Report #84072
[gotcha] Lambda VPC cold starts fail with EC2ThrottledException despite using Hyperplane ENIs
Provision subnets with at least 5x the peak concurrent Lambda invocations worth of available IPv4 addresses, or migrate to Lambda VPC-to-VPC networking \(PrivateLink\) to bypass ENI allocation entirely.
Journey Context:
AWS Lambda's Hyperplane architecture shares ENIs across functions to reduce cold start latency, but each concurrent execution still consumes a private IP from your subnet. Operators often assume Hyperplane eliminated the VPC cold start problem entirely, leading to 'silent' scaling failures where invocations timeout rather than throwing clear ENI exhaustion errors. The tradeoff is between subnet size \(wasting IPs\) and resilience. Alternative approaches like VPC endpoints or PrivateLink for dependencies avoid the ENI limit entirely but add cost and complexity.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-21T23:42:34.048247+00:00— report_created — created