Feature Overview

Cipher suites are the combinations of algrithms used for SSL/TLS connection establishment during handshake. After Client Hello and Server Hello info exchanging, the client sends a list of supported suites to the server, and the server will pick one of the combinations from the list and reponse.

The SSL/TLS cipher suites and the corresponding lowest SSL/TLS version supported by eSurfing Cloud CDN are listed in the table below:

Cipher suites	Lowest SSL/TLS version required
TLS_AES_256_GCM_SHA384	TLSv1.3
TLS_CHACHA20_POLY1305_SHA256	TLSv1.3
TLS_AES_128_GCM_SHA256	TLSv1.3
ECDHE-ECDSA-AES256-GCM-SHA384	TLSv1.2
ECDHE-RSA-AES256-GCM-SHA384	TLSv1.2
DHE-DSS-AES256-GCM-SHA384	TLSv1.2
DHE-RSA-AES256-GCM-SHA384	TLSv1.2
ECDHE-ECDSA-CHACHA20-POLY1305	TLSv1.2
ECDHE-RSA-CHACHA20-POLY1305	TLSv1.2
DHE-RSA-CHACHA20-POLY1305	TLSv1.2
ECDHE-ECDSA-AES256-CCM8	TLSv1.2
ECDHE-ECDSA-AES256-CCM	TLSv1.2
DHE-RSA-AES256-CCM8	TLSv1.2
DHE-RSA-AES256-CCM	TLSv1.2
ECDHE-ECDSA-ARIA256-GCM-SHA384	TLSv1.2
ECDHE-ARIA256-GCM-SHA384	TLSv1.2
DHE-DSS-ARIA256-GCM-SHA384	TLSv1.2
DHE-RSA-ARIA256-GCM-SHA384	TLSv1.2
ECDHE-ECDSA-AES128-GCM-SHA256	TLSv1.2
ECDHE-RSA-AES128-GCM-SHA256	TLSv1.2
DHE-DSS-AES128-GCM-SHA256	TLSv1.2
DHE-RSA-AES128-GCM-SHA256	TLSv1.2
ECDHE-ECDSA-AES128-CCM8	TLSv1.2
ECDHE-ECDSA-AES128-CCM	TLSv1.2
DHE-RSA-AES128-CCM8	TLSv1.2
DHE-RSA-AES128-CCM	TLSv1.2
ECDHE-ECDSA-ARIA128-GCM-SHA256	TLSv1.2
ECDHE-ARIA128-GCM-SHA256	TLSv1.2
DHE-DSS-ARIA128-GCM-SHA256	TLSv1.2
DHE-RSA-ARIA128-GCM-SHA256	TLSv1.2
ECDHE-ECDSA-AES256-SHA384	TLSv1.2
ECDHE-RSA-AES256-SHA384	TLSv1.2
DHE-RSA-AES256-SHA256	TLSv1.2
DHE-DSS-AES256-SHA256	TLSv1.2
ECDHE-ECDSA-CAMELLIA256-SHA384	TLSv1.2
ECDHE-RSA-CAMELLIA256-SHA384	TLSv1.2
DHE-RSA-CAMELLIA256-SHA256	TLSv1.2
DHE-DSS-CAMELLIA256-SHA256	TLSv1.2
ECDHE-ECDSA-AES128-SHA256	TLSv1.2
ECDHE-RSA-AES128-SHA256	TLSv1.2
DHE-RSA-AES128-SHA256	TLSv1.2
DHE-DSS-AES128-SHA256	TLSv1.2
ECDHE-ECDSA-CAMELLIA128-SHA256	TLSv1.2
ECDHE-RSA-CAMELLIA128-SHA256	TLSv1.2
DHE-RSA-CAMELLIA128-SHA256	TLSv1.2
DHE-DSS-CAMELLIA128-SHA256	TLSv1.2
RSA-PSK-AES256-GCM-SHA384	TLSv1.2
DHE-PSK-AES256-GCM-SHA384	TLSv1.2
RSA-PSK-CHACHA20-POLY1305	TLSv1.2
DHE-PSK-CHACHA20-POLY1305	TLSv1.2
ECDHE-PSK-CHACHA20-POLY1305	TLSv1.2
DHE-PSK-AES256-CCM8	TLSv1.2
DHE-PSK-AES256-CCM	TLSv1.2
RSA-PSK-ARIA256-GCM-SHA384	TLSv1.2
DHE-PSK-ARIA256-GCM-SHA384	TLSv1.2
