Skip to content

Commit 523b32f

Browse files
Merge pull request #297815 from jaesoni/v1-clarification-tls10-11
V1s backend TLS version info
2 parents c7bdae6 + 4452353 commit 523b32f

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

articles/application-gateway/application-gateway-tls-version-retirement.md

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: application gateway
55
author: jaesoni
66
ms.service: azure-application-gateway
77
ms.topic: concept-article
8-
ms.date: 03/04/2025
8+
ms.date: 04/08/2025
99
ms.author: greglin
1010
---
1111

@@ -69,7 +69,12 @@ Application Gateway V1 SKU only supports the older "Custom" policy. Beyond Augus
6969

7070
## Backend TLS connections
7171

72-
You don't need to configure anything on your Application Gateway for the backend connection's TLS version as the selection of TLS policy has no control over the backend TLS connections. After retirement, the connections to backend servers will always be with preferred TLS v1.3 and up to TLS v1.2. You must ensure that your servers in the backend pools are compatible with these updated protocol versions. This compatibility avoids any disruptions when establishing a TLS/HTTPS connection with those backend servers.
72+
You don't need to configure anything on your Application Gateway for the backend connection's TLS version as the selection of TLS policy has no control over the backend TLS connections. After the retirement,
73+
74+
* For V2 SKUs: the connections to backend servers will always be with preferred TLS v1.3 and minimum up to TLS v1.2
75+
* For V1 SKUs: the connections to backend servers will always be with TLS v1.2
76+
77+
You must ensure that your servers in the backend pools are compatible with these updated protocol versions. This compatibility avoids any disruptions when establishing a TLS/HTTPS connection with those backend servers.
7378

7479
## Next steps
7580

0 commit comments

Comments
 (0)