---
title: "Supported Cipher Suites By Ingress Types - v2"
canonical: "https://wiki.patientsknowbest.com/space/api/4453466113/Supported%20Cipher%20Suites%20By%20Ingress%20Types%20-%20v2"
format: markdown
---
> Macro (toc)

This page lists configured cipher suites for different egress types.

# Default Public nginx-ingress Cipher Suites

> Macro (excerpt)
> 
> ### TLSv1.3 (in server preferred order)
> 
> - [TLS_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0x1302)</span>[RECOMMENDED]
> - [TLS_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0x1303)</span>[RECOMMENDED]
> - [TLS_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0x1301)</span>[RECOMMENDED]
> 
> ### TLSv1.2 (in server preferred order)
> 
> - [TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA/) <span style="color: #97a0af">(0xC013)</span> [Weak]
> - [TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0xC02F)</span> [Secure]
> - [TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0xC030)</span>[Secure]
> - [TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0xCCA8)</span> [Secure]
> - [TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256/) <span style="color: #97a0af">(0xC027)</span> [Weak]

# Default Private nginx-ingress Cipher Suites

> Macro (excerpt)
> 
> ### TLSv1.3 (in server preferred order)
> 
> - [TLS_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0x1302)</span>[RECOMMENDED]
> - [TLS_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0x1303)</span>[RECOMMENDED]
> - [TLS_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0x1301)</span>[RECOMMENDED]
> 
> ### TLSv1.2 (in server preferred order)
> 
> - [TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA/) <span style="color: #97a0af">(0xC013)</span> [Weak]
> - [TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0xC02F)</span> [Secure]
> - [TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0xC030)</span>[Secure]
> - [TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0xCCA8)</span> [Secure]
> - [TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256/) <span style="color: #97a0af">(0xC027)</span> [Weak]

# Default HL7 Custom-nginx cipher Suites

> Macro (excerpt)
> 
> ### TLSv1.3
> 
> - [TLS_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0x1301)</span>[RECOMMENDED]
> - [TLS_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0x1302)</span>[RECOMMENDED]
> - [TLS_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0x1303)</span>[RECOMMENDED]
> 
> ### TLSv1.2
> 
> - [TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0xCCA8)</span> [Secure]
> - [TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0xC02F)</span> [Secure]
> - [TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0xC030)</span> [Secure]
> - [TLS_DHE_RSA_WITH_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_DHE_RSA_WITH_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0x009E)</span> [Weak]
> - [TLS_DHE_RSA_WITH_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_DHE_RSA_WITH_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0x009F)</span> [Weak]
> - [TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256/) <span style="color: #97a0af">(0xC027)</span> [Weak]
> - [TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384/) <span style="color: #97a0af">(0xC028)</span> [Weak]
> - [TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA/) <span style="color: #97a0af">(0xC013)</span> [Weak]
> - [TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA/) <span style="color: #97a0af">(0xC014)</span> [Weak]
> - [TLS_DHE_RSA_WITH_AES_128_CBC_SHA256](https://ciphersuite.info/cs/TLS_DHE_RSA_WITH_AES_128_CBC_SHA256/) <span style="color: #97a0af">(0x0067)</span> [Weak]
> - [TLS_DHE_RSA_WITH_AES_128_CBC_SHA](https://ciphersuite.info/cs/TLS_DHE_RSA_WITH_AES_128_CBC_SHA/) <span style="color: #97a0af">(0x0033)</span> [Weak]
> - [TLS_DHE_RSA_WITH_AES_256_CBC_SHA256](https://ciphersuite.info/cs/TLS_DHE_RSA_WITH_AES_256_CBC_SHA256/) <span style="color: #97a0af">(0x006B)</span> [Weak]
> - [TLS_DHE_RSA_WITH_AES_256_CBC_SHA](https://ciphersuite.info/cs/TLS_DHE_RSA_WITH_AES_256_CBC_SHA/) <span style="color: #97a0af">(0x0039)</span> [Weak]
> - [TLS_RSA_WITH_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0x009C)</span> [Weak]
> - [TLS_RSA_WITH_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0x009D)</span> [Weak]
> - [TLS_RSA_WITH_AES_128_CBC_SHA256](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_128_CBC_SHA256/) <span style="color: #97a0af">(0x003C)</span> [Weak]
> - [TLS_RSA_WITH_AES_256_CBC_SHA256](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_256_CBC_SHA256/) <span style="color: #97a0af">(0x003D)</span> [Weak]
> - [TLS_RSA_WITH_AES_128_CBC_SHA](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_128_CBC_SHA/) <span style="color: #97a0af">(0x002F)</span> [Weak]
> - [TLS_RSA_WITH_AES_256_CBC_SHA](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_256_CBC_SHA/) <span style="color: #97a0af">(0x0035)</span> [Weak]

