Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Spectrum] Update configuration-options.mdx #19117

Merged
merged 2 commits into from
Jan 13, 2025
Merged

[Spectrum] Update configuration-options.mdx #19117

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
6e102bf
[Spectrum] Update configuration-options.mdx
ngayerie Jan 10, 2025
0e56cb8
Update src/content/docs/spectrum/reference/configuration-options.mdx
angelampcosta Jan 10, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
33 changes: 32 additions & 1 deletion src/content/docs/spectrum/reference/configuration-options.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -108,12 +108,43 @@ You can manage this through the Spectrum app at the Cloudflare dashboard, or usi

:::note[Note]


If you have the TLS termination setting configured to **off**, this means that Spectrum will then proxy connections to the origin without decrypting. The certificate that is presented in this case will be the certificate installed at your origin server, instead of the Edge Certificate from Cloudflare.

:::

:::caution

If you need to control TLS settings, like the minimum TLS version or cipher suites, you need to use an HTTPS application.
For TCP applications, default settings will apply. The minimum TLS version will be 1.1 and the cipher suites are:

| OpenSSL Name |
| --------------------------------- |
|AEAD-CHACHA20-POLY1305-SHA256|
|AEAD-AES128-GCM-SHA256|
|AEAD-AES256-GCM-SHA384|
|ECDHE-RSA-CHACHA20-POLY1305|
|ECDHE-ECDSA-CHACHA20-POLY1305|
|ECDHE-RSA-AES128-GCM-SHA256|
|ECDHE-ECDSA-AES128-GCM-SHA256|
|ECDHE-RSA-AES256-GCM-SHA384|
|ECDHE-ECDSA-AES256-GCM-SHA384|
|ECDHE-RSA-AES128-SHA256|
|ECDHE-RSA-AES128-SHA|
|CDHE-ECDSA-AES128-SHA256|
|ECDHE-ECDSA-AES128-SHA|
|ECDHE-RSA-AES256-SHA|
|ECDHE-ECDSA-AES256-SHA|
|AES128-GCM-SHA256|
|AES256-GCM-SHA384|
|AES128-SHA256|
|AES128-SHA|
|AES256-SHA|
|ECDHE-RSA-DES-CBC3-SHA|
|DES-CBC3-SHA|

:::


## Origin TLS Termination

Below are the cipher suites Cloudflare presents to origins during an SSL/TLS handshake. For cipher suites supported at our edge or presented to browsers and other user agents, refer to [Cipher suites](/ssl/edge-certificates/additional-options/cipher-suites/).
Expand Down
Loading