "2026-10-14"
  },
  "harness_api": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-10-14"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "not offered: outside the product's scope. ACK has no first-party browser/computer-use/research agent product; that is Alibaba's separate ACS Agent Sandbox / AgentRun offering.",
   "checked": "2026-10-14"
  },
  "lang_python": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/create-an-ack-managed-cluster",
   "quote": "Deploy applications by using container images stored in Container Registry or any OCI-compatible registry",
   "note": "Any language runtime is available by supplying a container image (e.g. official python images); not a managed out-of-the-box runtime, but fully supported via custom images.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/create-an-ack-managed-cluster",
   "quote": "Deploy applications by using container images stored in Container Registry or any OCI-compatible registry",
   "note": "Any language runtime is available by supplying a container image (e.g. official node images); not a managed out-of-the-box runtime, but fully supported via custom images.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-network-policies",
   "quote": "Each network policy can contain a whitelist of source (ingress) rules.",
   "note": "Public exposure is via CLB/EIP bound to a Kubernetes Service (LoadBalancer type) or Ingress, giving a public IPv4 endpoint for the workload.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": true,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "Ingress/CLB/ALB resources terminate HTTPS and route to pod ports; standard ACK ingress-nginx / ALB Ingress Controller documented.",
   "checked": "2026-10-14"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-network-policies",
   "quote": "ACK supports only standard Kubernetes network policies",
   "note": "Card's own feature_evidence for egress_allowlist gives level 'ip': standard NetworkPolicy egress rules operate at IP/CIDR/port level, not HTTP method/path level; no domain/URL-level egress documented for plain ACK.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/use-network-policies",
   "quote": "you can use network policies to control network traffic at the IP address or port level for specific applications in your cluster",
   "note": "Outbound traffic can be routed through a NAT Gateway bound to a fixed EIP, giving pods a stable, static outbound IP.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "not offered: outside the product's scope. ACK node pools are Linux or Windows Server ECS instances; no macOS node type is offered.",
   "checked": "2026-10-14"
  },
  "arm64": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/create-an-ack-managed-cluster",
   "quote": "Arm64",
   "note": "ACK managed cluster creation supports Arm64 (Yitian) ECS instance types as node pool architecture.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "You only need to create and manage worker nodes while master nodes will be managed by ACK.",
   "note": "ACK is a managed control plane hosted by Alibaba Cloud; the ACK service itself cannot be run on the customer's own infrastructure (the underlying Kubernetes upstream project can, but that is not this product).",
   "checked": "2026-10-14"
  },
  "open_source": {
   "value": false,
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "ACK is Alibaba Cloud's proprietary managed Kubernetes service (control plane, console, integrations); it is built on the open-source Kubernetes project (Apache 2.0) but ACK itself is not open source.",
   "checked": "2026-10-14"
  },
  "soc2": {
   "value": true,
   "source": "https://www.alibabacloud.com/trust-center/compliance",
   "quote": "SOC 2 Report",
   "note": "Listed under Alibaba Cloud's compliance/trust center, which covers ACK as an Alibaba Cloud service.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": true,
   "source": "https://www.alibabacloud.com/trust-center/compliance",
   "quote": "HIPAA (United States) US The Health Insurance Portability and Accountability Act (HIPAA)",
   "note": "Alibaba Cloud lists HIPAA compliance support on its trust center compliance page.",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/cloudsso/latest/what-is-cloudsso",
   "quote": "What is CloudSSO",
   "note": "Alibaba Cloud CloudSSO provides SAML-based single sign-on for account/console access, applicable to managing ACK access via RAM/CloudSSO.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": true,
   "source": "https://www.alibabacloud.com/en/global-locations",
   "quote": "Germany Frankfurt",
   "note": "Alibaba Cloud operates a Germany (Frankfurt) region where ACK clusters and their data can be kept within the EU.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://www.alibabacloud.com/product/kubernetes",
   "quote": "A Kubernetes-based service that ensures high efficiency for enterprises by running containerized applications on the cloud",
   "note": "ACK clusters and pods run indefinitely until the customer stops/deletes them; there is no maximum session duration imposed by the platform.",
   "checked": "2026-10-14"
  },
  "wake_on_request": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/ack/ack-managed-and-ack-dedicated/user-guide/knative-overview",
   "quote": "Run serverless workloads on Kubernetes with request-based auto scaling, scale-to-zero, and canary releases. ... Knative Serving: Manages serverless workloads with application deployment, multi-version management, request-based auto scaling, canary releases, and scale-to-zero when there is no traffic.",
