Azure Container Registry 中的容器映像儲存體Container image storage in Azure Container Registry

每個基本、標準和進階 Azure 容器登錄都可以從進階 Azure 儲存體功能受益,例如適用於映像資料安全性的待用資料加密,以及適用於映像資料保護的異地備援。Every Basic, Standard, and Premium Azure container registry benefits from advanced Azure storage features like encryption-at-rest for image data security and geo-redundancy for image data protection. 下節描述 Azure Container Registry (ACR) 中映像儲存體的功能和限制。The following sections describe both the features and limits of image storage in Azure Container Registry (ACR).

待用資料加密Encryption-at-rest

您登錄中的所有容器映像在待用時都已加密。All container images in your registry are encrypted at rest. Azure 會在儲存映像之前自動將它加密,並在您的應用程式或服務提取映像時將它解密。Azure automatically encrypts an image before storing it, and decrypts it on-the-fly when you or your applications and services pull the image.

異地備援儲存體Geo-redundant storage

Azure 使用異地備援儲存體配置來避免您的容器映像遺失。Azure uses a geo-redundant storage scheme to guard against loss of your container images. Azure Container Registry 會自動將您的容器映像複寫到多個地理位置相距甚遠的資料中心,以避免它們在區域性的儲存體失敗時遺失。Azure Container Registry automatically replicates your container images to multiple geographically distant data centers, preventing their loss in the event of a regional storage failure.

異地複寫Geo-replication

針對需要更高可用性保證的案例,請考慮使用「進階」登錄的異地複寫功能。For scenarios requiring even more high-availability assurance, consider using the geo-replication feature of Premium registries. 異地複寫有助於避免在「嚴重」 的區域性失敗情況 (不僅是儲存體失敗) 中無法存取您的登錄。Geo-replication helps guard against losing access to your registry in the event of a total regional failure, not just a storage failure. 異地複寫也提供其他好處,例如可在分散式開發或部署案例中加快推送和提取速度的網路鄰近映像儲存體。Geo-replication provides other benefits, too, like network-close image storage for faster pushes and pulls in distributed development or deployment scenarios.

映像限制Image limits

下表說明 Azure 容器登錄的容器映像和儲存體限制。The following table describes the container image and storage limits in place for Azure container registries.

ResourceResource 限制Limit
存放庫Repositories 沒有限制No limit
映像Images 沒有限制No limit
層次Layers 沒有限制No limit
TagsTags 沒有限制No limit
儲存體Storage 5 TB5 TB

大量的存放庫和標籤可能會影響您的登錄效能。Very high numbers of repositories and tags can impact the performance of your registry. 定期刪除未使用的存放庫、標籤和映像,將此作為登錄維護例行工作的一部分。Periodically delete unused repositories, tags, and images as part of your registry maintenance routine. 存放庫、映像和標籤等登錄資源一旦刪除就「無法」 復原。Deleted registry resources like repositories, images, and tags cannot be recovered after deletion. 如需刪除登錄資源的詳細資訊,請參閱刪除 Azure Container Registry 中的容器映像For more information about deleting registry resources, see Delete container images in Azure Container Registry.

儲存成本Storage cost

如需定價的完整詳細資料, 請參閱Azure Container Registry 定價For full details about pricing, see Azure Container Registry pricing.

後續步驟Next steps

如需不同 Azure Container Registry SKU (基本、標準、進階) 的詳細資訊,請參閱 Azure Container Registry SKUFor more information about the different Azure Container Registry SKUs (Basic, Standard, Premium), see Azure Container Registry SKUs.