AES256-GCM-SHA384	TLSv1.2
AES256-CCM8	TLSv1.2
AES256-CCM	TLSv1.2
ARIA256-GCM-SHA384	TLSv1.2
PSK-AES256-GCM-SHA384	TLSv1.2
PSK-CHACHA20-POLY1305	TLSv1.2
PSK-AES256-CCM8	TLSv1.2
PSK-AES256-CCM	TLSv1.2
PSK-ARIA256-GCM-SHA384	TLSv1.2
RSA-PSK-AES128-GCM-SHA256	TLSv1.2
DHE-PSK-AES128-GCM-SHA256	TLSv1.2
DHE-PSK-AES128-CCM8	TLSv1.2
DHE-PSK-AES128-CCM	TLSv1.2
RSA-PSK-ARIA128-GCM-SHA256	TLSv1.2
DHE-PSK-ARIA128-GCM-SHA256	TLSv1.2
AES128-GCM-SHA256	TLSv1.2
AES128-CCM8	TLSv1.2
AES128-CCM	TLSv1.2
ARIA128-GCM-SHA256	TLSv1.2
PSK-AES128-GCM-SHA256	TLSv1.2
PSK-AES128-CCM8	TLSv1.2
PSK-AES128-CCM	TLSv1.2
PSK-ARIA128-GCM-SHA256	TLSv1.2
AES256-SHA256	TLSv1.2
CAMELLIA256-SHA256	TLSv1.2
AES128-SHA256	TLSv1.2
CAMELLIA128-SHA256	TLSv1.2
ECDHE-ECDSA-AES256-SHA	TLSv1
ECDHE-RSA-AES256-SHA	TLSv1
ECDHE-ECDSA-AES128-SHA	TLSv1
ECDHE-RSA-AES128-SHA	TLSv1
ECDHE-PSK-AES256-CBC-SHA384	TLSv1
ECDHE-PSK-AES256-CBC-SHA	TLSv1
RSA-PSK-AES256-CBC-SHA384	TLSv1
DHE-PSK-AES256-CBC-SHA384	TLSv1
ECDHE-PSK-CAMELLIA256-SHA384	TLSv1
RSA-PSK-CAMELLIA256-SHA384	TLSv1
DHE-PSK-CAMELLIA256-SHA384	TLSv1
PSK-AES256-CBC-SHA384	TLSv1
PSK-CAMELLIA256-SHA384	TLSv1
ECDHE-PSK-AES128-CBC-SHA256	TLSv1
ECDHE-PSK-AES128-CBC-SHA	TLSv1
RSA-PSK-AES128-CBC-SHA256	TLSv1
DHE-PSK-AES128-CBC-SHA256	TLSv1
ECDHE-PSK-CAMELLIA128-SHA256	TLSv1
RSA-PSK-CAMELLIA128-SHA256	TLSv1
DHE-PSK-CAMELLIA128-SHA256	TLSv1
PSK-AES128-CBC-SHA256	TLSv1
PSK-CAMELLIA128-SHA256	TLSv1
DHE-RSA-AES256-SHA	SSLv3
DHE-DSS-AES256-SHA	SSLv3
DHE-RSA-CAMELLIA256-SHA	SSLv3
DHE-DSS-CAMELLIA256-SHA	SSLv3
DHE-RSA-AES128-SHA	SSLv3
DHE-DSS-AES128-SHA	SSLv3
DHE-RSA-CAMELLIA128-SHA	SSLv3
DHE-DSS-CAMELLIA128-SHA	SSLv3
SRP-DSS-AES-256-CBC-SHA	SSLv3
SRP-RSA-AES-256-CBC-SHA	SSLv3
SRP-AES-256-CBC-SHA	SSLv3
RSA-PSK-AES256-CBC-SHA	SSLv3
DHE-PSK-AES256-CBC-SHA	SSLv3
AES256-SHA	SSLv3
CAMELLIA256-SHA	SSLv3
PSK-AES256-CBC-SHA	SSLv3
SRP-DSS-AES-128-CBC-SHA	SSLv3
SRP-RSA-AES-128-CBC-SHA	SSLv3
SRP-AES-128-CBC-SHA	SSLv3
RSA-PSK-AES128-CBC-SHA	SSLv3
DHE-PSK-AES128-CBC-SHA	SSLv3
AES128-SHA	SSLv3
CAMELLIA128-SHA	SSLv3
PSK-AES128-CBC-SHA	SSLv3

Notes

By default all the cipher suites are supported, and it is not self-serviceable. Please submit a ticket to support team and clarify the target cipher suites, if you need to make adjustment to the supported cipher suites for you domain names.

Content Delivery Network

List of compatible SSL/TLS encryption suites