   "note": "Via ACK Knative (Knative Serving/KPA): a service idled to zero pods is scaled back up when a new request arrives (request-based autoscaling). This is an optional add-on component, not default plain-ACK behavior, and applies at the pod/service level rather than to a whole worker VM.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": true,
   "source": "https://github.com/aliyun/alibabacloud-ack-mcp-server",
   "quote": "Alibaba Cloud's ack-mcp-server unifies container operations capabilities, enabling AI assistants and third-party AI agents to perform complex tasks via natural language through the MCP protocol, empowering container-native AIOps.",
   "note": "First-party MCP server for ACK cluster/container operations (cluster, node, workload, and pod management via natural language through MCP).",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": true,
   "source": "https://www.alibabacloud.com/help/en/user-center/developer-reference/api-bssopenapi-2017-12-14-describeinstancebill",
   "quote": "Queries the consumption summary of all product instances or billable items for a user within a specific billing cycle.",
   "note": "granularity: per-instance; cost: yes; BSS Open API DescribeInstanceBill filters by InstanceID and ProductCode, Granularity MONTHLY or DAILY, and returns each line's resource Tag. ECI pods (container groups) and ECS worker nodes are billed instances, so per-pod cost works on the ECI mode; pods on shared ECS nodes are only per-node. Account-wide billing API, not an ACK-specific one.",
   "confidence": "high",
   "checked": "2026-10-14"
  }
 },
 "locations": [
  {
   "country": "CN",
   "state": null,
   "city": "Qingdao",
   "provider_region": "cn-qingdao",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Beijing",
   "provider_region": "cn-beijing",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Zhangjiakou",
   "provider_region": "cn-zhangjiakou",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Hohhot",
   "provider_region": "cn-huhehaote",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Ulanqab",
   "provider_region": "cn-wulanchabu",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Hangzhou",
   "provider_region": "cn-hangzhou",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Shanghai",
   "provider_region": "cn-shanghai",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Shenzhen",
   "provider_region": "cn-shenzhen",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Heyuan",
   "provider_region": "cn-heyuan",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Guangzhou",
   "provider_region": "cn-guangzhou",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Chengdu",
   "provider_region": "cn-chengdu",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Zhongwei",
   "provider_region": "cn-zhongwei",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "CN",
   "state": null,
   "city": "Wuhan",
   "provider_region": "cn-wuhan-lr",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "HK",
   "state": null,
   "city": "Hong Kong",
   "provider_region": "cn-hongkong",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "JP",
   "state": null,
   "city": "Tokyo",
   "provider_region": "ap-northeast-1",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "KR",
   "state": null,
   "city": "Seoul",
   "provider_region": "ap-northeast-2",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "SG",
   "state": null,
   "city": "Singapore",
   "provider_region": "ap-southeast-1",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "MY",
   "state": null,
   "city": "Kuala Lumpur",
   "provider_region": "ap-southeast-3",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "ID",
   "state": null,
   "city": "Jakarta",
   "provider_region": "ap-southeast-5",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "PH",
   "state": null,
   "city": "Manila",
   "provider_region": "ap-southeast-6",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "TH",
   "state": null,
   "city": "Bangkok",
   "provider_region": "ap-southeast-7",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "MY",
   "state": null,
   "city": "Johor",
   "provider_region": "ap-southeast-8",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "AE",
   "state": null,
   "city": "Dubai",
   "provider_region": "me-east-1",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "SA",
   "state": null,
   "city": "Riyadh",
   "provider_region": "me-central-1",
   "self_serve": false,
   "choosable": true
  },
  {
   "country": "US",
   "state": "CA",
   "city": "Silicon Valley",
   "provider_region": "us-west-1",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "US",
   "state": "VA",
   "city": "Virginia",
   "provider_region": "us-east-1",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "MX",
   "state": null,
   "city": "Queretaro",
   "provider_region": "na-south-1",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "DE",
   "state": null,
   "city": "Frankfurt",
   "provider_region": "eu-central-1",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "GB",
   "state": null,
   "city": "London",
   "provider_region": "eu-west-1",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "FR",
   "state": null,
   "city": "Paris",
   "provider_region": "eu-west-2",
   "self_serve": true,
   "choosable": true
  }
 ],
 "locations_source": "https://www.alibabacloud.com/help/en/ack/product-overview/supported-regions",
 "locations_quote": "This topic lists the regions where ACK is available. The table below lists ACK regions, their IDs, and cluster type availability.",
 "locations_checked": "2026-10-01"
}