# Default Custom-nginx Cipher Suites

> Macro (excerpt)
> 
> ### TLSv1.3 (in server preferred order)
> 
> - [TLS_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0x1302)</span>[RECOMMENDED]
> - [TLS_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0x1303)</span>[RECOMMENDED]
> - [TLS_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0x1301)</span>[RECOMMENDED]
> 
> ### TLSv1.2 (in server preferred order)
> 
> - [TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA/) <span style="color: #97a0af">(0xC013)</span> [Weak]
> - [TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256/) <span style="color: #97a0af">(0xC027)</span> [Weak]
> - [TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0xC02F)</span> [Secure]
> - [TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0xC030)</span>[Secure]
> - [TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0xCCA8)</span> [Secure]

# Oauth2

> Macro (excerpt)
> 
> ### TLSv1.3 (in server preferred order)
> 
> - [TLS_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0x1302)</span>[RECOMMENDED]
> - [TLS_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0x1303)</span>[RECOMMENDED]
> - [TLS_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0x1301)</span>[RECOMMENDED]
> 
> ### TLSv1.2 (in server preferred order)
> 
> - [TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0xCCA8)</span> [Secure]
> - [TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0xC02F)</span> [Secure]
> - [TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0xC030)</span>[Secure]
> - [TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256/) <span style="color: #97a0af">(0xC027)</span> [Weak]
> - [TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384/) <span style="color: #97a0af">(0xC028)</span> [Weak]
> - [TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA/) <span style="color: #97a0af">(0xC013)</span> [Weak]
> - [TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA/) <span style="color: #97a0af">(0xC014)</span> [Weak]
> - [TLS_RSA_WITH_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0x009C)</span> [Weak]
> - [TLS_RSA_WITH_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0x009D)</span> [Weak]
> - [TLS_RSA_WITH_AES_128_CBC_SHA256](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_128_CBC_SHA256/) <span style="color: #97a0af">(0x003C)</span> [Weak]
> - [TLS_RSA_WITH_AES_256_CBC_SHA256](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_256_CBC_SHA256/) <span style="color: #97a0af">(0x003D)</span> [Weak]
> - [TLS_RSA_WITH_AES_128_CBC_SHA](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_128_CBC_SHA/) <span style="color: #97a0af">(0x002F)</span> [Weak]
> - [TLS_RSA_WITH_AES_256_CBC_SHA](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_256_CBC_SHA/) <span style="color: #97a0af">(0x0035)</span> [Weak]

# CloudFlare

### Hl7 modern

> Macro (excerpt)
> 
> ### TLSv1.3 (in server preferred order)
> 
> - [TLS_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0x1301)</span>[RECOMMENDED]
> - [TLS_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0x1302)</span>[RECOMMENDED]
> - [TLS_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0x1303)</span>[RECOMMENDED]
> 
> ### TLSv1.2 (in server preferred order)
> 
> - [TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0xC02F)</span> [Secure]
> - [TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0xC030)</span>[Secure]
> - [TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0xCCA8)</span> [Secure]

# Hl7 Deprecated

> Macro (excerpt)
> 
> ### TLSv1.3 (in server preferred order)
> 
> - [TLS_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0x1301)</span>[RECOMMENDED]
> - [TLS_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0x1302)</span>[RECOMMENDED]
> - [TLS_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0x1303)</span>[RECOMMENDED]
> 
> ### TLSv1.2 (in server preferred order)
> 
> - [TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256/) <span style="color: #97a0af">(0xC02F)</span> [Secure]
> - [TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384/) <span style="color: #97a0af">(0xC030)</span>[Secure]
> - [TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256/) <span style="color: #97a0af">(0xCCA8)</span> [Secure]
> - [TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256/) <span style="color: #97a0af">(0xC027)</span> [Weak]
> - [TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384](https://ciphersuite.info/cs/TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384/) <span style="color: #97a0af">(0xC028)</span> [Weak]
> - [TLS_RSA_WITH_AES_128_CBC_SHA256](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_128_CBC_SHA256/) <span style="color: #97a0af">(0x003C)</span> [Weak]
> - [TLS_RSA_WITH_AES_256_CBC_SHA256](https://ciphersuite.info/cs/TLS_RSA_WITH_AES_256_CBC_SHA256/) <span style="color: #97a0af">(0x003D)</span> [Weak]