Azure Container Registry service tiers

Azure Container Registry is available in multiple service tiers (also known as SKUs). These tiers provide predictable pricing and several options for aligning to the capacity and usage patterns of your private Docker registry in Azure.

Tier Description
Basic A cost-optimized entry point for developers learning about Azure Container Registry. Basic registries have the same programmatic capabilities as Standard and Premium (such as Azure Active Directory authentication integration, image deletion, and webhooks). However, the included storage and image throughput are most appropriate for lower usage scenarios.
Standard Standard registries offer the same capabilities as Basic, with increased included storage and image throughput. Standard registries should satisfy the needs of most production scenarios.
Premium Premium registries provide the highest amount of included storage and concurrent operations, enabling high-volume scenarios. In addition to higher image throughput, Premium adds features such as geo-replication for managing a single registry across multiple regions, content trust for image tag signing, private link with private endpoints to restrict access to the registry.

The Basic, Standard, and Premium tiers all provide the same programmatic capabilities. They also all benefit from image storage managed entirely by Azure. Choosing a higher-level tier provides more performance and scale. With multiple service tiers, you can get started with Basic, then convert to Standard and Premium as your registry usage increases.

Service tier features and limits

The following table details the features and limits of the Basic, Standard, and Premium service tiers.

Resource Basic Standard Premium
Included storage1 (GiB) 10 100 500
Storage limit (TiB) 20 20 20
Maximum image layer size (GiB) 200 200 200
ReadOps per minute2, 3 1,000 3,000 10,000
WriteOps per minute2, 4 100 500 2,000
Download bandwidth MBps2 30 60 100
Upload bandwidth MBps2 10 20 50
Webhooks 2 10 500
Geo-replication N/A N/A Supported
Content trust N/A N/A Supported
Private link with private endpoints N/A N/A Supported
Service endpoint VNet access N/A N/A Preview
Customer-managed keys N/A N/A Supported
Repository-scoped permissions N/A N/A Preview
• Tokens N/A N/A 20,000
• Scope maps N/A N/A 20,000
• Repositories per scope map N/A N/A 500

1 Storage included in the daily rate for each tier. For additional storage, you're charged an additional daily rate per GiB, up to the storage limit. For rate information, see Azure Container Registry pricing.

2ReadOps, WriteOps, and Bandwidth are minimum estimates. Azure Container Registry strives to improve performance as usage requires.

3A docker pull translates to multiple read operations based on the number of layers in the image, plus the manifest retrieval.

4A docker push translates to multiple write operations, based on the number of layers that must be pushed. A docker push includes ReadOps to retrieve a manifest for an existing image.

Changing tiers

You can change a registry's service tier with the Azure CLI or in the Azure portal. You can move freely between tier as long as the tier you're switching to has the required maximum storage capacity.

Azure CLI

To move between service tiers in the Azure CLI, use the az acr update command. For example, to switch to Premium:

az acr update --name myregistry --sku Premium

Azure portal

In the container registry Overview in the Azure portal, select Update, then select a new SKU from the SKU drop-down.

Update container registry SKU in Azure portal

Pricing

For pricing information on each of the Azure Container Registry service tiers, see Container Registry pricing.

For details about pricing for data transfers, see Bandwidth Pricing Details.

Next steps

Azure Container Registry Roadmap

Visit the ACR Roadmap on GitHub to find information about upcoming features in the service.

Azure Container Registry UserVoice

Submit and vote on new feature suggestions in ACR UserVoice.