Skip to content

Commit 6e102bf

Browse files
authored
[Spectrum] Update configuration-options.mdx
1 parent 4a8e97e commit 6e102bf

File tree

1 file changed

+32
-1
lines changed

1 file changed

+32
-1
lines changed

src/content/docs/spectrum/reference/configuration-options.mdx

Lines changed: 32 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -108,12 +108,43 @@ You can manage this through the Spectrum app at the Cloudflare dashboard, or usi
108108

109109
:::note[Note]
110110

111-
112111
If you have the TLS termination setting configured to **off**, this means that Spectrum will then proxy connections to the origin without decrypting. The certificate that is presented in this case will be the certificate installed at your origin server, instead of the Edge Certificate from Cloudflare.
113112

113+
:::
114+
115+
:::caution
116+
117+
If you need to control TLS settings like the minimum TLS version or ciper suites, you need to use an HTTPS application.
118+
For TCP applications, default settings will apply. The minimum TLS version will be 1.1 and the cipher suites are:
119+
120+
| OpenSSL Name |
121+
| --------------------------------- |
122+
|AEAD-CHACHA20-POLY1305-SHA256|
123+
|AEAD-AES128-GCM-SHA256|
124+
|AEAD-AES256-GCM-SHA384|
125+
|ECDHE-RSA-CHACHA20-POLY1305|
126+
|ECDHE-ECDSA-CHACHA20-POLY1305|
127+
|ECDHE-RSA-AES128-GCM-SHA256|
128+
|ECDHE-ECDSA-AES128-GCM-SHA256|
129+
|ECDHE-RSA-AES256-GCM-SHA384|
130+
|ECDHE-ECDSA-AES256-GCM-SHA384|
131+
|ECDHE-RSA-AES128-SHA256|
132+
|ECDHE-RSA-AES128-SHA|
133+
|CDHE-ECDSA-AES128-SHA256|
134+
|ECDHE-ECDSA-AES128-SHA|
135+
|ECDHE-RSA-AES256-SHA|
136+
|ECDHE-ECDSA-AES256-SHA|
137+
|AES128-GCM-SHA256|
138+
|AES256-GCM-SHA384|
139+
|AES128-SHA256|
140+
|AES128-SHA|
141+
|AES256-SHA|
142+
|ECDHE-RSA-DES-CBC3-SHA|
143+
|DES-CBC3-SHA|
114144

115145
:::
116146

147+
117148
## Origin TLS Termination
118149

119150
Below are the cipher suites Cloudflare presents to origins during an SSL/TLS handshake. For cipher suites supported at our edge or presented to browsers and other user agents, refer to [Cipher suites](/ssl/edge-certificates/additional-options/cipher-suites/).

0 commit comments

Comments
 (0)