348
edits
Changes
→ChangeCipherSpec
The current Cipher suite used on our entry point Lb's is as follows:
TLS/SSL_ECDHE_RSA_WITH_AES_128_GCM_SHA256 <br />TLS/SSL_ECDHE_RSA_WITH_AES_256_GCM_SHA384 <br />TLS/SSL_DHE_RSA_WITH_AES_128_GCM_SHA256 <br />TLS/SSL_DHE_RSA_WITH_AES_256_GCM_SHA384 <br />TLS/SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA256 <br />TLS/SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA <br />TLS/SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA384 <br />TLS/SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA <br />TLS/SSL_DHE_RSA_WITH_AES_128_CBC_SHA256 <br />TLS/SSL_DHE_RSA_WITH_AES_128_CBC_SHA <br />TLS/SSL_DHE_DSS_WITH_AES_128_CBC_SHA256 <br />TLS/SSL_DHE_RSA_WITH_AES_256_CBC_SHA256 <br />TLS/SSL_DHE_DSS_WITH_AES_256_CBC_SHA256 <br />TLS/SSL_DHE_DSS_WITH_AES_128_CBC_SHA <br />TLS/SSL_DHE_DSS_WITH_AES_256_CBC_SHA <br />TLS/SSL_DHE_RSA_WITH_AES_256_CBC_SHA <br />TLS/SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA <br />TLS/SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA <br />TLS/SSL_RSA_WITH_AES_128_GCM_SHA256 <br />TLS/SSL_RSA_WITH_AES_256_GCM_SHA384 <br />TLS/SSL_RSA_WITH_AES_128_CBC_SHA256 <br />TLS/SSL_RSA_WITH_AES_256_CBC_SHA256 <br />TLS/SSL_RSA_WITH_AES_128_CBC_SHA <br />TLS/SSL_RSA_WITH_AES_256_CBC_SHA.<br />
The LoadBalancer will automatically choose a cipher in the encryption based on queue order and compatability.