Supported Ciphers in SnapLogic Platform

SnapLogic provides a suite of protocols and ciphers that focus on security while allowing for reasonable compatibility. Our servers negotiate to the most secure combination the client can support. Clients that are able to support TLS v1.2 connect with the related protocol. Similarly, the most secure cipher that can be negotiated with the client is used.

The following ciphers apply only for:

Public API calls to the SnapLogic control plane.
Control plane triggered API calls.
Triggered/Ultra API calls against Cloudplex instances.

These ciphers are not used for Groundplex Triggered/Ultra API calls, which use ciphers configured on customer-managed load balancers

For http://elastic.snaplogic.com (suites in server-preferred order)

TLS 1.3 Cipher Suite	OpenSSL Cipher Suite

TLS 1.3 Cipher Suite	OpenSSL Cipher Suite
TLS_AES_128_GCM_SHA256 (0x1301)	ECDH secp256r1 (eq. 3072 bits RSA) FS 128
TLS_AES_256_GCM_SHA384 (0x1302)	ECDH secp256r1 (eq. 3072 bits RSA) FS 256
TLS_CHACHA20_POLY1305_SHA256 (0x1303)	ECDH secp256r1 (eq. 3072 bits RSA) FS 256

TLS 1.2 Cipher Suite	OpenSSL Cipher Suite

TLS 1.2 Cipher Suite	OpenSSL Cipher Suite
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)	ECDH secp256r1 (eq. 3072 bits RSA) FS 128
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)	ECDH secp256r1 (eq. 3072 bits RSA) FS 256
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca8)	ECDH secp256r1 (eq. 3072 bits RSA) FS

For http://cdn.elastic.snaplogic.com (suites in server-preferred order)

TLS 1.2 Cipher Suite	OpenSSL Cipher Suite

TLS 1.2 Cipher Suite	OpenSSL Cipher Suite
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)	ECDH x25519 (eq. 3072 bits RSA) FS 128
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)	ECDH x25519 (eq. 3072 bits RSA) FS